Edit tour

Windows Analysis Report
https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS

Overview

General Information

Sample URL:	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS
Analysis ID:	1431588
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Performs DNS queries to domains with low reputation

Phishing site or detected (based on various text indicators)

HTML page contains hidden URLs or javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1948,i,4432349157033959140,1943977196617917275,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /suite/RemoteUls.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&officeserverversion=20240421.7 HTTP/1.1Host: common.online.office.comConnection: keep-aliveContent-Length: 780sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://onedrive.live.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: privateTransfer-Encoding: chunkedContent-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 529d360d-9f94-4baa-83a0-59dadc595572X-UserSessionId: 529d360d-9f94-4baa-83a0-59dadc595572Strict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: BL6PEPF0001A295X-OfficeVersion: 16.0.17601.41008X-OfficeCluster: PUS13X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: BL6PEPF0001A295X-WacFrontEnd: BL6PEPF0001A295X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: 5CAB4B8185394D948E52021C302925F5 Ref B: ATL331000101011 Ref C: 2024-04-25T11:50:03ZDate: Thu, 25 Apr 2024 11:50:02 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: privateContent-Length: 1233Content-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 47f06708-d6f8-482c-997d-54ca5c0bbf2aX-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79Strict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: BL6PEPF0001A27EX-OfficeVersion: 16.0.17601.41008X-OfficeCluster: PUS13X-Partitioning-Enabled: trueX-OFFICEFD: BL6PEPF0001A27EX-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: 74F4A697C3BF421DA8B3097FEEC97806 Ref B: ATL331000105051 Ref C: 2024-04-25T11:50:14ZDate: Thu, 25 Apr 2024 11:50:13 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: privateTransfer-Encoding: chunkedContent-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: c7591b53-9ef9-45e1-abee-fd1a3c897f5fX-UserSessionId: c7591b53-9ef9-45e1-abee-fd1a3c897f5fStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: SN3PEPF00012CE8X-OfficeVersion: 16.0.17601.41008X-OfficeCluster: PUS11X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: SN3PEPF00012CE8X-WacFrontEnd: SN3PEPF00012CE8X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_controlX-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_controlX-MSEdge-Ref: Ref A: 253855F8AC544C8E88A31BC505152954 Ref B: ATL331000102033 Ref C: 2024-04-25T11:51:06ZDate: Thu, 25 Apr 2024 11:51:06 GMTConnection: close

Source: chromecache_201.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_180.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_230.2.dr	String found in binary or memory: http://www.mozilla.org/newlayout/xml/parsererror.xml
Source: chromecache_201.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_230.2.dr	String found in binary or memory: https://1drv.ms
Source: chromecache_219.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
Source: chromecache_182.2.dr	String found in binary or memory: https://aka.ms/MathAssistantSupport?client_id=onenote_wac&platform_id=web&correlation_id=
Source: chromecache_182.2.dr	String found in binary or memory: https://aka.ms/OfficeAddinOverview
Source: chromecache_182.2.dr	String found in binary or memory: https://aka.ms/Officeaddins
Source: chromecache_182.2.dr	String found in binary or memory: https://api.addins.omex.office.net/
Source: chromecache_256.2.dr	String found in binary or memory: https://apps.apple.com/in/app/microsoft-onenote/id410395246
Source: chromecache_230.2.dr	String found in binary or memory: https://attributes.engagement.office-int.com
Source: chromecache_230.2.dr	String found in binary or memory: https://attributes.engagement.office.com
Source: chromecache_230.2.dr	String found in binary or memory: https://attributes.engagement.officeppe.com
Source: chromecache_182.2.dr	String found in binary or memory: https://augloop-int.officeppe.com/v2
Source: chromecache_182.2.dr	String found in binary or memory: https://augloop.office.com/v2
Source: chromecache_182.2.dr	String found in binary or memory: https://catalogapi.azure.com/
Source: chromecache_256.2.dr	String found in binary or memory: https://cdn.hubblecontent.msit.osi.office.net
Source: chromecache_256.2.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net
Source: chromecache_219.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/BrowserUls.js
Source: chromecache_219.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/CommonDiagnostics.js
Source: chromecache_219.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/ExternalResources/js-cookie.js
Source: chromecache_219.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/Instrumentation.js
Source: chromecache_219.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/LearningTools/LearningTools.js
Source: chromecache_219.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/aria-web-telemetry-2.9.0.min.js
Source: chromecache_219.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/pickadate.min.js
Source: chromecache_213.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details16x16.png
Source: chromecache_213.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details32x32.png
Source: chromecache_213.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details48x48.png
Source: chromecache_213.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details80x80.png
Source: chromecache_182.2.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: chromecache_230.2.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/2f4febe2cca96f7f.gif
Source: chromecache_230.2.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/eb14b3fe6a1e1671.png
Source: chromecache_230.2.dr	String found in binary or memory: https://ecs.office.com
Source: chromecache_256.2.dr	String found in binary or memory: https://edog.onenote.com
Source: chromecache_230.2.dr	String found in binary or memory: https://fa000000096.resources.office.net
Source: chromecache_230.2.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w
Source: chromecache_230.2.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w
Source: chromecache_230.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_230.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_182.2.dr	String found in binary or memory: https://forms.office.com
Source: chromecache_182.2.dr	String found in binary or memory: https://forms.office.com/Pages/OneNoteMathAddinFunctionPage.aspx
Source: chromecache_182.2.dr	String found in binary or memory: https://forms.officeppe.com
Source: chromecache_233.2.dr, chromecache_197.2.dr	String found in binary or memory: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md
Source: chromecache_187.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_256.2.dr	String found in binary or memory: https://hedwigtestserver.blob.core.windows.net/builds/
Source: chromecache_182.2.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore/flyoutdetails/
Source: chromecache_291.2.dr	String found in binary or memory: https://localcdn.centro-dev.com:5555/floodgate.bundle.js.map
Source: chromecache_230.2.dr	String found in binary or memory: https://mths.be/punycode
Source: chromecache_293.2.dr, chromecache_230.2.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: chromecache_182.2.dr	String found in binary or memory: https://office.visualstudio.com/DefaultCollection/OC/_wiki/wikis/OC.wiki/22688/Using-Dictation-on-yo
Source: chromecache_256.2.dr	String found in binary or memory: https://osizewuspersimmon001.blob.core.windows.net
Source: chromecache_256.2.dr	String found in binary or memory: https://osiziwuspersimmon002.blob.core.windows.net
Source: chromecache_256.2.dr	String found in binary or memory: https://osizpscuspersimmon000.blob.core.windows.net
Source: chromecache_233.2.dr, chromecache_285.2.dr, chromecache_197.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE
Source: chromecache_293.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_179.2.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/
Source: chromecache_179.2.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
Source: chromecache_182.2.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/suggestions
Source: chromecache_230.2.dr	String found in binary or memory: https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576
Source: chromecache_256.2.dr	String found in binary or memory: https://support.office.com/article/ec43ed03-eb3c-4a10-8d9d-e9e5433c9ed2
Source: chromecache_256.2.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/
Source: chromecache_256.2.dr	String found in binary or memory: https://uci.edog.cdn.office.net/mirrored/smartlookup/
Source: chromecache_256.2.dr	String found in binary or memory: https://uciserviceintcdnwus.blob.core.windows.net/mirrored/smartlookup/
Source: chromecache_297.2.dr, chromecache_229.2.dr	String found in binary or memory: https://usc-onenote.officeapps.live.com/o/RemoteUls.ashx
Source: chromecache_256.2.dr	String found in binary or memory: https://www.onenote.com
Source: chromecache_182.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/mathassistant
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=af-ZA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=am-ET&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ar-SA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=as-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=az-Latn-AZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=be-BY&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bg-BG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bn-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bs-Latn-BA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ca-ES&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=cy-GB&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=da-DK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=de-DE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=el-GR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=en-US&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=es-ES&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=eu-ES&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fa-IR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fi-FI&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fr-FR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ga-IE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gd-GB&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gl-ES&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gu-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ha-Latn-NG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=he-IL&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hi-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hr-HR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hu-HU&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hy-AM&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=id-ID&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ig-NG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=it-IT&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ja-JP&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kk-KZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=km-KH&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kn-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ko-KR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kok-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ku-Arab-IQ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ky-KG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lb-LU&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lt-LT&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lv-LV&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mk-MK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ml-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mn-MN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mr-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ms-MY&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mt-MT&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nb-NO&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nl-NL&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nn-NO&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nso-ZA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=or-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pa-Arab-PK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pa-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=prs-AF&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pt-BR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pt-PT&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=quz-PE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ro-RO&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ru-RU&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=rw-RW&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sd-Arab-PK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=si-LK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sk-SK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sq-AL&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-BA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-RS&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Latn-RS&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sv-SE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sw-KE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ta-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=te-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tg-Cyrl-TJ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=th-TH&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ti-ET&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tn-ZA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tr-TR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tt-RU&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ug-CN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=uk-UA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ur-PK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=uz-Latn-UZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=vi-VN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=wo-SN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=xh-ZA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=yo-NG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zh-CN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zh-TW&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zu-ZA&temporaryLocalization=true

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: chromecache_230.2.dr

Binary or memory string: E);E.returnValue&&m.ULS.sendTraceTag(22345950,339,50,"AudioPlayback error: unplayable audio type ({0})",J)}return D}catch(D){}}return!1}static xKf(y){const D=y.lastIndexOf(".");if(0>D)return{returnValue:!1,extension:""};y=y.substring(D,y.length);return{returnValue:H.tri(y),extension:y}}static t9h(){if(!H.Lkc){H.Lkc=new r.a(e.a.ke());const y=".3gp .aa .aac .aax .act .aiff .amr .ape .au .awb .dct .dss .dvf .flac .gsm .iklax .ivs .m4a .m4b .m4p .mmf .mp3 .mpc .msv .ogg .oga .mogg .opus .ra .rm .raw .sln .tta .vox .wav .webm .wma .wv".split(" ");

Source: classification engine

Classification label: mal48.phis.troj.win@26/243@46/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1948,i,4432349157033959140,1943977196617917275,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1948,i,4432349157033959140,1943977196617917275,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: d(64967);this.Le\|\|(null!==this.nib&&(w.a.removeHandler(window.self,"scroll",this.nib),w.a.removeHandler(window.self,"resize",this.$rc),this.$rc=this.nib=null),X.la&&X.la.gB&&this.p4&&this.Bi&&X.la.gB.Kr(this.p4,this.Bi),this.hd=this.Zm=this.Bi=null,this.nXa&&this.nXa.BUd&&this.nXa.vJd(),this.nXa=null,this.Ab&&G.a.xAa(this.Ab)&&this.iz(this.vB),this.rz=this.mv=this.L$=this.v_a=this._body=this.gh=this.Gma=this.p4=this.Io=this.nJ=this.pJ=this.oJ=this.oz=this.xL=this.Ab=this.Pdb=this.vB=null,L.KE=null, source: chromecache_230.2.dr
Source:	Binary string: this.vB.className="WACDialogOuterContainer";this.Pdb=this.gh.createElement("div");this.Pdb.id=this.eh("WACDialogInnerContainer");this.Pdb.className="WACDialogInnerContainer";this.Ab=this.gh.createElement("div");this.Ab.id=this.eh("WACDialogPanel");this.Ab.className=X.la&&X.la.Ra.LG?"MLRVisualRefresh "+this.jFe:this.jFe;this.Pgc&&(this.Ab.className+=" FullDocumentPanel");X.i0e?this.Ab.setAttribute(P.a.Ac,P.a.Wtc):this.Ab.setAttribute(P.a.Ac,P.a.Lwd);this.Ab.setAttribute(P.a.yR,this.eh("WACDialogTitleText")); source: chromecache_230.2.dr
Source:	Binary string: (this.Sf.close(),this.Sf=null)}static get instance(){return Oa.xa\|\|(Oa.xa=new Oa(()=>f.a.instance.Aa("Common.Interface.IEditNotificationManager")))}static get rRf(){return Oa.sfb\|\|(Oa.sfb=f.a.instance.resolve("Wonca.KickoutExecutor"))}}Oa.xa=null;Oa.sfb=null;(0,T.a)(Oa,"WordAutoSaveOperation",null,[]);class Na extends S.a{constructor(Aa,Va,sb,vb,Tb,Lb,Hb,ac,Jb,hb,ec,lc,Uc,Vb,qa,tb,Mb,Yb,Ub,nc){super();this.VU=null;this.$Ee=new F.a;this.Le=this.l5=!1;this.pDb=0;this.UU=[];this.Gjc=!1;this.JNe="";this.kOe= source: chromecache_230.2.dr
Source:	Binary string: da.firstChild):this.L$.insertBefore(this.vB,this.L$.firstChild)}else this.L$.insertBefore(this.vB,this.L$.firstChild);this.vB.appendChild(this.Pdb);this.Pdb.appendChild(this.Ab);this.nib\|\|(this.nib=this.Ksj,this.$rc=(0,k.a)(this,this.Poe,"sizeFix"),w.a.addHandler(window.self,"scroll",this.nib),w.a.addHandler(window.self,"resize",this.$rc));this.Bi=new B(this.Ab);X.la&&X.la.gB.In(this.p4,this.Bi);L.POb()&&this.Khj()}QRc(X,da){const ba=this.gh.createElement("button");this.CGa[X]=ba;ba.id=this.eh(da); source: chromecache_230.2.dr
Source:	Binary string: (this.yu=f.a.instance.Aa("Box4.ITypingProcessManager"))}get E6(){return this.pDb}get jT(){return this.aWg}get V7(){return!this.jgb.kVb}K9b(Aa){this.jgb.kVb=!Aa}get lN(){return this.bY}get PBd(){return this.Mfc}Up(Aa,Va,sb){sb=void 0===sb?null:sb;const vb=new F.a;vb.add((new Date).toISOString());vb.add(Aa);vb.add(Va);sb&&vb.add(sb);Aa=vb.toArray().join("\|");this.$Ee.add(String.format("[{0}]",Aa))}Lgg(){this.Up("logRetrvl","call",this.lN);return this.$Ee.toArray().join("")}w6b(Aa){this.VA.B5a(Aa,sa.b(Aa.RevisionList[0].BaseId), source: chromecache_230.2.dr
Source:	Binary string: null;this.o_a=t;this.pdb=-1;this.Agc=0;this.xgc=0<t.B1.length?t.B1[0]:w.empty}moveNext(){this.pdb++;this.pdb===this.xgc.Yob?(this.my=this.o_a.pda[this.Agc++],this.pdb=this.xgc.T4a-1,this.xgc=this.Agc<this.o_a.b8a?this.o_a.B1[this.Agc]:w.empty):this.my=this.pdb<this.o_a.RY.length?this.o_a.RY[this.pdb]:null;return!!this.current}reset(){this.pdb=-1;this.Agc=0;this.my=null;this.xgc=0<this.o_a.B1.length?this.o_a.B1[0]:w.empty}get current(){return this.my}$u(){throw Error.notImplemented();}}(0,T.a)(F,"TableRowOrCellMixedContextIterator", source: chromecache_230.2.dr
Source:	Binary string: null}vxc(a,c){this.pii();var n=Object.assign(new dg,{wf:a.wf});n=new HE.a(n,this.PDb,null);n.dataSource=a.dataSource;if(!n.S7e(a.NKc,null))throw Error.create("Jewel could not be built");if(a=n.Xy)a.Dr=c,a.ARc();return a}pii(){this.PDb=cd.a.createElement("div");this.PDb.id="jewelcontainer";this.PDb.className="cui-jewel-container";this.PDb.style.display="block"}}(0,S.a)(VC,"LegacyFileMenuFactory",null,[1147]);class ju{constructor(a,c,n){this.Tac=a;this.WLe=this.Tac.qCa;this.sOc=d.a.instance.Aa("Common.IOfficeTrialExperience"); source: chromecache_256.2.dr
Source:	Binary string: if(0<(this.enabled&1)){if(!Aa)return this.jT.event(-4),!1;if(this.wn())return this.pDb=Va,Aa=this.MSd(),this.jT.event(Aa?8:-3),!Aa}if(!Aa)return this.pDb=Va,this.jT.event(-1),!1;if(0<(this.enabled&2)&&this.Qqi()){if(!this.a5a())return this.jT.event(-1),!1;Aa=this.MSd();this.jT.event(Aa?7:-3);return!Aa}this.sq.$W();this.jT.event(-2);return!1}get eYd(){return!this.wn()&&(!this.aB\|\|""===this.aB)}WEf(){return this.sq.LBa()}hTd(){let Aa;Aa=this.pDb;if(this.hvc&&this.V7&&this.elb&&this.eH){const Va=this.eH.fve()? source: chromecache_230.2.dr
Source:	Binary string: appChrome.api.dispatch(Q));return 32};u.AFrameworkApplication.sa.na(Pa.a.oca,Zb.a.frame,this.Qdj)}k0d(){appChrome.api.dispatch(appChrome.actions.updateFileMenuExpandedValue(!0))}GW(){}ARc(){}LGd(){}}(0,S.a)(zf,"ReactFileMenu",null,[1068]);class fA{vxc(){const a=new zf,c=[];c.push(appChrome.actions.updateFileMenuExpandedValue(!1));c.push(appChrome.actions.updateFileMenuDisabledValue(!1));appChrome.api.dispatch(c);return a}}(0,S.a)(fA,"ReactFileMenuFactory",null,[1147]);var HE=V(24363);class VC{constructor(){this.PDb= source: chromecache_256.2.dr
Source:	Binary string: void 0===aa?!1:aa;super(document.createElement("div"));this.Pgc=this._id=null;this.jFe="WACDialogPanel";this.Mlc=this.L$=this.v_a=this._body=this.Gma=this.p4=this.rl=this.Ab=this.Pdb=this.vB=this.Io=this.nJ=this.pJ=this.oJ=this.oz=this.xL=this.$rc=this.nib=this.nXa=this.Bi=this.hd=this.Zm=this.Vs=this.n0=this.SD=this.Xwa=null;this.xmc="OK";this.Hma="Cancel";this.iDe="Close";this.Xsd="Yes";this.Wid="No";this.$Ue="Retry";this.USe="Permanently Delete";this.qWe="Share and notify";this.Acb="Action";this.chb= source: chromecache_230.2.dr
Source:	Binary string: "HandleVisibilityChange IsAppHidden {0}, ReplicatedWhileHidden {1}",2===Va.newState,this.eUc),2!==Va.newState&&this.eUc&&(this.eUc=!1,this.sq.yqf(),this.qY.NW()))}$og(){return B.AFrameworkApplication.$.getBooleanFeatureGate("Microsoft.Office.OneNoteOnline.ONOReplicateEarlyWhenVisibleAgain",!1)}get Icc(){return this.wsd}set Icc(Aa){this.wsd=Aa}b5a(){this.pDb=K.AReplicationScheduler.WNc;if(this.pc&&2===this.pc.status)return this.jT.event(-3),!0;if(this.Le\|\|this.l5)return this.jT.event(1),!1;if(this.NBe&& source: chromecache_230.2.dr

Source: chromecache_238.2.dr, chromecache_291.2.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_238.2.dr, chromecache_291.2.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://mths.be/punycode	0%	URL Reputation	safe
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
https://augloop-int.officeppe.com/v2	0%	Avira URL Cloud	safe
https://attributes.engagement.office-int.com	0%	Avira URL Cloud	safe
https://attributes.engagement.officeppe.com	0%	Avira URL Cloud	safe
https://file.documentoneviews.xyz/captcha/logo.svg	0%	Avira URL Cloud	safe
https://file.documentoneviews.xyz/captcha/style.css	0%	Avira URL Cloud	safe
https://augloop-int.officeppe.com/v2	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spov-0006.spov-msedge.net	13.107.137.11	true	false	unknown
wac-0003.wac-msedge.net	52.108.8.12	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.213.41	true	false	unknown
code.jquery.com	151.101.194.137	true	false	high
file.documentoneviews.xyz	104.21.34.125	true	true	unknown
challenges.cloudflare.com	104.17.3.184	true	false	high
www.google.com	108.177.122.147	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
1drv.ms	13.107.42.12	true	false	high
sni1gl.wpc.sigmacdn.net	152.195.19.97	true	false	unknown
augloop.office.com	unknown	unknown	false	high
storage.live.com	unknown	unknown	false	high
ajax.aspnetcdn.com	unknown	unknown	false	high
onenoteonline.nel.measure.office.net	unknown	unknown	false	high
common.online.office.com	unknown	unknown	false	high
onedrive.live.com	unknown	unknown	false	high
spoprod-a.akamaihd.net	unknown	unknown	false	high
www.onenote.com	unknown	unknown	false	high
messaging.engagement.office.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1132970042:1714044400:xBjqnWhffc5FlCibF1GSF-2F9T85qew-bgLN6yxh9D8/879e1d989c2b78c8/1e44a6924b4b468	false		high
https://common.online.office.com/suite/RemoteUls.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&officeserverversion=20240421.7	false		high
https://www.onenote.com/officeaddins/RemoteUls.ashx	false		high
https://onedrive.live.com/redir?resid=D9982686F6D14861%21580&authkey=%21ALMr6W1D5n9QeZ8&page=View&wd=target%28Quick%20Notes.one%7Ccf443f1f-77d2-4ea9-b08d-c3d933c51ea4%2FPIT%20Hegn%20A%5C%2FS%7C70a011f0-af1a-447c-8540-50f9911012ff%2F%29&wdorigin=NavigationUrl	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879e1e576906672b/1714045860065/ZPYzggQx1W7KVLI	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879e1e0cdc4c080b	false		high
https://common.online.office.com/suite/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79	false		high
https://file.documentoneviews.xyz/captcha/logo.svg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/425347568:1714044350:Xtnq43eSNgLYqswN5KdEy1gj3tEaeqmPTupcyyEuy9c/879e1e576906672b/c0b6f73c23f6855	false		high
https://file.documentoneviews.xyz/captcha/style.css	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879e1d989c2b78c8/1714045829450/Tl0Rz5m9L-kgomZ	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.onenote.com/officeaddins/meetings?ui=pt-BR&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=yo-NG&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=az-Latn-AZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=hy-AM&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ja-JP&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://catalogapi.azure.com/	chromecache_182.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=bg-BG&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=rw-RW&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://aka.ms/OfficeAddinOverview	chromecache_182.2.dr	false		high
https://attributes.engagement.officeppe.com	chromecache_230.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=kok-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://aka.ms/MathAssistantSupport?client_id=onenote_wac&platform_id=web&correlation_id=	chromecache_182.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=pa-Arab-PK&temporaryLocalization=true	chromecache_242.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_201.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ky-KG&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=hr-HR&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sk-SK&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=hu-HU&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://mths.be/punycode	chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=da-DK&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://attributes.engagement.office-int.com	chromecache_230.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ug-CN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://my.microsoftpersonalcontent.com	chromecache_293.2.dr, chromecache_230.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mt-MT&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sr-Latn-RS&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ru-RU&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://forms.office.com	chromecache_182.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ko-KR&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=vi-VN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=th-TH&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://forms.office.com/Pages/OneNoteMathAddinFunctionPage.aspx	chromecache_182.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=af-ZA&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mr-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=el-GR&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://augloop-int.officeppe.com/v2	chromecache_182.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://1drv.ms	chromecache_230.2.dr	false		high
https://aka.ms/Officeaddins	chromecache_182.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=zh-CN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mn-MN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com	chromecache_256.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=kk-KZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ro-RO&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=it-IT&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://consent.config.office.com/consentcheckin/v1.0/consents	chromecache_182.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=as-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://fa000000096.resources.office.net	chromecache_230.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=prs-AF&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=en-US&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sv-SE&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_187.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ha-Latn-NG&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=nl-NL&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=uk-UA&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=uz-Latn-UZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=be-BY&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=km-KH&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576	chromecache_230.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ta-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://support.office.com/article/ec43ed03-eb3c-4a10-8d9d-e9e5433c9ed2	chromecache_256.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=gu-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=quz-PE&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ar-SA&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://github.com/OfficeDev/office-js/blob/release/LICENSE.md	chromecache_233.2.dr, chromecache_197.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=he-IL&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=hi-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=nso-ZA&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mk-MK&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=or-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=zu-ZA&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=lt-LT&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-BA&temporaryLocalization=true	chromecache_242.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
152.195.19.97	sni1gl.wpc.sigmacdn.net	United States	15133	EDGECASTUS	false
52.108.9.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.107.213.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
13.107.137.11	dual-spov-0006.spov-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.21.34.125	file.documentoneviews.xyz	United States	13335	CLOUDFLARENETUS	true
52.108.8.12	wac-0003.wac-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.42.12	1drv.ms	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.2.184	unknown	United States	13335	CLOUDFLARENETUS	false
108.177.122.147	www.google.com	United States	15169	GOOGLEUS	false
172.67.205.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431588
Start date and time:	2024-04-25 13:48:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.troj.win@26/243@46/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://file.documentoneviews.xyz/ Browse: https://file.documentoneviews.xyz/ Browse: https://file.documentoneviews.xyz/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 64.233.177.139, 64.233.177.113, 64.233.177.100, 64.233.177.102, 64.233.177.101, 64.233.177.138, 64.233.176.84, 34.104.35.123, 96.7.218.73, 96.7.218.82, 96.7.218.89, 96.7.218.91, 96.7.218.98, 96.7.218.96, 96.7.218.97, 96.7.218.80, 96.7.218.88, 104.46.162.224, 13.89.178.26, 23.50.120.17, 23.50.120.10, 40.79.197.35, 20.12.23.50, 96.7.218.9, 96.7.218.8, 96.7.218.112, 96.7.218.105, 96.7.218.115, 96.7.218.107, 96.7.218.104, 96.7.218.10, 96.7.218.114, 172.217.215.95, 142.251.15.95, 74.125.136.95, 64.233.177.95, 64.233.176.95, 172.253.124.95, 74.125.138.95, 142.250.9.95, 142.250.105.95, 64.233.185.95, 173.194.219.95, 199.232.214.172, 192.229.211.108, 20.166.126.56, 52.113.194.132, 173.222.249.42, 173.222.249.41, 173.222.249.9, 13.107.6.156, 52.111.229.36, 23.50.120.145, 23.50.120.157, 52.111.229.5, 20.135.4.170, 23.206.222.123, 152.199.4.33, 23.75.121.98, 40.126.28.19, 40.126.28.23, 40.126.28.20, 40.126.28.11, 40.126.28.18, 40.126.7.35, 40.126.28.21, 40.126.28.
Excluded domains from analysis (whitelisted): e2682.g.akamaiedge.net, usc-onenote.officeapps.live.com, slscr.update.microsoft.com, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, appsforoffice.microsoft.com.edgekey.net, onedscolprdcus00.centralus.cloudapp.azure.com, cdn.onenote.net.edgekey.net, clients2.google.com, prod-campaignaggregator.omexexternallfb.office.net.akadns.net, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, login.live.com, update.googleapis.com, ecs.office.com, e40491.dscg.akamaiedge.net, fs.microsoft.com, wise.public.cdn.office.net, content-autofill.googleapis.com, www.tm.v4.a.prd.aadg.akadns.net, portal-office365-com.b-0004.b-msedge.net, reverseproxy.onenote.trafficmanager.net, cdn-office.ec.azureedge.net, s-0005-office.config.skype.com, edgedl.me.gvt1.com, res-prod.trafficmanager.net, nel.measure.office.net.edgesuite.net, owamail.public.cdn.office.net.edgekey.net, s-0005.s-msedge.net, owamail.public.cdn.office.net.edgekey.net.globalredi
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.66560738606782
Encrypted:	false
SSDEEP:	3:YmEoEMCL2RH2hAcBQMh0wVWu+xJs/FEH2MmRJBUn:YmEoYL2HuAJW0m+sNb2n
MD5:	B22CAC36842DCB642F5BFF86C0FF2FB9
SHA1:	7F0557D5258453F55C1DB5DD40AB7F1C31932655
SHA-256:	E25ABD11267B28557444D53A9A3BF52A796DF20A14205FDE0B19C6B8287976B3
SHA-512:	D991A7C2B5552EF795F01450BEB8FE91785FAB87DD53361AD4048972BADB46180966120B0EF42B647654DE6CB8E8DF6D13EFDC2C170CB498FD8DBAC63629ADAC
Malicious:	false
Reputation:	low
URL:	https://messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.17601.41008&campaignParams=pageWidth%3D1280%26pageHeight%3D907%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPUS13%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=&ageGroup=0&sessionUserType=2
Preview:	{"CampaignContent":{"campaigns":[]},"DynamicSettings":{"TmsLoadTimeout":3000,"TeachingMessageCooldown":3600}}

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	51120
Entropy (8bit):	7.954718383506729
Encrypted:	false
SSDEEP:	1536:fAXURb/VRlg/u3OD+RerLnSFFFCX8iarUMpu:f/VNfO2Ocerbdv/Mpu
MD5:	ECA50172A6583B16E553E9917FB710FB
SHA1:	2FD7FB2FF5C10E17E9066CE6BD2393E1F6B93CC0
SHA-256:	FFF5919A2CBACEAE0528522B6C73E4F1D549CA8EE13C680B50ED377DFD2B61F0
SHA-512:	1E7591A35DE7C00A197C08F15BA9ED7A9014EFFEF03DB240A92B63F8A8EC8DAE8F02811C8E9696FA934E6C4EFCBBBA14F2D01082A63471092488850A2D16958B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/m2/one.png
Preview:	.PNG........IHDR.............@.....wIDATx^..xU......n{..W.;.:T.W-W......I..hD..V..U..P@..A.@H....-.HEF..."....."zE@.B......OY~..s.:{.=.....?{.....N~..z.w..............T.vmr.k.>=.....~.A.......#.q...u..=..I...gee6 .v---.$.".L..=W>kD.+@... ...z..yd...s...mhK..:.avvf._........F.N.........x....?.b.US.\|~ii....W.V.w..-}\|...n//g..7..h..R.m{............X..+&U.....=...h.....B$../......0lll.@.+..l....l.&.o.x9..7.Y.1{.....G...w..-}...>..u."....1h(n.t......m.....X.kIf .i..]...{A......+.g...m=....'//..k=..A\|.v.8&.....!..>.}W.!.D.......s..x....w.a..Mr.....,P.KxII....5.~.>.%..1..1......y.P...w(..{..O ..n.V..Oh...iC[7.x....\..(..D.C...}....}..?...>%...".~0b..g.Yy...^.\|./..+@.7.z.D.\|*==.9.c....g..m\|.]ZZ.^..b}b.....D..ly..3:.P.`BE.+.6..b....1..9...\.." ............7....]r.c.&."...-/.OJ6.........2.c.....pA.Z.................?.Z.x....r.E?`........}W>..c...g@i.."P.kUVQ/..^.........BQ....WguU.E...%1`@.F....}Uax..f..".`,.t..V .9.7..E...[Sm...y.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6140
Entropy (8bit):	7.86318803852975
Encrypted:	false
SSDEEP:	96:JCXCuvaxrUZXtOVVLMtSqdyZ7x5rY4gby5cR+YBaB7W+Nf9XF5Qfhl4/t5K:MMr7AtaZ7fY4f5I/qRf9V6hSl5K
MD5:	2443F04DFD8CE58264835F7CD477799C
SHA1:	E798EF676A42AA8F723246C95FA6A918010223B2
SHA-256:	77DD1463FE34BE51528C6535C5AAF5590EE90BBD3B76AE8E362657C45E9F90FD
SHA-512:	2668E7EEFF653ECDEF04058FDC43328A80F297EE601839737F35A860737DAD438B03298C1A452E83DAED31DDDA540F7F065FE8F22FB05FC150A9FEAB08FFC91D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R.........m......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400" xmpMM:DocumentID="xmp.did:98155F5CD83911E1ACDEFDB8BE9BCEAA" xmpMM:InstanceID="xmp.iid:98155F5BD83911E1ACDEFDB8BE9BCEAA" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09F73A8D39D8E111AE39EC2BD256A3F2" stRef:documentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.[...,IDATx..........{....a.... .<c......3.....

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1252536
Entropy (8bit):	5.42601932265775
Encrypted:	false
SSDEEP:	24576:3hoafIXYpejEO5+1h6gKzhexY2OK7NkaIXXxb7DvpttZwJbhTJrSK4VxjPHRYOIS:RoafIXYpejEOM1h6gKNexY2OK7NkaIXh
MD5:	47ABFEF7CAC5C9764D02EBC5F7AE0ECD
SHA1:	88D19E0632BE7E1DD409B520351330BDA51C3551
SHA-256:	18C8F6190BBF95EEF9C53D1EE37E4F752A24A01B27A42BEF59B336A8FB8B38D1
SHA-512:	83F301B81B96E0FA55962626071AE63F6B7917EE1A25F853F371D81A69FDAC3242F9305A6463694611DE51BBFBD18C21B282DB67A897DFA1D81F171A634C6477
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/appChrome.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[640],{93755:function(e,t,o){var n=o(22120),r=o(83738);"string"==typeof n&&(n=[[e.id,n]]);for(var i=0;i<n.length;i++)r.loadStyles(n[i][1],!1);n.locals&&(e.exports=n.locals)},22120:function(e,t,o){var n=o(93556),r=o(78267)(n);r.push([e.id,'svg>path.OfficeIconColors_m20 {\r\n fill: #FAFAFAFF;\r\n}\r\nsvg>path.OfficeIconColors_m21 {\r\n fill: #C8C6C4FF;\r\n}\r\nsvg>path.OfficeIconColors_m22 {\r\n fill: #3A3A38FF;\r\n}\r\nsvg>path.OfficeIconColors_m23 {\r\n fill: #797774FF;\r\n}\r\nsvg>path.OfficeIconColors_m24 {\r\n fill: #1E8BCDFF;\r\n}\r\nsvg>path.OfficeIconColors_m25 {\r\n fill: #0063B1FF;\r\n}\r\nsvg>path.OfficeIconColors_m26 {\r\n fill: #83BEECFF;\r\n}\r\nsvg>path.OfficeIconColors_m27 {\r\n fill: #379E4EFF;\r\n}\r\nsvg>path.OfficeIconColors_m28 {\r\n fill: #309048FF;\r\n}\r\nsvg>path.OfficeIconColors_m29 {\r\n fill: #A1DDAAFF;\r\n}\r\nsvg>path.OfficeIconColors_m210 {\r\n fill: #

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27024), with CRLF line terminators
Category:	downloaded
Size (bytes):	27026
Entropy (8bit):	5.536845977615562
Encrypted:	false
SSDEEP:	384:ne7LRwe03wCS8V012RwlKzXicngH8I4qIZD3338z3YSzK1/0:ne756VnzZbI6Dn8z3YWd
MD5:	A230E20FEECBB758D7C13303A657EEDD
SHA1:	F12606CCE8600D9DFB5316610EE5177BA51B0CE9
SHA-256:	816A0F42A2BF473213A47BE1DDE62215811D54AF1151A1E9916DC215DF6EC776
SHA-512:	1C6F7288BEBAB71D8B6C7CE21D5F1FAA53C6710FAF1A0F611C0313E71BD5DB17A304E433686836AB2EEAE0E0ACBDDEAA2E1E82EDE54145520542C0361066FEE0
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
Preview:	FocusedContentControl{margin:0;padding:0;}.EditingSurfaceBody{background-color:transparent;border:none;outline:none;}.EditingSurfaceBody,.EditingSurfaceBody {-ms-touch-select:none;-webkit-user-select:text;-khtml-user-select:text;-moz-user-select:text;-ms-user-select:text;}.EditMode span.SpellingError,.EditingSurfaceBody span.SpellingError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAJECAP////8AAAAAAAAAACH5BAEAAAIALAAAAAAFAAQAAAIIlGAXCCHrTCgAOw==');border-bottom:solid 1px transparent;}.EditMode span.DictationCorrection,.EditingSurfaceBody span.DictationCorrection{background-image:url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='3' height='4'><path d='M 0 0 L 5 5' stroke='gray' stroke-width='1px'/></svg>");border-bottom:solid 1px transparent;}.EditMode span.ContextualSpellingAndGrammarError,.EditingSurfaceBody span.ContextualSpellingAndGrammarError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAPEDAABVzDNVzDNV/wAAACH5BAUAAAMALAAAAAAFAAQ

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x16
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	0.3626382302432769
Encrypted:	false
SSDEEP:	3:GlFFHvDllfl/t+lVsu/jXpRq/uXJRi/uXZRi/uXJRq/uX3XXRLtutpaKsx67YTsD:Gl/qlOeTjq2Di2Ti2Dq2nBL4OxhG5
MD5:	04D59A1FFDA7020CBDA1BB9FCBF0BCA0
SHA1:	E0CACE5751F02AF9E12B3C066FFD542F3D12A279
SHA-256:	EDC250E23E06AE7D15C1C19FDF9C6759129796B0A2F76DC82DF665C823C7B495
SHA-512:	A997D4384DA8D401321C497F49F73F0C79C1815DFD8B679458385D4E4A8ED2F645DDCF940A9347EA35F2D7AD3EE710F06784E8E1B1461AB7E8633BFF0FE0A691
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/pen_32x32.cur
Preview:	...... ..............(... ...@..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	291469
Entropy (8bit):	5.339176849068293
Encrypted:	false
SSDEEP:	6144:drQUjLm+AvPSIoPaqKmMlHhdGt4VupgYz:dsUjNKJlHk
MD5:	4D54C88348C388039F25853FDFC7F0A7
SHA1:	3E0CE0085A9BFDC3EB29773765003F9CD6764A67
SHA-256:	CD8696D7E912E06DE31475979C917AA2F0E58D1790CACC7E6874C9B4E2AF1872
SHA-512:	27322204F4E60AD39DB3B2FDC2B0FCC5984FA14C96878F6937ABA03622191A9EE33D60636C7A0C5FE9BAFEE340AAFCB7BD163372665ACAA496D8A008C01D5A09
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/appIconsLazy.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[825],{31362:function(t,e,r){t.exports={default:r(42327),__esModule:!0}},51394:function(t,e,r){t.exports={default:r(68359),__esModule:!0}},3635:function(t,e,r){t.exports={default:r(77798),__esModule:!0}},96601:function(t,e,r){t.exports={default:r(43009),__esModule:!0}},58265:function(t,e,r){t.exports={default:r(90475),__esModule:!0}},69123:function(t,e,r){t.exports={default:r(50899),__esModule:!0}},65629:function(t,e,r){t.exports={default:r(66640),__esModule:!0}},74361:function(t,e){"use strict";e.__esModule=!0,e.default=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}},21492:function(t,e,r){"use strict";e.__esModule=!0;var i,s=(i=r(3635))&&i.__esModule?i:{default:i};e.default=function(){function t(t,e){for(var r=0;r<e.length;r++){var i=e[r];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),(0,s.default)(t,i.key,i)}}return function(e,r,i){retu

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73679
Entropy (8bit):	5.345331273160561
Encrypted:	false
SSDEEP:	768:2mEAABhINqfFi3U+BBZ9rbov8krznXSraMIRF+b+hNH8IBYLd9+yerrwg6ksYcI0:sBhPfQ3pBBZ9n4wQB4XjUQeoSGfUk
MD5:	65F960810895837B06B1D3AE1CCEAEF3
SHA1:	0673F80A70CFB78AD7018E161E3201E80CB71307
SHA-256:	F452E6287DAFD3B632CBFF8533ED5DFC2F6F476C8672B468CF6DCFE321B8C889
SHA-512:	1DB287677E77DF1E62326486EEDA54DAB20A760008180ED93D905029B6361BA06212F62DD366E77435F43F701CC9BBE1DC46234C6201173B75336BA79A41DF26
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/telemetry/oteljs_agave.js
Preview:	var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(i,r,function(t){return e[t]}.bind(null,r));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=31)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5949), with no line terminators
Category:	downloaded
Size (bytes):	5949
Entropy (8bit):	5.021760613857532
Encrypted:	false
SSDEEP:	96:Vq+J+ZRrxLuL7H9T4Mh+HsQ7qQYHq3l0e4QDhMWp:xJ+ZR07HNhhw7qQYHq3l0e4P8
MD5:	BBF6A2B6E77972F0718F99C86AE3FE92
SHA1:	806E8C002AE178B41819BEAFE123AE09202DF966
SHA-256:	78FF6158246E4FA25F994827F90ED69FEEF349AA57449CB404E35C3026BD4B8A
SHA-512:	4B4F58735190254E74ED9BAF547046642F622EE35414784A093356D28982A28A5D84E4CE71E476A88BC43583B6BB2D916B16A733D67D5B30E145DC2E4182BC8C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h78FF6158246E4FA2_App_Scripts/CompatParentElementFix.js
Preview:	function __loadCompat(n){n.Debug=function(){};n.Debug._fail=function(n){throw new Error(n);};n.Debug.writeln=function(n){window.console&&window.console.debug(n)};n.__getNonTextNode=function(n){try{while(n&&n.nodeType!=1)n=n.parentNode}catch(t){n=null}return n}}function _loadSafariCompat(){Node.prototype.__defineGetter__("text",function(){return this.textContent});Node.prototype.__defineSetter__("text",function(n){this.textContent=n});Node.prototype.selectNodes=function(n){var t=this.ownerDocument;return selectNodes(t,n,this)};Node.prototype.selectSingleNode=function(n){var t=this.ownerDocument;return selectSingleNode(t,n,this)};Document.prototype.selectNodes=function(n){return selectNodes(this,n,this.documentElement)};Document.prototype.selectSingleNode=function(n){return selectSingleNode(this,n,this.documentElement)}}function _loadMozillaCompat(n){n.navigate=function(n){window.setTimeout('window.location = "'+n+'";',0)};var t=function(n,t){t._mozillaEventHandler=function(n){return win

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 6784, version 3.30147
Category:	downloaded
Size (bytes):	6784
Entropy (8bit):	7.904750792584749
Encrypted:	false
SSDEEP:	192:kon76LllcpK5ncpd8WvBwWTqIvTeH9G2IewqXb6Ys:kWYQKnS8WvOUvSH9GDqXON
MD5:	14EC2D31F37BB0F43FD441D11E771D50
SHA1:	48F83A9581A5E37AD1CCD0D4848EFC7FA64C17CF
SHA-256:	43C551EA819A83B1100F566ECF6BD70DB5A019F165D221200AF2DF11C4448627
SHA-512:	51CABEBB52DC3036CC584B0D03F0107AC7170DCC124A756B6CBFF098893506D8DAB4877FEFD71E3C83016262FACC9735F2BD1BF5D0EC4B6097E3013D287F4BA0
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff
Preview:	wOFF..............-<..u.....................OS/2...D...H...`1Fy.cmap.......#.....<.dcvt ....... .......fpgm...........Y...gasp................glyf...........,=_..head.......2...6....hhea...........$....hmtx.......N...x....loca...P...v...v.^..maxp........... .`..name...............Rpost........... .Q..prep............x...x.c`a..8.....u..1...4.f...$..........@ ...........>....!$.X.........F..x.c```f.`..F ..x..c..Y.7......V.....y..=....\..s..2....>..n.....s..9..w>_...../.^Lx1...3^l.q...O^.y......._Y..z...7_..\|......................6..).h...6.x......&IF....%.$>K...$.Q..{...w$nH<..,qTb.D.D.D.D.D..M...v.6.V.t..q;q[q3qM..b...D.\.n.......<.xX0]`..&.....~..BB.>...~v.V.....x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G*)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..Y.tT.....g....2L..$/..I.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5825)
Category:	downloaded
Size (bytes):	5826
Entropy (8bit):	5.9134082232527065
Encrypted:	false
SSDEEP:	96:K4OKFR2AZ1Z8Ocs3K2RvqDrLGJED5a8nnmk3viV14MtHfV14b6Dui6FkvFkBp+py:FR1TuOcs3KsarLuUa8mk3qV1nV18yT9s
MD5:	3F689E0DA18A51BC2349F619506C8388
SHA1:	3A3B51BB0E8D5C085B9F30D1F1DA0A88C094E3FB
SHA-256:	1B614EEB1C42803CA31C6C52BDC272318AB6A410A25772016D73D37213C25ABC
SHA-512:	DD2B96FBB189CADF058863D7B1936D671D0A2481913D5AC022996F20D2C7B739734E7533EC09A2593EE7B4C2D675548CE642C71294758E8FF0E52615E55CD72B
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/100/manifest.js
Preview:	(()=>{var f={clientVersion:"20240421.7",files:{"owl.js":["owl.250a3540b30a7755be64.js","sha384-KsGXjb9EbC0sdM24us6KY9JovBC4Vw4a19dNzSkSTiHqR8BW9whxWzu//0RyBX9F"],"owl.slim.js":["owl.slim.43b32de0474de28993ac.js","sha384-/eML5cDb4XF2FBKhBdWA8lTyyiNj46LXcRbj4wCisuChS/EeQfBhqOl/xO4ESOZg"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.d52880244494e2429eda.js","sha384-WoCre+8/QLATGvrp5Msk3uKRFsb/CPUrx7IuESOJlvZJab0ekZ+oxrGbIvT1/QIQ"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.a8075aa11a5df4a80e15.js","sha384-fyHN5YeNsqI98wQw6ml1OlBFPxqnzdqA7zZd2ppwEeYMnSk6xlGQ8CAeajO7bVtw"],"sharedauthclientmsal.js":["sharedauthclientmsal.1eaf7d75b860245f20a2.js","sha384-49pab25+gP4zdETxx23xVyt3WkV3ftKyu2De2kyJG3SEhB1Y3me7g2To8x5voAWJ"],"s

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2257
Entropy (8bit):	5.15196771601333
Encrypted:	false
SSDEEP:	48:YovlUdvqvlUd+bdqyHkYyqISOvgDdZytvfP6fREuv+REucEgukXX1BJyHkYyqISV:92dvC2d6dqMPISOvgDHUa5Fk/+PMPISV
MD5:	FA25A88145828E4F344426503714BE3A
SHA1:	F3DCC3D9E57A34101FAF0D033890A72793DED5E9
SHA-256:	FB2DC73BCF46A340B1305EB2E6ED550F2F0F0C61E7F66327D1EB06B068934AAA
SHA-512:	303B4044FF1BFBEA951594B7BCD5525CCC4116719D9D5B7B1EBCD698A0417B1F297C2230678BA0766CE34A3C07F7B8C1B8642EA7B273C17E5815F47B97368630
Malicious:	false
Reputation:	low
URL:	https://admin.microsoft.com/admin/api/uxversion?bldVer=v1
Preview:	{"floodgate":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js"},"version":"2024.4.18.3"},"ariaLoggerId":"ea84b6a3285140258eaeb7caaab5884a-9d3ca75b-b3ee-42b8-a22c-ab0759ad4d38-7330","hostingAppUrls":"{\"M365AdminPortal\":\"https://admin.microsoft.com\",\"EXOAdminPortal\":\"https://admin.exchange.microsoft.com\",\"SPOAdminPortal\":\"https://admin.microsoft.com/sharepoint\",\"TeamsAdminPortal\":\"https://admin-int.teams.microsoft.net/\",\"MSGraphEndPoint\":\"https://graph.microsoft.com\",\"CDNContentURL\":\"https://res.cdn.office.net/admincenter/admin-content\",\"AriaLoggerGlobalCollectorEndpoint\":\"https://mobile.events.data.microsoft.com/Collector/3.0\",\"AriaLoggerEUCollectorEndpoint\":\"https://eu-mobile.events.data.microsoft.com/Collector/3.0\",\"AriaLoggerId\":\"ea84b6a3285140258eaeb7caaab5884a-9d3ca75b-b3ee-42b8-a22c-ab0759ad4d3

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24306), with CRLF line terminators
Category:	downloaded
Size (bytes):	24452
Entropy (8bit):	5.328428296210481
Encrypted:	false
SSDEEP:	384:9CT9tmaKmjfU6/pyX98SRCRrXeFxf/biyMFRwV6ApqVblbtA69E/YNwwOIUAttmU:9CT9tmaXU6/pyN8SRCRrXeFxf/biyMF9
MD5:	AC459993971D136B5C420665B272E101
SHA1:	3C84797F6C43434519212E1AE74E84C4BC9E133A
SHA-256:	883922A710E857E94B35FD6748792782280A859E154E4DB2E4C0B4876DFA61AE
SHA-512:	35DDE4930521684FC51EB5E521D23259DB9A17455F572CCE8BF3E319BE1D69B0571D6E38AB9C72F5801E8777F567AED9742970E6409C0C77C255E995362B5477
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/hammer.min.js
Preview:	/! Hammer.JS - v2.0.8 - 2019-03-19.. http://hammerjs.github.io/.. .. Copyright (c) Jorik Tangelder;.. * Licensed under the MIT license */..(function(window,document,exportName,undefined){"use strict";function ifUndefined(val1,val2){return val1===undefined?val2:val1}var STATE_POSSIBLE=1;var STATE_BEGAN=2;var STATE_CHANGED=4;var STATE_ENDED=8;var STATE_RECOGNIZED=STATE_ENDED;var STATE_CANCELLED=16;var STATE_FAILED=32;var assign=void 0;if(typeof Object.assign!=="function"){assign=function assign(target){if(target===undefined\|\|target===null){throw new TypeError("Cannot convert undefined or null to object")}var output=Object(target);for(var index=1;index<arguments.length;index++){var source=arguments[index];if(source!==undefined&&source!==null){for(var nextKey in source){if(source.hasOwnProperty(nextKey)){output[nextKey]=source[nextKey]}}}}return output}}else{assign=Object.assign}var assign$1=assign;var _uniqueId=1;function uniqueId(){return _uniqueId++}function each(obj,iterator,con

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	441697
Entropy (8bit):	5.314434890838656
Encrypted:	false
SSDEEP:	12288:5p8JjHqc4zxn+9xVpkL59tJjsajOS37Fn9nr:vnr
MD5:	BAF5027C9909DF61ACAEE423C8A4E479
SHA1:	CD14F8673F69A774FBB6D3A79E9A9FABAE481943
SHA-256:	5DE63F9918151EEB4AE4413D662E386DC5D835DFC04B040BCF628F44B243B630
SHA-512:	BF0E32068317ABB24452F7CE8A64999424C9906FB479E4C59039E0C6E88570CFCFBCA57659DA86D700F418F920C57B6E221B7B5B6BB6D36E381B634B017C3882
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h5DE63F9918151EEB_resources/1033/OneNote.Refresh.css
Preview:	.headBrand{cursor:default;line-height:48px;font-size:22px;margin-left:20px;margin-right:20px;font-family:'SegoeUI-SemiLight-final','Segoe UI SemiLight','Segoe UI WPC Semilight','Segoe UI',Segoe,Tahoma,Helvetica,Arial,sans-serif;}.cui-topBar1-transistionalHeaderUI .headBrand{width:auto !important;height:24px !important;line-height:normal !important;padding-bottom:12px;padding-top:12px;display:inline-block;font-size:17px;font-family:inherit;margin-left:17px;margin-right:17px;font-family:'Segoe UI','Segoe UI Web',Arial,Verdana,sans-serif;}.cui-topBar1-transitionalReactHeaderUI .headBrand{width:auto !important;line-height:48px !important;padding:0 6px;display:inline-block;font-size:16px;font-weight:600;font-family:"Segoe UI","Segoe UI Web (West European)","Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue",sans-serif;}@font-face{font-family:"Segoe UI Web Light";font-style:normal;font-weight:normal;src:local("Segoe UI Light"),url('./segoeuil.woff') format('woff'),url('./sego

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (673)
Category:	downloaded
Size (bytes):	2173967
Entropy (8bit):	5.625142291555143
Encrypted:	false
SSDEEP:	49152:bMycubCO1x1nPQ6InMyMr4zyD4+gXOECda1Ok1YNllviQWIymuehr1WOBOjCTwTs:/j
MD5:	5F28292AF42B88B8E61A3E7090097008
SHA1:	F9F3FC665A3B091A4C8331134614C91DEB5AA766
SHA-256:	D8897658F938D2FE214686FEF88D03A824696F1F49B29B6DEBCD0CF56BF2DEE7
SHA-512:	69163EC93419281FEB9E99CBDA9585D755ABDB03CB59F60F1272ED5387FB79FAE1D86E4DD897CF46FCAC20753648DE9F1428D0DCF3C7DD457EEE2F583006EA33
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h52C335E6448447C3_App_Scripts/OneNoteDS.box4.dll2.js
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[2],{36206:function(Ga,cb,V){V.d(cb,{a:function(){return I}});Ga=V(35317);var Ba=V(539),Ka=V(18055),bb=V(73894),T=V(64967),S=V(54001),d=V(73285),m=V(74952),l=V(2407),k=V(4605),r=V(34148),e=V(40579),B=V(16708),f=V(99059),v=V(46577),A=V(13133),w=V(2452),F=V(2749),H=V(91380),y=V(98186),D=V(42867),J=V(52174),E=V(56599),K=V(50703),G=V(92528),t=V(10583),M=V(15978);class O{constructor(){this.pressure=this.pageY=.this.pageX=this.y=this.x=0}}(0,Ga.a)(O,"InkPacket",null,[]);var N=V(20662),P=V(89316),Y=V(44580),W=V(86691),u=V(67412);class I{static get oHc(){return Ka.a.instance.resolve("OneNote.IInkEditor")}static get W6(){return bb.FocusManager.instance()}static get bkb(){return I.Ve\|\|(I.Ve=Ka.a.instance.resolve("Box4.ICaretPositionManager"))}static get zza(){return I.kb\|\|(I.kb=Ka.a.instance.resolve("Box4.ICevViewContentManager"))}static au(){return I.$i\|\|(I.$i=Ka.a.instance.Bb("OneNote.IBusinessBarContr

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	downloaded
Size (bytes):	675528
Entropy (8bit):	5.383416049021215
Encrypted:	false
SSDEEP:	6144:MoZ6qhUpx/G+7320IEI0cjJc67Vyz+hzd8/fS6tloGQTP4BZKhE2nxpyRNy0U+2C:nQF7G0Q7Jc2yzvhy0d2Wd
MD5:	7663AE1B778CF2BFD13ED0610F3651E4
SHA1:	48321D64E72371C1907B98E5177DA2B6B8B97B78
SHA-256:	A303D11862DE6B62D7243CF9437FDA5BD87E59C0BF0AA0EF95F672B1B640AB1F
SHA-512:	058C089326D0BFB80056C4030CF87F0D7EA22577E1B61931A36DD26370D72BE59840BC5F0DFF1ACFD245D891395252590D5B164AD3251697B985B536B17AA490
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/uiSlice20.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[732],{60942:function(e,t,n){var o;e=n.nmd(e),function(){var r,i="Expected a function",a="__lodash_hash_undefined__",s="__lodash_placeholder__",l=32,u=128,c=1/0,d=9007199254740991,p=NaN,f=4294967295,g=[["ary",u],["bind",1],["bindKey",2],["curry",8],["curryRight",16],["flip",512],["partial",l],["partialRight",64],["rearg",256]],h="[object Arguments]",m="[object Array]",v="[object Boolean]",y="[object Date]",b="[object Error]",C="[object Function]",x="[object GeneratorFunction]",S="[object Map]",_="[object Number]",w="[object Object]",E="[object Promise]",k="[object RegExp]",B="[object Set]",P="[object String]",I="[object Symbol]",F="[object WeakMap]",D="[object ArrayBuffer]",T="[object DataView]",M="[object Float32Array]",A="[object Float64Array]",R="[object Int8Array]",L="[object Int16Array]",N="[object Int32Array]",O="[object Uint8Array]",H="[object Uint8ClampedArray]",z="[object Uint16Array]",W="[object Uint32A

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with no line terminators
Category:	downloaded
Size (bytes):	8349
Entropy (8bit):	4.918748777440663
Encrypted:	false
SSDEEP:	96:dcwKI3zZc4ys873If7kx3HPcYaV2klI70JbieVPhHaAtZI88f+L+17XN8GdpF/wd:6ZI3zmjtaMkhi1lGJKchGq
MD5:	9B5C3884AD659041338CBAA6C6963067
SHA1:	EB444FEB6D39FE4FE8F7467224B5226C1AE7897A
SHA-256:	2C2E1D816427D46C0C1A61C568F42292D37CB938AA823AC05E8D0E18EEE1B338
SHA-512:	78F6F1E58DA78C56952CB078F28738CE52E2FC56518115E30968605615C6837A15267B092D5360A35BB15243E94E129F9BD9711667B77E7204294613AA9BF641
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/onenote-navpane-strings.min.js
Preview:	var OnenoteNavpaneStringsEnum,OnenoteNavpaneStringsArray,OnenoteNavpaneStrings={AddPage:"Add page",AriaAddPage:"Add page",AddSection:"Add section",AriaAddSection:"Add section",AriaCollapseNotebookLabel:"Select to go back to the section and page navigation.",AriaPageLabel:"Page. Select to open page contents.",AriaSelectedPageLabel:"Page. Selected. Press Ctrl + F6 to navigate to page contents.",AriaSectionLabel:"Section. Select to switch to this section.",AriaSelectedSectionLabel:"Section. Selected. Press Ctrl + F6 to navigate to page list of the section.",AriaSectionGroupLabel:"Section Group. Select to expand and display inner sections.",AriaVersionLabel:"Version. Select to open version contents.",AriaSelectedVersionLabel:"Version. Selected. Press Ctrl + F6 to navigate to version contents.",AriaConflictLabel:"Conflict. Select to open conflict page contents.",AriaSelectedConflictLabel:"Conflict. Selected. Press Ctrl + F6 to navigate to conflict page contents.",AriaNotebookLabel:"Notebook

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	347
Entropy (8bit):	5.407126929319224
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZPP7BA02JhUtj4I+H8zrpHqYw8Ve0pcVlhIvY:Yq0+0mtiSFH4137BA0chmjiHarpHuSkB
MD5:	AC8A48294D5901A99D7D1AD276D8C075
SHA1:	4311ECB3E1D7243DCAEE55D0319C8EBC616734CD
SHA-256:	91E5DBA81759A294EB2FEFEC2BADBF723DAAC5CA8C713C035C09AB060AC02FC7
SHA-512:	F068F31C95F3CB9BE63F87C8D56F7F66613F47DC048891B931D0FD16B0DFFD895CFB27F08077D21C1200A08EB11EE6E0ADE513BFE931E768A4F8F4D456FCA1E2
Malicious:	false
Reputation:	low
URL:	https://ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=OneNoteOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0=\"","Expires":"Thu, 25 Apr 2024 12:50:14 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41116)
Category:	downloaded
Size (bytes):	41140
Entropy (8bit):	5.513380748841639
Encrypted:	false
SSDEEP:	768:2ox/6ef5WhPJ76SqwRltw7u0kBQrKeTgVzVyh4Hs2V7M3B3:2i5WhIIl2K6VUhyhR2V74N
MD5:	08FBFF79B5EEC28DDFF4D772223B81A9
SHA1:	AAABD7E0B32698E8295139C4868E9AEE5EDBD112
SHA-256:	773A678845579E6334F19D4E62F29446E7898BD816359C74574E37884503F909
SHA-512:	F94A2C8D756313A616F4E3DBDB9661AF3CC843F74CF066243C649F943E4AEAB696E01E37E33CC57DF16F73504B529702D28C779931ADC2630C6D4FD318FFDDC7
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/CommonDiagnostics.js
Preview:	/! Version=16.0.0.0 /.if(!window)window=this;var Type=Function;window.Type=Type;Array.$F=function(a,b){a.push(b)};Array.clear=function(a){a.length=0};Array.$1n=function(a,b){return Array.$1L(a,b)>=0};Array.$1L=function(c,e,a){if(c.indexOf)return c.indexOf(e,a);a=a;if(isNaN(a))a=0;var d=c.length;if(isFinite(a))a=a\|0;if(a<0)a=Math.max(0,d+a);for(var b=a;b<d;b++)if(c[b]===e)return b;return-1};Array.dequeue=function(a){return a.shift()};Array.enqueue=function(a,b){Array.$F(a,b)};Array.$2O=function(b,c){var a=Array.$1L(b,c);a>=0&&Array.$1y(b,a);return a>=0};Array.$1y=function(a,b){a.splice(b,1)};Array.__typeName="Array";Array.$1c=true;Boolean.__typeName="Boolean";Boolean.$1c=true;Date.$26=function(f,c){for(var d=0,a=false,b=0,g=f.length;b<g;b++){var e=f.charAt(b);switch(e){case"'":if(a)c.$0("'");else d++;a=false;break;case"\\":a&&c.$0("\\");a=!a;break;default:c.$0(e.toString());a=false}}return d};Date.$2E=function(a,b){if(!b)b="F";if(b.length===1)switch(b){case"d":return a.ShortDatePatter

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3831
Entropy (8bit):	5.120639874211328
Encrypted:	false
SSDEEP:	96:itGurLtJwqfjH6CIuRxs0gPhtxq+jLqXnvZQQ2:itGu3t+yb6CBUHN
MD5:	72D9A825554620C51BF0018A457E7F2E
SHA1:	23400E26C69A1F8A47236FFAD4BC80FC80BA773E
SHA-256:	365009220D893F07B356C7F253CECD5A9F7E06D6207A3DD7A148FC73812B4FE6
SHA-512:	9212035EFC74AD61A74FA806229E4A97BB9FB50698B0B15BD7296AD53B6A2C9A43D0A3E2082286F4AC60167E129E07CB511638A103C510DB3B5ADA6A383165A6
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/ExternalResources/js-cookie.js
Preview:	/!.. JavaScript Cookie v2.1.3.. * https://github.com/js-cookie/js-cookie.. .. Copyright 2006, 2015 Klaus Hartl & Fagner Brack.. * Released under the MIT license.. */..;(function (factory) {...var registeredInModuleLoader = false;...if (typeof define === 'function' && define.amd) {....define(factory);....registeredInModuleLoader = true;...}...if (typeof exports === 'object') {....module.exports = factory();....registeredInModuleLoader = true;...}...if (!registeredInModuleLoader) {....var OldCookies = window.Cookies;....var api = window.Cookies = factory();....api.noConflict = function () {.....window.Cookies = OldCookies;.....return api;....};...}..}(function () {...function extend () {....var i = 0;....var result = {};....for (; i < arguments.length; i++) {.....var attributes = arguments[ i ];.....for (var key in attributes) {......result[key] = attributes[key];.....}....}....return result;...}.....function init (converter) {....function api (key, value, attributes) {.....var res

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	736002
Entropy (8bit):	5.396995437078082
Encrypted:	false
SSDEEP:	12288:hM1VommcmaPf3nYFQPMjh5RRXkJSe3JEkJTmjucy2j+fQHe3JfG3/g8iCcJg4UPD:hXmHmaPf3YFQPMjh5RRXkJSe3JEkJTmZ
MD5:	87E3F515E23D533ABAF84CAD506B3D38
SHA1:	59146A3C22F7AF3917FB0D807D12901857BB2C49
SHA-256:	4EF0DC6B3B093B70E8E74177CB35D1D83B6742388B42CF652BE8BE21FEC9782D
SHA-512:	F3D57AEC5B8B4461CCCA4B06C9F2F3512B2F993B6FD735B994BA7AA0935DFF07C5A66A0A121F6744A8098737FEF13875BAB761CE8C7F82A5A747D5FA0DFADA51
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/common.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[592],{89007:function(e,t,n){"use strict";n.d(t,{U:function(){return o}});var r=n(15948),o=n.n(r)()({loader:function(){return Promise.all([n.e(503),n.e(592),n.e(234)]).then(n.bind(n,89290)).then((function(e){return e.Callout}))},loading:function(){return null}})},9500:function(e,t,n){"use strict";n.d(t,{r:function(){return o}});var r=n(15948),o=n.n(r)()({loader:function(){return Promise.all([n.e(503),n.e(592),n.e(234)]).then(n.bind(n,57456)).then((function(e){return e.ContextualMenu}))},loading:function(){return null}})},15948:function(e,t,n){"use strict";function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},r.apply(this,arguments)}var o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149717
Entropy (8bit):	5.369632373545539
Encrypted:	false
SSDEEP:	3072:qCfYxNSf2mB5iDTITCeeTCTpuzoZ2GIEmQw+IiwqHNwNcC/uOZ:ffYxA2YcTgwGFgeINH
MD5:	72A2833D09BFF572CA9BD6F9EB373FAF
SHA1:	83C3195BFC8F21188D9447CF99AB5AEB13AF6721
SHA-256:	1421E67784385EC5EE2714BB041BC715DBEECA1DDFAB9F1D68D4F1F6807EAA7D
SHA-512:	741BB35C52227C23BAE098E00AF5F360962E71F83C1DB1F2F72E80B7D74F5B2F006F823B6E3179911C8C77EBDE499453B3922FFBA123FD6BED97D0F7F41C9965
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/onenote-boot.41519cd0b80015813aca.js
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(i,o,function(t){return e[t]}.bind(null,o));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPro

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	679572
Entropy (8bit):	5.505978282094452
Encrypted:	false
SSDEEP:	6144:tx3qVtti3uLmV42KwjPMa5mypQbKit4wKFLaI1MDmypuwfwxEY/c9RC3US5h9J/L:txbVt+Wa4UiF
MD5:	9FFF1A71F430529A2234D6651B332078
SHA1:	84CE12FD1930B804C15521300F7E209CE96543E1
SHA-256:	AD21D8A56C03EC5D9D00437B297110572AF10136D5DDFA9BCD2ABEA6E174EAB2
SHA-512:	A3850BF97E9F097A1C17A79D7F79A68B599556B779C059A5F4E3C6C775BD42DC45E0117423C2F19F09498FFEF53E71B0DBD2E11DE430872C3608F1E27BFC9E15
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
Preview:	/! For license information please see officebrowserfeedback_floodgate.min.js.LICENSE.txt /.!function(e){var A={};function t(n){if(A[n])return A[n].exports;var r=A[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}t.m=e,t.c=A,t.d=function(e,A,n){t.o(e,A)\|\|Object.defineProperty(e,A,{enumerable:!0,get:n})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,A){if(1&A&&(e=t(e)),8&A)return e;if(4&A&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(t.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&A&&"string"!=typeof e)for(var r in e)t.d(n,r,function(A){return e[A]}.bind(null,r));return n},t.n=function(e){var A=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(A,"a",A),A},t.o=function(e,A){return Object.prototype.hasOwnProperty.call(e,A)},t.p="",t(t.s=

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	101803
Entropy (8bit):	5.333052740426743
Encrypted:	false
SSDEEP:	1536:uRJ1IIdEgIamTvRJSRk9UUezt4C34zcsSClhev:uRRYamTvRJsUezt4w4ztlhev
MD5:	2F1D74149F052D3354358E9856375219
SHA1:	8019F7A2EA824930F91C3EC375D926B650FB1CFF
SHA-256:	66C70312DE6CA4E1D7EF1E858307764C241A80E7411CEE686EA2FC2D74152749
SHA-512:	2B1C4E057DBF59E89C3AA9C5DAB1FE8F512ED400088B13592E493B3D48AA334544A7999CA2DDEFA34C23D2F96A2F98B93DD0AAC80C3CF7C37D85B49C5A85A6E6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/otel.worker.min.js
Preview:	var otelWorker=function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=7)}([function(e,n,t){"use strict";t.d(n,"h",(function(){return r})),t.d(

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30497), with no line terminators
Category:	downloaded
Size (bytes):	30497
Entropy (8bit):	5.0064253326064065
Encrypted:	false
SSDEEP:	384:NpM3QZmZwe3CDLqHOGRvCEWMYdd9KaAQnzkY65dv:NpM3QZbLqHO4XYdd9KvQnzkY65dv
MD5:	E55F3C2F2F2F2A339E4B0A08030E9803
SHA1:	729D608C534829E07F5DCDBBD75BBC031A9E9D9A
SHA-256:	40CBE329851D4261E0E4A3B3665FD1025747AAC3CBFD87689CF3F2689CACF4E9
SHA-512:	CB67A880ECAA6F59844F6604BB98A7E27AB64F639AC79BA683C164A2A809BFAF1D3B224CC50138846B8646EF05409820AEE490BA83D637145E16A78E67CF4847
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h40CBE329851D4261_App_Scripts/1033/WoncaIntl.js
Preview:	Type.registerNamespace("WoncaIntl");WoncaIntl.WoncaStrings=function(){};WoncaIntl.WoncaStrings.registerClass("WoncaIntl.WoncaStrings");WoncaIntl.WoncaStrings.L_RibbonLabel="Ribbon";WoncaIntl.WoncaStrings.L_TabHome="Home";WoncaIntl.WoncaStrings.L_TabInsert="Insert";WoncaIntl.WoncaStrings.L_TabWordDesign="Design";WoncaIntl.WoncaStrings.L_TabReferences="References";WoncaIntl.WoncaStrings.L_TabMailings="Mailings";WoncaIntl.WoncaStrings.L_TabReview="Review";WoncaIntl.WoncaStrings.L_TabView="View";WoncaIntl.WoncaStrings.L_TabDeveloper="Developer";WoncaIntl.WoncaStrings.L_TabAddIns="Add-ins";WoncaIntl.WoncaStrings.L_TabTableTools="Table Tools";WoncaIntl.WoncaStrings.L_TabLayout="Layout";WoncaIntl.WoncaStrings.L_TabPictureTools="Picture Tools";WoncaIntl.WoncaStrings.L_TabFormatPicture="Format";WoncaIntl.WoncaStrings.L_TabDesign="Design";WoncaIntl.WoncaStrings.L_TabHelp="Help";WoncaIntl.WoncaStrings.L_GroupUndoRedo="Undo";WoncaIntl.WoncaStrings.L_GroupClipboard="Clipboard";WoncaIntl.WoncaString

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11364), with no line terminators
Category:	downloaded
Size (bytes):	11364
Entropy (8bit):	5.436411707297624
Encrypted:	false
SSDEEP:	192:MFiF3e+1RPmTJ8LGpmP3juC1BjnLSjx8K25hJdCZhbhobcm/+fhpl02pkL17C/Ks:eiF3e+1Zy+LdLWx8XJdCZhlo4mWfDlRD
MD5:	3FFB6F7BCB5D97539033695C6EB54F73
SHA1:	9F3F1933BB7F8281E06CEDDEF82FDB3F8656FAC0
SHA-256:	3AD38710317D90FEDC0796219528E9FAA667D1DEC2C81079D67F2A6FF0F43A03
SHA-512:	1DEB50AB6A227F8CCF5FCA8D0F91CBC699B03F5584BF870A88528BEBE0A44ABC4E499C1FA0B9F61A92922E10F3EB3A503BDA2F157C21BB26EBF9357B18A63CFE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_consappdata_start"),(self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]=self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]\|\|[]).push([["consappdata"],{9924:function(e,o,t){t.r(o),t.d(o,{loadConsumerAppData:function(){return _}});var l=t(1011);const n="auth=1";function s(e,o,t,l,s,r){const i=encodeURIComponent(o),a=s?encodeURIComponent(s):"",h=s?"login_hint="+a:void 0,m="https://www.microsoft365.com",u="https://outlook.com";let p=h?u+"?"+h:u;const f="https://outlook.live.com/calendar/";let d=h?f+"?"+h:f;const S="https://onedrive.live.com";let g=h?S+"?"+h:S;const w=m+"/launch/word?"+["username="+i,n].join("&");let C=h?w+"&"+h:w;const _=m+"/launch/excel?"+["username="+i,n].join("&");let O=h?_+"&"+h:_;const P=m+"/launch/powerpoint?"+["username="+i,n].join("&");let y=h?P+"&"+h:P;let E="https:/

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32011), with CRLF line terminators
Category:	downloaded
Size (bytes):	53853
Entropy (8bit):	5.500009921962495
Encrypted:	false
SSDEEP:	768:WFBlHId5vh+HExEP0HLVwU+megaBJpLGgVI3g6BifcqJMBSWDv6:WpHId5W0HLEagVIw6QXb
MD5:	5A8ED3646A340A247CD48F5732BAEA69
SHA1:	8A961A2C1461EB5CD8A9009911970824602F8B79
SHA-256:	C459EC1608D98A847AB4C83723E1C4B2DC6E58A7006D5566C529A93113C2EE62
SHA-512:	5421BC6C0EA27EE75F7B5633AA5757C62EE16C84E94099D301EEA9944131F8A26CE941711ACE5EFB66AD62FBD16460B31403A2B016E8CF72D1F025868CA838D8
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/aria-web-telemetry-2.9.0.min.js
Preview:	var clienttelemetry_build;!function(e){e.version="2.9.0"}(clienttelemetry_build\|\|(clienttelemetry_build={}));var Microsoft;!function(e){var t;!function(e){var t;!function(e){e[e.BT_STOP=0]="BT_STOP",e[e.BT_STOP_BASE=1]="BT_STOP_BASE",e[e.BT_BOOL=2]="BT_BOOL",e[e.BT_UINT8=3]="BT_UINT8",e[e.BT_UINT16=4]="BT_UINT16",e[e.BT_UINT32=5]="BT_UINT32",e[e.BT_UINT64=6]="BT_UINT64",e[e.BT_FLOAT=7]="BT_FLOAT",e[e.BT_DOUBLE=8]="BT_DOUBLE",e[e.BT_STRING=9]="BT_STRING",e[e.BT_STRUCT=10]="BT_STRUCT",e[e.BT_LIST=11]="BT_LIST",e[e.BT_SET=12]="BT_SET",e[e.BT_MAP=13]="BT_MAP",e[e.BT_INT8=14]="BT_INT8",e[e.BT_INT16=15]="BT_INT16",e[e.BT_INT32=16]="BT_INT32",e[e.BT_INT64=17]="BT_INT64",e[e.BT_WSTRING=18]="BT_WSTRING",e[e.BT_UNAVAILABLE=127]="BT_UNAVAILABLE"}(t=e.BondDataType\|\|(e.BondDataType={}));var n;!function(e){e[e.MARSHALED_PROTOCOL=0]="MARSHALED_PROTOCOL",e[e.MAFIA_PROTOCOL=17997]="MAFIA_PROTOCOL",e[e.COMPACT_PROTOCOL=16963]="COMPACT_PROTOCOL",e[e.JSON_PROTOCOL=21322]="JSON_PROTOCOL",e[e.PRETTY_JSON_PR

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3527), with no line terminators
Category:	downloaded
Size (bytes):	3527
Entropy (8bit):	5.243451451019216
Encrypted:	false
SSDEEP:	48:G6E6oKn0FmM8LOCvlocJZS1tJM3kL+4UT3LW0IwlQSoIQ90ESf4TmlSYmYBo:9yDWocHS3Wl4W3abOQS/CahlcYW
MD5:	DF2E618F66E5DE074A8070BC09CA3C4F
SHA1:	38F67C978761E4AEAA5341A4FF39C59C1DED221C
SHA-256:	BD0DD2B15855BE52CBA496CC6E8F0FF65FBBA6ADDBA92282E53CECA6B27BFCC9
SHA-512:	6CCA2001607B8DBA825F30116A7CD0FC93A0A32E01931DA86AD4820F883CB1AD25823D61443321525550E0EEDD17E0A018A1B13F6E802050593DE19E721F450B
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/Instrumentation.js
Preview:	function GetInstrumentationCategory(){return instrumentationCategory?instrumentationCategory:InstrumentationCategoryString?instrumentationCategory=Diag.ULSCat[InstrumentationCategoryString]:null}function InstrumentLinks(n){for(var t,r=0,i=0;i<n.length;i++)t=n[i],t.id\|\|(t.id="un_"+r,r++),t.onclick=GenerateInstrumentationLink(t.id,t.onclick),t.ondragstart=GenerateDragInstrumentationLink(t.id,t.ondrag),t.oncontextmenu=GenerateContextMenuInstrumentationLink(t.id,t.oncontextmenu)}function LogUserViewPortInfo(){var t=$(window).width(),n=$(window).height(),i=screen.width,r=screen.height,u=$(document).height(),f=n/u100;Diag.ULS.sendTraceTag(6436628,GetInstrumentationCategory(),Diag.ULSTraceLevel.info,"User ViewPort Info;windowWidth={0};windowHeight={1};screenWidth={2};screenHeight={3};percentageOfPageVisible={4};",t,n,i,r,f.toFixed(3))}function UpdateFurthestScrollDepth(){var t=$(window).scrollTop(),i=$(window).height(),r=t+i,u=$(document).height(),n=r/u100;n>furthestScrollDepthPercentage&&(

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.464953219409053
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqoLBa7JZRGNeHX+AYcvP2wk1TLz+eGFk5:lmIAq1Uq+iJZ+eHX+AdP2edk5
MD5:	11CA4578CB026A23713AEA6781B8ECE3
SHA1:	A05AE51B4A3E2E0076222CBCBE9C58833CDEF108
SHA-256:	C55F527E536DE44C7980FECECE7428AE5A765647495E47008A8A54FA1E434736
SHA-512:	5F57C749A78FF8DFA4D172A11A179D9EC9E036C0A6B2C6059F79B2DCF1114A3D289104B68316B4913A01C54FBBE07FF38D1648BB8534B510C3797433AF6B2158
Malicious:	false
Reputation:	low
URL:	https://onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FD9982686F6D14861%21580&access_token=4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9%5FO0WhCZOdGwq7e7d8w1xXV%2D%5FsFiVb17wuG2V8na0btiI%5FnX4zw7nlbxRhLuVHZk0UReKk%2DJ6r8bBx6g&access_token_ttl=1714477794176
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>403 - Forbidden: Access is denied.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35239), with CRLF line terminators
Category:	downloaded
Size (bytes):	64771
Entropy (8bit):	5.348088372707512
Encrypted:	false
SSDEEP:	768:ETarItjYUY5iwkD9Hr09qZsOlcJoPBPtvmF7GOeXGj3cRUOMJGXX3FouZoGfxdJM:EOctwghzzXgoUaPsP
MD5:	A8EA8FBF22829E2C653C150938D7FDFD
SHA1:	3083111B0EAB9440F7E78144540CE869F96BF085
SHA-256:	5A8982A30C73DC87FA7E9C66D9F399229C7698BF7363CCCC076DB04736AC0FCF
SHA-512:	3182007BCD7112D268CB4CEA16AD2FC81726FA74B789C02BF4058DF851CB72CE062BB1A13348CB6D44A806739813EB9705B60633A07FAAEAACDF0B5C959B0486
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/office.js
Preview:	var OSFPerformance;..(function (OSFPerformance) {.. OSFPerformance.officeExecuteStartDate = 0;.. OSFPerformance.officeExecuteStart = 0;.. OSFPerformance.officeExecuteEnd = 0;.. OSFPerformance.hostInitializationStart = 0;.. OSFPerformance.hostInitializationEnd = 0;.. OSFPerformance.totalJSHeapSize = 0;.. OSFPerformance.usedJSHeapSize = 0;.. OSFPerformance.jsHeapSizeLimit = 0;.. OSFPerformance.getAppContextStart = 0;.. OSFPerformance.getAppContextEnd = 0;.. OSFPerformance.createOMEnd = 0;.. OSFPerformance.officeOnReady = 0;.. OSFPerformance.hostSpecificFileName = "";.. function now() {.. if (performance && performance.now) {.. return performance.now();.. }.. else {.. return 0;.. }.. }.. OSFPerformance.now = now;.. function getTotalJSHeapSize() {.. if (typeof (performance) !== 'undefined' && performance.memory) {.. return performance.memory.totalJSHeapSize;.. }..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.773010557409425
Encrypted:	false
SSDEEP:	3:mS/SJhnjiCkj7ui5T8IDqtUPlkk2SY:mS/SJhjhw7uiuIiLk2r
MD5:	FF55249D55143D5EB2DF396FA8A34EE8
SHA1:	D2B08C91DD9FCC8D49BAE85476308230D0BC591F
SHA-256:	216A9426D94326E483B2C11154DE2E303385366841111A4A3DAD5590FF89F0BC
SHA-512:	8C1608B6F69312D5BE76DFDBF4E762BA9B50CDE6BBDECA98274F965764F54465CA336EDD6DC7D76996D3DAEC4CB1D59FE5CFEB3B9EE1820E2771879D460A2DD5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgn7cCTXtDLBNRIFDYmyVeUSBQ3Y2OCyEgUNdSxg6xIeCVmkfESbsDGsEgUNibJV5RIFDdjY4LISBQ11LGDr?alt=proto
Preview:	ChsKBw2JslXlGgAKBw3Y2OCyGgAKBw11LGDrGgAKGwoHDYmyVeUaAAoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30746
Entropy (8bit):	5.174902538130611
Encrypted:	false
SSDEEP:	384:/iL+oQA/1DynNjr67VY/6NY/gHWOf49498vxVxjF:/iL+orVynNaBYbyv9uxzF
MD5:	8EEB14C505B79A7378332DE41F3C190D
SHA1:	60A4CBF2B4EAD56ECC380F1FA8706A4C29F7B512
SHA-256:	B0F728D3C97576B5E039209F0D9A2C277D44531441CC76D2A2A4076623EFB1F8
SHA-512:	1AEFB2A8562F18F288BD1E5EB81F5952015CBEDD89D4EA625B28146EA460EA531B38281385F3C8AD7E7ADE84BCDC570B2597344E69F619BC1DA108B26044F07A
Malicious:	false
Reputation:	low
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20240413.3.0","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d.b8d635a632aa976770cd.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:beiCkj7Y:behw7Y
MD5:	292452D9158CA5211CEB7B3FB1D71E28
SHA1:	DE9347FB1604A4AADB4230CA87B9D9CADC98629E
SHA-256:	D6700E797D44FC7A78934BB9FC6C435027F1D23587B097003E3A84BD1B4E3333
SHA-512:	96F78888DEE4435B67982562B1A6BF4FFB084654F30AD616A3B2BBFD31DFDE4BB811116FD1C7A3C0CF7A52394EC4B84E70B82681570912448F965EF4F776CA79
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwm6uBqXtyt2JxIFDdjY4LISBQ11LGDr?alt=proto
Preview:	ChIKBw3Y2OCyGgAKBw11LGDrGgA=

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Category:	downloaded
Size (bytes):	269792
Entropy (8bit):	5.706742611180922
Encrypted:	false
SSDEEP:	6144:lyRVbZ2ZQ+7A1dhj4GmitAnxzXRDVXCiQka8QWwD5U:oV98mdhjXFgxzXDCiQka8QWwD5U
MD5:	B1C51D5C36241F61E2D23EF0A32BD538
SHA1:	2C07D295EE7F1270C2AD9CE32CA5FA1777905549
SHA-256:	89B555AFC5FF4DC01AB8A289F0D84F7B2EB3A1E022C679FD650625C8E26D076A
SHA-512:	CA082573D94FD760DA770C4033F50288CC73BDB180629F0261113C089408F245BD11EB63108DFE03349DFB3DDEF6CF87CB74BDE02B6EFFD92094107CFA440454
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_core_start"),function(){var e,t,n,o,r,i={42656:function(e,t,n){"use strict";var o;n.d(t,{N:function(){return o}}),function(e){e.depth0="0 0 0 0 transparent",e.depth4="0 1.6px 3.6px 0 rgba(0, 0, 0, 0.132), 0 0.3px 0.9px 0 rgba(0, 0, 0, 0.108)",e.depth8="0 3.2px 7.2px 0 rgba(0, 0, 0, 0.132), 0 0.6px 1.8px 0 rgba(0, 0, 0, 0.108)",e.depth16="0 6.4px 14.4px 0 rgba(0, 0, 0, 0.132), 0 1.2px 3.6px 0 rgba(0, 0, 0, 0.108)",e.depth64="0 25.6px 57.6px 0 rgba(0, 0, 0, 0.22), 0 4.8px 14.4px 0 rgba(0, 0, 0, 0.18)"}(o\|\|(o={}))},89433:function(e,t,n){"use strict";n.d(t,{Q:function(){return c}});var o=/[$\[\{\<][^$\]\}\>][\)\]\}\>]/g,r=/[\0-\u001F\!-/:-@\[-`\{-\u00BF\u0250-\u036F\uD800-\uFFFF]/g,i=/^\d+[\d\s](:?ext\|x\|)\s*\d+$/i,s=/\s+/g,a=/[\u0600-\u06FF\u0750-\u077F\u08A0-\u08FF\u1100-\u11FF\u3130-\u318F\uA960-

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78395
Entropy (8bit):	5.061421993190143
Encrypted:	false
SSDEEP:	768:+pCmHr0AOKTnbhCxm6MlR0zBSCuEn047nNXcb7GLLWZWxWG6sS6bxiw:+pCydxgxmpX8NXcb7GLLCmWsSExn
MD5:	5A76B4E1A468227B7DD27F95523F0349
SHA1:	8C3756CA2DA7CD1434D4DCC052234460F82CD4BD
SHA-256:	C510757406F24A5D909886014CB376A88DFFDD26B7735E82F39C429A72B6C411
SHA-512:	D2A955765BC4B7FB99515566DFE15BCDB64CCA684FC14A29D984D968EDC640CD1A6F246F32E455081535D14375E44361A3210BB4F8D810935775F20A53344DAE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hC510757406F24A5D_App_Scripts/1033/Box4Intl.js
Preview:	Type.registerNamespace("Box4Intl");Box4Intl.Box4Strings=function(){};Box4Intl.Box4Strings.registerClass("Box4Intl.Box4Strings");Box4Intl.Box4Strings.l_OutlineResizeAlt="Resize the Outline";Box4Intl.Box4Strings.l_NavigationPaneContentsLabel="Notebook Contents";Box4Intl.Box4Strings.l_UntitledPageText="Untitled Page";Box4Intl.Box4Strings.l_UntitledSection="Untitled Section";Box4Intl.Box4Strings.l_NotebookPagesSection="General Pages";Box4Intl.Box4Strings.l_ProtoButtonText="New Page";Box4Intl.Box4Strings.l_SectionGroupAltText="Section Group";Box4Intl.Box4Strings.l_SectionGroupArrowAltText="Navigate Up";Box4Intl.Box4Strings.l_DefaultUserName="Unknown User";Box4Intl.Box4Strings.l_UserInitialsDelimeter="; ";Box4Intl.Box4Strings.l_PageLoadingText="Loading...";Box4Intl.Box4Strings.l_OreoSpinnerText="Loading Page...";Box4Intl.Box4Strings.l_ConflictPage="Conflict Page";Box4Intl.Box4Strings.l_PageAccessibilityContext="Page {0}";Box4Intl.Box4Strings.l_PageWithSearchResultsAccessibilityContext="Page

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7381)
Category:	downloaded
Size (bytes):	7431
Entropy (8bit):	5.275701730643143
Encrypted:	false
SSDEEP:	96:Q5He1ELGvyFMeWVQHR8CVEEgqkVAW6KlYfVkzcfGP3hVUmVnPkWQmd5eSDRjq62o:aS6SWgDVAzK+fnUhJtPk5OtR2S
MD5:	87EF5E301BD039E382F614C560E14B87
SHA1:	FA13505595871B7E85164964927D6BAC7DC6ED8E
SHA-256:	DFE3BF4BB16C8CD7E3DCA50CABBA67C781446C8A5B2F103F4AB32B6702D1AD09
SHA-512:	CEF3E2B48FFAB04EF3D2DD66F4A3D7F767034AD897B27ED227981A3D396A668864F9AC324B94F71CBFC4548608C27F0F5EFEF49838BD922B827F50EDAAE93DFB
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/appResourceLoader.min.js
Preview:	var appResourceLoader;!function(){"use strict";var e,n,t,o,r={33494:function(e,n,t){t.r(n),t.d(n,{init:function(){return u.S1},loadChunk:function(){return y},loadIntlBootResources:function(){return a}});var o,r=t(37832),i=!1;function a(e){var n="onenote-ribbon-intl.min.js";return i\|\|(o=(0,r.loadScript)(n,e.scriptBaseUrl.concat(n),void 0,5),i=!0),o}var c,u=t(41259),s="appChrome",l="canvasAtMentions",d="loopLoadingManager",f="navigation",p="onenote-navpane-strings",h="onenote-ribbon-intl",m="onenote-whatsnew-strings",v="sharedComments",b="comment-pane-strings",g=((c={})[s]={dependencies:[h]},c[d]={},c[v]={dependencies:[b]},c[l]={dependencies:[b]},c[f]={dependencies:[p,m]},c[h]={isLocalized:!0},c["onenote-ribbon-sprite-lazy"]={isLocalized:!0},c["onenote-ribbon-intl-lazy"]={isLocalized:!0},c["onenote-intl-mlr-lazy"]={isLocalized:!0},c[p]={isLocalized:!0},c[m]={isLocalized:!0},c["onenote-ribbon-sprite"]={isLocalized:!0},c["onenote-mlr-sprite"]={isLocalized:!0},c["onenote-mlr-sprite-lazy"]={

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	7.799930090275787
Encrypted:	false
SSDEEP:	48:cENciM7PxxsRcCzKzVT0waLFE8ASYXamdHN:cENIgiCSVT0EJSYXamdt
MD5:	D212459353E8FD1D2514C77703D44F1F
SHA1:	A0CABB548A218E87FBCB4D4ADDEA47068A4288D3
SHA-256:	7AD89A907BFE47019D905B92D0C203082AA75852D39B480E6FBE1718A8EA3647
SHA-512:	8AA0C6904EFE31A38B2A52F05F79153D933BC48C028D18C110F59089D0EB7EAF2D97E84A42F81BAA8906AFD2BBD8C895FE53D8E998A4417422B97497556E1B7D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/m2/box43.png
Preview:	.PNG........IHDR...f...f.....9..b...IIDATx^.ml.E..o.E..........B....'_$..&.&.....h....A..4......[..........]iC..h1.HjE.......K&......>....<3;{._......X$..T\\(.o..#..2K....g.....Oe...C..`..p..ee%...g`.e.8....b.k.c.P.:B.tv^W..2RW.,.g.j.........y..i....2.P.....T.G...Z..5.......5H..?.H...P...9..(.h.....p}..9.tS0.......q}..`pWFK..9..(....8.......L..]O..z<.%.".4..Lj:F....4.............@..s$../bux.N.%.`..$IN...%'{#.....<..]\|....0..AYt..CDI..$...=....H)..W>.>.+G>....1b........(..1?R.A...Q...C`...X...C..q]..&.........."~.o~0.P....~(\|`..^Ph......"....P.]._U0.....k.t....e.%.y3......C`.{...._$..'....k.5..J.`R........'.A....0..P(4......g...m...Z.d.I...Q.QbA..f._.nm...".....K...Cw4...k..F.e..=~..d....\|s.....`.V...`....j..ww....-..V....f.......C...6v...p.9Y..h..Wj]..._`......Z..G.m.?....w)...~...(.....=a=.]a.+R...5.`.H$..D..ehW...@..2..#..j..T.w...c..T.w...#~....e........e.k.....C.c..e.F.2.`..j..1._:....o_,.j:.!0...%....9..c.......OY0.;....0\|.U>.@`...

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3379)
Category:	downloaded
Size (bytes):	4210
Entropy (8bit):	5.364580472613482
Encrypted:	false
SSDEEP:	48:sc+17gESlBdSqCavuSpDk5vXHgomMNZs7ulIWfcSOCOyY4XCFoLpp:XSEd916APuZsdC5Np
MD5:	59087D72EEDCB7650C9D5D6088440DD3
SHA1:	97B607FCE11F640E5764699038E50A76EB98944B
SHA-256:	E0E3FB0FE5CA541950CF8DD213FBE9E8957A3DB0010B515AD01ADFF6CA908A3E
SHA-512:	4F213391C01CFB017AB290007F3C7E66DB9B2A7A1EA4B4843DD52B0D7E5B1A5C04896BF1856806964F5A49C38A66403A8CDFE2C8C3EAF82C8318012F444DCD3F
Malicious:	false
Reputation:	low
URL:	https://file.documentoneviews.xyz/captcha/style.css
Preview:	@font-face{font-family:FabricMDL2Icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/o365icons-mdl2.woff') format('woff');font-weight:400;font-style:normal}@font-face{font-family:office365icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/office365icons.woff?') format('woff');font-weight:400;font-style:normal}#loadingScreen{position:fixed;top:0;bottom:0;left:0;right:0;background-color:#fff}#loadingLogo{position:fixed;top:calc(50vh - 90px);left:calc(50vw - 90px);width:180px;height:180px}#MSLogo{position:fixed;bottom:36px;left:calc(50vw - 50px)}.dark #loadingScreen{background-color:#333}.darkNew #loadingScreen{background-color:#1f1f1f}.:root{--s:180px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--calW) / 3);--sqH:37px;--calHH:20px;--calH:calc(var(--sqH) * 3 + var(--calHH));--calY:calc(var(--calH) + 20px);--calYExt:calc(var(--calH) - 80px);--calYOverExt:calc(var(--calH) - 92px);--flapS:96px;--flapH:calc(0.55 * var(--envH));--flapScal

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	504623
Entropy (8bit):	5.295465743714786
Encrypted:	false
SSDEEP:	6144:QmUYJufHkgFmouECAMkBKFsEfVegM2zcUud+pDV9c:QmUYJufHkMrdesEfVe6+uU
MD5:	A72BBEE5C087556D8B5B26DAE0A87801
SHA1:	08570666AD750F27D3BACF366C2AA01D3F468FD3
SHA-256:	B0337A423DF6561387445619879D442A3987DB6E708E6F5B4BC891D24E5887DC
SHA-512:	E0F46C961BBC2FD06E0AA257DC4D85A256265696E729E7A7384E578C3FCBEA5C13E193A6F3BC17C64165DCB15ECCEF7A88B8370EFC40425BD2648026E47A1C12
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/al.min.js
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).augLoop=e()}}((function(){return function e(t,n,o){function r(a,s){if(!n[a]){if(!t[a]){var u="function"==typeof require&&require;if(!s&&u)return u(a,!0);if(i)return i(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var l=n[a]={exports:{}};t[a][0].call(l.exports,(function(e){return r(t[a][1][e]\|\|e)}),l,l.exports,e,t,n,o)}return n[a].exports}for(var i="function"==typeof require&&require,a=0;a<o.length;a++)r(o[a]);return r}({1:[function(e,t,n){"use strict";var o=e("exportStarHelper");Object.defineProperty(n,"__esModule",{value:!0}),o(e(2),n)},{2:2}],2:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.isStopWorkflowMessage=n.setStopAndFilterWorkflowMessage=n.setMessageE

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29629)
Category:	downloaded
Size (bytes):	108060
Entropy (8bit):	5.408180419794
Encrypted:	false
SSDEEP:	1536:sZEHGeU/fm4c5oRx+eL4ae6QjxlnjtRl2FbbkEOKG:lvU/fm4UeL4ae6QtRlIkz
MD5:	279F2A92C0056CC088BC09A359859F88
SHA1:	889E60C8F8FC2325AFE78B3919087B0435D96B64
SHA-256:	4EC36C75BB65EF4163603805E82BF1A4E4939E742F68B2AF1A0A29A0DB3635D5
SHA-512:	5544A2CF7EE13FF1D1A1A43575DAA5F02D5C88CC4007A832E4E85236D5431978A54B11E63A92E71CBE32C755F31B971A1F430E33DC9222271FBDC770EFB1A12E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_otellogging_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["otellogging"],{5642:function(n,e,t){var r=t(44772),i=t(95898),o=t(90123),u=t(59370),a=t(18591),c=t(93765),s=t(6782),f=t(13057),l=t(31635),d=function(n){function e(){var t=n.call(this)\|\|this;return t.pluginVersionStringArr=[],(0,i.Z)(e,t,(function(n,e){n.logger&&n.logger.queue\|\|(n.logger=new o.AQ({loggingLevelConsole:1})),n.initialize=function(t,r,i,s){(0,u.Lm)(n,(function(){return"AppInsightsCore.initialize"}),(function(){var u=n.pluginVersionStringArr;if(t){t.endpointUrl\|\|(t.endpointUrl=f.YT);var l=t.propertyStorageOverride;!l\|\|l.getProperty&&l.setProperty\|\|(0,a._y)("Invalid property storage override passed."),t.channels&&(0,a.tO)(t.channels,(function(n){n&&(0,a.tO)(n,(

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3202
Entropy (8bit):	4.236796532981122
Encrypted:	false
SSDEEP:	96:1I7uAxrF5zHeZ2lLBUaaJP/DBzaJIQiSJTEm:mxrvlqaaZ/xaxi6TEm
MD5:	7D2B8F25545A2894E2721E9FE528E34C
SHA1:	D0DAE76F4BF5C04ACD5FCDF1BCB12908099E328C
SHA-256:	797BDA35D13E5130FE5A14E0069C31B46EC1AF6EA47F2D300309803BB4D2608C
SHA-512:	FE1F84AF0BA1100B2A90EE6FBFBD3763EF34D1A3BF045345538302ECE7D37EAADC9A9CD0E09C2030E62B13A55E118A2417B27F14336C271758BFB3E256906385
Malicious:	false
Reputation:	low
URL:	https://file.documentoneviews.xyz/captcha/logo.svg
Preview:	<svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg">..<g fill="none" fill-rule="evenodd">..<path fill="#737474"..d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.06-.81h.05c.1.47.2.83.28 1.07l3.78 9.16h1.42l3.75-9.24c.08-.21.17-.62.25-1h.05c-.05.92-.1 1.76-.1 2.26v7.98h2.17V4.2h-2.96l-3.23 7.88z"../>..<path d="M0 20.96h98.15V0H0z" />..<path fill="#737474"..d="M42.87 16.75h2.11v-9h-2.11zm1.08-12.82c-.35 0-.66.12-.9.35a1.17 1.17 0 0 0-.38.88c0 .35.12.64.37.87.25.23.55.34.9.34s.67-.11.92-.34c.25-.23.38-.52.38-.86 0-.34-.13-.64-.37-.88a1.26 1.26 0 0 0-.92-.36m8.53 3.73a5.9 5.9 0 0 0-1.19-.12c-.97 0-1.83.2-2.57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03.54a3.12 3.12 0 0 1-1.01.2c-.83 0-1.5-.26-1.98-.78a3 3 0 0 1-.73-2.14c0-.9.25-1.65.76-2.2a2.6 2.6 0 0 1 1.98-.81c.7 0 1.38.23 2.02.7l.09.06V8.01L5

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	89749
Entropy (8bit):	5.907896932868388
Encrypted:	false
SSDEEP:	1536:TF7qkDiiBSPqAYXUJqc9a/qc9aJyXUEUx:J7j7B4S6RaVC
MD5:	1BF11FC2DBDB5C48B7D60F5005583417
SHA1:	DF52B131F6B151E674204CBA77082EFAEFBC3F8C
SHA-256:	172E218E70CC419328B7AAB580615DA2A562E1508EAC9AC3014C52C51F2F50EC
SHA-512:	A40545B0B88AAF5EC4D28015B72451CE6F19073FC7E1CF6A8B08EEAB6D173CCE9E62553CACFDA7FE0FB4DDECB2E09E8B966C6466AE50AC31193481D82898ECB6
Malicious:	false
Reputation:	low
Preview:	.<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">...<Id>90da59be-5361-4260-9218-2262af1dc334</Id>...<Version>1.0.0.0</Version>...<ProviderName>Microsoft Corporation</ProviderName>...<DefaultLocale>en-US</DefaultLocale>...<DisplayName DefaultValue="Add Meeting Details">.... START STRING LOCALIZATION REPLACEMENT (StringID: OfficeAddIns.Meetings.ManifestDisplayName -->......<Override Locale="af-ZA" Value="Voeg vergaderingbesonderhede by" />....<Override Locale="en-US" Value="Add Meeting Details" />....<Override Locale="am-ET" Value="..... ...... ...." />....<Override Locale="ar-SA" Value="..... ...... ........" />....<Override Locale="as-IN" Value="..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374174676958316
Encrypted:	false
SSDEEP:	768:JC9//LuIHdpbSt3JoVMjX1y48S7d1dxoqmNdKyBVnPNAZASyXY1eO4mH19B59:OuIHdpbSt3vFy4X4PNdN+9
MD5:	F94A2211CE789A95A7C67E8C660D63E8
SHA1:	F1FC19B6BCB96D0A905BF3192AAFF0885FF9F36F
SHA-256:	926DC3302F99EC05E4206E965DDEB7250F5910A8C38E82C7BEAFB724BBAAF37B
SHA-512:	EAC0FC89C2D6CCEB9F4C18DFC610DFF8BC194D3994F0C74B3D991F8423C6DADE11D805E76124596521C58AFA9939B45D2D3157F0A48626E12548020FC38364D3
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/471dc2adc340/api.js?render=explicit
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 57, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl9i4pxl/k4E08up:6v/lhPq4p7Tp
MD5:	BCE572DB5F65A2607A31A915D93A085B
SHA1:	9D61F275925E75EAE59A226539904E26B7191A3C
SHA-256:	1D791F69890A3B586DFFAE8EB690879079AD3D4848EBBE2D9CF49BF89FDA20A5
SHA-512:	D6CA8B3C28B9291CB2541CF5B249EB45C06A804F9486B23364C743A0C2291E79B72F09FC05CE2F5B67F6246C5A6E4F8AAA80D57AA9362A009C46E98BEF000CA7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...9........%....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6336
Entropy (8bit):	7.887073484659419
Encrypted:	false
SSDEEP:	192:wx46x27I7L8lRcTx3HCHBDA3B6VHj6V+Jcj:Ktv8lROx34ZA3B6VH+kO
MD5:	5D71229F6CA9EBFF5F7972F01B547C7C
SHA1:	4D71B33506E6F0EBA1C783DE37E36480F2E392BE
SHA-256:	ABC0FA95B72F082CF4FBB18267CDBD282F2909B65B1B479D7F339DB41769946E
SHA-512:	31915EB859D432D714CAA2DFF74B7E760DFFE3A672CD872EB8CF07EDDC3B544578640C315CD47802B34F4BF06B31D290C9CBEAB228BC1FA64BDAF36DC523273A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............y.'....IDATx^.....y.....)...5..MT....6./..f.m,@......W.A...o&..$.Q."7............ 0k.VdI..VL.`...w.k\|;...u....=.sf.~....s.9g/w..9.<.93..".H$]]..ttt......7g.ys.0}zg..3u....E.$C...G....\|'N...jk.f.....i..X0....X8....C....^;v..:..:.a.m....rz.x<..c..q..>..S...t.s....<...o..Cw.y......<x...*....6e........3.._..9H.f..}.._......m.F.#.Wd...(.J........\|yB....\|...+."O+.B.=..^.6-cK...\|./.t..m .f._...F.E.oum\..>.7l..l.<.f..[.H.mZFiC...-_..#....[.d..{........Z.~dd.......t.../`S.^.z...........-....Gm...n....m..2...#n!%..Ci.j..t....7..M...........8t.......^..h..d..]a.....K....L.....x6\|6xM.s.M.../.]...=..........<4..l.......e......>J1.....D.;w.\|..fY...x........m....W.+...9.Q>S.l..J.U.f0..._Z..Y....._s.O..!.2....u&..zo.z.-..>S..p....... .....x=u..2.M.jGb..G9.V.<;d."x@...@.......c.f.p......5....ZQ..8].<^.)c..f(.W....[...^.....gCW&.$i...I.&x.0.~8..!.x.t../>.c..:.(..cN..]XD..-...gk{.gCW9....<.'.l.... ..v.........<.....).

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3202
Entropy (8bit):	4.236796532981122
Encrypted:	false
SSDEEP:	96:1I7uAxrF5zHeZ2lLBUaaJP/DBzaJIQiSJTEm:mxrvlqaaZ/xaxi6TEm
MD5:	7D2B8F25545A2894E2721E9FE528E34C
SHA1:	D0DAE76F4BF5C04ACD5FCDF1BCB12908099E328C
SHA-256:	797BDA35D13E5130FE5A14E0069C31B46EC1AF6EA47F2D300309803BB4D2608C
SHA-512:	FE1F84AF0BA1100B2A90EE6FBFBD3763EF34D1A3BF045345538302ECE7D37EAADC9A9CD0E09C2030E62B13A55E118A2417B27F14336C271758BFB3E256906385
Malicious:	false
Reputation:	low
Preview:	<svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg">..<g fill="none" fill-rule="evenodd">..<path fill="#737474"..d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.06-.81h.05c.1.47.2.83.28 1.07l3.78 9.16h1.42l3.75-9.24c.08-.21.17-.62.25-1h.05c-.05.92-.1 1.76-.1 2.26v7.98h2.17V4.2h-2.96l-3.23 7.88z"../>..<path d="M0 20.96h98.15V0H0z" />..<path fill="#737474"..d="M42.87 16.75h2.11v-9h-2.11zm1.08-12.82c-.35 0-.66.12-.9.35a1.17 1.17 0 0 0-.38.88c0 .35.12.64.37.87.25.23.55.34.9.34s.67-.11.92-.34c.25-.23.38-.52.38-.86 0-.34-.13-.64-.37-.88a1.26 1.26 0 0 0-.92-.36m8.53 3.73a5.9 5.9 0 0 0-1.19-.12c-.97 0-1.83.2-2.57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03.54a3.12 3.12 0 0 1-1.01.2c-.83 0-1.5-.26-1.98-.78a3 3 0 0 1-.73-2.14c0-.9.25-1.65.76-2.2a2.6 2.6 0 0 1 1.98-.81c.7 0 1.38.23 2.02.7l.09.06V8.01L5

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2309
Entropy (8bit):	5.3010790730841855
Encrypted:	false
SSDEEP:	48:EqQWqoCNWqoJTY4TbiNWqoaNWqonNWqoPNWqoqrogAd7fG81n791RapkHTKNqMx4:hQWqoeWqojb+WqomWqoNWqoFWqouAG8N
MD5:	D2F3A9BF52D5E478DF1367B09FD57078
SHA1:	4536D25D2EABAA1FAA3C992E669908CDF5D16742
SHA-256:	5DDDDA1EDF95993F9DC571CF15DE6D81475D604E7FF46CCF3A7312830A76B01B
SHA-512:	83634906EEE41D41935FFFC917B825B6E0EE5A66D1E70A0C43D26404F5EA82133B456A4A7D7A65F27E71FE9C58099F9C58F2720F810BE434E4C7C2533F792B5D
Malicious:	false
Reputation:	low
URL:	https://www.onenote.com/officeaddins/learningtools/?et=
Preview:	......<!DOCTYPE html>..<html lang="en-US">..<head>...<meta charset="utf-8">...<title></title>......<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/CommonDiagnostics.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/BrowserUls.js" crossorigin="anonymous"></script>.......<script>.....var EnableClientSideLogging = true;....</script>......<script type="text/javascript" src="https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/ExternalResources/js-cookie.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/pickadate.min.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/Instrumentation.js" c

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Category:	downloaded
Size (bytes):	19181
Entropy (8bit):	4.3590974373798
Encrypted:	false
SSDEEP:	384:im1leaXgjDSEcE+fg1gKzqF9meWFaUOKco5FXp/kf/oezD:b1leajD0kiDlgMJkIy
MD5:	D9604CC18F364A6ADE707B7FAAEC642C
SHA1:	F38F0B94764184D4373886FDA1CA87D352BFCE5A
SHA-256:	F282423F48F12F56419363384F3B10002C8D3D106BC1AC8FF721602AA2B2FD9B
SHA-512:	7B305607B79F077539E3C37CD46EAFBB9E4C9B2A8825217187515CD20FFBFE204BAC43E918CD4440EB65A3A2DCFFC4140D06B43845613D48566448765B3D5DF4
Malicious:	false
Reputation:	low
URL:	https://onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
Preview:	.var AutoCorrectList={"(c)":".","(r)":".","(tm)":".","...":".","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"accommodate","accordingto":"according to","accross":"across","acheive":"achieve","acheived":"achieved","acheiving":"achieving","acn":"can","acommodate":"accommodate","acomodate":"accommodate","actualyl":"actually","additinal":"additional","addtional":"additional","adequit":"adequate","adequite":"adequate","adn":"and","advanage":"advantage","affraid":"afraid","afterthe":"after the","againstt he":"against the","aganist":"against","aggresive":"aggressive","agian":"again","agreemeent":"agreement","agreemeents":"agreements","agreemnet":"agreement","agreemnets":"agreements","agressive":"aggressive","ahppen":"happen","ahve":"have","allwasy":"always","allwyas":"always","almots":"almost","almsot":"almost","alomst":"almost","alot":"a lot","alraedy":

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.708048150071232
Encrypted:	false
SSDEEP:	3:HyjJTzMKHJu:HyjNz5pu
MD5:	435B48C70ACA2DC80F8B34B5FDEB2789
SHA1:	FFE2C8567607568F939FA1A6F9888639B98B400C
SHA-256:	6468AC9F9BCA964F3910FC967B80781C1C8634300E36F95AE49056D91A2734BF
SHA-512:	5C73531F908067B986F4F7F1BB423DC6FC4B1CDC9A6C65205658BD2A2499CB53F0F1C4EB928B8B87B189D969C3769F9D97EA5AB1CEA97FE6F18D2DD4AD583C60
Malicious:	false
Reputation:	low
Preview:	The service is unavailable.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	112261
Entropy (8bit):	5.13097356220368
Encrypted:	false
SSDEEP:	1536:F3aTm6ALG5SH04NcnOxtCDpdziaoIl3fKF1cEilqVcAd:wa+nuE2aoIl3fK4lCc8
MD5:	1DC889AC693F912C263AA6D27A258A93
SHA1:	B2100EA2AEE5ED5FD90E0331F26160CDD5D1B002
SHA-256:	9224E5240ABC039D55CB765EA6611F07BA95F5E59C05DA325C968470946C6E52
SHA-512:	49654A757D9C5CFD838848AF856B2A0D9FE9960CEED297E4244F948E42441506B7502DBED1236448BFF09EF4444FDF20A25197DC7E55FC4394EB2ED70CB1B0ED
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/onenoteink.js
Preview:	var onenoteink;(()=>{"use strict";var t={699:t=>{var e,i="object"==typeof Reflect?Reflect:null,n=i&&"function"==typeof i.apply?i.apply:function(t,e,i){return Function.prototype.apply.call(t,e,i)};e=i&&"function"==typeof i.ownKeys?i.ownKeys:Object.getOwnPropertySymbols?function(t){return Object.getOwnPropertyNames(t).concat(Object.getOwnPropertySymbols(t))}:function(t){return Object.getOwnPropertyNames(t)};var o=Number.isNaN\|\|function(t){return t!=t};function s(){s.init.call(this)}t.exports=s,t.exports.once=function(t,e){return new Promise((function(i,n){function o(i){t.removeListener(e,s),n(i)}function s(){"function"==typeof t.removeListener&&t.removeListener("error",o),i([].slice.call(arguments))}g(t,e,s,{once:!0}),"error"!==e&&function(t,e,i){"function"==typeof t.on&&g(t,"error",e,{once:!0})}(t,o)}))},s.EventEmitter=s,s.prototype._events=void 0,s.prototype._eventsCount=0,s.prototype._maxListeners=void 0;var r=10;function a(t){if("function"!=typeof t)throw new TypeError('The "listener

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	5.696679956038459
Encrypted:	false
SSDEEP:	12:HarRMs0pTestEsVEsl3Est3EshEsZ9NMzrI3TjEEofVcQ72TVkI3TjE:Har2nTeUEME23E+3EoEQ9NFj6kbjE
MD5:	648AD2F7EEA95A9B5491DCD2203B2F54
SHA1:	5FFA99938410AEBAB10B32308F242437B9432B53
SHA-256:	A3596C17DAD9A003D0BFBE0B7BA6765F51391B5C3943660316F01C8E77B323DB
SHA-512:	F7984FFEAEC122EFCBE36218979BB4C35E27007CC091BA5A8829BA5088999A3F9F7A7D5E11D90A05904D58644EC0B4E5EE1D57C68DD5270B7F456A762D8D699A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/progress.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.................0.+......H.....V..!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,..............z...cr...!.......,.................dp.,.....H.....;..!.......,..........2......dp.,...QP.Td......F.[...v..?y...."......!.......,..........0......dp.,...QP.Td..........gO:.......Q..!.......,..........*......dp.,...QP.Td..........g.\|.}.)..!.......,..........&......dp.,...QP.Td............>..!.......,..........#......dp.,...QP.Td........L.6V..!.......,.................dp.,.....H.....;..;

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56400)
Category:	downloaded
Size (bytes):	196451
Entropy (8bit):	5.094227457998596
Encrypted:	false
SSDEEP:	3072:Vz+QUHHofsFheyK+cJTbeR1Xz2QZoK5fMOKkvBoKrpQmK4Zbwmk29XOUO+vNCYza:Vz5uezWHXz26oK5fMOKkvBoKrpQmK4ZM
MD5:	7982A52314A0AD58CF994F9D70636C8C
SHA1:	C5855D4295FE09D18E8EFC9B2CF6B1B2064087C9
SHA-256:	F725226563E78A9522DC23A877AEBCF028710D23CCA1E320C1F822A32F64D0B4
SHA-512:	E01EB004824EF31A028B6E44925DAA55683184B267C4CC26192A54AE46F958D610ED91DB7755563CB66FCE59CA793AE40CC22AE04BFCF89C647D737E19900B37
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hF725226563E78A95_App_Scripts/1033/common-intl.min.js
Preview:	var CommonStringsEnum,CommonStringsArray,CommonStrings={qpsPloc_Name:"Pseudo",qpsPloca_Name:"Pseudo (Pseudo Asia)",qpsPlocm_Name:"Pseudo (Pseudo Mirrored)",afrikaans:"Afrikaans",albanian:"Albanian",alsatian:"Alsatian",amharic:"Amharic",arabic:"Arabic",arabic_Algeria:"Arabic (Algeria)",arabic_Bahrain:"Arabic (Bahrain)",arabic_Egypt:"Arabic (Egypt)",arabic_Iraq:"Arabic (Iraq)",arabic_Jordan:"Arabic (Jordan)",arabic_Kuwait:"Arabic (Kuwait)",arabic_Lebanon:"Arabic (Lebanon)",arabic_Libya:"Arabic (Libya)",arabic_Morocco:"Arabic (Morocco)",arabic_Oman:"Arabic (Oman)",arabic_Qatar:"Arabic (Qatar)",arabic_Saudi_Arabia:"Arabic (Saudi Arabia)",arabic_Syria:"Arabic (Syria)",arabic_Tunisia:"Arabic (Tunisia)",arabic_UAE:"Arabic (U.A.E.)",arabic_Yemen:"Arabic (Yemen)",armenian:"Armenian",assamese:"Assamese",azerbaijani:"Azerbaijani",azerbaijani_Cyrillic:"Azerbaijani (Cyrillic)",azerbaijani_Latin:"Azerbaijani (Latin)",bangla_Bangladesh:"Bangla (Bangladesh)",bangla_India:"Bangla (India)",bashkir:"Bash

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59654)
Category:	downloaded
Size (bytes):	59697
Entropy (8bit):	5.304306597777701
Encrypted:	false
SSDEEP:	1536:k+fzrepwrwLtneKYK9QkqoJTIL5I6iN8p2Li:k+qZDv9QFos5piCL
MD5:	F388E6D2859F4532C2B4F23E3D579853
SHA1:	58B698DE8680E34B83F8635CB4B8612E637F1D1A
SHA-256:	347BF1667EC71DE0FDBF07E5D1477A624117DE972509C5E511D10739E55454EA
SHA-512:	9D5B61A209CCFA2602C4FE5DEC0EE5FD87E09E7D424FD41E67F3CEA348F393B35B63C399500557078126BD2FFAB383B7A1DBF66B6F5CBEC6EF8D816F621FB723
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h347BF1667EC71DE0_App_Scripts/wp5/wacBootNew.min.js
Preview:	var wacBoot;!function(){"use strict";var e,n,t={29:function(e,n,t){t.d(n,{ZT:function(){return o},ev:function(){return r},pi:function(){return a}});var i=function(e,n){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,n){e.__proto__=n}\|\|function(e,n){for(var t in n)Object.prototype.hasOwnProperty.call(n,t)&&(e[t]=n[t])},i(e,n)};function o(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function t(){this.constructor=e}i(e,n),e.prototype=null===n?Object.create(n):(t.prototype=n.prototype,new t)}var a=function(){return a=Object.assign\|\|function(e){for(var n,t=1,i=arguments.length;t<i;t++)for(var o in n=arguments[t])Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o]);return e},a.apply(this,arguments)};function r(e,n,t){if(t\|\|2===arguments.length)for(var i,o=0,a=n.length;o<a;o++)!i&&o in n\|\|(i\|\|(i=Array.prototype.slice.call(n,0,o)),i[o]=n[o]);return e.concat(i\|\|Array.prototype.slice.call

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29822)
Category:	downloaded
Size (bytes):	383273
Entropy (8bit):	4.836397490221171
Encrypted:	false
SSDEEP:	3072:ps7J1FkJ1F/YDP3VeftWqldpPkTGzHx1AHLRobPRGe+Wqddp4sXfsXJsGC7ag/2v:CV1FJVJGDZxg0Gfbje
MD5:	57A624C6D2503951996514B03C52E88E
SHA1:	5DA0241C2FF7AE28FA4B2FA5D72A5783F0EF3073
SHA-256:	1D8003C112164B52A832117F0655880ED7FFA451F346392B5CB6272959FF1034
SHA-512:	A76922D1C0C37E905640D8DFBD8E17FD091DC4F19E7164EFC45106D22A0AC243E14F302EF0C08CD120FA8F21D9DE1B031A1B0FC9581C10C45B4319715DE0D6D3
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/onenote-ribbon-intl.min.js
Preview:	var OnenoteRibbonStringsEnum,OnenoteRibbonStringsArray,OnenoteRibbonStrings={About:"About",AboutKeytip:"D",Accessibility:"Accessibility",AddInsKeytipPrefix:"Y",AdditionalControls:"Additional Controls",AlignLeft:"Align Left",AlignLeftKeytip:"AL",AlignRight:"Align Right",AlignRightKeytip:"AR",AltText:"Alt Text",AltTextKeytip:"E",AltTextTableStandalone:"Edit Table Alt Text",AudioTabTitle:"Record & Playback",AutoCorrectOptions:"AutoCorrect Options...",AutoCorrectOptionsKeytip:"AC",Automatic:"Automatic",AutomaticKeytip:"A",Back15Seconds:"Back 15 Seconds",Back15SecondsKeytip:"B",Bold:"Bold",BoldKeytip:"1",BrowseVersions:"Page Versions",BrowseVersionsKeytip:"V",BulletLibraryTitle:"Bullet Library",BulletStyle1:"Solid",BulletStyle1Keytip:"S",BulletStyle2:"Hollow",BulletStyle2Keytip:"H",BulletStyle3:"Square",BulletStyle3Keytip:"B",ButtonOfficeAddins:"Office Add-ins",CentimeterUnitPlaceholder:"{0} cm",Checklist:"Checklist",ChecklistKeytip:"CL",BulletedList:"Bulleted list",BulletedListKeytip:"BL",

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11667), with no line terminators
Category:	downloaded
Size (bytes):	11667
Entropy (8bit):	4.97980937003193
Encrypted:	false
SSDEEP:	192:cHGtlNF+JzgGuA3pNvWAPsYmiT398yRFXiBpiiBlVIkslsunbe4uGfEinAMj9fsh:T/kpldNhVVimx+8mkKDypJBJeJjxQSlT
MD5:	A1D892F1368C7F3B1DFB75057B936B66
SHA1:	91EC4980BFA5B301199B574E6240A618247679F9
SHA-256:	2DB70125E37F651D09A6D03D593A65E09668E6267CCA1257251328517F7EAEFC
SHA-512:	F2834E3B673CF7BFBABF9A92A0D4524F5696996CA67EBD6605F08206C95C3DCCE3AB95E4297452186074EB92827BFA4D811A61959EBA60544393BA14F4C7A3B9
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/osfruntime_strings.js
Preview:	Type.registerNamespace("Strings");Strings.OsfRuntime=function(){};Strings.OsfRuntime.registerClass("Strings.OsfRuntime");Strings.OsfRuntime.L_ActivateAttempLoading_ERR="This add-in may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateAttempLoading_ERR_FirstParty="This feature may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateButton_TXT="Start";Strings.OsfRuntime.L_AddinCommands_AddinNotSupported_Message="Your add-in manifest is not valid.";Strings.OsfRuntime.L_AddinCommands_LearnMore_Link="Learn more.";Strings.OsfRuntime.L_AddinsCatalogIframeTitle_TXT="Office Add-ins catalog iframe";Strings.OsfRuntime.L_AgaveActivationError_ERR="Something went wrong and we couldn't start this add-in. Please try again later or contact your system administrator.";Strings.OsfRuntime.L_AgaveActivationError_ERR_FirstParty="Something went wrong and we couldn't start this feature. Please try again later or contact your system administrat

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	124426
Entropy (8bit):	5.305133634377139
Encrypted:	false
SSDEEP:	1536:7GcYamNziXSDZ+w5uE2Bg9cFegKF1TA0So4RNRduCzEdb4u0xG1hlHpw:ycYamNOw5Kg9+z0GRNRdunNrvw
MD5:	9ABDF1AF6CECCDC2ABBF114766B1FC12
SHA1:	DB73D1174C47C9BCA61F14007DCA32D0B167215F
SHA-256:	892E3D437217BF722C9BCC7C7BDEBEDFB4A367815D885C88E0F581D056869F3B
SHA-512:	A420273E8D84EA3835A18BA992E5216A75C97B90EE0E71665430C63D8322F9EBC58FD13845B984D40A2E15EFD888CA530C89FE665FFDE36269250B3DFD1ED86E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
Preview:	(function(){function getAugmentedNamespace(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r}var lib={},extendStatics=function(e,t){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},extendStatics(e,t)};function __extends(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function r(){this.constructor=e}extendStatics(e,t),e.prototype=null===t?Object.create(t):(r.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3454
Entropy (8bit):	4.354464593087592
Encrypted:	false
SSDEEP:	96:N/fGFSxPHM1Rh7lE2D5UBTmhI4X3owG39VoP:N/+FkH+PV1STMGVI
MD5:	7E9DFA9C57F2668D23297D0708929595
SHA1:	8B9093736248267BC26A5775ADB42F6A4112B7F7
SHA-256:	CBF62D8DFF888EE1D57726CD8C7525F55CE4846A50C3956E9A04F17F4FC8D861
SHA-512:	36EFF5E19D818661C721715FB46C9F889F41A65EDD31BC83DDCD802E0BED2F59236D6E1AA40CC52054278F4CA905BAF6E7D018783F90AB7D98F1A47ED6CB1346
Malicious:	false
Reputation:	low
URL:	https://onenote.officeapps.live.com/o/AppSettingsHandler.ashx?app=OneNote&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&build=20240421.7
Preview:	{"timestamp":1714045829576,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"BB46AA47C239D54223A049EA42FF1E429533F0DD","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	4963521
Entropy (8bit):	5.686676687976095
Encrypted:	false
SSDEEP:	49152:nMo7hPFx2pEgMDr2tuQsnDTHg2NcKYPt3uVaZN6RlwmCwpKbccH8zodsfclXoF+X:SgUKAA/AWGgc9
MD5:	09628BDC43A64012041C9AD361B5EA02
SHA1:	5DDEE6822687822B71EEE2D7E24A41382A79F2F8
SHA-256:	52C335E6448447C315E216B77E5E362075D7419BE5808F01D0F31E4EDD865508
SHA-512:	B23C7ED495DECFB1E4DCAF5E01DFB92D41695D0B9C6C828D9434A432F4CE748AD904733DE858CACC0748CB4927A1B3A6CDD28CCBBA37063019443A8E65C2200A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h52C335E6448447C3_App_Scripts/OneNoteDS.js
Preview:	/. The buffer module from node.js, for the browser... @author Feross Aboukhadijeh <https://feross.org>. @license MIT. ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> https://mths.be/punycode v1.4.1 by @mathias Copyright (c) Microsoft Corporation and contributors. All rights reserved.. Licensed under the MIT License.. ************************************ !\. ! ./lib/generated/qosWac.gen.js !. \********************************* exports provided: QosPillarName exports used: QosPillarName ******************** !\. ! ./lib/index.js !. \******************** all exports used ./generated/qosWac.gen */.'use strict';function jg(Ga){var cb=0;return function(){return cb<Ga.length?{done:!1,value:Ga[cb++]}:{done:!0}}}var eF="function"==typeof Object.defineProperties?Object.defineProperty:function(Ga,cb,V){if(Ga==Array.prototype\|\|Ga==Object.prototype)return Ga;Ga[cb]=V.value;return Ga};.function fF(Ga){Ga=["object"==typeof gl

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	228988
Entropy (8bit):	5.642035224957992
Encrypted:	false
SSDEEP:	3072:nxtxVjl82LnmPjGd9idRqvmYgY8JZZHSlGXndhmodXhQLtKocU:nxJl82iGdw+mYgYUZUlbCGbP
MD5:	8411B8FAA6FE12A844BC6831151C9BE6
SHA1:	8D8530D65BB43557D8C10EA4B02DFC1D05C4DB7D
SHA-256:	846B81D8B8F6B20E0CD085B2CC432472AEB0EEE730B5AC7C3DDBC3C51EA4A2D5
SHA-512:	2E6E251C50FCFD9D68DC77AC01A2902BF5448DC44BCFA52BC82226F9BEC4C54E7908E455AA5FC4FEA43B4A44801A29BC45988810E8514F09873AA3EA086C47E4
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
Preview:	var TellMeModel={"m":{"":76},"t":[0,7,7,7,7,7,7,7,7,7,7,7,7,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,6,6,6,6,6,6,6,7,2,10,10,10,7,4,4,4,4,4,4,4,4,4,4,7,7,7,7,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,7,7,7],"n":[340,427,430,433,436,439,442,446,449,452,455,458,461,464,485,514,523,532,541,554,567,576,585,594,603,616,629,642,655,668,681,690,703,716,729,738,751,764,777,790,803,816,829,845,863,887,911,932,961,982,995,1008,1028,1049,1059,1069,1090,1099,1109,1118,1128,1138,1159,1193,1198,120

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6140
Entropy (8bit):	7.86318803852975
Encrypted:	false
SSDEEP:	96:JCXCuvaxrUZXtOVVLMtSqdyZ7x5rY4gby5cR+YBaB7W+Nf9XF5Qfhl4/t5K:MMr7AtaZ7fY4f5I/qRf9V6hSl5K
MD5:	2443F04DFD8CE58264835F7CD477799C
SHA1:	E798EF676A42AA8F723246C95FA6A918010223B2
SHA-256:	77DD1463FE34BE51528C6535C5AAF5590EE90BBD3B76AE8E362657C45E9F90FD
SHA-512:	2668E7EEFF653ECDEF04058FDC43328A80F297EE601839737F35A860737DAD438B03298C1A452E83DAED31DDDA540F7F065FE8F22FB05FC150A9FEAB08FFC91D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/moe_status_icons.png
Preview:	.PNG........IHDR...R.........m......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400" xmpMM:DocumentID="xmp.did:98155F5CD83911E1ACDEFDB8BE9BCEAA" xmpMM:InstanceID="xmp.iid:98155F5BD83911E1ACDEFDB8BE9BCEAA" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09F73A8D39D8E111AE39EC2BD256A3F2" stRef:documentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.[...,IDATx..........{....a.... .<c......3.....

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64762), with CRLF line terminators
Category:	downloaded
Size (bytes):	790673
Entropy (8bit):	5.249803007697341
Encrypted:	false
SSDEEP:	6144:/19A7TezQ8NPZkKhCdbzgEmyOZJF+/FQDR7g6R5obeh:V1ZkKh3DFlf
MD5:	20186C81BA0040A4F3E73E8FDCBAB617
SHA1:	94F6501BE2B6890F8610C5665BA179C7D08D2A6C
SHA-256:	4BDAD68BD03D33EC04F2A39CCBB29529D0D0C5D5B4498EE242E2EE25252585B0
SHA-512:	CBC9FD5E0A8DCF43E591F514FF9521127480FDC97512A2C47A638C40A0BEC36722EE0F58414AFC0DBE3A792EC4F1882D3F84230B9C3DE956338937EB08B3816D
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/onenote-web-16.00.js
Preview:	/...Copyright (c) Microsoft Corporation. All rights reserved.../..../...Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md../..../.. @overview es6-promise - a tiny implementation of Promises/A+...* @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)..* @license Licensed under MIT license..* See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE..* @version 2.3.0..*/......// Sources:..// osfweb: 16.0\16.0.17615.15000..// runtime: 16.0\16.0.17615.15000..// core: 16.0\16.0.17615.15000..// host: 16.0\16.0.17615.15000........var OfficeExt,__extends=this&&this.__extends\|\|function(){var e=function(t,n){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10290
Entropy (8bit):	4.837717444305284
Encrypted:	false
SSDEEP:	192:iAY/Yye00RR2WxnYkSSWmcrKnmuV2UmHPRmCHpoRqiKaUVIv4DLhBA:w0RR2WxnYk5Wmw8ipo0Hu
MD5:	4DF9B0011F8AE623E26116BC635CFB36
SHA1:	0D68BBCB58D190F6E2803043A1823A3826325F33
SHA-256:	47D6DBDB766BD7EA675F68A5CE5A22654554001EFC7007A0B8C484069D9E2638
SHA-512:	3BD8C4FDCC43199DB8D4EA1E668495837AF3931EAD7EA4AC16D775D3FBDF3BC35833CF2DF86BE8492EDC82090A1ED2B79A4DC3233BC3FD064F7C46424B403745
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/moeerrorux.css
Preview:	.moe-infobar-body {.. background-color:#FCF7B6;.. border:1px solid #D9D98B;.. position:relative;.. max-height:110px;.. overflow:hidden;.. white-space: normal;..}.....moe-infobar-body:hover {.. background-color:#FEF294;..}.....moe-hovered {.. background-color:#FEF294;..}.....moe-infobar-infotable {.. width:100%;.. height:100%;.. max-height:110px;..}.....moe-infobar-top-left-cell {.. width:30px;.. min-width:30px;.. max-width:30px;.. vertical-align:top;.. padding:1px; ..}.....moe-infobar-message-cell {.. padding:7px 7px 3px 0px;.. vertical-align:top;..}.....moe-infobar-top-right-cell {.. width:20px;.. min-width:20px;.. max-width:20px;.. vertical-align:top;..}.....moe-infobar-button-cell {.. padding:0px 10px 6px 0px;..}.....moe-status-warning-icon{.. position:absolute;.. clip:rect(0px 42px 41px 0px);.. top:0px;.. left:0px;.. .. .. .. .. .. ..}.....moe-status-warning-icon_ie{.. position:ab

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2944, version 4.30147
Category:	downloaded
Size (bytes):	2944
Entropy (8bit):	7.701609844461153
Encrypted:	false
SSDEEP:	48:3bH18jve96elI+0EqyTxBd9iAfZ5bu5oopTBvuF0nYwH22sn8feoKs:LVuvKLlIQqi9iAPNo72e2fnuIs
MD5:	569A610DF4FD269FAA528A2197DFAA9A
SHA1:	CFC7596B939A341C5DDFFC53CFD607745AF18E8F
SHA-256:	09A1411BF361D3D649F4FF5098E0197510232477BF099872F58F5D1EC483E9AF
SHA-512:	EBD67AFCF7779E4700A5441548E3090FF2B17D4D6176160A21C0BB7F72605B6C082294A2A4CED484945685EBF33210FC883AF2AFC18948F7A8C2E62C1A53E242
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
Preview:	wOFF..................u.....................OS/2...D...H...`1Y{.cmap.......N...j.F.@cvt ....... .......fpgm...........Y...gasp................glyf.......]...0\.+Hhead...X...2...6.c..hhea...........$....hmtx..............Eloca................maxp........... .%..name...............Spost........... .Q.~prep............x...x.c`a..8.....u..1...4.f...$..........@ ...........<...!$.X............x.c```f.`..F..H....\|... ........\......./..<....../.N..z.....jPs..#.......L....x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..SML.Q...?..,.P-..I..=...4.R....`j4-Q.F...5...h.?$......z.Gc.h.r3.D=..n\|.RR..a....L.{.f..I...w......iu;..I2.}.<.......[l.......(,..g`...`u....q..."G.yW.."nQ.P(...[....p@..P...-b.CA.z8.zD..CW=/x..... U...F.$..%"...(aURI.UNE

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1115
Entropy (8bit):	7.474905425501729
Encrypted:	false
SSDEEP:	24:OQkGe2gKOcQO9S80Axzhkzc7iFTZkqeNblj5ILlN0EFgFahPKN7FqP8:OQkRrTCbxzwSiZLCN52TFgM5KN7Fp
MD5:	084E7612635DFCF69A16255B41E70CAA
SHA1:	0D9721AA70B01487D3340B864C0BD49FB1D95206
SHA-256:	7B389747818635BCA6FE76F5E3226EDA36AF53D8F27526796BC975EBD440A395
SHA-512:	A0104DBB40429BCA5F54061CE6D36A695283D883CE1B732CA87A30743234D29BEBA07A0100DE0DE0B274A70C8C7C289574F6343DF16C3E4C7B6453F60E8737B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.k.A.....@ .6.* ..H...R....V....l.! X..Z..Z..... X... .. .{.^fw...{.fv..70.~..\|........ .. .. .. .. .. .. .. .. .. .. ..3.8.1q....(.&.....B.o.."w..Y.....]......~0N0....]..z....\|.n........_..O...9..8@..K./..%..[..LQ.rm:.H.>...-..;,...9.G.n....`.{..-.F...'.?...y..]H..o{y..#.....]..x\|...K.(x\|p~.....r..R..~\.2.Y...f.Q..i...o...r.........Gc..Bp.Ol..\(...~.T...,....j.O.(e......j(e. ...Z....Rf......j(e. ...Z....Rf......j(e.....D.,Y.....~..n.[.........PA....]....0.mK...sE.........J~}z[.!n...RV\|.#.......7s.......)B.e;j2.........tX..k.....o.V....j.k3A........9..?R....Z....5t..j....f.Z.....E.L....J..7.}Uk.......H..i.Z...1...x$....]<I.......#ixw..h.h.h.a.4....9.&.v.....2i..D..l...'.-.+.._...eLZ...M..x..1%.g....'A..X.....jkK.^W.}.m...T....\|...._.^.[..~u'...mco.8...nT....d.m.I.b..M.4...s.U.;Yu...k.1\|..93a..(M..2..U......B..S..O...........c.......?)....iz.D...T.D!....R

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836)
Category:	downloaded
Size (bytes):	1881
Entropy (8bit):	5.240295794440103
Encrypted:	false
SSDEEP:	48:TsP2KLZc8PPMjYjrdUKwHuhGLYhM3IH9sWYhCt:TsxZ58YjxmuhGLYWIH9sWYhCt
MD5:	084F31B82B9CAA4C19BB5E468EE523DB
SHA1:	02373D5157ADA9880282B898D8C77382BC462584
SHA-256:	105CBA6E384214824A1D5FABA0EF580DFC31E5F691908ECFDCD39929EC92C26F
SHA-512:	513DC3FA4C79CAABF284532F7BEA3B48B33FABCCBF7395E44758BEADC6CD0A67767C146464BD0F61BDD2852737758A55352464E25D2E83D11B15335B6F0CD0A0
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/uiFabricLazy.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[234],{89290:function(e,n,t){t.r(n),t.d(n,{Callout:function(){return i}});var o=t(87925),r=t(26410),a=t(13402),u=t(88527),i=r.forwardRef((function(e,n){var t=e.layerProps,i=e.doNotLayer,l=(0,o.__rest)(e,["layerProps","doNotLayer"]),s=r.createElement(a.N,(0,o.__assign)({},l,{doNotLayer:i,ref:n}));return i?s:r.createElement(u.m,(0,o.__assign)({},t),s)}));i.displayName="Callout"},57456:function(e,n,t){t.r(n),t.d(n,{ContextualMenu:function(){return p}});var o=t(87925),r=t(26410),a=t(2823),u=t(53242),i=t(65734),l=t(54347),s=t(41809),d={root:"ms-ContextualMenu",container:"ms-ContextualMenu-container",list:"ms-ContextualMenu-list",header:"ms-ContextualMenu-header",title:"ms-ContextualMenu-title",isopen:"is-open"};function c(e){return r.createElement(m,(0,o.__assign)({},e))}var m=(0,a.z)(i.MK,(function(e){var n=e.className,t=e.theme,o=(0,l.Cn)(d,t),r=t.fonts,a=t.semanticColors,u=t.effects;return{root:[t.font

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1209046
Entropy (8bit):	5.504567668728577
Encrypted:	false
SSDEEP:	24576:b6mu52VOoaLB9OYA1HsWbJTLet10Afd4SVba0i:+mm28DLB9OYA1HsWbJTLet10Afd5Vbc
MD5:	EAD18F616F6257FEAD370565146EEDB2
SHA1:	DED78B22FAB29156C07C0A97A805FE6E2414FCA4
SHA-256:	E2A655E5AB068FA502A27FEC0A60993602804C4C47AFF1C73D55B6D12F56A471
SHA-512:	7456278142B38EED73F9A129F0B673A7E6FA97A2C0899990C5BD62F760DBABF91FC76F68DEE5FA2429BB77C5B76B6225DDD0D94555AF566A768D2836971807CB
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/common50.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[503],{65670:function(e,t,n){var o=n(93556),r=n(78267)(o);r.push([e.id,".navPane__notebookArea___Bt0Ra {\n background-color: #ffffff;\n display: flex;\n flex-direction: column;\n height: 100%;\n width: 200px;\n}\n\n.navPane__oldmainArea___e6Kzp {\n background-color: #f9f9f9;\n border-right: 1px solid #d2d2d2;\n display: flex;\n flex-direction: column;\n height: 100%;\n margin-right: -1px;\n overflow: hidden;\n position: relative;\n}\n\n.navPane__mainArea___ve8sE {\n background-color: #faf9f8;\n border-right: 1px solid #edebe9;\n box-sizing: border-box;\n -webkit-box-sizing: border-box;\n width: 100%;\n}\n/* Fixes navpane can't be resized in IE11 */\n@media screen and (-ms-high-contrast: none), (-ms-high-contrast: active) {\n .navPane__mainArea___ve8sE {\n box-sizing: content-box;\n }\n}\n.navPane__leftSideShadow___duqBM,\n.navPane__rightSideShadow___X4xTt {\n background: linear-gradient(to

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	511934
Entropy (8bit):	4.390127024465993
Encrypted:	false
SSDEEP:	6144:kR4D+Nfr+F5b0IrwKc2byoWzJtdtUNabyoWzAC5RTMu:dD+Nfr6
MD5:	3C1E783F0DFE1A945B2122BCD2742E3D
SHA1:	E96DD43FFCC36189F40C03A0F1E445E6BB6264B9
SHA-256:	40437521ADBCD3146C3F602B43F94BC9020A1EB84559A7C9844070AA35AE557A
SHA-512:	8D29EC0C4807909AA24B125C711EF226DE663BE8646B493D19745354876680F8A61E3B4D1A0B9893BF6929FD05E32FFA4BE569909F5BC23748D48151E3B4107F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
Preview:	window.onenoteRibbonSpriteLazy={icons:[{type:"svg",id:"newdocument_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"},{type:"path",className:"OfficeIconColors_m20",d:"M 1685 1903 h -1320 v -1735 h 868 l 452 451 z"},{type:"path",className:"OfficeIconColors_m22",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"SectionTab_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"},{type:"path",className:"OfficeIconColors_DynamicColor",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"Table_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 102 102 h 1844 v 1844 h -1844 m 103 -1741 v 205 h 16

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.708048150071232
Encrypted:	false
SSDEEP:	3:HyjJTzMKHJu:HyjNz5pu
MD5:	435B48C70ACA2DC80F8B34B5FDEB2789
SHA1:	FFE2C8567607568F939FA1A6F9888639B98B400C
SHA-256:	6468AC9F9BCA964F3910FC967B80781C1C8634300E36F95AE49056D91A2734BF
SHA-512:	5C73531F908067B986F4F7F1BB423DC6FC4B1CDC9A6C65205658BD2A2499CB53F0F1C4EB928B8B87B189D969C3769F9D97EA5AB1CEA97FE6F18D2DD4AD583C60
Malicious:	false
Reputation:	low
Preview:	The service is unavailable.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=OneNote&version=16.0.17601.41008&language=en-US
Preview:	{}

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	89749
Entropy (8bit):	5.907896932868388
Encrypted:	false
SSDEEP:	1536:TF7qkDiiBSPqAYXUJqc9a/qc9aJyXUEUx:J7j7B4S6RaVC
MD5:	1BF11FC2DBDB5C48B7D60F5005583417
SHA1:	DF52B131F6B151E674204CBA77082EFAEFBC3F8C
SHA-256:	172E218E70CC419328B7AAB580615DA2A562E1508EAC9AC3014C52C51F2F50EC
SHA-512:	A40545B0B88AAF5EC4D28015B72451CE6F19073FC7E1CF6A8B08EEAB6D173CCE9E62553CACFDA7FE0FB4DDECB2E09E8B966C6466AE50AC31193481D82898ECB6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/Meetings_manifest.xml
Preview:	.<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">...<Id>90da59be-5361-4260-9218-2262af1dc334</Id>...<Version>1.0.0.0</Version>...<ProviderName>Microsoft Corporation</ProviderName>...<DefaultLocale>en-US</DefaultLocale>...<DisplayName DefaultValue="Add Meeting Details">.... START STRING LOCALIZATION REPLACEMENT (StringID: OfficeAddIns.Meetings.ManifestDisplayName -->......<Override Locale="af-ZA" Value="Voeg vergaderingbesonderhede by" />....<Override Locale="en-US" Value="Add Meeting Details" />....<Override Locale="am-ET" Value="..... ...... ...." />....<Override Locale="ar-SA" Value="..... ...... ........" />....<Override Locale="as-IN" Value="..

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 151924, version 0.0
Category:	downloaded
Size (bytes):	151924
Entropy (8bit):	7.996755078799659
Encrypted:	true
SSDEEP:	3072:izu4By5vR4gdzOjZHpybtAVOZ71Q1gcq0WTo7wSRhpFY/iw2yQ0X2+6L0aR/h:iznyHBmNMJcOd1ro719FY/ilyQ0Gp
MD5:	E80FF72E03E780056CFDBD85C63404CE
SHA1:	C450A1A6233F0FBC6DBFFB7FEE251E378F64EF32
SHA-256:	05828D625DCB5781D0A3CC67A2429CED535FDF848B8B8075D49751EB5B30C7AF
SHA-512:	D819D75CA896AF15F99185F87AF40A85A0FA6941B9E08974C6569123B601DCC8E043BE1C0F5C154E37A351A046B57D5196002B16FA7102761E3C0961D92CAC8D
Malicious:	false
Reputation:	low
URL:	https://spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
Preview:	wOFF......Qt................................OS/2...X...H...`JZ}.VDMX.............^.qcmap................cvt ...\... ...*....fpgm...\|.......Y...gasp...l............glyf...x..$...0.{.yyhead..7`...6...6%.d.hhea..7........$7.5.hmtx..7....M... .N..loca..<....q...D...maxp..K\|... ... .\|..name..K....8.......post..P........ .Q.wprep..P.........x...x.c`.`a......:....Q.B3_dHc..`e.bdb... .`@..`......os9.\|...V...)00......x...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...wx.....;..j..fwf....R. %.....4......"<.w..A.<..H.C'.E.E..

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4207), with CRLF line terminators
Category:	downloaded
Size (bytes):	4212
Entropy (8bit):	5.732834657954366
Encrypted:	false
SSDEEP:	48:Rm/hpTwpHpypYYqeQkpYYFNtjEYtDE0kypOKeklKVuAmM3oVKCM3j++j+xUJo8/q:iyzh0QYtD5o6Im+n36+jLXYKMVp/
MD5:	5780200B7FE28C3F2C46864A012246E5
SHA1:	03A13FDC8A8CC7DBECE15E23105EA6E870105133
SHA-256:	0EF96689F29280B58D5024539DFE352EC9DD520CA1EDA5E24F0AEBD31DE0A560
SHA-512:	4FCC868D4E3401728FE4AEBB2AF8D2DB937309EA98EB916E02CF85E61504170C5B7B62C3169D4BE130363552063B1232575CDD9863026CAB2816DA96BD03AD26
Malicious:	false
Reputation:	low
URL:	https://onenote.officeapps.live.com/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></title><script type="text/javascript"> var l_ErrorImageAlt_Text = "The service is unavailable"; var l_ErrorHeader_Text = "Service Unavailable"; var l_ErrorLine1_Text = "We are currently experiencing technical difficulties."; var l_ErrorLine2_Text = "Please try again later."; var l_ErrorHeaderStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 18pt; color: #444444; line-height: 150%"; var l_ErrorTextStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 10pt; color: #444444"; var language = "en-us"; function writeLocalizedErrorMessage() { getBrowserLanguage(); loadScript(); try{ if(window.parent.g_enableFramePageErrorReporting) { const message = { MessageId: "Wac_AppFailed", SendTim

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x16
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	0.3626382302432769
Encrypted:	false
SSDEEP:	3:GlFFHvDllfl/t+lVsu/jXpRq/uXJRi/uXZRi/uXJRq/uX3XXRLtutpaKsx67YTsD:Gl/qlOeTjq2Di2Ti2Dq2nBL4OxhG5
MD5:	04D59A1FFDA7020CBDA1BB9FCBF0BCA0
SHA1:	E0CACE5751F02AF9E12B3C066FFD542F3D12A279
SHA-256:	EDC250E23E06AE7D15C1C19FDF9C6759129796B0A2F76DC82DF665C823C7B495
SHA-512:	A997D4384DA8D401321C497F49F73F0C79C1815DFD8B679458385D4E4A8ED2F645DDCF940A9347EA35F2D7AD3EE710F06784E8E1B1461AB7E8633BFF0FE0A691
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43031)
Category:	downloaded
Size (bytes):	211427
Entropy (8bit):	5.523541165698391
Encrypted:	false
SSDEEP:	3072:EJoMo0fayfy3kwNtCrmDNZgrK65AtztWmBdLi6Ko8yVv:qo0yn3kwrCaNGrby/O6Ko8S
MD5:	0739FFD37DC4F7045EE5CCB28BBB50EB
SHA1:	8CA8A2B06E141E04B71CCB9527B5466433BAF94F
SHA-256:	353EF827F001602C515593219705891EC23056BB07B777681BE1C3CAA5FBE397
SHA-512:	74BAD9B01D78B65A018DA41D8DE9C12FBC3B3CEFEDB25BD42AB54B2384BCF650C140E7C77F9ED2C195E0173E7868818A94CA86523A665FBC30775E1686FD98A7
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_plus_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["plus"],{58368:function(e,t,n){(t=e.exports=n(47632)(!1)).push([e.id,'.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;border:1px solid hsla(0,0%,100%,0);box-shadow:0 1px 2px 0 rgba(0,0,0,.1);box-sizing:border-box;width:276px;padding-left:0;align-items:flex-start;margin:0 0 17px 16px}html[dir=rtl] .o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={margin-left:0;margin-right:16px}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=:hover{-webkit-box-shadow:0 8px 16px 0 rgba(0,0,0,.1);box-shadow:0 8px 16px 0 rgba(0,0,0,.1)}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=>button{min-width:30px;width:30px;height:36px;paddi

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28762
Entropy (8bit):	4.856187584721526
Encrypted:	false
SSDEEP:	768:86K6nH6K6ZG6K6Ez6K61R6K6nM6K6im6K6Af6K6lf6K6BQ6K6C76K6NQ6K6mH6KM:8nWnrnLnknTnynhn2ntnbnNn3ndnnnFo
MD5:	5FF7823F946ADD1C5CD2511388228AB4
SHA1:	63C2BFC8726D7636F062A62EB1449A09726FC21F
SHA-256:	EBD60AE07A535F1909E710422A25227DE62CC94A28EF191814B0E3B8884D2D6F
SHA-512:	0FAD52171DD6B171D51813321405B77F2C2421BC43DE40636A8E3F69103CE5E11D21762E36DDC6F3981F66454CE8835A6629CA418B4F5CF737EA9DFE7583420D
Malicious:	false
Reputation:	low
Preview:	{"dashboard":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/dashboard.en.bundle.js"},"version":"2024.4.18.3"},"groups":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/groups.en.bundle.js"},"version":"2024.4.18.3"},"app-mgmt":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/app-mgmt.en.bundle.js"},"version":"2024.4.18.3"},"esign":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/esign.en.bundle.js"},"version":"2024.4.18.3"},"viva-goals-organization-views":{"cdnUrl":"

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22115)
Category:	downloaded
Size (bytes):	22169
Entropy (8bit):	4.690753538260286
Encrypted:	false
SSDEEP:	384:eo3GO9OuOPgOyOKOEOuOjOeOsO6SOYOIOE:eoWO9OuO4OyOKOEOuOjOeOsOlOYOIOE
MD5:	30DBB6DD25AC6B7A50644E5D5C91E389
SHA1:	D3715AD1FD3DD491B9FB661C2FD4AABD65A2AC8D
SHA-256:	FB5DE37DFF795767AA4EC685C1B04F85022BB85EEF1531C6B028BA524037FB50
SHA-512:	BC89FAC4818CD8C8EDF7368D577460272508F907A8B69BECD3B7509024DCABF0E988DC11409C5B93A23A5B42FC896D8C9349BAA5F6C2CB2BEC57FA7DF5196705
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/onenoteloadingspinner.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[461],{34731:function(i,a,t){t.r(a),t.d(a,{default:function(){return n}});var x=t(85549),r=t(98303),e=new x.h("oreo-loadingSpinner"),s=function(){function i(){}return i.getData=function(){return new Promise((function(i,a){i(t(28132))}))},i}(),k=null;const n=function(){function i(){}return i.startAnimation=function(){var i=this,a="OreoLoadingSpinner",t=document.getElementById("WACPageLoadingIndicator");if(t){if(k&&window.clearTimeout(k),k=window.setTimeout((function(){document.getElementById(a)&&e.warningTag(591407137,"OneNote Oreo Spinner is active for too long ".concat(3e4))}),3e4),!this.spinner)return new Promise((function(x,k){e.infoTag(591407138,"OneNote Oreo Spinner is loading."),s.getData().then((function(x){var e=document.createElement("span");e.id=a,e.className="oreoLoadingSpinner",t.insertBefore(e,t.firstChild);var s={container:e,renderer:"svg",loop:!0,autoplay:!0,animationData:x};i.spinner=

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 9, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlxSEikxl/k4E08up:6v/lhP+nk7Tp
MD5:	65CE50060DCAE70B9E8FCCEB6DEC8ACB
SHA1:	6657BF06399B42E9F661F0CC510F9B987E03CDC0
SHA-256:	CF472DBB67C4D49804E673287A6552F3531DA07791CDAF1D86EBCEA16A6CC490
SHA-512:	BD9744551EEA2D1C54FC65DD1E024292FB42E777559BF80AC444E44BA61AB019DCFF5D2490EB2B5FACE7A7423C74D0B08FA69F29659696EC23D6AAEBE9631930
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...V.........'.L.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (351)
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	5.020514450928463
Encrypted:	false
SSDEEP:	12:+yrNYyZevXN+C0zRrmNJiN0vm5XqEcrwkQfFBTxKzLEkQfFMxvTdO+kQfVkQfU0s:FBYKel+CIUJQX9c0hF4TdO2/sX
MD5:	31C05F8E27ABE3F85548A4C9735DA1C4
SHA1:	306E842778D688F377166B13AD0B695B035D42EB
SHA-256:	C31B75D03121F2238E3F54B375534E141B2844CCD01C2E9D22412B154FF9AC50
SHA-512:	402FC1C5BBFA2813B728334E7C8E71F25FD7F8FB694FB6EC709951FC84E5C37FB4A29099F0091B06A8C30D46F4852C40315668FD056B36DBE1101103C9F4A53B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["initial.resx"],{176:e=>{e.exports=JSON.parse('{"a":"My files"}')}.,171:e=>{e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,195:e=>{e.exports=JSON.parse('{"c":"Still here?","a":"For your security, Personal Vault will automatically lock in 1 minute.","b":"Keep unlocked","f":"Personal Vault didn\\u0027t lock","d":"There was a problem locking your Personal Vault. If this happens again, you can sign out of OneDrive to lock your Personal Vault","e":"Retry"}')}.}]),define("initial.resx",[],{});

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35371)
Category:	downloaded
Size (bytes):	35429
Entropy (8bit):	5.296457486761157
Encrypted:	false
SSDEEP:	768:TVsEfzcHhW2kU+O9NEuTy5F9Iz07Y0Qtev+a0HPgg:TDnL0r
MD5:	BE73523C970F0BFA1C8F0A8C51F80BFC
SHA1:	B3BC3FD464E0A5766F27F84CA8D0C30993A26275
SHA-256:	494AE42932343D70F747F5937271E4BC7B020D53A1A2973876B15AF26DB7B1DC
SHA-512:	2069733C8CF8963223B4AA7945F9C21E6025113D8F7972605D92C4D67F0B3C909FE78DC75E0207E4DFBC9022E404B8363BF7C495C44FA4487F98B87FB3105E22
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
Preview:	!function(e){var t={};function i(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=e,i.c=t,i.d=function(e,t,r){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(i.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)i.d(r,o,function(t){return e[t]}.bind(null,o));return r},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,i){"use strict";i.r(t);var r=function(){return(r=Object.assign\|\|function(e)

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20116), with no line terminators
Category:	downloaded
Size (bytes):	20116
Entropy (8bit):	5.265227006593126
Encrypted:	false
SSDEEP:	384:uCYdXBag5QAdRLxUSkgRfku5ro+PZCewau6Y:K5Z7LKocu5ro+PZCdau6Y
MD5:	EDF023B23DC08C7C90BA27A3BDE7480B
SHA1:	0F03EDBE6BDA20C20251EFF9DB86359EB5155F66
SHA-256:	7337ED6220111758E61F3BE5060AE9A807D83EDF05D5F7CC92B0B85E34A5FEF3
SHA-512:	93450345EE48033238467EF1BA3550F3C2FACA5C07178B1E7AAB989A4C845D7D87FC25FC33AAF431CBF1AEA5B9C3FE6619A8045B066DB5B239197072029E0740
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/pickadate.min.js
Preview:	!function(a){"function"==typeof define&&define.amd?define("picker",["jquery"],a):"object"==typeof exports?module.exports=a(require("jquery")):this.Picker=a(jQuery)}(function(a){function b(f,g,h,k){function l(){return b._.node("div",b._.node("div",b._.node("div",b._.node("div",w.component.nodes(r.open),t.box),t.wrap),t.frame),t.holder)}function m(){u.data(g,w).addClass(t.input).val(u.data("value")?w.get("select",s.format):f.value).on("focus."+r.id+" click."+r.id,p),s.editable\|\|u.on("keydown."+r.id,function(a){var b=a.keyCode,c=/^(8\|46)$/.test(b);return 27==b?(w.close(),!1):void((32==b\|\|c\|\|!r.open&&w.component.key[b])&&(a.preventDefault(),a.stopPropagation(),c?w.clear().close():w.open()))}),e(f,{haspopup:!0,expanded:!1,readonly:!1,owns:f.id+"_root"+(w._hidden?" "+w._hidden.id:"")})}function n(){w.$root.on({focusin:function(a){w.$root.removeClass(t.focused),a.stopPropagation()},"mousedown click":function(b){var c=b.target;c!=w.$root.children()[0]&&(b.stopPropagation(),"mousedown"!=b.type\|

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14666), with no line terminators
Category:	downloaded
Size (bytes):	14666
Entropy (8bit):	5.192998441009612
Encrypted:	false
SSDEEP:	192:9dbIGOqZ05GyaKzhRCwqyf/q2E+Rh99TzlfVNyv83+LBoaWLNwGfiC8O5PPM:9BiUQhRVfye99Pl9483+LBoaWLqv
MD5:	8880E957219B056B26B67D88CB7FFFF5
SHA1:	BE024ABFE99C2DC447191E2C59DD96FD9352E2C4
SHA-256:	4BBB0DBB03A136E993BB2FB363455E7DCABF84CBB17DE37AD6168B9326E56909
SHA-512:	1E611B1C8D3B7DE4CEE215C989885A6F8256B89A51621B77598A9A363AAF2897FC439DD73860234BA77AB682B84D05437CE0DBBDA59C3C1B5CC9D16662897EC5
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
Preview:	if("undefined"!=typeof jSanity)throw"jSanity has been defined, please check if there's any duplicate reference.";jSanity={},function(e){"use strict";var t={inputString:"",maxWidth:"600px",maxHeight:"200px",overflow:"hidden",allowLinks:!0,linkClickCallback:null,customProtocols:{},allowRelativeURLs:!1,allowAudioVideo:!1,unsupportedContentCallback:null,externalContentCallback:function(e,t,r,o){var i;if("attribute"===e&&"src"===t)for(var n in o)if(o.hasOwnProperty(n)&&r.substring(0,n.length)===n){i=!0;break}return i\|\|(r="CSSURL"===e?'url("about:blank")':"about:blank"),r},isolatedTargetDOM:!1,directModifySource:!0,attributePrefix:"jSanity",dataAttributeCallback:null,debugLevel:0,onFinishedCallback:null},r=function(){this.sync=!0,this.jobs=[],this.id=r.globalId++,this.listnerPosfix=0,this.onCompletedListners={},this.onNewJobAddedListners={},this.useSync=function(){this.sync=!0},this.useAsync=function(){this.sync=!1},this.addNewJob=function(e){for(var t in this.jobs.push(e),this.onNewJobAdded

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665)
Category:	downloaded
Size (bytes):	2240292
Entropy (8bit):	5.601094101629013
Encrypted:	false
SSDEEP:	49152:qMtcuJEnkK6K/1op2WGz+vUs+DP2C/lfkzrbwJMN6hHScs1iiFg+3Z50XsbpKgV3:NGQ62FH3
MD5:	ACB0645577E28B990C20ACBBDB4870C7
SHA1:	5358383D60E6DB3F137CA38CD1260D6BA093CFBA
SHA-256:	C314DEF154FC9D8F4E00EBD227727D854BBB0EA7798E8CF747D9B43A54C3FA9F
SHA-512:	1F1AEA5DD38DFC1CC624758CADCAB983D68336458F6E128D4997FEA56E8EE053FAE2034C6F6A0968F7A1F4BAAAD070D9A3E8BE5D1EC4452AA3122C6610B85F22
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h52C335E6448447C3_App_Scripts/OneNoteDS.box4.dll1.js
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[1],{36206:function(Ga,cb,V){V.d(cb,{a:function(){return I}});Ga=V(35317);var Ba=V(539),Ka=V(18055),bb=V(73894),T=V(64967),S=V(54001),d=V(73285),m=V(74952),l=V(2407),k=V(4605),r=V(34148),e=V(40579),B=V(16708),f=V(99059),v=V(46577),A=V(13133),w=V(2452),F=V(2749),H=V(91380),y=V(98186),D=V(42867),J=V(52174),E=V(56599),K=V(50703),G=V(92528),t=V(10583),M=V(15978);class O{constructor(){this.pressure=this.pageY=.this.pageX=this.y=this.x=0}}(0,Ga.a)(O,"InkPacket",null,[]);var N=V(20662),P=V(89316),Y=V(44580),W=V(86691),u=V(67412);class I{static get oHc(){return Ka.a.instance.resolve("OneNote.IInkEditor")}static get W6(){return bb.FocusManager.instance()}static get bkb(){return I.Ve\|\|(I.Ve=Ka.a.instance.resolve("Box4.ICaretPositionManager"))}static get zza(){return I.kb\|\|(I.kb=Ka.a.instance.resolve("Box4.ICevViewContentManager"))}static au(){return I.$i\|\|(I.$i=Ka.a.instance.Bb("OneNote.IBusinessBarContr

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1929), with no line terminators
Category:	downloaded
Size (bytes):	1929
Entropy (8bit):	4.825504387685548
Encrypted:	false
SSDEEP:	48:l9AKA+/AK7E4h5qV5j9RXkIgj3oJzXz6WnzWgEA3AUYAA03LpAWARALAlAZAHAI/:VS4WvkIC+TzFnbf1LDC
MD5:	16436CE1C5CCA9CCA0065CC23C130358
SHA1:	57A8F2DED856B54F6A92895F35747F337326F9A1
SHA-256:	224C1B566FD772839589CFCA52150F482E334255FF41B598846E1154B92F2C8C
SHA-512:	D6102741828B2AF729BF06AEBF3687CDC120C33C5674147E2DCDE1EB1444BA161FA7FF8C0012E38D12D87B10932B7D7E60E56CD4F02B0FC1E028B2C322A40C8C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/onenote-whatsnew-strings.min.js
Preview:	var OnenoteWhatsnewStringsEnum,OnenoteWhatsnewStringsArray,OnenoteWhatsnewStrings={WhatsNewDialogTitle:"What's New",GotItButton:"Got it!",ImmersiveReader:"The new Immersive Reader provides students with advanced tools to boost reading skills.",Ink:"Handwrite your notes, annotate documents, or sketch out your next big idea with new drawing tools.",NewNotebook:"You can now create notebooks in OneNote Online.",DragHandles:"Use drag handles to easily move text, reorder a list, swap table rows, and re-position images.",SyncUX:"Click the Page Sync Status button for more information about the sync status of the current page.",NotesFeed:"Open the Feed pane for easy access to your OneNote pages, Samsung notes, and sticky notes.",TwoPaneNavigation:"You can hide the navigation pane to focus on the current page or show the navigation pane to switch between your pages, sections, and notebooks.",ReactMLR:"Expand the ribbon to easily find OneNote commands, or collapse it again to maximize your note-t

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.677279698572885
Encrypted:	false
SSDEEP:	3:beiCkj7ugjfMlkk2SY:behw7ugjfDk2r
MD5:	DA69159E7EC38222D30F02FAE3F5B795
SHA1:	A25E1C206C6EF0DC1E82AB5D715E56A1EFE3BDE4
SHA-256:	77E2C43DFDEBA7EA496189A7D4DA3A22EDA4CCE35B6246260698A60B141972EE
SHA-512:	C08E416F8F47F95A258951568995689805AEFDD04A95AB52E8FDA790441BD3A1FC76209885F81132772AA6ED41E216DFE541AE0151975481DA3D190246D0FA29
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkvQ2-lAXZCYxIFDdjY4LISBQ11LGDrEhcJurgal7crdicSBQ3Y2OCyEgUNdSxg6w==?alt=proto
Preview:	ChIKBw3Y2OCyGgAKBw11LGDrGgAKEgoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20082), with no line terminators
Category:	downloaded
Size (bytes):	20082
Entropy (8bit):	5.3785189328644485
Encrypted:	false
SSDEEP:	384:Tt1CTbGLeulh4MQOCS9AKBINrXNlQihhST3iT00XazfPTZsn:p1GTuli2gKBkrPTpqrTZs
MD5:	58A30E58FBE0165292F0425B04256E46
SHA1:	420050FE7E6034D52094B2F769FDB12A3591A748
SHA-256:	534ECF698946529FF99C868DA810DAB8E1E9C7491EBDC873BDF95D34ABF75C4E
SHA-512:	6127E32FC185C33353C75180F2B54DFE28E471558FF2478B23C8AB64511BFBAC0AA6200740F94186F0CC56F5D6137C9BD7F16BA3580F4E994A064B7E5AE67D44
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/LearningTools/LearningTools.js
Preview:	function getLanguageParameter(n){var t,i;if(UseApiForUILanguage&&Office.context.displayLanguage)return""+n+"="+Office.context.displayLanguage;var f=window.location.search.substr(1),r=f.split("&"),u="";for(t=0;t<r.length;t++)if(i=r[t].split("=",2),i.length==2&&i[0]=="ui"){u=""+n+"="+i[1];break}return u}function getEdgeMajorVersion(){var t=navigator.userAgent,n=t.match(/Edge\/([0-9]+)/i);return n&&n.length>=2?parseInt(n[1]):-1}function getQueryParameter(n){var u,r,t,i;if(window.location.search&&window.location.search.length>1)for(u=window.location.search.substring(1),r=u.split("&"),t=0;t<r.length;t++)if(i=r[t].split("="),decodeURIComponent(i[0])==n)return i.length>1?decodeURIComponent(i[1]):"";return null}function now(){return(new Date).getTime()}function generateGuid(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(n){var t=Math.random()*16\|0,i=n==="x"?t:t&3\|8;return i.toString(16)})}function createSimpleHtml(n,t,i){i===void 0&&(i=null);var r=document.createElemen

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h9E1DA5BF71513549_resources/1033/FavIcon_OneNote.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61584), with CRLF line terminators
Category:	downloaded
Size (bytes):	127321
Entropy (8bit):	3.8975903207588436
Encrypted:	false
SSDEEP:	3072:cdNCAXsHQxmPHmLZyb92FcFxSYJVBp0HoU:LA8HQxaG0AExSYJVGN
MD5:	F5E2440C7CBE6298492A15C495B2339F
SHA1:	550112B8722232F58D2840650444FA4988DCB68A
SHA-256:	50E8DDE014DD02234F971C2A93E1A754F4572751748ECDF094D4720066AEBDA5
SHA-512:	68268EA5B1AEA838F126168840A04E4E7E0F01B3CEBB9043A669BB0535C9A8C1B5360597770D6303EE95BBB08797E9168ACDC61282AC423DCED676F1CA4C09EA
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
Preview:	var CoefficientModelIdMap= {34:'ApplyStyleGallery',21:'ToggleRecycleBinVisibility',10:'Undo',70:'ClearFormatting',45:'floatiefsfaMoreStyles',154:'NT10',165:'ChangePageColor',84:'NT12',20:'ShowAccCheckerPane',141:'MenuNumbering',93:'SpellingMenu',131:'floatiebtnImageShrink',72:'TextDirLTR',118:'LockAspectRatio',94:'InsertEmojiGallery',124:'EnterInkingHighlighterMode',1:'TellMeMenuItemExecuted',101:'Superscript',158:'ChangeToInkShorthandColor_3',16:'LaunchAppForOfficeDialog',97:'floatieidTableDelete',160:'floatiefsbcUnderline',111:'Copy',107:'Paste',29:'InsertPicture',33:'Numbering',128:'mnuVersionLauncher',105:'mnuConflictPageLauncher',4:'mnuSpellingErrorLauncher',161:'SmartLookupFromTellMe',164:'ClearCellShadingColor',13:'90da59be-5361-4260-9218-2262af1dc334Button1id',61:'TellMeSearchResultChange',121:'floatiefseaDelete',39:'InsertPrintoutDialog',59:'floatiebtnImageCropDialog',173:'PauseMedia',127:'EnterMathMode',178:'NT5',50:'AlignLeft',30:'FormatPainter',0:'flyNoteTags',75:'NT11',188

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	175719
Entropy (8bit):	4.255303968193695
Encrypted:	false
SSDEEP:	1536:0hEjBUBvBrBXBWBIBXBXBaBIBQBbBnBgAfBRBbB3BjBTBDBvBHBPBPBxBBBHB6ST:/RYAQ+
MD5:	9CFEFB2D46D6102DAC2A24C606F47FEA
SHA1:	076B63F4F46CE28648201E2507BBC67FB4F990C5
SHA-256:	43C5939CB732D8AA2D20FCE97F359F46B7C3B937E60ED576B752AE0A2E73314F
SHA-512:	C56812F0A9DCBC53E8AFA542923F20E911DE172C1D87B9868DB42A01F2FC303BBECE6509925E43E8F877DC8A3C7904FAE731C1C19BD35B5FAD18582B7498E24D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/OfficeExtension.WacRuntime.js
Preview:	var __extends = (this && this.__extends) \|\| (function () {.. var extendStatics = function (d, b) {.. extendStatics = Object.setPrototypeOf \|\|.. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|.. function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };.. return extendStatics(d, b);.. };.. return function (d, b) {.. extendStatics(d, b);.. function __() { this.constructor = d; }.. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());.. };..})();..var OfficeExtension;..(function (OfficeExtension) {.. var WacRuntime;.. (function (WacRuntime) {.. var ApiFlags;.. (function (ApiFlags) {.. ApiFlags[ApiFlags["none"] = 0] = "none";.. ApiFlags[ApiFlags["restrictedResource"] = 4] = "restrictedResource";.. ApiFlags[ApiFlags["makerSafe"] = 128] = "makerSafe";.. ApiFlags[ApiFlags["excludedF

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	76412
Entropy (8bit):	5.46559346870595
Encrypted:	false
SSDEEP:	768:Ylx3qEug0W5tQc+LjYxNqHsFNZBbvnFPgFUmDhEnIqF5PYDNQ429Buylb0wLuqPY:IrbajqN9rTFPgaozqF5x9B9PL3O8I5
MD5:	58710A3E1B60016505FD9C4F99BF1993
SHA1:	AD4E757C2A15289C6ED0B3D256BE8F1CCE83897D
SHA-256:	CEEFD9162F27F345AF51330885265102751EB5EC65F72DCF762CB9A86A0572BE
SHA-512:	6CF52CE285A18FDECD99074A3E2904AED7962B8FD685C0F5B35E0DEC4260C3B159217F93A3B4C6139F7B472842AEA470F69CE46FD20404C3429C14B8F4460119
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.handlers.27d51fd227a601990590.js
Preview:	(self.webpackChunkMicrosoft_Office_OWL=self.webpackChunkMicrosoft_Office_OWL\|\|[]).push([[3648],{1611:function(e,n,r){"use strict";r.d(n,{Z:function(){return s}});var t=r(9001),o=r.n(t),i=r(4975),a=r.n(i)()(o());a.push([e.id,".lLFji2JIIWB51LkuYBKM{width:75%;height:75%;position:fixed;top:50%;left:50%;transform:translateY(-50%) translateX(-50%);background-color:#fff;box-sizing:border-box;outline:1px solid transparent;z-index:5;box-shadow:0 0 5px 0 rgba(0,0,0,.4);border:none}","",{version:3,sources:["webpack://./../owl-service/lib/filePicker/filePickerStyles.module.scss"],names:[],mappings:"AAAA,sBACE,SAAA,CACA,UAAA,CACA,cAAA,CACA,OAAA,CACA,QAAA,CACA,2CAAA,CACA,qBAAA,CACA,qBAAA,CACA,6BAAA,CACA,SAAA,CACA,mCAAA,CACA,WAAA",sourcesContent:[".file-picker-iframe {\n width: 75%;\n height: 75%;\n position: fixed;\n top: 50%;\n left: 50%;\n transform: translateY(-50%) translateX(-50%);\n background-color: #fff;\n box-sizing: border-box;\n outline: 1px solid transparent;\n z-index: 5;\n b

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20946), with CRLF line terminators
Category:	downloaded
Size (bytes):	21179
Entropy (8bit):	4.946956269702156
Encrypted:	false
SSDEEP:	384:OZKKcZ2dMMj+hS6rLg4dHg15dR7tV6NvQLsljRei:OZ7j+w6rLg3HtsNvLhRei
MD5:	92A3DDF4C14AF9EB4DB2939A2B2712AC
SHA1:	81B322775A3E9E9335FB780179B6B922759CE6FF
SHA-256:	5B6D3F98F8A755878F226B38FDB1F7C31E67B456221F253B70F95AA331668594
SHA-512:	1A61A585D707BFC1E78B8734A89D1C73673324E1ABF5CF579799D73860A5160119FDCD2C910C8B77C827C42E76D1A7FEEA2D43E9ADBD3B95223514A34E563D61
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/en-us/office_strings.js
Preview:	if (window.Type && window.Type.registerNamespace) {..Type.registerNamespace("Strings");} else {..if(typeof(window['"Strings"']) == 'undefined') {..window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;..}....}..Strings.OfficeOM=function(){};if (Strings.OfficeOM.registerClass) Strings.OfficeOM.registerClass("Strings.OfficeOM");Strings.OfficeOM.L_APICallFailed="API Call Failed";Strings.OfficeOM.L_APINotSupported="API Not Supported";Strings.OfficeOM.L_ActivityLimitReached="Activity limit has been reached.";Strings.OfficeOM.L_AddBindingFromPromptDefaultText="Please make a selection.";Strings.OfficeOM.L_AddinIsAlreadyRequestingToken="Add-in is already requesting an access token.";Strings.OfficeOM.L_AddinIsAlreadyRequestingTokenMessage="The operation failed because this add-in is already requesting an access token.";Strings.OfficeOM.L_ApiNotFoundDetails="The method or property {0} is part of the {1} requirement set, which is not available in your version of {2}.";String

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	695
Entropy (8bit):	5.696679956038459
Encrypted:	false
SSDEEP:	12:HarRMs0pTestEsVEsl3Est3EshEsZ9NMzrI3TjEEofVcQ72TVkI3TjE:Har2nTeUEME23E+3EoEQ9NFj6kbjE
MD5:	648AD2F7EEA95A9B5491DCD2203B2F54
SHA1:	5FFA99938410AEBAB10B32308F242437B9432B53
SHA-256:	A3596C17DAD9A003D0BFBE0B7BA6765F51391B5C3943660316F01C8E77B323DB
SHA-512:	F7984FFEAEC122EFCBE36218979BB4C35E27007CC091BA5A8829BA5088999A3F9F7A7D5E11D90A05904D58644EC0B4E5EE1D57C68DD5270B7F456A762D8D699A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.................0.+......H.....V..!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,..............z...cr...!.......,.................dp.,.....H.....;..!.......,..........2......dp.,...QP.Td......F.[...v..?y...."......!.......,..........0......dp.,...QP.Td..........gO:.......Q..!.......,..........*......dp.,...QP.Td..........g.\|.}.)..!.......,..........&......dp.,...QP.Td............>..!.......,..........#......dp.,...QP.Td........L.6V..!.......,.................dp.,.....H.....;..;

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	357092
Entropy (8bit):	5.460030841300565
Encrypted:	false
SSDEEP:	6144:pQaqhpgRYdVoY7dLmpK6IpGYRot0qrf6o+tITIev3D/Zv6PoOQH//eX82a:pHZ082a
MD5:	D20472DF9BDA51E2E41DE3B980295BAE
SHA1:	996770FF562EC3BCA75F9F2EE0052C67B92B5066
SHA-256:	AE19691E4FFF05885CFBB74AA3211224549FFD004B87ECE80B1AE25222499644
SHA-512:	8104AE40CDF00FEC09A132503A8F6260DFB2235ADA1154C65CA45C51A4DACCDF79AF588F5B40D67677F03AD07371C9A91A485CADA9DC6369DA8C04B877331CAC
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/navigation.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[243],{12377:function(t,e,n){var i=n(93556),o=n(78267)(i);o.push([t.id,".WhatsNewLayer {\n background-color: rgba(0, 0, 0, 0.4);\n z-index: 1000001;\n position: fixed;\n top: 0;\n left: 0;\n width: 100%;\n height: 100%;\n display: flex;\n -webkit-box-align: center;\n -ms-flex-align: center;\n align-items: center;\n -webkit-box-pack: center;\n -ms-flex-pack: center;\n font-family: 'Segoe UI Web (West European)', 'Segoe UI', -apple-system, BlinkMacSystemFont, Roboto, 'Helvetica Neue',\n sans-serif;\n}\n\n.WhatsNewLayer .WhatsNewBoard {\n min-height: 100px;\n background-color: white;\n width: 100%;\n -webkit-box-shadow: 0 0 5px 0 rgba(0, 0, 0, 0.4);\n box-shadow: 0 0 5px 0 rgba(0, 0, 0, 0.4);\n -webkit-box-sizing: border-box;\n box-sizing: border-box;\n position: relative;\n outline: 3px solid transparent;\n overflow-y: auto;\n}\n\n.WhatsNewLayer .WhatsNewHeader {\n position: relative;\n

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20551), with no line terminators
Category:	downloaded
Size (bytes):	20551
Entropy (8bit):	5.178389966283299
Encrypted:	false
SSDEEP:	192:FoUypumgG+U556LneUWqBDBm82pXmFySDxKOkOfwvNdBGUiEiZOFgZ4ndK3iIYTQ:FwFPUv3m82ZSDx1kOuhiEWTYTaUW
MD5:	3D6CA9B0358BEF8348220F958F049B61
SHA1:	8B85C3925FBC3D51E57658845A80C67F2101CC26
SHA-256:	8D7B8C265DF55DB9C4BE132CA6FE1CEEBB0CFE89AA47992738CAB92285C3AFAD
SHA-512:	EA3ED996E3C1C5DFBAB095E3F9533F1F64A34D667A0BD7FF31A489C55D159DB41C15CF978C5B4CF3E15196BC5F298D41AD58E4654200502B5AD3E70D1B6477D0
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/Feedback/latest/officebrowserfeedback.css
Preview:	.obf-ChoiceGroup{margin-bottom:8px}.obf-ChoiceGroup fieldset{margin:0;border:none;padding:0}.obf-ChoiceGroup legend{max-width:100%}.obf-ChoiceGroup input{position:absolute;opacity:0}.obf-ChoiceGroup input+label{display:block;display:grid;grid-template-columns:20px auto;cursor:pointer;margin:8px 6px 8px 6px}.obf-ChoiceGroup input:focus+label{outline:1px dashed #000}.obf-ChoiceGroup input+label>.obf-ChoiceGroupLabel{display:inline-block;vertical-align:middle;margin:0px 0px 0px 10px}.obf-ChoiceGroup input[type=radio]+label>.obf-ChoiceGroupIcon{display:inline-block;content:"";border:1px solid #a6a6a6;width:20px;height:20px;border-radius:10px;vertical-align:middle;box-sizing:border-box;-webkit-transition-property:border-color;-moz-transition-property:border-color;-o-transition-property:border-color;transition-property:border-color;-webkit-transition-duration:.2s;-moz-transition-duration:.2s;-o-transition-duration:.2s;transition-duration:.2s;-webkit-transition-timing-function:cubic-bezier(0.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1115
Entropy (8bit):	7.474905425501729
Encrypted:	false
SSDEEP:	24:OQkGe2gKOcQO9S80Axzhkzc7iFTZkqeNblj5ILlN0EFgFahPKN7FqP8:OQkRrTCbxzwSiZLCN52TFgM5KN7Fp
MD5:	084E7612635DFCF69A16255B41E70CAA
SHA1:	0D9721AA70B01487D3340B864C0BD49FB1D95206
SHA-256:	7B389747818635BCA6FE76F5E3226EDA36AF53D8F27526796BC975EBD440A395
SHA-512:	A0104DBB40429BCA5F54061CE6D36A695283D883CE1B732CA87A30743234D29BEBA07A0100DE0DE0B274A70C8C7C289574F6343DF16C3E4C7B6453F60E8737B9
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/agavedefaulticon96x96.png
Preview:	.PNG........IHDR...`...`......w8....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.k.A.....@ .6.* ..H...R....V....l.! X..Z..Z..... X... .. .{.^fw...{.fv..70.~..\|........ .. .. .. .. .. .. .. .. .. .. ..3.8.1q....(.&.....B.o.."w..Y.....]......~0N0....]..z....\|.n........_..O...9..8@..K./..%..[..LQ.rm:.H.>...-..;,...9.G.n....`.{..-.F...'.?...y..]H..o{y..#.....]..x\|...K.(x\|p~.....r..R..~\.2.Y...f.Q..i...o...r.........Gc..Bp.Ol..\(...~.T...,....j.O.(e......j(e. ...Z....Rf......j(e. ...Z....Rf......j(e.....D.,Y.....~..n.[.........PA....]....0.mK...sE.........J~}z[.!n...RV\|.#.......7s.......)B.e;j2.........tX..k.....o.V....j.k3A........9..?R....Z....5t..j....f.Z.....E.L....J..7.}Uk.......H..i.Z...1...x$....]<I.......#ixw..h.h.h.a.4....9.&.v.....2i..D..l...'.-.+.._...eLZ...M..x..1%.g....'A..X.....jkK.^W.}.m...T....\|...._.^.[..~u'...mco.8...nT....d.m.I.b..M.4...s.U.;Yu...k.1\|..93a..(M..2..U......B..S..O...........c.......?)....iz.D...T.D!....R

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38089), with no line terminators
Category:	downloaded
Size (bytes):	38089
Entropy (8bit):	4.894031142896769
Encrypted:	false
SSDEEP:	768:N4k0JvWptT2z2p9hmkNqJ3htY1xYhwn5n9O:CJOptT2Sp9A7htY1xYC5n9O
MD5:	E1124588AEEAC3262DABB915F467C364
SHA1:	9509D66B533B0B2453130719DAED374344AE8D93
SHA-256:	6FE1EC3B4D9E5E1E67ACD3EC946DA70CF06FC0A76C59C4C1EC124A0184D0EB6F
SHA-512:	F598C3D3B09C08229C577DA789BB61D9E5AD417E4ADD9EDCCB0B2804A93504776832A33DD60517724D44C25C0F7C4E8BA0B40454062F5FC8945A5F82ADD37BDE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h6FE1EC3B4D9E5E1E_App_Scripts/1033/OneNoteIntl.js
Preview:	Type.registerNamespace("OneNoteIntl");OneNoteIntl.OneNoteStrings=function(){};OneNoteIntl.OneNoteStrings.registerClass("OneNoteIntl.OneNoteStrings");OneNoteIntl.OneNoteStrings.L_CloudFilesUploadSuccess="Successfully Uploaded : {0}";OneNoteIntl.OneNoteStrings.L_CloudFilesUploadFailed="Error Uploading : {0}";OneNoteIntl.OneNoteStrings.L_ContextMenuSmartLookup="Search";OneNoteIntl.OneNoteStrings.L_ContextMenuTextSmartLookup='Search "{0}"';OneNoteIntl.OneNoteStrings.L_BrowseVersions="Page Versions";OneNoteIntl.OneNoteStrings.L_Camera="Camera";OneNoteIntl.OneNoteStrings.L_CopyNotebook="Copy Notebook";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorMessage="The new experimental sync feature has experienced an error and your change may not be saved.";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorRefreshMessage="Please click here or refresh the webpage to resolve the issue.";OneNoteIntl.OneNoteStrings.L_CopyToCloudDescription="Edit and view this notebook on all your devices";OneNoteIntl.OneNot

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17049
Entropy (8bit):	4.928084398979707
Encrypted:	false
SSDEEP:	384:r3Ghr6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV3vzJ9YaikHcL2MQk7:rQzwSkQWjU/8BlOaikMKu
MD5:	52AF792134B43BB66AC6FB020EC0B324
SHA1:	7B8A12118EE106DAA8FCECE7625D1DE871835A21
SHA-256:	E08CA1BE8ADF907921F594F700E9267582333BA0A4337C820E8C937989301574
SHA-512:	18DFBEA096D821FB1E82C9D01AEB1569AD600FE8E3CDCA6F735DFB7960D26F2E45BFF587C8D9F8A210E12D03BDD6CCE6246011CB83009599D11FA0D6327E788A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/strings/en/shellstrings.json
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1922
Entropy (8bit):	7.799930090275787
Encrypted:	false
SSDEEP:	48:cENciM7PxxsRcCzKzVT0waLFE8ASYXamdHN:cENIgiCSVT0EJSYXamdt
MD5:	D212459353E8FD1D2514C77703D44F1F
SHA1:	A0CABB548A218E87FBCB4D4ADDEA47068A4288D3
SHA-256:	7AD89A907BFE47019D905B92D0C203082AA75852D39B480E6FBE1718A8EA3647
SHA-512:	8AA0C6904EFE31A38B2A52F05F79153D933BC48C028D18C110F59089D0EB7EAF2D97E84A42F81BAA8906AFD2BBD8C895FE53D8E998A4417422B97497556E1B7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...f...f.....9..b...IIDATx^.ml.E..o.E..........B....'_$..&.&.....h....A..4......[..........]iC..h1.HjE.......K&......>....<3;{._......X$..T\\(.o..#..2K....g.....Oe...C..`..p..ee%...g`.e.8....b.k.c.P.:B.tv^W..2RW.,.g.j.........y..i....2.P.....T.G...Z..5.......5H..?.H...P...9..(.h.....p}..9.tS0.......q}..`pWFK..9..(....8.......L..]O..z<.%.".4..Lj:F....4.............@..s$../bux.N.%.`..$IN...%'{#.....<..]\|....0..AYt..CDI..$...=....H)..W>.>.+G>....1b........(..1?R.A...Q...C`...X...C..q]..&.........."~.o~0.P....~(\|`..^Ph......"....P.]._U0.....k.t....e.%.y3......C`.{...._$..'....k.5..J.`R........'.A....0..P(4......g...m...Z.d.I...Q.QbA..f._.nm...".....K...Cw4...k..F.e..=~..d....\|s.....`.V...`....j..ww....-..V....f.......C...6v...p.9Y..h..Wj]..._`......Z..G.m.?....w)...~...(.....=a=.]a.+R...5.`.H$..D..ehW...@..2..#..j..T.w...c..T.w...#~....e........e.k.....C.c..e.F.2.`..j..1._:....o_,.j:.!0...%....9..c.......OY0.;....0\|.U>.@`...

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59981)
Category:	downloaded
Size (bytes):	60022
Entropy (8bit):	5.39718997352001
Encrypted:	false
SSDEEP:	768:/grwLEFGEFbov8+qJS86v+z4iIBYpmDBhLc+C2kJjD2jkYXXWUFmMIRY+b+hNgLx:/grg/HBhC2qU1fQ3pBBZ9Hc6
MD5:	546CC8F89DC266F3C888BECB83B486B6
SHA1:	C319504AAEE2FD0A63361F73942C801279DB1A92
SHA-256:	745F6156DD17A964CF34590C6A63777AF84151D9116A4A447B2EDE3BCC7251B3
SHA-512:	13A091904CF5FD2FED7C798DE8FEB7F7BDF046909DA058761CBF6CF34E9271F7AD963EEA995EEF705A9F6A81E410A91834425C72BEFE27C9042C08D0D638435B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/oreolazy.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[766],{62906:function(e,t){var n;Object.defineProperty(t,"__esModule",{value:!0}),(n=t._BondDataType\|\|(t._BondDataType={}))[n._BT_STOP=0]="_BT_STOP",n[n._BT_STOP_BASE=1]="_BT_STOP_BASE",n[n._BT_BOOL=2]="_BT_BOOL",n[n._BT_DOUBLE=8]="_BT_DOUBLE",n[n._BT_STRING=9]="_BT_STRING",n[n._BT_STRUCT=10]="_BT_STRUCT",n[n._BT_LIST=11]="_BT_LIST",n[n._BT_MAP=13]="_BT_MAP",n[n._BT_INT32=16]="_BT_INT32",n[n._BT_INT64=17]="_BT_INT64"},64069:function(e,t,n){Object.defineProperty(t,"__esModule",{value:!0});var i=n(95456),r=n(21756),o=n(24650);t._Utf8_GetBytes=function(e){for(var t=[],n=0;n<e.length;++n){var i=e.charCodeAt(n);i<128?t.push(i):i<2048?t.push(192\|i>>6,128\|63&i):i<55296\|\|i>=57344?t.push(224\|i>>12,128\|i>>6&63,128\|63&i):(i=65536+((1023&i)<<10\|1023&e.charCodeAt(++n)),t.push(240\|i>>18,128\|i>>12&63,128\|i>>6&63,128\|63&i))}return t},t._Base64_GetString=function(e){for(var t,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijkl

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 45 x 40, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPl6tvtxl/k4E08up:6v/lhPAt7Tp
MD5:	504A4FCB3754406A125082ECA2E2BC3E
SHA1:	1AE5867926C24A2510D8806C57D8E1CA6D513854
SHA-256:	3BC7BFF89B796B6680A1DB2CB63FF629359936B2BD9E2000641F85354F7A1D70
SHA-512:	323252A9C67207AEE3E740DCC314329DCDD729B872857B3B4DB131EB0E8548A624B45E39D5B3CF7145B762C4D7CF7870F4C76AE3BBB8B66C4C459840196A9A93
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879e1e576906672b/1714045860065/ZPYzggQx1W7KVLI
Preview:	.PNG........IHDR...-...(.......~....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59980)
Category:	downloaded
Size (bytes):	60027
Entropy (8bit):	5.6566265573222845
Encrypted:	false
SSDEEP:	1536:gA9t+D6NsVXuzm2KI4OpB4KifgilKCPuMyQ:gA9tJzm2oOefgiUCD
MD5:	08EC3609656C3DAA7C2F05F14C5FAD9A
SHA1:	343E5B52F210107F66F8CC37B836384613FAC3DA
SHA-256:	D2363AA4EE19951DA213D96107385E24F589011FF3530EFAFA4C515DA7006685
SHA-512:	8AF5DC3BAC82E8CB8636E8EB6B73387AF7BEF705656FC31290420A92031FB14D6F63D6AC04A78382B00A3A2AE61F5852975539AC378AFEB567088139FF3B2FED
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/oreosearchpane.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[697],{3122:function(e,n,t){var a=t(93556),o=t(78267)(a);o.push([e.id,".ms-u-slideUpIn20 {\n animation-name: fadeIn, slideUpIn20;\n -webkit-animation-duration: 0.367s;\n -moz-animation-duration: 0.367s;\n -ms-animation-duration: 0.367s;\n -o-animation-duration: 0.367s;\n animation-timing-function: cubic-bezier(0.1, 0.9, 0.2, 1);\n animation-fill-mode: both;\n}\n\n@keyframes slideUpIn20 {\n from {\n transform: translate3d(0px, 20px, 0px);\n }\n\n to {\n transform: translate3d(0px, 0px, 0px);\n }\n}\n\n.ms-u-slideDownIn20 {\n animation-name: fadeIn, slideDownIn20;\n -webkit-animation-duration: 0.367s;\n -moz-animation-duration: 0.367s;\n -ms-animation-duration: 0.367s;\n -o-animation-duration: 0.367s;\n animation-timing-function: cubic-bezier(0.1, 0.9, 0.2, 1);\n animation-fill-mode: both;\n}\n\n@keyframes slideDownIn20 {\n from {\n transform: translate3d(0px, -20px, 0px);\n }\n\n to {

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30746
Entropy (8bit):	5.174902538130611
Encrypted:	false
SSDEEP:	384:/iL+oQA/1DynNjr67VY/6NY/gHWOf49498vxVxjF:/iL+orVynNaBYbyv9uxzF
MD5:	8EEB14C505B79A7378332DE41F3C190D
SHA1:	60A4CBF2B4EAD56ECC380F1FA8706A4C29F7B512
SHA-256:	B0F728D3C97576B5E039209F0D9A2C277D44531441CC76D2A2A4076623EFB1F8
SHA-512:	1AEFB2A8562F18F288BD1E5EB81F5952015CBEDD89D4EA625B28146EA460EA531B38281385F3C8AD7E7ADE84BCDC570B2597344E69F619BC1DA108B26044F07A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20240413.3.0","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d.b8d635a632aa976770cd.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.66560738606782
Encrypted:	false
SSDEEP:	3:YmEoEMCL2RH2hAcBQMh0wVWu+xJs/FEH2MmRJBUn:YmEoYL2HuAJW0m+sNb2n
MD5:	B22CAC36842DCB642F5BFF86C0FF2FB9
SHA1:	7F0557D5258453F55C1DB5DD40AB7F1C31932655
SHA-256:	E25ABD11267B28557444D53A9A3BF52A796DF20A14205FDE0B19C6B8287976B3
SHA-512:	D991A7C2B5552EF795F01450BEB8FE91785FAB87DD53361AD4048972BADB46180966120B0EF42B647654DE6CB8E8DF6D13EFDC2C170CB498FD8DBAC63629ADAC
Malicious:	false
Reputation:	low
Preview:	{"CampaignContent":{"campaigns":[]},"DynamicSettings":{"TmsLoadTimeout":3000,"TeachingMessageCooldown":3600}}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	164946
Entropy (8bit):	5.228243361507891
Encrypted:	false
SSDEEP:	3072:Gibn1WyRyLdMuLiRy7X9NOs4l0e4etqsCCss:rbn1zRyLdMuWREOs4l0e9tqsCCss
MD5:	C99FD966E6E6574683D292EB727DD091
SHA1:	DD89D371EFF9FE118A7BCEC52D97B90758D5B685
SHA-256:	D4BDDA245961E7E0C72E398286953E1361DBECECB8C7E495F3F9848365340E6D
SHA-512:	EB86F16900A1FA75089AAFF6833F465B4E071062E509F1ECDB6D126596DFCD763E69713CDA707010760DF045F9AE0AC65C0E7C97C2D8275D86DCDC90200D1E79
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hD4BDDA245961E7E0_App_Scripts/wp5/onenoteSyncNew.min.js
Preview:	var onenoteSync;!function(){var n={833:function(n,t,r){n.exports=function(){"use strict";var n=function(){return n=Object.assign\|\|function(n){for(var t,r=1,e=arguments.length;r<e;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i]);return n},n.apply(this,arguments)};function t(n,t,r){if(r\|\|2===arguments.length)for(var e,i=0,u=t.length;i<u;i++)!e&&i in t\|\|(e\|\|(e=Array.prototype.slice.call(t,0,i)),e[i]=t[i]);return n.concat(e\|\|Array.prototype.slice.call(t))}var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:r.g,i=Object.keys,u=Array.isArray;function o(n,t){return"object"!=typeof t\|\|i(t).forEach((function(r){n[r]=t[r]})),n}"undefined"==typeof Promise\|\|e.Promise\|\|(e.Promise=Promise);var s=Object.getPrototypeOf,c={}.hasOwnProperty;function a(n,t){return c.call(n,t)}function f(n,t){"function"==typeof t&&(t=t(s(n))),("undefined"==typeof Reflect?i:Reflect.ownKeys)(t).forEach((function(r){l(n,r,t[r])}

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17049
Entropy (8bit):	4.928084398979707
Encrypted:	false
SSDEEP:	384:r3Ghr6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV3vzJ9YaikHcL2MQk7:rQzwSkQWjU/8BlOaikMKu
MD5:	52AF792134B43BB66AC6FB020EC0B324
SHA1:	7B8A12118EE106DAA8FCECE7625D1DE871835A21
SHA-256:	E08CA1BE8ADF907921F594F700E9267582333BA0A4337C820E8C937989301574
SHA-512:	18DFBEA096D821FB1E82C9D01AEB1569AD600FE8E3CDCA6F735DFB7960D26F2E45BFF587C8D9F8A210E12D03BDD6CCE6246011CB83009599D11FA0D6327E788A
Malicious:	false
Reputation:	low
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2224), with no line terminators
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	5.029670917384203
Encrypted:	false
SSDEEP:	48:iYyhna6311NDG9e1ctrSmz6usES0da3RhRDh79nFzFnpR4RYhQyYSI:iYenaUG0aB+qahhRDh79nFzFn/cYhQy4
MD5:	96EC242EA2E25558F7EC13FA88D9D793
SHA1:	B0BB7F6BD5206CC1FFB572CBD4A6AD2F88D42433
SHA-256:	850C54CE960E710757379C19601C65C00CF7D485063115F34AA30AE193CCEA43
SHA-512:	8C732012F96C7A9B4434F1BC27262A07080F05FCDF54E64B9CB4F37C20D3D8A85FAC2387C934798056D137B03F918D5CE4847C835CC013EDD4485686993D5F4F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
Preview:	OfficeBrowserFeedback.setUiStrings({FeedbackSubtitle:"Send Feedback to Microsoft",PrivacyStatement:"Privacy Statement",Form:{CommentPlaceholder:"Please do not include any confidential or personal information in your comment",CategoryPlaceholder:"Select a category (optional)",EmailPlaceholder:"Email (optional)",RatingLabel:"Rating",ScreenshotLabel:"Include screenshot",Submit:"Submit",Cancel:"Cancel",EmailCheckBoxLabel:"You can contact me about this feedback",PrivacyConsent:"IT admins for your organization will be able to view and manage your feedback data.",PrivacyLabel:"By pressing submit, your feedback will be used to improve Microsoft products and services. ",ScreenshotImgAltText:"Screenshot Preview"},SingleForm:{Title:"Please provide feedback"},SmileForm:{Anchor:"I like something",Title:"What did you like?"},FrownForm:{Anchor:"I don't like something",Title:"What did you not like?"},IdeaForm:{Anchor:"I have a suggestion",Title:"What do you suggest?"},BugForm:{Anchor:"File a bug",Titl

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 57, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPl9i4pxl/k4E08up:6v/lhPq4p7Tp
MD5:	BCE572DB5F65A2607A31A915D93A085B
SHA1:	9D61F275925E75EAE59A226539904E26B7191A3C
SHA-256:	1D791F69890A3B586DFFAE8EB690879079AD3D4848EBBE2D9CF49BF89FDA20A5
SHA-512:	D6CA8B3C28B9291CB2541CF5B249EB45C06A804F9486B23364C743A0C2291E79B72F09FC05CE2F5B67F6246C5A6E4F8AAA80D57AA9362A009C46E98BEF000CA7
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879e1d989c2b78c8/1714045829450/Tl0Rz5m9L-kgomZ
Preview:	.PNG........IHDR...2...9........%....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6336
Entropy (8bit):	7.887073484659419
Encrypted:	false
SSDEEP:	192:wx46x27I7L8lRcTx3HCHBDA3B6VHj6V+Jcj:Ktv8lROx34ZA3B6VH+kO
MD5:	5D71229F6CA9EBFF5F7972F01B547C7C
SHA1:	4D71B33506E6F0EBA1C783DE37E36480F2E392BE
SHA-256:	ABC0FA95B72F082CF4FBB18267CDBD282F2909B65B1B479D7F339DB41769946E
SHA-512:	31915EB859D432D714CAA2DFF74B7E760DFFE3A672CD872EB8CF07EDDC3B544578640C315CD47802B34F4BF06B31D290C9CBEAB228BC1FA64BDAF36DC523273A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/m2/box42.png
Preview:	.PNG........IHDR..............y.'....IDATx^.....y.....)...5..MT....6./..f.m,@......W.A...o&..$.Q."7............ 0k.VdI..VL.`...w.k\|;...u....=.sf.~....s.9g/w..9.<.93..".H$]]..ttt......7g.ys.0}zg..3u....E.$C...G....\|'N...jk.f.....i..X0....X8....C....^;v..:..:.a.m....rz.x<..c..q..>..S...t.s....<...o..Cw.y......<x...*....6e........3.._..9H.f..}.._......m.F.#.Wd...(.J........\|yB....\|...+."O+.B.=..^.6-cK...\|./.t..m .f._...F.E.oum\..>.7l..l.<.f..[.H.mZFiC...-_..#....[.d..{........Z.~dd.......t.../`S.^.z...........-....Gm...n....m..2...#n!%..Ci.j..t....7..M...........8t.......^..h..d..]a.....K....L.....x6\|6xM.s.M.../.]...=..........<4..l.......e......>J1.....D.;w.\|..fY...x........m....W.+...9.Q>S.l..J.U.f0..._Z..Y....._s.O..!.2....u&..zo.z.-..>S..p....... .....x=u..2.M.jGb..G9.V.<;d."x@...@.......c.f.p......5....ZQ..8].<^.)c..f(.W....[...^.....gCW&.$i...I.&x.0.~8..!.x.t../>.c..:.(..cN..]XD..-...gk{.gCW9....<.'.l.... ..v.........<.....).

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64817)
Category:	downloaded
Size (bytes):	715802
Entropy (8bit):	5.273008274514747
Encrypted:	false
SSDEEP:	6144:s19A71fCfICd09Pc+W2Bf94XC8fl+w13Ro19h1VNjaPLC8mNn+S0nVk3oxS/yYkU:D5HikVNT
MD5:	4BF8E4920C855FC5166ED2CB6CB0113F
SHA1:	32B9FCE25A868BB43B8A9D79D58E04C14BF186B4
SHA-256:	660DECF32280D7367D11B486A38A1E9F96C4A32F74EA3AEE374C4B732ECA5C27
SHA-512:	7D7D7D6145D1839FEB8B6D147C989E49773631CDC8F9341EF9BF1366B82A6C9E15F142BAE6224E047586C5E8AA9AE119ECC3B5AA2E27D38F8F38B7917988613F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/osfruntime_ono.js
Preview:	/* Office runtime JavaScript library /../..Copyright (c) Microsoft Corporation. All rights reserved../.../. Your use of this file is governed by the Microsoft Services Agreement http://go.microsoft.com/fwlink/?LinkId=266419... This file also contains the following Promise implementation (with a few small modifications):. * @overview es6-promise - a tiny implementation of Promises/A+.. * @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald). * @license Licensed under MIT license. * See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE. * @version 2.3.0.*/.var __extends=this&&this.__extends\|\|function(){var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};return function(t,n){if("fu

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Category:	downloaded
Size (bytes):	272885
Entropy (8bit):	5.822230271189
Encrypted:	false
SSDEEP:	3072:5sV/EY0VJL3sx+u1wD7pOPaXD9NSt19frKLix3a:5sN16QkMt1h3a
MD5:	5E32E9126ABFD0EB21EB64F14208D8B2
SHA1:	55AC549D0B69A8C332F00AD4C49A91B0E8CA2C4D
SHA-256:	A2ABDA2344B2555E9331B1677D27AA795A28383C234230D4A12738FA54E0934D
SHA-512:	1F7F42E04C07495C6BF2EB45CCB7A3FC4F738F20E23DD1BCA4E464BCBE09723BF061374A25DB2E2BDB644DC272F4ED8962C7472BFEF5106BC949D187B5A5B023
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/oreonavpane.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[682],{69219:function(e,n,t){var o=t(93556),i=t(78267)(o);i.push([e.id,".menu__menu___J9EM_ {\n overflow: hidden;\n}\n\n.menu__menu___J9EM_ .ms-FocusZone.ms-ContextualMenu.is-open {\n font-family: 'Segoe UI', Arial, Verdana, Sans-serif;\n font-size: 12px;\n color: #444;\n z-index: 1001;\n min-width: auto;\n background-color: white;\n overflow: hidden;\n}\n\n.ms-ContextualMenu-item.menu__item___HMPdI .ms-ContextualMenu-link[disabled]:hover {\n background-color: transparent;\n border-color: transparent;\n transition: none;\n}\n\n.ms-ContextualMenu-item.menu__item___HMPdI .ms-ContextualMenu-link.is-expanded,\n.ms-ContextualMenu-item.menu__item___HMPdI .ms-ContextualMenu-link:hover {\n background-color: #f0daee;\n border-color: #f0daee;\n color: inherit;\n font-weight: inherit;\n}\n\n.menu__menu___J9EM_ .ms-ContextualMenu-divider {\n height: 1px;\n margin-left: 20px;\n margin-right: 5px;\n display:

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41569), with no line terminators
Category:	downloaded
Size (bytes):	41569
Entropy (8bit):	5.349246096567034
Encrypted:	false
SSDEEP:	384:wwstGDociKcWpWS8neDvci6hR5fZ2tF3t97D0QeIHcTzeC:wBlneDvci6hR5fZyt97QLIUz
MD5:	345BFF8D2E34511694D9D12A008F5F5D
SHA1:	B3F35302052C26C285C43B935BCE972904E62E28
SHA-256:	DD4039F8AFAC6FD76B462C4FD4F90374B18DB762719108491AC2E365196D71AC
SHA-512:	5B6A9EB510BFBD7198D00BA674FEB6D04B6E95A7E359A0C9B1C17086FACA1859AE4FE126985812C0AB1E87FEA963FA9B169C3A21A7DA534EC79B972D0935A692
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wacairspaceanimationlibrary.js
Preview:	function WacCurve(n,t,i,r,u,f){this.ID=n;this.type=t;this.x1=i;this.y1=r;this.x2=u;this.y2=f}function WacIntWrapper(n,t){this.value=n;this.contextId=t}function WacKeyFrame(n,t,i,r,u,f,e,o){this.type=n;this.curveID=t;this.startTime=i==null\|\|i.value==undefined?new WacIntWrapper(i,null):i;this.endTime=r==null\|\|r.value==undefined?new WacIntWrapper(r,null):r;this.startValue=u==null\|\|u.value==undefined?new WacIntWrapper(u,null):u;this.endValue=f==null\|\|f.value==undefined?new WacIntWrapper(f,null):f;this.relativeTo=e;this.operationType=o}function WacAnimation_ContextVariableManager(){}function WacAnim(n,t){this.ID=n;this.keyFrames=t}function WacAnimationEngine(){this.AnimationQueue=new Array(0);this.sharedTimer=null;this.sharedCancelTimer=null;this.resetInterval=5e3;this.sharedTimerRefs=0;this.conflictTable=new Array(0);this.currentAnimationIndex=-1;this.temporaryIDGenerator=0}function WacAnimation_State(){this.Index=0;this.Data=new Array(0);this.AnimateRight=!1}function WacAnimation_Object(n

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	654522
Entropy (8bit):	5.521300321901229
Encrypted:	false
SSDEEP:	12288:YUEd33S/OPTyfSlImMQDSt4jIlkIlZlt/ltZtNhlJakECuY:YT3PTyfSlImMQDSYIlkIlZlVakEtY
MD5:	F8102D3FA3867FAF52863BB7AECD7D7E
SHA1:	1BDAAEA9CCCAC15ADAEB996F382EA2FE70D6E851
SHA-256:	8485083BAC0ECEF227326D5D941C46BA1B314DBE54C13F11D906E3871CB4EB76
SHA-512:	9C17706475F7B89BF5B0886BD5444FCC44899843492C4D2864F65AA2CE39E37FB3E848D52B082409CA8A80283F5D1B74A940734C4A6ABB33347A370F9BD2BE6F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/appChromeLazy.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[743],{44343:function(e,t,n){"use strict";n.d(t,{u:function(){return i}});var o=n(91671),r=n(76031);const i=e=>((0,r.a)(e),(0,o.BX)(e.root,{children:[e.contentBefore&&(0,o.tZ)(e.contentBefore,{}),(0,o.tZ)(e.input,{}),e.contentAfter&&(0,o.tZ)(e.contentAfter,{})]}))},27903:function(e,t,n){"use strict";n.d(t,{h:function(){return p}});var o=n(64300),r=n(88189),i=n(44102);const a=(0,o.U)("r1jtohuq","rl1z2p5",{r:[".r1jtohuq{display:inline-flex;align-items:center;flex-wrap:nowrap;gap:var(--spacingHorizontalXXS);border-radius:var(--borderRadiusMedium);position:relative;box-sizing:border-box;min-height:32px;padding:0 var(--spacingHorizontalMNudge);font-family:var(--fontFamilyBase);font-size:var(--fontSizeBase300);font-weight:var(--fontWeightRegular);line-height:var(--lineHeightBase300);background-color:var(--colorNeutralBackground1);border:1px solid var(--colorNeutralStroke1);border-bottom-color:var(--colorNeutralStrokeAc

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1922), with no line terminators
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	5.006174566262526
Encrypted:	false
SSDEEP:	48:yThd/YIWeETNQuFNJMgBVAGzeFWOUutFRVoZjskBWs:U0IWYuPuG3yov
MD5:	3E3CD75B07B521BC61C01450E2C7873A
SHA1:	57D7881E0E878CABE74B1021CF86126148928DE7
SHA-256:	2882BF4B22D0AD63E6F8877EB5C22353921E8C87B197911462933B7D1A7A44B8
SHA-512:	3B1D53CB1F49B2CF8648CEF8EDEB526B924430F2FC622421DF6AB3F61E49449CD5EB8BCCC7E6A019575A4843B0D3C50A69C4B0BF1D1133F960E92969CAC37BE7
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/BrowserUls.js
Preview:	function InitializeUls(){TheUlsHost=new Diag.ConsoleUlsHost;Diag.ULS.setUlsHost(TheUlsHost)}function FlushBrowserUls(){TheUlsHost&&TheUlsHost.dispose();InitializeUls()}var __extends=this.__extends\|\|function(n,t){function r(){this.constructor=n}for(var i in t)t.hasOwnProperty(i)&&(n[i]=t[i]);r.prototype=t.prototype;n.prototype=new r},Diag,TheUlsHost;(function(n){var t=function(){function n(){}return n.prototype.isEnabled=function(){var n=!1;try{typeof Storage!="undefined"&&(n=localStorage.getItem("EnableConsoleLogging")==="true")}catch(t){}return n&&window.console&&window.console.log},n.prototype.error=function(n){window.console.error(n)},n.prototype.warning=function(n){window.console.warn(n)},n.prototype.info=function(n){window.console.info(n)},n.prototype.log=function(n){window.console.log(n)},n}(),i=function(i){function r(r,u){r===void 0&&(r=new t);i.call(this,SessionId,BrowserUlsUploadPath,new n.UlsUploadConfiguration(null,null,null,null,null,null,!0));this._console=r;this._suppress

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	76571
Entropy (8bit):	5.364259301211758
Encrypted:	false
SSDEEP:	768:Y57B+n7r5qGhmViGJmOsrmNS+p2ZiDO0eX/DcynXE+L92w7q9u7k78CRtfa:YxB+n7r55RGMr9nXEiz7V7k78r
MD5:	4DE42314D6EDDA70DF9779762ACC12B8
SHA1:	2AF63137ABC68C0910107F8598B7DE48FD5BBD9C
SHA-256:	7E86DF2AC06E3524CB7BC6F0B8EB07565BA6D103EAF3CF1A30AC4C78F11A4EAA
SHA-512:	4465A7B79288AC5B75B4B21DDE3EA774F94AC209DDADFF99DA7741ED841C739C1F82DAEB550DC707A986FFFED8B9B84F45CA7705F40244A993D0CE34BD65B02B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.FloodgateDynamicCampaign=t():e.FloodgateDynamicCampaign=t()}(self,(function(){return function(){var e={7222:function(e,t,n){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e,t,n,r){void 0===r&&(r=n),Object.defineProperty(e,r,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),i=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|r(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),t.IFloodgateHostPlatform=t.GovernedChannelType=t.ICampaignDefinitions=t.Api=void 0,i(n(7560),t),t.Api=n(7560),i(n(2783),t),i(n(8262),t),i(n(234),t);var o=n(9556);Object.defineProperty(t,"ICampaignDefinitions",{enumerable:!0,get:function(){return o.ICampaignDefinitions}});var s=n(8445);Object.defineProperty(t,"Govern

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12695)
Category:	downloaded
Size (bytes):	1156172
Entropy (8bit):	5.476091319407222
Encrypted:	false
SSDEEP:	6144:gpVG3XOA+n7sE4WYX2snbBVQJzmPICFHamauzAr/NVyXga0f3nZ4QnnlOFmX/3zK:gpM3EYJnbBNJG/iQZf3dn5X/jUIqm2Xt
MD5:	574FD73194781626ACA55C81F59D43F6
SHA1:	C83C3630EB878CA247E0C6235D674277271FEC69
SHA-256:	A7C7314646AD30C6042053CC2D4DDCF0DAAD63D0F4826A68C6237EF260D48C93
SHA-512:	C4D5A73B19A65D0682726BFFA0159D39A35AE3EE4D980AD7525DEC17737CA633FA7C52056FDE95F5E067AE7D7140574AA54D18C22157E842CBA9C339914DB432
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
Preview:	!function(){var e,t,r,n,o,a={3923:function(e,t){e.exports={Form:{Cancel:function(n){return"Cancel"},CommentPlaceholder:function(n){return"Please do not include any confidential or personal information in your comment"},EmailPlaceholder:function(n){return"Email (optional)"},Submit:function(n){return"Send"},Title:function(n){return"Feedback to Microsoft"},TemplateErrorMessage:function(n){return"One or more questions are required or the input is not valid"}},Questions:{ContactMeQuestion:function(n){return"You may contact me about this feedback"}},Common:{LoadingText:function(n){return"Loading, please wait..."}},Error:{ErrorMessage:function(n){return"Survey failed to load"}}};},556:function(e,t){e.exports={CloseLabel:function(e){return"Close dialog"},EmailTextFieldPlaceholder:function(e){return"Email (optional)"},EmailTextFieldInputError:function(e){return"Email address is invalid"},CommentTextFieldPlaceholder:function(e){return"Please do not include any confidential or personal informatio

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 45 x 40, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770307
Encrypted:	false
SSDEEP:	3:yionv//thPl6tvtxl/k4E08up:6v/lhPAt7Tp
MD5:	504A4FCB3754406A125082ECA2E2BC3E
SHA1:	1AE5867926C24A2510D8806C57D8E1CA6D513854
SHA-256:	3BC7BFF89B796B6680A1DB2CB63FF629359936B2BD9E2000641F85354F7A1D70
SHA-512:	323252A9C67207AEE3E740DCC314329DCDD729B872857B3B4DB131EB0E8548A624B45E39D5B3CF7145B762C4D7CF7870F4C76AE3BBB8B66C4C459840196A9A93
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...-...(.......~....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36211)
Category:	downloaded
Size (bytes):	753884
Entropy (8bit):	5.361637276897708
Encrypted:	false
SSDEEP:	12288:Rhtu5gWm8B0GFH8cqIGTdK+IU03ao6ZWaYqFxZ:xWb0GFH8cqIGJK+IUUao6ZX
MD5:	83C28BC9280BFF98C404AA9EADAA67EE
SHA1:	FE235FA5B4D836FFA9D8A10E7B76DA1AF6289390
SHA-256:	90B2FAFD05DA9EAE5C5F3C11A7B665FF3744899CC53C7AA823825D302CA1CF63
SHA-512:	4FAE040D6D5381C73A1644EFE4E1EBABDE5D728BCDE263531AE657EB57BB9A9523D492053AE5FCD6B912BC5897EB8DFBEAD10EEEEA899E157D3A51AAB01ACA4C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
Preview:	/! For license information please see wacodcowlhostwebpack.js.LICENSE.txt /.var __webpack_result__;(()=>{var e=[(e,t,n)=>{"use strict";n.d(t,{a:()=>r,b:()=>c,c:()=>s,d:()=>i,e:()=>d,f:()=>o,g:()=>l});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}a(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},r.apply(this,arguments)};function o(e,t){var n={};for(var a in e)Object.prototype.hasOwnProperty.call(e,a)&&t.indexOf(a)<0&&(n[a]=e[a]);if(null!=e&&"function"=

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4207), with CRLF line terminators
Category:	dropped
Size (bytes):	4212
Entropy (8bit):	5.732834657954366
Encrypted:	false
SSDEEP:	48:Rm/hpTwpHpypYYqeQkpYYFNtjEYtDE0kypOKeklKVuAmM3oVKCM3j++j+xUJo8/q:iyzh0QYtD5o6Im+n36+jLXYKMVp/
MD5:	5780200B7FE28C3F2C46864A012246E5
SHA1:	03A13FDC8A8CC7DBECE15E23105EA6E870105133
SHA-256:	0EF96689F29280B58D5024539DFE352EC9DD520CA1EDA5E24F0AEBD31DE0A560
SHA-512:	4FCC868D4E3401728FE4AEBB2AF8D2DB937309EA98EB916E02CF85E61504170C5B7B62C3169D4BE130363552063B1232575CDD9863026CAB2816DA96BD03AD26
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></title><script type="text/javascript"> var l_ErrorImageAlt_Text = "The service is unavailable"; var l_ErrorHeader_Text = "Service Unavailable"; var l_ErrorLine1_Text = "We are currently experiencing technical difficulties."; var l_ErrorLine2_Text = "Please try again later."; var l_ErrorHeaderStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 18pt; color: #444444; line-height: 150%"; var l_ErrorTextStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 10pt; color: #444444"; var language = "en-us"; function writeLocalizedErrorMessage() { getBrowserLanguage(); loadScript(); try{ if(window.parent.g_enableFramePageErrorReporting) { const message = { MessageId: "Wac_AppFailed", SendTim

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	347
Entropy (8bit):	5.407126929319224
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZPP7BA02JhUtj4I+H8zrpHqYw8Ve0pcVlhIvY:Yq0+0mtiSFH4137BA0chmjiHarpHuSkB
MD5:	AC8A48294D5901A99D7D1AD276D8C075
SHA1:	4311ECB3E1D7243DCAEE55D0319C8EBC616734CD
SHA-256:	91E5DBA81759A294EB2FEFEC2BADBF723DAAC5CA8C713C035C09AB060AC02FC7
SHA-512:	F068F31C95F3CB9BE63F87C8D56F7F66613F47DC048891B931D0FD16B0DFFD895CFB27F08077D21C1200A08EB11EE6E0ADE513BFE931E768A4F8F4D456FCA1E2
Malicious:	false
Reputation:	low
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0=\"","Expires":"Thu, 25 Apr 2024 12:50:14 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	187668
Entropy (8bit):	5.494694586722267
Encrypted:	false
SSDEEP:	3072:ITVmMMd63A/7iFF4/n8a2mkbWayvvILb4ppQh87EvSRvjTNfXGq+uodwihfRB0XB:m9z3AjiFF4/8a2mkbrvSRvjTNfXGxuoo
MD5:	5D885AC5E9957FA7FC2E12B8D8BFE27F
SHA1:	7869DC6DF5C92ECEC4825BA355A334D0065E3DBD
SHA-256:	0F67723C2A54546380DD9CD6D77265902E973CB35455FB9D08F3CEB3FC62D1BD
SHA-512:	86A2CB825BDC27FB4634EFFF824B6EF2E577C34DBDB236CF992791A02AADFFDBD3625CFC64307D6704A6A070926CBBFC2905DB67F3BBA26206DBACF6C0B943F3
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.slim.43b32de0474de28993ac.js
Preview:	var Microsoft;!function(){"use strict";var n,t,e,o,i={9323:function(n,t,e){e.d(t,{X:function(){return u}});var o=e(4401),i=e(857),r=e(765),u=function(n){function t(t){var e=n.call(this)\|\|this;return e.H=t,e}return o.ZT(t,n),Object.defineProperty(t.prototype,"value",{get:function(){return this.getValue()},enumerable:!0,configurable:!0}),t.prototype.A=function(t){var e=n.prototype.A.call(this,t);return e&&!e.closed&&t.next(this.H),e},t.prototype.getValue=function(){if(this.hasError)throw this.thrownError;if(this.closed)throw new r.N;return this.H},t.prototype.next=function(t){n.prototype.next.call(this,this.H=t)},t}(i.xQ)},4813:function(n,t,e){e.d(t,{y:function(){return l}});var o=e(7191),i=e(3066),r=e(2055),u=e(3140);function s(n){return n}var a=e(4505),l=function(){function n(n){this.F=!1,n&&(this.A=n)}return n.prototype.lift=function(t){var e=new n;return e.source=this,e.operator=t,e},n.prototype.subscribe=function(n,t,e){var u=this.operator,s=function(n,t,e){if(n){if(n instanceof o.L

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3454
Entropy (8bit):	4.354670943699351
Encrypted:	false
SSDEEP:	96:d/fGFSxPHM1Rh7lE2D5UBTmhI4X3owG39VoP:d/+FkH+PV1STMGVI
MD5:	4E3C18ECF6668A05DC8F730040A53190
SHA1:	0BA20027F19B41BAAAAF9808D29237788B532288
SHA-256:	55C690FC2C656E4F38B1AE33C3A2F41A7801015D04EC72DAB57B9975F6A09486
SHA-512:	24AD937FE47ED4677F685F0DFC06C918C37723DE5B538C7395F4F2F603479D0DCED522C38EDBE3A2EF7E583F3968C2A0BE4D5F27DFA98FA5319E74341EE5C0AE
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1714045830332,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"BB46AA47C239D54223A049EA42FF1E429533F0DD","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51120
Entropy (8bit):	7.954718383506729
Encrypted:	false
SSDEEP:	1536:fAXURb/VRlg/u3OD+RerLnSFFFCX8iarUMpu:f/VNfO2Ocerbdv/Mpu
MD5:	ECA50172A6583B16E553E9917FB710FB
SHA1:	2FD7FB2FF5C10E17E9066CE6BD2393E1F6B93CC0
SHA-256:	FFF5919A2CBACEAE0528522B6C73E4F1D549CA8EE13C680B50ED377DFD2B61F0
SHA-512:	1E7591A35DE7C00A197C08F15BA9ED7A9014EFFEF03DB240A92B63F8A8EC8DAE8F02811C8E9696FA934E6C4EFCBBBA14F2D01082A63471092488850A2D16958B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............@.....wIDATx^..xU......n{..W.;.:T.W-W......I..hD..V..U..P@..A.@H....-.HEF..."....."zE@.B......OY~..s.:{.=.....?{.....N~..z.w..............T.vmr.k.>=.....~.A.......#.q...u..=..I...gee6 .v---.$.".L..=W>kD.+@... ...z..yd...s...mhK..:.avvf._........F.N.........x....?.b.US.\|~ii....W.V.w..-}\|...n//g..7..h..R.m{............X..+&U.....=...h.....B$../......0lll.@.+..l....l.&.o.x9..7.Y.1{.....G...w..-}...>..u."....1h(n.t......m.....X.kIf .i..]...{A......+.g...m=....'//..k=..A\|.v.8&.....!..>.}W.!.D.......s..x....w.a..Mr.....,P.KxII....5.~.>.%..1..1......y.P...w(..{..O ..n.V..Oh...iC[7.x....\..(..D.C...}....}..?...>%...".~0b..g.Yy...^.\|./..+@.7.z.D.\|*==.9.c....g..m\|.]ZZ.^..b}b.....D..ly..3:.P.`BE.+.6..b....1..9...\.." ............7....]r.c.&."...-/.OJ6.........2.c.....pA.Z.................?.Z.x....r.E?`........}W>..c...g@i.."P.kUVQ/..^.........BQ....WguU.E...%1`@.F....}Uax..f..".`,.t..V .9.7..E...[Sm...y.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 9, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlxSEikxl/k4E08up:6v/lhP+nk7Tp
MD5:	65CE50060DCAE70B9E8FCCEB6DEC8ACB
SHA1:	6657BF06399B42E9F661F0CC510F9B987E03CDC0
SHA-256:	CF472DBB67C4D49804E673287A6552F3531DA07791CDAF1D86EBCEA16A6CC490
SHA-512:	BD9744551EEA2D1C54FC65DD1E024292FB42E777559BF80AC444E44BA61AB019DCFF5D2490EB2B5FACE7A7423C74D0B08FA69F29659696EC23D6AAEBE9631930
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/879e1e0cdc4c080b/1714045848213/PEAz8yij71iqTJ_
Preview:	.PNG........IHDR...V.........'.L.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65476)
Category:	downloaded
Size (bytes):	124755
Entropy (8bit):	5.3296488665398325
Encrypted:	false
SSDEEP:	1536:/+HzBSZuu6aG6ePs15sqsDCNjiei7NmZuuJizS84Rb/KZAj9Nx:/+Y676ePcegjiX7Nmxn9bKE9v
MD5:	7E8696B25A28FB4E7EA773A68AA8DFE5
SHA1:	2F29D7054388390D0040A5BFD2E6BC02D0A759A6
SHA-256:	2ABCA138C3C22FB15EC89DB558736331B6AFC0FF557A55B4D2FADAB6116CC877
SHA-512:	6986E5FF462718701A0F300ED8340B2C3B7C3A1647DBDB0DA00842F4DFF7EE521B3EEEE3E5DB9505D5A487C810E3E747535E4FCFDA57647DA4E7959398D99879
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-19.004/wacodcowlhostwebpack.manifest/12.js
Preview:	/! For license information please see 12.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[12],{209:(e,t,n)=>{n.r(t),n.d(t,{_InMemoryPropertyStorage:()=>jo,_OneDSLogger:()=>Bo});var a=n(0),i="function",r="object",o="undefined",s=Object,c=s.prototype,d=s.assign,l=s.create,u=s.defineProperty,f=c.hasOwnProperty,p=null;function m(e){void 0===e&&(e=!0);var t=!1===e?null:p;return t\|\|(typeof globalThis!==o&&(t=globalThis),t\|\|typeof self===o\|\|(t=self),t\|\|typeof window===o\|\|(t=window),t\|\|typeof n.g===o\|\|(t=n.g),p=t),t}function _(e){throw new TypeError(e)}function h(e){if(l)return l(e);if(null==e)return{};var t=typeof e;function n(){}return t!==r&&t!==i&&_("Object prototype may only be an Object:"+e),n.prototype=e,new n}(m()\|\|{}).Symbol,(m()\|\|{}).Reflect;var b,g=function(e,t){return g=s.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]=t[n])},g(e,t)};function v(e,t){

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2997)
Category:	downloaded
Size (bytes):	3046
Entropy (8bit):	5.425422087431829
Encrypted:	false
SSDEEP:	48:mdILur7JKN7i/GmBQw0q1abuwtTwWWVwokWVw5OY9OHXtVwJyVwu9Zed8yGWL7x+:mvcfbqoiwtTwWiwokiw5OY9OHXHw8wMh
MD5:	126B73E9F3729F144278662AEA5148B9
SHA1:	5FF635CE022E88AC1368B55EC8B5F6EFAAFD8001
SHA-256:	F84DC1D640FC8E1ACF804255DC3027F34301A176F547E2BE6CFA01155A189031
SHA-512:	4D5D9427E95A908316AD9FB2EDA54BE76DC07550C49CE07A7BC29AC3B75AD8D355DADBAB40B28DB35D23DC1DA3D82E5C0CC2973F455D98398A37B5A757D1401C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/oreonotebookpane.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[3],{98544:function(e,n,t){var o=t(93556),a=t(78267)(o);a.push([e.id,".wacCanvasOverlay__overlay___DpHwX {\n bottom: 0;\n left: -50px;\n position: absolute;\n right: 0;\n top: 0;\n z-index: 90;\n background: rgba(0, 0, 0, 0);\n -ms-high-contrast-adjust: none;\n}\n",""]),a.locals={overlay:"wacCanvasOverlay__overlay___DpHwX"},e.exports=a},85649:function(e,n,t){"use strict";t.r(n);var o=t(37730),a=t(26410),r=t(39504),i=t(4514);const s=(0,o.connect)((function(e){return{showOverlay:e.isVisible,navSelection:e.navSelection}}))((function(e){var n=e.showOverlay&&!e.navSelection[r.i.SHOW_ALL]?a.createElement("div",{className:i.overlay}):null;return a.createElement("div",null,n)}));var c=t(89198),l=t(41664),u=t(29513),d=t(90672),m=t(70704),S=t(64144),v=(0,l.xj)(),g=function(e,n){var t={};return t[n]=!0,e((0,d.h9)(t)),c.ZP.ActionResponse.Succeeded};var P,h=t(99783),p=t(59745),Z=t(71859),b=t(63249),f=t(63654);P=S.Z.di

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 13:49:41.525439024 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 25, 2024 13:49:50.174038887 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.174077034 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.174149036 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.174340010 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.174386978 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.174556017 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.174559116 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.174565077 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.174753904 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.174762964 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.531912088 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.532212019 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.532222986 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.532546043 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.532718897 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.532742977 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.532846928 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.532907963 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.533322096 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.533380985 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.533890963 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.533942938 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.534368992 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.534426928 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.535070896 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.535154104 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.535244942 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.535248995 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.535341024 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.535424948 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.575651884 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.575673103 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.575684071 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.623735905 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.677360058 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.677488089 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.677551031 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.677854061 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.677872896 CEST	443	49735	13.107.42.12	192.168.2.4
Apr 25, 2024 13:49:50.677881956 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.677913904 CEST	49735	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:49:50.794173956 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:50.794235945 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:50.794327021 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:50.794523954 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:50.794534922 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.134632111 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 25, 2024 13:49:51.175240993 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.175677061 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.175709009 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.176820993 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.176899910 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.178039074 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.178106070 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.178375959 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.178381920 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.228563070 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.315819979 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.315910101 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.315957069 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.317728043 CEST	49737	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.317745924 CEST	443	49737	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.319571972 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.319654942 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.319745064 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.319999933 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.320034027 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.530927896 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:49:51.531023979 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:49:51.531126976 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:49:51.531311989 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:49:51.531336069 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:49:51.699736118 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.700129032 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.700176954 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.701601982 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.701952934 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.702085972 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.702109098 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.702203035 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:51.744676113 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:51.793303013 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:49:51.804142952 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:49:51.804178953 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:49:51.806065083 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:49:51.806154966 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:49:51.814011097 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:49:51.814193964 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:49:51.868376017 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:49:51.868458033 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:49:51.910811901 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:49:52.517379045 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.517489910 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.517550945 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:52.528892040 CEST	49740	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:52.528908968 CEST	443	49740	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.532179117 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:52.532215118 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.532263994 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:52.532905102 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:52.532917976 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.922071934 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.922939062 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:52.922960997 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.923441887 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.924964905 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:52.925049067 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:52.925602913 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:52.968118906 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:53.457597017 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.457640886 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.457842112 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.462456942 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.462481022 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.695969105 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.696592093 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.704545021 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.704572916 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.704907894 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.746157885 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.800076008 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.840131044 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.911225080 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.911299944 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.915358067 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.925036907 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.925036907 CEST	49743	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.925059080 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.925079107 CEST	443	49743	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.974805117 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.974837065 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:53.979438066 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.980012894 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:53.980031967 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:54.206150055 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:54.206569910 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:54.212150097 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:54.212161064 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:54.212541103 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:54.238852978 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:54.280129910 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:54.297151089 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297208071 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297257900 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.297282934 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297322989 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.297368050 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297388077 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297425032 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.297430992 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297506094 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297554016 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.297560930 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297607899 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297616959 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.297636986 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.297657013 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.297679901 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.297683954 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.339656115 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.421709061 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.421752930 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.421793938 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.421828032 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.421838045 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.421907902 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.421962023 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.421967983 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.422051907 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.422099113 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.422105074 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.422224998 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.422277927 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.422283888 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.422322989 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.422328949 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.422400951 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.422450066 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.422699928 CEST	49742	443	192.168.2.4	13.107.137.11
Apr 25, 2024 13:49:54.422710896 CEST	443	49742	13.107.137.11	192.168.2.4
Apr 25, 2024 13:49:54.427654982 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:54.427824974 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:54.427875042 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:54.476496935 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:54.476528883 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:54.476547956 CEST	49744	443	192.168.2.4	23.201.212.130
Apr 25, 2024 13:49:54.476557016 CEST	443	49744	23.201.212.130	192.168.2.4
Apr 25, 2024 13:49:56.222898006 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.222984076 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.223079920 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.224086046 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.224143982 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.243587017 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.243643045 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.243809938 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.244416952 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.244450092 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.572845936 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.573117971 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.573158026 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.574654102 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.574722052 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.582540989 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.582784891 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.582803011 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.586452961 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:56.586529970 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.999039888 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:56.999242067 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.004055023 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.004370928 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.004379034 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.004420042 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.054250002 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.054255009 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.054266930 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.054280043 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.104038000 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.104043961 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.116821051 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.116956949 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.116977930 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.117019892 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.117048025 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.117074966 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.117094040 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.117116928 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.117168903 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.119615078 CEST	49749	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.119648933 CEST	443	49749	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.132704020 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.176162958 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.244844913 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245048046 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245069027 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245085955 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245120049 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.245127916 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245148897 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245174885 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245202065 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.245202065 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.245209932 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245250940 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.245523930 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245579958 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245610952 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.245615005 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245649099 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.245675087 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.245675087 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.289412022 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.354669094 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.354727983 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.354773045 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.354808092 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.354835033 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.354850054 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.354909897 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.354916096 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.355196953 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.355247021 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.355271101 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.355277061 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.355308056 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.355715990 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.355755091 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.355782986 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.355789900 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.355818987 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.399924040 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.399944067 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.450829983 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.463893890 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.463931084 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.463973045 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.463992119 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.463992119 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.464036942 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.464073896 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.464118958 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.464164019 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.465125084 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.465167999 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.465187073 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.465223074 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.465250015 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.465269089 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.465614080 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.465656042 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.465682983 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.465694904 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.465720892 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.465739965 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.465749979 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.466274977 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.466339111 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.466370106 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.466381073 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.466409922 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.466811895 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.466850996 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.466883898 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.466895103 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.466922998 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.467639923 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.467686892 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.467706919 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.467719078 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.467747927 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.467915058 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.467973948 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.467992067 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.468076944 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.468174934 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.517605066 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.519562960 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.519601107 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.537754059 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.537786007 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.537883043 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.538203955 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.538213968 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.675658941 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:57.675698042 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:57.676028967 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:57.676522017 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:57.676532030 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:57.872827053 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.916879892 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.944437981 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.944444895 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.945534945 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.945599079 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.946379900 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.946443081 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.946542978 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:57.946553946 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:57.986630917 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.021714926 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.022013903 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.022026062 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.023704052 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.023765087 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.023772001 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.024051905 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.025197983 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.025281906 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.025367022 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.025403976 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.025410891 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.072206974 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.094614029 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.094831944 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.094839096 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.094867945 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.094881058 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.094887018 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.094896078 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.094906092 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.094913960 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.094928026 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.094965935 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.095330954 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.095345974 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.095376015 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.095383883 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.095397949 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.142697096 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.204356909 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.204370022 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.204408884 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.204442024 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.204447985 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.204469919 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.204483032 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.204505920 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.204837084 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.204859018 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.204890013 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.204895020 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.204920053 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.204937935 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.205281019 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.205305099 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.205334902 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.205339909 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.205368996 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.205378056 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.246783972 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.246799946 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.246851921 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.246864080 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.246902943 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.259589911 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.259664059 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.259721994 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.259727955 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.259826899 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.259831905 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.259954929 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.259999990 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.262408972 CEST	49751	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.262422085 CEST	443	49751	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.313805103 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.313832045 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.313890934 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.313903093 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.313966990 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.315695047 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.315716028 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.315748930 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.315754890 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.315793991 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.316241026 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.316256046 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.316289902 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.316308022 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.316323042 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.316327095 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.316343069 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.316365957 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.316375971 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.316482067 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.317172050 CEST	49750	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.317178011 CEST	443	49750	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.395545006 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.395576000 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.395714045 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.400369883 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.400384903 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.482605934 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.482614994 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.482770920 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.482796907 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.482796907 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.482923031 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.483244896 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.483266115 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.483346939 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.483572006 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.483587027 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.483781099 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.483793974 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.484242916 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.484255075 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.732924938 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.733428955 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.733441114 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.733764887 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.734096050 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.734158039 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:49:58.785936117 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:49:58.825412035 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.825676918 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.825689077 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.827088118 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.827394009 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.827405930 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.827928066 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.828119993 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.828135967 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.828370094 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.828433037 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.828443050 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.828476906 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.829344988 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.829430103 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.829438925 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.829555035 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.829776049 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.829823017 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.830221891 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.830391884 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.830799103 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.830806017 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.830821037 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.830836058 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.831020117 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.831027031 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.832226992 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.832293034 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.832300901 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.832349062 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.832731962 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.832902908 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.833125114 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.833132029 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.833163023 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.833185911 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:58.884788990 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.884800911 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:58.884805918 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.067204952 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.067291021 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.067341089 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.067608118 CEST	49753	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.067620039 CEST	443	49753	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.070282936 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.070312977 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.070359945 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.070501089 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.070584059 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.071039915 CEST	49754	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.071052074 CEST	443	49754	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.077469110 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.077476978 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.077541113 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.077548981 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.077575922 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.077594995 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.077625990 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.077687025 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.077693939 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.077852964 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.077910900 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.077917099 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.119088888 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.187159061 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187166929 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187242031 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.187249899 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187474012 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187480927 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187638998 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.187644958 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187732935 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187784910 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.187787056 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187834978 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.187844038 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.187993050 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.188049078 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.188055992 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.188245058 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.188297987 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.188303947 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.188352108 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.188397884 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.188401937 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.229023933 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.296312094 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.296504021 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.296590090 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.296596050 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.296669006 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.296674967 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.296713114 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.296720028 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.296765089 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.297568083 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.297574997 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.297646046 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.297651052 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.297698975 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.297821045 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.297882080 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.297887087 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.298132896 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.298192978 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.298198938 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.298403978 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.298470974 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.298475981 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.298690081 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.298748970 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.298754930 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.298871040 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.298927069 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.298933029 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.299065113 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.299129009 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.299134016 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.352551937 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.405989885 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.406013012 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.406105042 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.406111956 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.406429052 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.406435966 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.406502008 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.406508923 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.406934023 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.406997919 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.407001972 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.407047987 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.407059908 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.407272100 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.407339096 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.407349110 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.407531023 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.407603025 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.407609940 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.408850908 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.408899069 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.408916950 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.408925056 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.408957005 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:49:59.408962965 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.409007072 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:49:59.409049988 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:00.133057117 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:00.137707949 CEST	49755	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:00.137722015 CEST	443	49755	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:00.302748919 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.302757025 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.302805901 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.303212881 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.303225040 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.650932074 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.651120901 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.651129007 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.655092001 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.655158997 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.655169010 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.655206919 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.656202078 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.656394958 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.656465054 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.656471014 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.706167936 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.784198046 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.784265995 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.784296036 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.784455061 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.784499884 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.784872055 CEST	49765	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.784879923 CEST	443	49765	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.785769939 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.785779953 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:00.785839081 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.786351919 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:00.786362886 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.131078005 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.131320000 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.131326914 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.132584095 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.133018017 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.133179903 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.133183956 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.133210897 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.183808088 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.261750937 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.261806965 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.261831999 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.261935949 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.261984110 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.278671980 CEST	49766	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.278681993 CEST	443	49766	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.389946938 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:01.389950037 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.389961958 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:01.389971018 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.390057087 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:01.390145063 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.390834093 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:01.390845060 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.390850067 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:01.390857935 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.425276995 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.425302029 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.425390005 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.432184935 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.432202101 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.730801105 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:01.731215000 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:01.731240988 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:01.731576920 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:01.732748032 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:01.732811928 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:01.732970953 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:01.732970953 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:01.732996941 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:01.738965988 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.740550995 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.740575075 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.741070032 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.741714001 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.741714001 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.741746902 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.741806030 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.766280890 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:01.766441107 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:01.766587019 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:50:01.777345896 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.785630941 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.817811012 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.821351051 CEST	49741	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:50:01.821357965 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.821366072 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.821386099 CEST	443	49741	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:01.825041056 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.825150967 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.825156927 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.825269938 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.826190948 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.826375961 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.826414108 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.868123055 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.868480921 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.868500948 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.870286942 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.870419979 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.870426893 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.870496035 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.871656895 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.871674061 CEST	443	49773	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.871727943 CEST	49773	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.916157007 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.955100060 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.955132961 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.955199957 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.955210924 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.955333948 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.955476046 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.957736969 CEST	49775	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.957748890 CEST	443	49775	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.958767891 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.958775997 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:01.958980083 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.959554911 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:01.959567070 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.299474001 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.305490971 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.305500984 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.306070089 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.316932917 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.317080975 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.317460060 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.356247902 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.356458902 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.356466055 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.356525898 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.356535912 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.356578112 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.356648922 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.356699944 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.356880903 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.356930017 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.356935978 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.356970072 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.360115051 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.445941925 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.445997953 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.446005106 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.446043968 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.446058035 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.446156025 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.446201086 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.460084915 CEST	49779	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.460091114 CEST	443	49779	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.466697931 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.466756105 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.466763973 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.466825008 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.466880083 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.466886044 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.467189074 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.467242956 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.467248917 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.475023985 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.475085020 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.475090981 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.475289106 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.475342989 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.475351095 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.475606918 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.475718021 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.475724936 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.525937080 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.576539993 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.576549053 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.576601028 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.576608896 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.576908112 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.576948881 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.576953888 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.577233076 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.577284098 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.577291012 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.577770948 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.577821016 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.577827930 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.578150034 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.578196049 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.578207970 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.584649086 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.584703922 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.584711075 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.585009098 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.585064888 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.585072041 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.585500956 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.585549116 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.585552931 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.585577965 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.585705996 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.585705996 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.589694023 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.589765072 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.589828014 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.591248989 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.591281891 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.743801117 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.743835926 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.743907928 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.751176119 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.751193047 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.888176918 CEST	49774	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:02.888186932 CEST	443	49774	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:02.929965973 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.930146933 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.930195093 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.930710077 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.932811975 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.932902098 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:02.933187962 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:02.933213949 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.061393023 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.061463118 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.061494112 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.061511993 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.061563015 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.063209057 CEST	49782	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.063225985 CEST	443	49782	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.074168921 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.074196100 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.074253082 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.075006008 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.075021982 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.095278025 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.095483065 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.095500946 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.099401951 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.099467039 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.099478960 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.099512100 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.100214005 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.100363970 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.100368977 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.100452900 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.150311947 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.150331020 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.193007946 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.193026066 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.193079948 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.194124937 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.194137096 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.194416046 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.229023933 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.229370117 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.229424953 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.232398033 CEST	49783	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.232408047 CEST	443	49783	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.320617914 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.320660114 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.324246883 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.325022936 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.325040102 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.417643070 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.418016911 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.418028116 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.419243097 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.419706106 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.419706106 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.419720888 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.419878960 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.467935085 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.539576054 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.548594952 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.548783064 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.548811913 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.548823118 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.548872948 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.548965931 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.549088001 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.571171999 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.571182013 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.571733952 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.605398893 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.605515003 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.609456062 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.609474897 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.609541893 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.610260010 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.610271931 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.610358000 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.611546993 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.611583948 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.612226009 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.612715960 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.612729073 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.614675999 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.614675999 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.614698887 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.614712954 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.616178036 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.616189957 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.618411064 CEST	49784	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.618419886 CEST	443	49784	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.649522066 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.649564028 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.649998903 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.650032043 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.650065899 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.650100946 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.651083946 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.651099920 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.652090073 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.652128935 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.660223007 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.660614967 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.660626888 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.660928965 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.661307096 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.661365986 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.661530018 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.661557913 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.742995024 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.743087053 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.743094921 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.743123055 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.743273973 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.745946884 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.745954037 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.751849890 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.751904011 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.752036095 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.752896070 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.752912998 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.951817989 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.952064991 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.952081919 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.952605963 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.952936888 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.953021049 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.953068972 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.953097105 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.960211992 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.960319996 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.960623026 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.960643053 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.960812092 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.960845947 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.961369038 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.962408066 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.962502956 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.962505102 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.962567091 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.962580919 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.962635040 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.962884903 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.962899923 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.966344118 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.966435909 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.966448069 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.966521025 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.966844082 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.966844082 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.966856003 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.966959000 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.974849939 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.974966049 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.975086927 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.975573063 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.975586891 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.980782986 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.980806112 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.980910063 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.981107950 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:03.981118917 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:03.986002922 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.986219883 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.986238956 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.987149954 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.987307072 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.987322092 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.987432003 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.987620115 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.987620115 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.987649918 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.987688065 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.987726927 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.991442919 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.991755009 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.991784096 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.995368004 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.995462894 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.995791912 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.995803118 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.996140957 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.996309042 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.996309042 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.996326923 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:03.996359110 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:03.996478081 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.010607958 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.010612965 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.042052984 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.042057037 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.042074919 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.042076111 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.057730913 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.086905003 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.086910963 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.098196030 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.098726034 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.098737955 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.099217892 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.099675894 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.099746943 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.099891901 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.099910975 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.197120905 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.197232962 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.197427988 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.198857069 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.198870897 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.202548981 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.202579021 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.203319073 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.203552008 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.203562975 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.203639030 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.203723907 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.203866959 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.205029964 CEST	49796	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.205044985 CEST	443	49796	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.209470987 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.209563017 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.209722996 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.210164070 CEST	49795	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.210170031 CEST	443	49795	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.224318981 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.224328041 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.224390984 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.224419117 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.224714994 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.225272894 CEST	49798	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.225284100 CEST	443	49798	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.228635073 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.228806019 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.228832006 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.228856087 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.228956938 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.229357004 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.229371071 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.229399920 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.229501009 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.236954927 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.236984015 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.237097025 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.237106085 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.237183094 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.237214088 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.237293959 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.238040924 CEST	49797	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.238048077 CEST	443	49797	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.320497990 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.320970058 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.320982933 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.321335077 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.323501110 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.323560953 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.323875904 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.368119001 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.541888952 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.542144060 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.542154074 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.542650938 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.543481112 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.543560982 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.543716908 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.543745041 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.615514994 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.615534067 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.615624905 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.615629911 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.615710974 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.625102043 CEST	49802	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:04.625114918 CEST	443	49802	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:04.781215906 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.781317949 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.781385899 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.781397104 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.781409025 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:04.781481981 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.973196030 CEST	49806	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:04.973212957 CEST	443	49806	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:05.677529097 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:05.677536964 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:05.677632093 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:05.678143978 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:05.678155899 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.022305965 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.023642063 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:06.023648977 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.024868965 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.029272079 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:06.029465914 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.030147076 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:06.076149940 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.113312006 CEST	49723	80	192.168.2.4	23.47.204.65
Apr 25, 2024 13:50:06.169296980 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.169517994 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.169574976 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:06.169584036 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.169688940 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.169742107 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:06.177803040 CEST	49824	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:06.177809000 CEST	443	49824	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:06.222510099 CEST	80	49723	23.47.204.65	192.168.2.4
Apr 25, 2024 13:50:06.224112988 CEST	49723	80	192.168.2.4	23.47.204.65
Apr 25, 2024 13:50:10.183993101 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.184091091 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.184230089 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.184463978 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.184499025 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.522243023 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.522578955 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.522630930 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.523164988 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.526165962 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.526271105 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.526314974 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.526406050 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.526459932 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.526561975 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.526576042 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.586761951 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.586800098 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.586863995 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.594130993 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.594147921 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.764045000 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.764189959 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.764312983 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.765867949 CEST	49839	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:10.765904903 CEST	443	49839	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:10.772891045 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.772912979 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.773324013 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.777762890 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.777777910 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.795499086 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.840116978 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.907172918 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.907792091 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.907813072 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.907830000 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.907867908 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.907870054 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.907888889 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.907916069 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.907919884 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.907952070 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.907979012 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.908041000 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.908175945 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.908375978 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.908420086 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.908452034 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.908459902 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:10.908493996 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.908519030 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:10.930092096 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.931571007 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.931581020 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.931956053 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.934025049 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.934092999 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.934268951 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.934295893 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.934319973 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.934353113 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.934392929 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.934398890 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:10.934552908 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:10.934585094 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.017189980 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.017237902 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.017282963 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.017291069 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.017343044 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.017771959 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.017813921 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.017851114 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.017857075 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.017884970 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.017911911 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.018024921 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.018060923 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.018086910 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.018094063 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.018140078 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.018145084 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.018240929 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.018357992 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.115212917 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.122322083 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.122334003 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.122916937 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.124408007 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.124502897 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.126550913 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.168154001 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.186553001 CEST	49752	443	192.168.2.4	152.195.19.97
Apr 25, 2024 13:50:11.186563015 CEST	443	49752	152.195.19.97	192.168.2.4
Apr 25, 2024 13:50:11.263155937 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263190985 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263242006 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.263251066 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263300896 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.263397932 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263408899 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263457060 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.263463974 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263612986 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263665915 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.263673067 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263843060 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263889074 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.263894081 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263935089 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.263935089 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.263982058 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.266027927 CEST	49844	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.266033888 CEST	443	49844	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.285418034 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.285486937 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:11.285593987 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.288939953 CEST	49843	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:11.288955927 CEST	443	49843	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:13.654242992 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.654263020 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.654434919 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.654728889 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.654742002 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.662457943 CEST	49871	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.662482977 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.662554979 CEST	49871	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.662918091 CEST	49871	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.662940979 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.677788973 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:13.677838087 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:13.678024054 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:13.678596973 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:13.678637981 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:13.921413898 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.921459913 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.921624899 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.922035933 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.922060966 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.990061998 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.990248919 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.990261078 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.990555048 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.990937948 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:13.990994930 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:13.991039038 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.006800890 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.007040977 CEST	49871	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.007061958 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.008277893 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.008837938 CEST	49871	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.009015083 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.009103060 CEST	49871	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.019798994 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:14.020020008 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:14.020045042 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:14.020550013 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:14.020847082 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:14.020936012 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:14.020971060 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:14.021008015 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:14.036164045 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.056128979 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.119080067 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.119134903 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.119138956 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.119163036 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.119188070 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.119215965 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.119366884 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.120066881 CEST	49870	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.120085001 CEST	443	49870	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.136800051 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.137114048 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.137185097 CEST	49871	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.137820959 CEST	49871	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.137840033 CEST	443	49871	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.196610928 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:14.259377956 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.259812117 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.259831905 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.260346889 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.260674000 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.260759115 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.261081934 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.261153936 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.261210918 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.261334896 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.261374950 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.261485100 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.261543036 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.334882975 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:14.335107088 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:14.335546970 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:14.335850000 CEST	49873	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:14.335870028 CEST	443	49873	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:14.401376963 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.401449919 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.401536942 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.402376890 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.402405024 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.611517906 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.611598969 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.611661911 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.612030983 CEST	49881	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:14.612072945 CEST	443	49881	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:14.745450974 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.749228001 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.749279022 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.751008987 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.751116037 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.752137899 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.752235889 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.752300024 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.752316952 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.889698982 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.978583097 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.978609085 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.978666067 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.978691101 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.978714943 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:14.978770971 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.979918957 CEST	49889	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:14.979948044 CEST	443	49889	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:16.947994947 CEST	49921	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:16.948021889 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:16.948074102 CEST	49921	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:16.959248066 CEST	49921	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:16.959270000 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.002854109 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.002895117 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.003016949 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.003611088 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.003629923 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.295351028 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.295618057 CEST	49921	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:17.295634031 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.296114922 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.296535969 CEST	49921	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:17.296614885 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.296690941 CEST	49921	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:17.340126038 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.347961903 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.348222971 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.348246098 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.349556923 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.349960089 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.350142956 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.350195885 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.350195885 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.350249052 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.475960016 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.535002947 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.535098076 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.535149097 CEST	49921	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:17.536462069 CEST	49921	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:17.536472082 CEST	443	49921	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.645198107 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.645272970 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.645344973 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.647871971 CEST	49925	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.647891998 CEST	443	49925	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.712817907 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.712852001 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.713262081 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.715714931 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:17.715728045 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:17.723767996 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:17.723778963 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:17.723963022 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:17.724173069 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:17.724181890 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:18.054697990 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.060656071 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:18.063724995 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:18.063751936 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.063987970 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:18.063996077 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:18.064325094 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.065311909 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:18.065397978 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.065422058 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:18.065454960 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:18.065480947 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:18.065850019 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:18.065928936 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:18.065937996 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:18.107650995 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:18.107708931 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.107743025 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:18.107748032 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:18.154514074 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:18.195219040 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.195250034 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.195291042 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:18.195337057 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.195382118 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:18.195400953 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.195432901 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.195527077 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:18.202730894 CEST	49929	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:18.202761889 CEST	443	49929	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:18.358968973 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:18.359281063 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:18.359329939 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:18.359992027 CEST	49931	443	192.168.2.4	13.107.213.41
Apr 25, 2024 13:50:18.360001087 CEST	443	49931	13.107.213.41	192.168.2.4
Apr 25, 2024 13:50:25.157926083 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.157949924 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.158102036 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.158837080 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.158849955 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.281682968 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.281703949 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.281825066 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.282466888 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.282491922 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.282557964 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.282711983 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.282726049 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.283051014 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.283062935 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.494256973 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.495764017 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.495773077 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.496063948 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.496440887 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.496491909 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.496774912 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.496792078 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.496799946 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.513596058 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.514682055 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.514693975 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.515361071 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.515585899 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.515599012 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.515728951 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.515789986 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.516618013 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.516681910 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.517185926 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.517258883 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.517621994 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.517630100 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.518853903 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.518933058 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.558160067 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.561399937 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.561415911 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:25.602792978 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:25.733242035 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.733314037 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:25.733319044 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.733369112 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.753236055 CEST	49945	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:25.753257036 CEST	443	49945	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:26.204524994 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.204572916 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.204602957 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.204618931 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.204639912 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.204679012 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.204687119 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.204761982 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.204808950 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.205670118 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.205682039 CEST	443	49947	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.205692053 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.205744982 CEST	49947	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.252187014 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.253067017 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.253159046 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.253233910 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.253637075 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.253670931 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.300116062 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.361232042 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.361255884 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.361428976 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.361613989 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.361629963 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.362082005 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.362158060 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.362260103 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.362452030 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.362487078 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.488774061 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.489085913 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.489129066 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.490318060 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.490643978 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.490770102 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.490782022 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.490818977 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.541904926 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.581338882 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.581397057 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.581437111 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.581478119 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.581490993 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.581538916 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.581546068 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.581576109 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.581700087 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.583003044 CEST	49946	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.583009958 CEST	443	49946	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.590058088 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.590396881 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.590404987 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.591242075 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.591425896 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.591470957 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.591495037 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.591516018 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.592403889 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.592478991 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.592516899 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.592581987 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.593147993 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.593154907 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.593501091 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.593574047 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.593620062 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.634850025 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.634851933 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.634860992 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.683029890 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.803589106 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.821929932 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.821959972 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.821976900 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.821997881 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.822021961 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.822031975 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.822036982 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.822067022 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.843780994 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.843799114 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.843852997 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.843863010 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.856708050 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.856771946 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.857028961 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.857197046 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.857239008 CEST	443	49952	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.857271910 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.857357979 CEST	49952	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.858582020 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.858619928 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.858689070 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.858879089 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:26.858912945 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:26.890311003 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.924602985 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.924623013 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.924669981 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.924696922 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.924747944 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.924767017 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.924767017 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.924771070 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.924823999 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.942862034 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.942882061 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.942929983 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.942974091 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.943003893 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.943033934 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.956789970 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.956808090 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.956861973 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.956897974 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.956949949 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.962518930 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.962582111 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.962590933 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.962605000 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.962656021 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.962908983 CEST	49951	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:26.962922096 CEST	443	49951	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:26.975810051 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.975963116 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.976073027 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.976125002 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.976167917 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.976356030 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.976361036 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:26.976429939 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.976805925 CEST	49950	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:26.976836920 CEST	443	49950	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:27.083992958 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.084285021 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.084302902 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.084764957 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.085238934 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.085319042 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.085385084 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.097364902 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.097397089 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.097465992 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.097686052 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.097700119 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.132111073 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.327770948 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.328094006 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.328109980 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.329154015 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.329215050 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.329675913 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.329736948 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.329832077 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.329838037 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.371268988 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.376584053 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.376626968 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.376666069 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.376703024 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.376732111 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.376744032 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.376775026 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.376854897 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.376884937 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.376998901 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.377006054 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.377228975 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.377243042 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.377305031 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.377335072 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.377564907 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.377580881 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.377631903 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.378072977 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.378190041 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.378238916 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.378268003 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.378273010 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.378371000 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.378376007 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.378843069 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.378952026 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.378992081 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.379024029 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.379026890 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.379041910 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.379090071 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.379090071 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.379096985 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.379797935 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.379863024 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.379883051 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.379888058 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.379956961 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.379985094 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.379988909 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.380048990 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.380760908 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.380826950 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.380861044 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.380903959 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.380934954 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.380940914 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.380953074 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.380980968 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.381189108 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.381205082 CEST	443	49953	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.381232977 CEST	49953	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.505987883 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.506035089 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.506218910 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.506337881 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.506346941 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.597708941 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.597757101 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.597800970 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.597863913 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.597922087 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.598511934 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.601675034 CEST	49954	443	192.168.2.4	172.67.205.14
Apr 25, 2024 13:50:27.601691961 CEST	443	49954	172.67.205.14	192.168.2.4
Apr 25, 2024 13:50:27.732760906 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.733181953 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.733211994 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.734631062 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.734776020 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.735137939 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.735138893 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.735153913 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.735215902 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.776029110 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:27.776048899 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:27.821743965 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.006098986 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006288052 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006333113 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006371021 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.006377935 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006402969 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006436110 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.006462097 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006504059 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006530046 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.006536961 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006580114 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006608009 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.006613970 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.006773949 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.007071018 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.007172108 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.007328033 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.007334948 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.007575035 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.007622004 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.007668018 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.007693052 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.007709026 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.007839918 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.007846117 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.008069038 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.008362055 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.008443117 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.008589029 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.008640051 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.008646011 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.008694887 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.008745909 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.008750916 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.008819103 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.008824110 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.009396076 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.009593964 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.009793997 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.009804010 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.009810925 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.009835958 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.009982109 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010112047 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010246038 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010272980 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.010278940 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010386944 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010411024 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.010416985 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010479927 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010500908 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.010505915 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010616064 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010643005 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.010648966 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010787964 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.010812044 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.010818958 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.011253119 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.011281967 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.011287928 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.011389017 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.011415005 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.011420012 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.011579990 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.011607885 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.011615038 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.011684895 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.011709929 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.011717081 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.012151957 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.012177944 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.012183905 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.012294054 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.012320995 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.012326956 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.012403011 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.012423038 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.012429953 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.012454987 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.012572050 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.012706995 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.012712955 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.049005985 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.049060106 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.049252033 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.049523115 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.049557924 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.066520929 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.115700960 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.116661072 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.116739988 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.116822004 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.116859913 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.116908073 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.116939068 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.116972923 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.117057085 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.117218971 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.117233038 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.117324114 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.117333889 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.117610931 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.117754936 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.117902040 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.117933989 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.117949009 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.118051052 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.118061066 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.118154049 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.118186951 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.118197918 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.118345976 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.118356943 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.118598938 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.118817091 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.118843079 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.118855000 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.118988991 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.118999958 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.119183064 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.119355917 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.119419098 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.119744062 CEST	49955	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.119776011 CEST	443	49955	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.123423100 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.123460054 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.123816967 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.123816967 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.123845100 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.152720928 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.152765989 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.152937889 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.153450966 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.153460026 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.153614044 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.153886080 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.153889894 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.153898001 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.153906107 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.272322893 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.272608995 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.272638083 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.272921085 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.273288012 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.273350000 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.273499966 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.320116997 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.347299099 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.347567081 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.347579002 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.347852945 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.348325014 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.348325014 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.348337889 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.348383904 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.399403095 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.491902113 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.492145061 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.492173910 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.492638111 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.492820024 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.492827892 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.493755102 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.493860960 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.493879080 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.493968010 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.494090080 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.494673014 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.494764090 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.494936943 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.495094061 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.495104074 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.495124102 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.495146036 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.495193958 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.495244980 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.540025949 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.551877975 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.551996946 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552045107 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.552067995 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552118063 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552159071 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552190065 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552202940 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.552216053 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552233934 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.552280903 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552320004 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.552330017 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552486897 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552547932 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.552557945 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552778006 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552818060 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.552828074 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552877903 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552958012 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.552997112 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.553005934 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.553039074 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.553451061 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.553555965 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.553631067 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.553642988 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.553654909 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.553728104 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.553735018 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.553848028 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.553888083 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.553895950 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.554480076 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.554513931 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.554553032 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.554562092 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.554594994 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.554601908 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.554722071 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.554759026 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.554766893 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.554889917 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.555109024 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.555119038 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.555306911 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.555355072 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.555362940 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.555490017 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.555535078 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.555541992 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.555664062 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.555706978 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.555713892 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.556232929 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.556319952 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.556332111 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.556448936 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.556565046 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.556588888 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.556603909 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.556616068 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.556632996 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.556720972 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.556775093 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.556782961 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.557248116 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.557285070 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.557292938 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.557473898 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.557543993 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.557554960 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.557725906 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.557760000 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.557766914 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.557909012 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558166981 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558195114 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.558203936 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558290958 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558295012 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.558304071 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558331013 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.558336973 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558456898 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558501959 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.558510065 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558584929 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.558619022 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.558626890 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.602566004 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.602588892 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.623806953 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.623862982 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.623914957 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.624491930 CEST	49957	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.624501944 CEST	443	49957	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.649378061 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.661701918 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.661906958 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.661952019 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.661968946 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662126064 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662220001 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.662226915 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662373066 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662419081 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.662426949 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662538052 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662578106 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.662585020 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662857056 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662903070 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.662910938 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.662992954 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.663091898 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.663115978 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.663124084 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.663158894 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.663166046 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.663238049 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.663325071 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.663364887 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.663372040 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.663404942 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.663888931 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.663963079 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664001942 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664046049 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.664053917 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664092064 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.664109945 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664195061 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664295912 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.664304972 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664736032 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664777994 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.664786100 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664854050 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664916992 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664918900 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.664930105 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.664963961 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.664971113 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.665059090 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.665093899 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.665102005 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.665736914 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.665796995 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.665806055 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.665904999 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.665950060 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.665956974 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666058064 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666105986 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.666112900 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666591883 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666635036 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.666642904 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666752100 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666795969 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.666804075 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666872978 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666946888 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.666963100 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.666977882 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.667087078 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.667093992 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.667695045 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.667783022 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.667830944 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.667840004 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.667942047 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.667949915 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668009996 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668173075 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668212891 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668215036 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.668224096 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668245077 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.668351889 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668387890 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.668395042 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668466091 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668507099 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.668514013 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668565989 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.668600082 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.668606997 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.713304043 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.713366985 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.728885889 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.728981972 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.729055882 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.729126930 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.729201078 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.729207039 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.729249001 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.729280949 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.729388952 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.729393005 CEST	49958	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.729412079 CEST	443	49958	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.729474068 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.730217934 CEST	49959	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:28.730223894 CEST	443	49959	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:28.738730907 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:28.738759995 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:28.738823891 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:28.739006042 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:28.739023924 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:28.758873940 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.771333933 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771426916 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771481037 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.771497011 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771573067 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771610022 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.771617889 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771672964 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771738052 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.771748066 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771826029 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771930933 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.771938086 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.771991968 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772105932 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772149086 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.772156954 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772193909 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.772200108 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772277117 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772567034 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.772573948 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772742033 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772794008 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.772802114 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772897959 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.772938013 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.772945881 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.773041964 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.773083925 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.773089886 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.773575068 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.773614883 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.773622990 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.773813009 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.773865938 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.773873091 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.773947954 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.773986101 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.773993969 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774084091 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774122000 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.774128914 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774668932 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774714947 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.774722099 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774774075 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774842978 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.774847984 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774857044 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774888039 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.774897099 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.774949074 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.775000095 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.775006056 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.775614023 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.775676966 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.775718927 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.775727987 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.775762081 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.775763035 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.775772095 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.775799990 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.776593924 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.776653051 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.776660919 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.776709080 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.776808977 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.776809931 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.776818991 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.776855946 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.776861906 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.776928902 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.776999950 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.777008057 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.778577089 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.778611898 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.778636932 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.778647900 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.778748035 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.778769016 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.778769970 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.778779984 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.778785944 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.778858900 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.778964996 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.778974056 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.779512882 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.779548883 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.779556990 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.779625893 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.779678106 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.779702902 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.779715061 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.779725075 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.779740095 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.780339956 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.780507088 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.780550003 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.780560970 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.780596018 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.780601025 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.780658960 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.780754089 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.780757904 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.780766010 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.780802011 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.780807972 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.781255960 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.781316996 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.781323910 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.782913923 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.782946110 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.782975912 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.782984018 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.783013105 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.784892082 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.784904957 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.784950018 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.784961939 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.784987926 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.786762953 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.786776066 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.786814928 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.786823988 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.786851883 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.789062977 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.789076090 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.789160013 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.789175034 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.790890932 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.790904045 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.790962934 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.790975094 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.791013002 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.792833090 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.792866945 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.792913914 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.792922974 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.792962074 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.793698072 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.793750048 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.793756962 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.793816090 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.793864012 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.793878078 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.794537067 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.794646025 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.794698000 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.794707060 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.794740915 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.821717024 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.821801901 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.845437050 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:28.845489025 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:28.845693111 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:28.845900059 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:28.845916986 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:28.881009102 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.881068945 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.881091118 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.882410049 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.882432938 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.882469893 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.882481098 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.882510900 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.884572029 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.884589911 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.884671926 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.884685993 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.884731054 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.886519909 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.886534929 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.886585951 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.886596918 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.886636972 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.888370991 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.888416052 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.888447046 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.888456106 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.888480902 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.890240908 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.890254021 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.890300035 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.890311003 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.892301083 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.892314911 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.892354012 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.892364979 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.892390013 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.892406940 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.893378019 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.893409967 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.893445015 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.893452883 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.893465042 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.893479109 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.893505096 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.893634081 CEST	49956	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:28.893647909 CEST	443	49956	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:28.961152077 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:28.968352079 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:28.968415976 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:28.969300032 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:28.969387054 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:28.969940901 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:28.970005035 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:28.970063925 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:29.011756897 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:29.011817932 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:29.050170898 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.050220966 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.050313950 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.050703049 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.050740004 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.057764053 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:29.153002024 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.153047085 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.153197050 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.153435946 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.153448105 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.183409929 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.183779955 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.183801889 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.185290098 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.185364008 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.185379982 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.185432911 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.185769081 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.185853958 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.185992956 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.186005116 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.228403091 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.231259108 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:29.231314898 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:29.231384039 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:29.231998920 CEST	49960	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:29.232043982 CEST	443	49960	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:29.274044037 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.274259090 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.274285078 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.274563074 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.276281118 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.276340008 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.276643991 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.276690960 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.276709080 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.311098099 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.311245918 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.311316967 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.311904907 CEST	49961	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.311948061 CEST	443	49961	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.497200012 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.497510910 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.497544050 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.501127958 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.501235008 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.501250982 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.501306057 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.515444040 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.515636921 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.515638113 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.557779074 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.557811022 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.557831049 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.557883978 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.557924032 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.557965994 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.557981014 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.557997942 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558078051 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558124065 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.558139086 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558187008 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.558211088 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558401108 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558469057 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.558484077 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558558941 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558620930 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558633089 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.558648109 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.558746099 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.558758974 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.559252977 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.559314966 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.559329033 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.559390068 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.559428930 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.559442043 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.559546947 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.559586048 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.559598923 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.559993029 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.560051918 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.560065985 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.560121059 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.560143948 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.560206890 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.560220957 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.560286999 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.560343981 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.560373068 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.560395002 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.560444117 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.560456038 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.560883045 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.560890913 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.561001062 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561053991 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.561068058 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561127901 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561183929 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561203003 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.561218023 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561305046 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.561640978 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561707973 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561752081 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.561764002 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561826944 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561878920 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561913013 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.561928988 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.561974049 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.561992884 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.562530994 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.562578917 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.562592983 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.562624931 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.562664986 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.562711000 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.562711954 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.562721968 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.562772036 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.562793970 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.562860012 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.562871933 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.563429117 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.563482046 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.563486099 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.563499928 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.563559055 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.563571930 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.563653946 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.563709974 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.563723087 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.564342022 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.564451933 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.564459085 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.564474106 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.564542055 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.564587116 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.564599991 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.564649105 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.564661980 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.608139038 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.608139038 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.608163118 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.644468069 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.644531012 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.644604921 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.644625902 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.644678116 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.644725084 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.644731998 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.644855976 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.646259069 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.652857065 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.662977934 CEST	49963	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:29.662997961 CEST	443	49963	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:29.667747021 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.668065071 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.668116093 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.668134928 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.668418884 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.668474913 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.668483019 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.668697119 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.668783903 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.668792009 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.669015884 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.669207096 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.669208050 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.669224977 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.669389963 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.669435978 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.669444084 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.669488907 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.669496059 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.669749975 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.669801950 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.669809103 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670001984 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670044899 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.670053005 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670201063 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670247078 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.670253992 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670454025 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670507908 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.670516968 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670710087 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670759916 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.670767069 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.670978069 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.671017885 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.671025991 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.671238899 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.671376944 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.671384096 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.671704054 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.671886921 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.671937943 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.671947002 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672007084 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.672013998 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672120094 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672168016 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.672178030 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672415018 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672456980 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672461033 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.672470093 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672513962 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.672527075 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672755003 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.672805071 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.672812939 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.673074007 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.673134089 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.673141956 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.673340082 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.673408985 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.673417091 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.673595905 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.673646927 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.673655033 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.673829079 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.673868895 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.673876047 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.674124956 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.674175024 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.674182892 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.674415112 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.674510002 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.674518108 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.674735069 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.674879074 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.674896002 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.675153017 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.675228119 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.675235987 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.675430059 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.675488949 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.675496101 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.675683975 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.675761938 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.675770044 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.675950050 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.675997019 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.676004887 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.676224947 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.676290035 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.676297903 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.676578045 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.676713943 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.676722050 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.723181009 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.723259926 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.723357916 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.723556042 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:29.723587990 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:29.732238054 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.732259035 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.778024912 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.778122902 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.778140068 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.778592110 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.778659105 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.778667927 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.779066086 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.779148102 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.779156923 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.779659033 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.779726982 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.779736996 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.780235052 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.780548096 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.780563116 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.780574083 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.781028986 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.781088114 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.781097889 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.781136036 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.781143904 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.781513929 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.781559944 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.781569958 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.782007933 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.782124996 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.782134056 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.782489061 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.782963037 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.783014059 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.783025026 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.783071041 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.783077955 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.783677101 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.783750057 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.783759117 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.784010887 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:29.784228086 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.787147045 CEST	49962	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:29.787189960 CEST	443	49962	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:30.059923887 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.110737085 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:30.280786037 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:30.280821085 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.281362057 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.282191992 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:30.282260895 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.283024073 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:30.328155994 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.411694050 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.411710024 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.411760092 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.411784887 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:30.411801100 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.411819935 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:30.411864996 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:30.762938976 CEST	49964	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:30.762963057 CEST	443	49964	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:31.281162024 CEST	49965	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:31.281184912 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.281351089 CEST	49965	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:31.282751083 CEST	49965	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:31.282766104 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.289581060 CEST	49966	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:31.289602041 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.289758921 CEST	49966	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:31.290121078 CEST	49966	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:31.290133953 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.513818026 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.514060974 CEST	49965	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:31.514086962 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.515185118 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.516005993 CEST	49965	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:31.516091108 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.516140938 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.516685963 CEST	49966	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:31.516700029 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.516977072 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.517155886 CEST	49965	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:31.518023014 CEST	49966	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:31.518085957 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.518495083 CEST	49966	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:31.560142994 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.564116001 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.785531998 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.785589933 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:31.785753965 CEST	49966	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:31.789057016 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.789197922 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:31.789254904 CEST	49965	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:32.476259947 CEST	49966	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:32.476285934 CEST	443	49966	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:32.492513895 CEST	49965	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:32.492539883 CEST	443	49965	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:32.692054033 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:32.692080021 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:32.692146063 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:32.692692995 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:32.692707062 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:32.923787117 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:32.924042940 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:32.924053907 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:32.925158024 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:32.925482988 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:32.925621033 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:32.925652027 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:32.977435112 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:33.195997000 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:33.196160078 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:33.196216106 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:33.198071003 CEST	49967	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:33.198082924 CEST	443	49967	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:33.292370081 CEST	49968	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:33.292396069 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.292458057 CEST	49968	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:33.292676926 CEST	49968	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:33.292689085 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.521462917 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.522139072 CEST	49968	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:33.522150040 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.523300886 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.524112940 CEST	49968	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:33.524287939 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.554382086 CEST	49968	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:33.600121975 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.793773890 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.794131041 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:33.794640064 CEST	49968	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.078496933 CEST	49968	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.078512907 CEST	443	49968	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.079477072 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.079536915 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.082597017 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.083309889 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.083344936 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.312695980 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.312998056 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.313023090 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.314137936 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.314593077 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.314593077 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.314614058 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.314668894 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.314702988 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.314769983 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.314870119 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.314986944 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.571573973 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.571719885 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.571770906 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.571796894 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.571890116 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.571938992 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.571954966 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.572174072 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.572216988 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.572225094 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.572534084 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.572581053 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.572588921 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.572724104 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.572762966 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.572771072 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.573165894 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.573210955 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.573219061 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.573450089 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.573494911 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.573503017 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.573834896 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.573882103 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.573889971 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.574244022 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.574295998 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.574304104 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.574707031 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.574753046 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.574760914 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.575048923 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.575093031 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.575102091 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.575788021 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.575840950 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.575849056 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.576145887 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.576196909 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.576205969 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.576610088 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.576652050 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.576977015 CEST	49969	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:34.576993942 CEST	443	49969	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:34.724085093 CEST	49972	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:34.724164009 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:34.724253893 CEST	49972	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:34.724509954 CEST	49972	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:34.724543095 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:34.946580887 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:34.948395014 CEST	49972	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:34.948477030 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:34.948776960 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:34.949145079 CEST	49972	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:34.949215889 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:34.949273109 CEST	49972	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:34.992152929 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:35.218987942 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:35.219055891 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:35.219120026 CEST	49972	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:35.224510908 CEST	49972	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:35.224559069 CEST	443	49972	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:35.583376884 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:50:35.583411932 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:50:41.169847965 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.169935942 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.170017004 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.170247078 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.170284033 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.508748055 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.512255907 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.512315035 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.512835026 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.513431072 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.513431072 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.513431072 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.513488054 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.513547897 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.553078890 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.867708921 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.867813110 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:41.867903948 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.872241020 CEST	49975	443	192.168.2.4	52.108.8.12
Apr 25, 2024 13:50:41.872281075 CEST	443	49975	52.108.8.12	192.168.2.4
Apr 25, 2024 13:50:42.233603001 CEST	49976	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:42.233633995 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.233870029 CEST	49976	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:42.235266924 CEST	49976	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:42.235280991 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.572508097 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.573139906 CEST	49976	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:42.573162079 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.573638916 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.574420929 CEST	49976	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:42.574496031 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.574577093 CEST	49976	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:42.620126009 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.702409983 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.702532053 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:42.702581882 CEST	49976	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:42.706919909 CEST	49976	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:42.706933975 CEST	443	49976	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:45.071736097 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.071835041 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.071876049 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.071906090 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.071938038 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.071962118 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.072350025 CEST	49979	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:45.072453976 CEST	443	49979	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:45.072514057 CEST	49979	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:45.073024988 CEST	49980	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:45.073045015 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:45.073132038 CEST	49980	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:45.073661089 CEST	49980	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:45.073695898 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:45.073796034 CEST	49979	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:45.073817968 CEST	443	49979	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:45.073910952 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.073924065 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.074105978 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.074137926 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.301732063 CEST	443	49979	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:45.302022934 CEST	49979	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:45.302083969 CEST	443	49979	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:45.302474022 CEST	443	49979	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:45.302556038 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:45.302843094 CEST	49979	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:45.302922964 CEST	443	49979	151.101.194.137	192.168.2.4
Apr 25, 2024 13:50:45.302973986 CEST	49980	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:45.303008080 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:45.303482056 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:45.303790092 CEST	49980	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:45.303894043 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:45.304855108 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.305016041 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.305027008 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.305341959 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.305609941 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.305666924 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.305718899 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.311855078 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.312150955 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.312201977 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.313328028 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.313643932 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.313822985 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.348136902 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:45.353841066 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:45.353846073 CEST	49979	443	192.168.2.4	151.101.194.137
Apr 25, 2024 13:50:45.353929043 CEST	49980	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.001499891 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:46.001532078 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:46.001557112 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:46.001576900 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:46.001602888 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:46.001648903 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:46.001656055 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:46.001677990 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:46.001766920 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:46.003287077 CEST	49978	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:46.003297091 CEST	443	49978	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:46.110876083 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.110958099 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.111073971 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.111269951 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.111304998 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.334670067 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.334994078 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.335036993 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.335338116 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.335804939 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.335872889 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.335988045 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.376159906 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.649542093 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.649630070 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.649661064 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.649691105 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.649715900 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.649723053 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.649739981 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.649780035 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.649811983 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.650094032 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.650289059 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.650306940 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.650432110 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.650461912 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.650499105 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.650522947 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.650553942 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.650572062 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.650635958 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.651228905 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.651314974 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.651397943 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.651423931 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.651427984 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.651447058 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.651478052 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.651490927 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.651629925 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.651643038 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.652216911 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.652299881 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.652324915 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.652363062 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.652379036 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.652414083 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.652432919 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.653120995 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.653199911 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.653228998 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.653244019 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.653301954 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.653332949 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.653347015 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.653399944 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.653429985 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.653444052 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.653553009 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.654006004 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.654061079 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.654110909 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.654140949 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.654155016 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.654191971 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.654223919 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.654236078 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.654268026 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.654953957 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655111074 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655184031 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655215979 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655230045 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.655244112 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655272961 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.655287027 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655395985 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.655410051 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655620098 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.655879974 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655939102 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.655986071 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.656014919 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.656169891 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.656186104 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.656472921 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.759686947 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.759751081 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.759782076 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.759809017 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.759849072 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.759886026 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.759886026 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.759902000 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.759953976 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.759995937 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.760037899 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.760085106 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.760185957 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.760217905 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.760236979 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.760278940 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.760297060 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.760350943 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.760381937 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.760396004 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.760632038 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.761254072 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.761295080 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.761317968 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.761352062 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.761379957 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.761409998 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.761466980 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.764254093 CEST	49981	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.764286041 CEST	443	49981	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.764369011 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.764419079 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.764568090 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.764791012 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.764828920 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.987854004 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.988168955 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.988188028 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.988509893 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.988987923 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.988987923 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:46.989006996 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:46.989053965 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.040069103 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.237114906 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.237206936 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.237374067 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.238576889 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.238612890 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.275054932 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.275194883 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.275301933 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.275340080 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.275398016 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.275429964 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.275676012 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.275696039 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.275743961 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.275753975 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.275934935 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.275978088 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.276029110 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.276048899 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.277827978 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.277858019 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.277885914 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.277914047 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.277915001 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.277924061 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.277988911 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.277988911 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.278001070 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278072119 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278147936 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278179884 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278204918 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278214931 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.278223038 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278242111 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.278302908 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278306961 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.278326988 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278357029 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.278732061 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.278752089 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279087067 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279117107 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279141903 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.279149055 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279158115 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279196024 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.279196024 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279228926 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.279230118 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279247999 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279381037 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.279398918 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.279582977 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.280016899 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.280124903 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.280153990 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.280179977 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.280216932 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.280231953 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.280240059 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.280267954 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.280814886 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.280821085 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.280896902 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.280941010 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281012058 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281075954 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281083107 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.281104088 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281177044 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281596899 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.281616926 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281748056 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.281809092 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281872988 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281928062 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.281982899 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.282033920 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.282043934 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.282094002 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.337183952 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.384860992 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.384913921 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.385061026 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.385073900 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.385138035 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.385165930 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.385232925 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.385261059 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.385273933 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.385286093 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.385335922 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.385335922 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.385348082 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.385870934 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.386018991 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.386028051 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.387448072 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.387501001 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.387521029 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.387530088 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.387593985 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.387645960 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.387655020 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.387739897 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.387833118 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.387871981 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.387897015 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.387972116 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.388089895 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.388143063 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.388151884 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.388202906 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.388214111 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.388221979 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.388278008 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.388284922 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.388860941 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.388911009 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.388935089 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.388943911 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389004946 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389014006 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.389022112 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389075994 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389085054 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.389095068 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389111996 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389179945 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.389189959 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389358997 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.389624119 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389667988 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389710903 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389766932 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.389775991 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389832020 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389834881 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.389842987 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.389893055 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.389899969 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.390645027 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.390695095 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.390714884 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.390868902 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.390909910 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.390947104 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.390954018 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.391016960 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.391024113 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.391052961 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.391099930 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.391108036 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.392618895 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.392688036 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.392709017 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.392719030 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.392788887 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.392793894 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.392802954 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.392847061 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.392853022 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.447468996 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.447477102 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494491100 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494555950 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494584084 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.494587898 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494597912 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494626999 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.494656086 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494694948 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494699001 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.494709969 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494750977 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494754076 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.494761944 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494788885 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494797945 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.494806051 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.494858980 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.495177031 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.495249033 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.495276928 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.495322943 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.495332003 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.495368958 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.495374918 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.495405912 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.495551109 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.495559931 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.496265888 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.496293068 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.496318102 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.496325970 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.496366024 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.496372938 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.496403933 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.496454000 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.496462107 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.496469975 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.496507883 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.496514082 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.497149944 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.497196913 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.497205973 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.497214079 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.497226000 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.497235060 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.497267962 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.497273922 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.497993946 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.498019934 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.498035908 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.498044014 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.498076916 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.498100042 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.498116970 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.498126030 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.498136997 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.498879910 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.498919010 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.498925924 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.499041080 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.499087095 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.499094009 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.499160051 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.499197960 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.499206066 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.499277115 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.499316931 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.499321938 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.499335051 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.499387026 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.499394894 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.500020981 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.500068903 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.500077009 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.500152111 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.500197887 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.500236988 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.500247002 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.500294924 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.500339031 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.500345945 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.500385046 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.501200914 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501275063 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501313925 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.501321077 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501477003 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501533031 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.501539946 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501578093 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.501585007 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501841068 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501872063 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501929045 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.501936913 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.501996994 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.502042055 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.502043009 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.502051115 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.502078056 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.502769947 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.502823114 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.502835035 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.504529953 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.504542112 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.504590988 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.504600048 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.504631042 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.504647970 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.506562948 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.506580114 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.506633043 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.506640911 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.506678104 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.508202076 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.508256912 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.508280993 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.508286953 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.508330107 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.510036945 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.510051012 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.510119915 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.510128975 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.510155916 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.510164976 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.511847973 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.511893988 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.511904955 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.511924982 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.511950016 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.511974096 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.513747931 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.513797045 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.513808966 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.513818979 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.513850927 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.514462948 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.514518023 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.514524937 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516283989 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516304016 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516329050 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516345978 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.516355038 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516366005 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516376972 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.516392946 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.516393900 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516403913 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516449928 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.516457081 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.516587973 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.516593933 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.517222881 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.517262936 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.517270088 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.517278910 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.517318964 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.517324924 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.517400980 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.517463923 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.517474890 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.517482996 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.517538071 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.517544985 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.518136978 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.518199921 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.518251896 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.518260956 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.518273115 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.518301010 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.518310070 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.518317938 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.518332958 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.568454027 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.568461895 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.576411009 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.576653004 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.576680899 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.577167034 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.577522993 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.577605009 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.577752113 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.577925920 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.577967882 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.578033924 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.578044891 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.604545116 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.604562998 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.604619980 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.604629993 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.604655981 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.606441021 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.606453896 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.606513023 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.606522083 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.608144045 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.608163118 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.608198881 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.608208895 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.608230114 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.608247995 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.610200882 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.610255003 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.610315084 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.610326052 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.610337973 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.610363007 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.611937046 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.611987114 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.611993074 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.612014055 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.612040997 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.612055063 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.614479065 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.614492893 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.614556074 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.614564896 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.614998102 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.615056038 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.615066051 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.615077972 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.615125895 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.633411884 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.641570091 CEST	49982	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.641586065 CEST	443	49982	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.808383942 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.808464050 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.808553934 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.808897972 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:47.808933020 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:47.816071033 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.816191912 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.816287041 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.816701889 CEST	49984	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.816725016 CEST	443	49984	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.984333992 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.984380007 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:47.984464884 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.984814882 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:47.984832048 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.031882048 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.032145977 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.032192945 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.032522917 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.032958984 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.033034086 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.033535957 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.033792973 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.033830881 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.312921047 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.312973976 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313003063 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313024998 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313066959 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.313124895 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313159943 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.313185930 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313237906 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.313254118 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313390970 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313451052 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.313468933 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313608885 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.313661098 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.313673973 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.314032078 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.314075947 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.314091921 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.314178944 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.314246893 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.314260960 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.314560890 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.314625978 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.314641953 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.314744949 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.314793110 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.314805984 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.315124035 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.315188885 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.315217972 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.315232992 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.315254927 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.315287113 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.315300941 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.315346003 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.315357924 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.315959930 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.316010952 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.316024065 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.316139936 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.316194057 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.316207886 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.316323996 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.316406965 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.316468954 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.316485882 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.316540956 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.316929102 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.317028046 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.317075014 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.317095041 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.317178965 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.317243099 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.317257881 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.317306995 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.317466974 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.317480087 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.317933083 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.317984104 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.317996025 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.318115950 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.318173885 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.318176031 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.318187952 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.318234921 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.318247080 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.318731070 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.318825960 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.318839073 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.318903923 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.318955898 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.318969011 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.319128036 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.319181919 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.319195986 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.319333076 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.319473982 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.319488049 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.319716930 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.319820881 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.319834948 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.319852114 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.319953918 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.319967031 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.320940018 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.324407101 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:48.324430943 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.324779987 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.326205015 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:48.326275110 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.327362061 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:48.368164062 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.369775057 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.422564030 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.422815084 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.422884941 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.422944069 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.422983885 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.423023939 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.423034906 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.423125029 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.423168898 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.423180103 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424010038 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424034119 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424081087 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.424114943 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424161911 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.424170971 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424227953 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424282074 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.424292088 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424362898 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424427032 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424482107 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.424491882 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424573898 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.424603939 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424709082 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424763918 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.424773932 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424869061 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.424912930 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.424921036 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.425009966 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.425049067 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.425057888 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.425406933 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.425460100 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.425470114 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.425523043 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.425570011 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.425579071 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.426490068 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.426553011 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.426569939 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.426598072 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.426652908 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.426662922 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.426752090 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.426801920 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.426846027 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.426856995 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.427095890 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.427105904 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.427309990 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.427361012 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.427371979 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.427467108 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.427532911 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.427575111 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.427584887 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.427639961 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.427648067 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.428211927 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.428261042 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.428292036 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.428309917 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.428323030 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.428361893 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.428371906 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.428416014 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.428426027 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.429095030 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.429131031 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.429162979 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.429171085 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.429191113 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.429212093 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.429275990 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.429338932 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.429510117 CEST	49985	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.429531097 CEST	443	49985	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.456091881 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.456176043 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.456181049 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:48.456252098 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:48.477937937 CEST	49986	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:50:48.477963924 CEST	443	49986	52.108.9.12	192.168.2.4
Apr 25, 2024 13:50:48.591646910 CEST	49988	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:48.591684103 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:48.591751099 CEST	49988	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:48.592341900 CEST	49988	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:48.592360020 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:48.677745104 CEST	49989	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.677798033 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.677876949 CEST	49989	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.678067923 CEST	49989	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.678097963 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.815912008 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:48.816183090 CEST	49988	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:48.816198111 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:48.816515923 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:48.816936016 CEST	49988	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:48.816996098 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:48.817095041 CEST	49988	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:48.860138893 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:48.901343107 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.901583910 CEST	49989	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.901603937 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.901956081 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.902282953 CEST	49989	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.902348042 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:48.902417898 CEST	49989	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:48.948138952 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.086741924 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:49.086796045 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:49.086944103 CEST	49988	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:49.088058949 CEST	49988	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:49.088078976 CEST	443	49988	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:49.171598911 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.171755075 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.171901941 CEST	49989	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:49.172415972 CEST	49989	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:49.172456026 CEST	443	49989	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.671071053 CEST	49990	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:49.671103001 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.671205997 CEST	49990	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:49.671426058 CEST	49990	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:49.671442986 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.894965887 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.895235062 CEST	49990	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:49.895252943 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.895572901 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.895931959 CEST	49990	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:49.895992041 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:49.896075964 CEST	49990	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:49.936130047 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.162060976 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.162139893 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.162204981 CEST	49990	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.163288116 CEST	49990	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.163317919 CEST	443	49990	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.168684959 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.168768883 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.168849945 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.169135094 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.169169903 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.217888117 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.217933893 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.218094110 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.218316078 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.218333960 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.394718885 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.395062923 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.395095110 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.395431042 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.395761013 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.395838976 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.395886898 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.436140060 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.444262028 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.444538116 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.444555998 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.444876909 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.445182085 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.445240974 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.445511103 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.445601940 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.445636034 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.445765018 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.445780039 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.450748920 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.670622110 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.670675993 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.670763969 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.671972990 CEST	49991	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.672008038 CEST	443	49991	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.674048901 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:50:50.674201965 CEST	443	49736	13.107.42.12	192.168.2.4
Apr 25, 2024 13:50:50.674283028 CEST	49736	443	192.168.2.4	13.107.42.12
Apr 25, 2024 13:50:50.700211048 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.700278044 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.700443983 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.700464010 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.700495958 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.700510979 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.700531006 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.700608969 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.700634956 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.700661898 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.700673103 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.700769901 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.700992107 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.701118946 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.701159954 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.701168060 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.701359034 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.701396942 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.701406002 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.701513052 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.701601982 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.701642990 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.701653004 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.701718092 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.701941013 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702029943 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702079058 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.702086926 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702172995 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702217102 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.702224970 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702323914 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702369928 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.702377081 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702883959 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702933073 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.702939987 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.702990055 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.703135967 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.703242064 CEST	49992	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:50.703258038 CEST	443	49992	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:50.717528105 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.717642069 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.717772961 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.717988014 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.718024969 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.942014933 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.942269087 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.942297935 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.942759991 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.943074942 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.943171978 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:50.943202972 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.986260891 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:50.986283064 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:51.213341951 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:51.213426113 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:51.213620901 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:51.213983059 CEST	49993	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:50:51.214005947 CEST	443	49993	104.17.2.184	192.168.2.4
Apr 25, 2024 13:50:51.476310015 CEST	49994	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:50:51.476356983 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:51.476603985 CEST	49994	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:50:51.476955891 CEST	49994	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:50:51.476973057 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:51.706643105 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:51.710283995 CEST	49994	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:50:51.710300922 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:51.710774899 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:51.717407942 CEST	49994	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:50:51.717489958 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:50:51.762227058 CEST	49994	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:50:57.139611959 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.139715910 CEST	443	49995	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.139836073 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.150463104 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.150502920 CEST	443	49995	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.152010918 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.192125082 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.381850958 CEST	443	49995	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.436152935 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.453942060 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.453974962 CEST	443	49995	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.455185890 CEST	443	49995	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.455835104 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.456039906 CEST	443	49995	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.509772062 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.675762892 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.675818920 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.675873995 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.675872087 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.675924063 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.675977945 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.675997019 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.676556110 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:57.676624060 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.986519098 CEST	49977	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:50:57.986576080 CEST	443	49977	104.21.34.125	192.168.2.4
Apr 25, 2024 13:50:58.034416914 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.034503937 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.034580946 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.037928104 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.037961006 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.268300056 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.268547058 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.268589973 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.269700050 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.270030975 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.270153999 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.270169973 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.270243883 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.321680069 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.542357922 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543122053 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543188095 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.543217897 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543314934 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543375015 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.543392897 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543482065 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543565035 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543606997 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.543622971 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543770075 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543823004 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.543837070 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.543894053 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.544235945 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.544393063 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.544447899 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.544473886 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.544563055 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.544986010 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.545042992 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.545057058 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.545106888 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.545119047 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.545209885 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.545358896 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.545365095 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.545392036 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.545448065 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.545483112 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.545744896 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.545804024 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.545816898 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.546084881 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.546147108 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.546159983 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.546792030 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.546878099 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.546890974 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.547060966 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.547243118 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.547255993 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.547872066 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.547929049 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.547941923 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.548293114 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.548360109 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.548372984 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.548398018 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.548463106 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.548475981 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.548638105 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.548719883 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.548732996 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.548974991 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.549051046 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.549063921 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.549277067 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.549321890 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.549335003 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.549616098 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.549674988 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.549688101 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.549843073 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.549904108 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.549916983 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.550065041 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.550120115 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.550132990 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.550345898 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.550400972 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.550414085 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.550554991 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.550614119 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.550627947 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.550843954 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.550900936 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.550914049 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.551060915 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.551120996 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.551134109 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.602188110 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.602202892 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.649167061 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.651731968 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.652868986 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.652925968 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.652934074 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.653037071 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.653204918 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.653213978 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.653667927 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.653753996 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.653776884 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.653786898 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.653923035 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.653929949 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.654716969 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.654772997 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.654781103 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.654994011 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.655051947 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.655060053 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.655266047 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.655437946 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.655445099 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.655582905 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.655792952 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.655801058 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.656341076 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.656390905 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.656399012 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.656658888 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.656708002 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.656716108 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.656985044 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.657040119 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.657047987 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.657347918 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.657414913 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.657557964 CEST	49996	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.657571077 CEST	443	49996	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.659967899 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.660054922 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.660218000 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.660423040 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.660459042 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.887356043 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.887695074 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.887734890 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.888195992 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.888533115 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.888641119 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:58.888838053 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:58.932137966 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169467926 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169538021 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169610977 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169631004 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.169655085 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169713974 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.169722080 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169778109 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169846058 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169856071 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.169862986 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169898987 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.169904947 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.169987917 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.170062065 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.170108080 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.170114994 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.170263052 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.170269966 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.170941114 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.170994997 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.171000957 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171078920 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171120882 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.171127081 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171189070 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171236992 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.171242952 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171333075 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171389103 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.171395063 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171509981 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171557903 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.171562910 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171884060 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171925068 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.171935081 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.171941042 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.172008991 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.172053099 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.172060013 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.172107935 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.172116041 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.172184944 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.172225952 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.172234058 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.172846079 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.172899008 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.172904015 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.172980070 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.173019886 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.173026085 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.173032999 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.173079014 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.173084974 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.173122883 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.173676014 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.173722982 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.173728943 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.173903942 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.173974991 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.173974991 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.173989058 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.174025059 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.174570084 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.174609900 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.174614906 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.174684048 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.174724102 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.174730062 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.174818993 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.174869061 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.174875021 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.174910069 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.175071955 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.175079107 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.175569057 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.175607920 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.175614119 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.228595018 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.228604078 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.275330067 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.278898954 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.278948069 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.278955936 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.279376984 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.279427052 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.279433012 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.279536963 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.279623985 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.279628038 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.279635906 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.279675961 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.279685020 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.279859066 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.279895067 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.279901028 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280258894 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280383110 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280419111 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.280426025 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280463934 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.280469894 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280586958 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280625105 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.280631065 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280720949 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280755997 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280793905 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.280801058 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.280992031 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.281198978 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.281279087 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.281363010 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.281368017 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.281498909 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.281547070 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.281552076 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.281677008 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.281786919 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.281793118 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.282084942 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.282133102 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.282174110 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.282181025 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.282320023 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.282321930 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.282330990 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.282366991 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.282373905 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.282478094 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.282571077 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.282577991 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283032894 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283097029 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.283103943 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283165932 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283205986 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283211946 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.283221006 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283255100 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.283310890 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283451080 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283489943 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.283497095 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283684015 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283737898 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.283742905 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283787966 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283830881 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.283837080 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283924103 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.283991098 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.284032106 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.284038067 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.284080982 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.284513950 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.284854889 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.284936905 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.284950972 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.284956932 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.284998894 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.285003901 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.285111904 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.285161972 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.285166979 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.285255909 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.285310984 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.285316944 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.285726070 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.285784006 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.285789013 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.285937071 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.285981894 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.285988092 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.286062956 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.286174059 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.286175013 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.286184072 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.286220074 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.388415098 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.388499022 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.388638020 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.388722897 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.388751030 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.388854027 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.388869047 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.388940096 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.388988018 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.388999939 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389053106 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389105082 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389110088 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.389122963 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389169931 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.389179945 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389265060 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389324903 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.389337063 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389746904 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389790058 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.389801025 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389928102 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.389977932 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.389992952 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.390245914 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.390302896 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.390316010 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391099930 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391154051 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.391165018 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391222000 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391272068 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.391283035 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391390085 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391436100 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.391447067 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391556025 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391608000 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.391619921 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391741991 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391788960 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.391802073 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.391983986 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392079115 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392093897 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.392143965 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392281055 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.392292023 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392616034 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392668009 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.392679930 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392793894 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392838955 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392853022 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.392864943 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.392913103 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.392924070 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.393182993 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.393232107 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.393244028 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.393495083 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.393543005 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.393553972 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.393836021 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.393887043 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.393898010 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.394028902 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.394076109 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.394088030 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.394224882 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.394273043 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.394284010 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.394568920 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.394632101 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.394643068 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.394690990 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.394701958 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395009041 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395060062 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.395071983 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395226002 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395275116 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.395286083 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395462036 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395509005 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.395519972 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395581007 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395662069 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.395673990 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395850897 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.395917892 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.395931005 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.396085024 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.396235943 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.396265984 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.396279097 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.396543980 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.396553993 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.396569967 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.396619081 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.396631956 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.396753073 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.396847963 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.396858931 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.397002935 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.397043943 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.397049904 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.397063017 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.397187948 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.397198915 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.398781061 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.398791075 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.398845911 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.398863077 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.398936033 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.401374102 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.401398897 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.401464939 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.401479959 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.403239965 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.403259993 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.403292894 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.403306007 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.403336048 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.403744936 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.405024052 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.405045033 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.405121088 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.405121088 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.405137062 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.405246973 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.406841993 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.406886101 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.406909943 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.406924009 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.406949997 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.407059908 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.408689022 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.408720970 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.408759117 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.408772945 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.408798933 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.409498930 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.409562111 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.409575939 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.409625053 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.410499096 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.410566092 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.410578012 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.412720919 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.412741899 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.412784100 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.412796974 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.412822962 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.461744070 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.498145103 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.498209953 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.498261929 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.498281002 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.498322964 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.498460054 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.500040054 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.500065088 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.500149965 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.500166893 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.500195026 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.500289917 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.501880884 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.501924038 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.501961946 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.501975060 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.501997948 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.502177954 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.503745079 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.503787994 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.503833055 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.503844976 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.503860950 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.504044056 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.505821943 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.505868912 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.505922079 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.505934954 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.505950928 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.505979061 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.507725954 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.507749081 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.507842064 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.507857084 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.508085966 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.509044886 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.509120941 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.509134054 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.509193897 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.509255886 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.509493113 CEST	49997	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.509524107 CEST	443	49997	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.658631086 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.658662081 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.659394026 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.659651041 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.659666061 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.884654045 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.884953022 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.884974003 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.885457993 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.885773897 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.885895967 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.885917902 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.885917902 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:50:59.885941982 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:50:59.939096928 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.185489893 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.185615063 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.185678005 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.185719967 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.185739040 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.185754061 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.185806990 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.185813904 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.185857058 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.185887098 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.185893059 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.185961008 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.186012030 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.186018944 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.186105967 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.186178923 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.186187983 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.186255932 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.186260939 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.186429977 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.186499119 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.186505079 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.186817884 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.186953068 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.186959028 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.187122107 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.187177896 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.187184095 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.187319994 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.187438011 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.187443972 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.187691927 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.187747955 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.187753916 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.187983990 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.188077927 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.188083887 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.188282013 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.188513041 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.188556910 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.188565016 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.188694954 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.188700914 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.188860893 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.189141989 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.189183950 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.189189911 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.189332008 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.189337969 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.189606905 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.189815044 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.189868927 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.189876080 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.190026999 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.190273046 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.190327883 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.190335035 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.190534115 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.190656900 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.190663099 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.190850973 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.190901041 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.190907001 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.191101074 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.191179991 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.191185951 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.191370010 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.191421986 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.191427946 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.191658974 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.191925049 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.191931963 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.191937923 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.192082882 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.192087889 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.192339897 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.192449093 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.192455053 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.192575932 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.192698002 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.192704916 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.192950964 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.193048954 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.193054914 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.243350029 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.243369102 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.290076971 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.295007944 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.295682907 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.295737028 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.295744896 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.296178102 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.296258926 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.296266079 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.296593904 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.296724081 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.296731949 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.297219038 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.297301054 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.297307014 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.297735929 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.297821999 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.297828913 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.298259974 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.298321009 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.298327923 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.298749924 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.298765898 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.298816919 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.298829079 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.298835039 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.299068928 CEST	49980	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.299210072 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.299355030 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.299370050 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.299988985 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.300082922 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.300090075 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.300733089 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.300787926 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.300813913 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.301446915 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.301522017 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.301529884 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.301863909 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.301918983 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.301924944 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.302381992 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.302469015 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.302475929 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.302879095 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.302923918 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.302931070 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.303392887 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.303455114 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.303461075 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.303730011 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.303879023 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.303884983 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.304132938 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.304310083 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.304316044 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.304614067 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.304740906 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.304747105 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.305121899 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.305162907 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.305170059 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.305516005 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.305653095 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.305660009 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.305922985 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.306190968 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.306196928 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.306376934 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.306430101 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.306442976 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.306457996 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.306508064 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.306508064 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.404583931 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.404644012 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.404699087 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.404699087 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.404712915 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.405327082 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.405420065 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.405426979 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.405478954 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.405488014 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.405730009 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.405978918 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.405986071 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.406188011 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.406336069 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.406342983 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.407639027 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.407686949 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.407740116 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.407740116 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.407747984 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.407974958 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.408093929 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.408210993 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.408219099 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.408343077 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.408397913 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.408478022 CEST	49998	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.408488989 CEST	443	49998	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.411714077 CEST	49980	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.411778927 CEST	443	49980	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.412159920 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.412245035 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.412324905 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.412667990 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.412688017 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.642632961 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.651189089 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.651231050 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.651798964 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.656976938 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.657145977 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.657217979 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.701982975 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.702003956 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.912269115 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.912421942 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.912512064 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.913410902 CEST	49999	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:00.913444996 CEST	443	49999	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:00.942823887 CEST	50000	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.942903042 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:00.943000078 CEST	50000	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.943278074 CEST	50000	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:00.943314075 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.172753096 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.173798084 CEST	50000	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:01.173827887 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.174988031 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.176878929 CEST	50000	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:01.176971912 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.177268982 CEST	50000	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:01.220159054 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.443416119 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.443973064 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.444066048 CEST	50000	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:01.716511965 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:51:01.716584921 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:51:01.716662884 CEST	49994	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:51:01.971157074 CEST	50000	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:01.971198082 CEST	443	50000	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:01.983980894 CEST	49994	443	192.168.2.4	108.177.122.147
Apr 25, 2024 13:51:01.984010935 CEST	443	49994	108.177.122.147	192.168.2.4
Apr 25, 2024 13:51:02.032900095 CEST	50002	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.032984972 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.033075094 CEST	50002	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.035361052 CEST	50002	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.035398960 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.259088039 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.261142969 CEST	50002	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.261208057 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.261519909 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.262721062 CEST	50002	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.262793064 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.263298035 CEST	50002	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.308116913 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.530109882 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.530181885 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.530275106 CEST	50002	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.532339096 CEST	50002	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.532382011 CEST	443	50002	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.558947086 CEST	50005	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:02.558984995 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:02.559053898 CEST	50005	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:02.559389114 CEST	50005	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:02.559406042 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:02.749089956 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.749135971 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.749218941 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.749694109 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.749726057 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.783952951 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:02.784184933 CEST	50005	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:02.784208059 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:02.784742117 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:02.785191059 CEST	50005	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:02.785269022 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:02.785355091 CEST	50005	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:02.828130007 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:02.971951008 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.972193956 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.972253084 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.972573042 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.972867966 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.972934008 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.972996950 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.973098993 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.973134995 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:02.973233938 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:02.973269939 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.052308083 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:03.052390099 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:03.052468061 CEST	50005	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:03.053515911 CEST	50005	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:03.053548098 CEST	443	50005	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:03.232184887 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.232302904 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.232367039 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.232371092 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.232412100 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.232480049 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.232501030 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.232575893 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.232625961 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.232639074 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.232841969 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.232975006 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.232976913 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.233004093 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.233057022 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.233081102 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.233357906 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.233422995 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.233434916 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.233602047 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.233659029 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.233670950 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.233968973 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.234030008 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.234040976 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.234328032 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.234394073 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.234405994 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.234591007 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.234651089 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.234678984 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.234921932 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.235121012 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.235132933 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.235354900 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.235429049 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.235481024 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.235548973 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.235658884 CEST	50009	443	192.168.2.4	104.17.3.184
Apr 25, 2024 13:51:03.235688925 CEST	443	50009	104.17.3.184	192.168.2.4
Apr 25, 2024 13:51:03.319267035 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:03.319355965 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:03.319433928 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:03.319911003 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:03.319945097 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:03.545264006 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:03.599467993 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:04.492204905 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:04.492252111 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:04.492924929 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:04.529740095 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:04.529972076 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:04.530066967 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:04.576141119 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:04.649064064 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:04.649157047 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:04.649208069 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:04.707066059 CEST	50010	443	192.168.2.4	104.17.2.184
Apr 25, 2024 13:51:04.707098961 CEST	443	50010	104.17.2.184	192.168.2.4
Apr 25, 2024 13:51:05.405311108 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:05.405354023 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:05.405411959 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:05.406084061 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:05.406096935 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:05.747226000 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:05.747621059 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:05.747636080 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:05.748140097 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:05.748970032 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:05.749053001 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:05.749494076 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:05.749527931 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:05.749732018 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:05.749739885 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.109539986 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.109678984 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.109735012 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.109800100 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.111396074 CEST	50011	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.111414909 CEST	443	50011	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.255429983 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.255512953 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.255587101 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.255886078 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.255898952 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.597537041 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.597800016 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.597817898 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.598318100 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.598634958 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.598722935 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.598757029 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.644119978 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.692914963 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.734900951 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.735241890 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:06.735342979 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.742252111 CEST	50012	443	192.168.2.4	52.108.9.12
Apr 25, 2024 13:51:06.742289066 CEST	443	50012	52.108.9.12	192.168.2.4
Apr 25, 2024 13:51:12.373363018 CEST	443	49995	104.21.34.125	192.168.2.4
Apr 25, 2024 13:51:12.373456001 CEST	443	49995	104.21.34.125	192.168.2.4
Apr 25, 2024 13:51:12.373682022 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:51:13.014636993 CEST	49995	443	192.168.2.4	104.21.34.125
Apr 25, 2024 13:51:13.014693975 CEST	443	49995	104.21.34.125	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 13:49:48.897156000 CEST	53	54774	1.1.1.1	192.168.2.4
Apr 25, 2024 13:49:48.937369108 CEST	53	61744	1.1.1.1	192.168.2.4
Apr 25, 2024 13:49:49.566066980 CEST	53	61487	1.1.1.1	192.168.2.4
Apr 25, 2024 13:49:50.062659025 CEST	55362	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:49:50.062948942 CEST	61782	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:49:50.173160076 CEST	53	55362	1.1.1.1	192.168.2.4
Apr 25, 2024 13:49:50.173461914 CEST	53	61782	1.1.1.1	192.168.2.4
Apr 25, 2024 13:49:50.679817915 CEST	55733	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:49:50.679948092 CEST	58242	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:49:51.417618036 CEST	53004	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:49:51.417757988 CEST	60629	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:49:51.529974937 CEST	53	60629	1.1.1.1	192.168.2.4
Apr 25, 2024 13:49:51.530024052 CEST	53	53004	1.1.1.1	192.168.2.4
Apr 25, 2024 13:49:57.561954021 CEST	54511	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:49:57.562102079 CEST	63749	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:49:57.672476053 CEST	53	63749	1.1.1.1	192.168.2.4
Apr 25, 2024 13:49:57.672601938 CEST	53	54511	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:01.956351042 CEST	61981	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:01.956578970 CEST	54597	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:05.412250042 CEST	53	65027	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:05.765353918 CEST	138	138	192.168.2.4	192.168.2.255
Apr 25, 2024 13:50:08.726269007 CEST	53	63775	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:13.483202934 CEST	53679	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:13.483361006 CEST	52056	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:13.593944073 CEST	53	52056	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:13.792567015 CEST	64374	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:13.792809010 CEST	55441	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.284044027 CEST	63152	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.284178972 CEST	52321	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.793823957 CEST	63329	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.794277906 CEST	62992	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.903568029 CEST	55308	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.903758049 CEST	61915	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.911690950 CEST	52662	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.911818027 CEST	58593	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.998464108 CEST	51260	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:14.998652935 CEST	52526	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:15.014408112 CEST	53	61915	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:15.022305965 CEST	53	58593	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:16.687489986 CEST	59611	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:16.687621117 CEST	50308	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:17.597778082 CEST	55141	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:17.598002911 CEST	54206	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:25.132276058 CEST	63499	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:25.132622004 CEST	61766	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:25.278352022 CEST	53	63499	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:25.281060934 CEST	53	61766	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:26.250065088 CEST	52866	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:26.250437975 CEST	61326	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:26.251385927 CEST	55383	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:26.251543045 CEST	56960	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:26.360686064 CEST	53	52866	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:26.360821962 CEST	53	61326	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:26.361561060 CEST	53	55383	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:26.361603022 CEST	53	56960	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:26.982484102 CEST	56644	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:26.982801914 CEST	56974	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:27.093245029 CEST	53	56644	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:27.096821070 CEST	53	56974	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:27.395047903 CEST	56650	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:27.395550966 CEST	51285	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:27.504642010 CEST	53	56650	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:27.505494118 CEST	53	51285	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:28.574804068 CEST	53	60200	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:28.627818108 CEST	52283	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:28.627963066 CEST	60657	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:28.734066010 CEST	59856	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:28.734214067 CEST	65192	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:50:28.737797976 CEST	53	52283	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:28.738380909 CEST	53	60657	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:28.844305992 CEST	53	59856	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:28.844959021 CEST	53	65192	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:48.433598042 CEST	53	53058	1.1.1.1	192.168.2.4
Apr 25, 2024 13:50:52.259306908 CEST	53	63779	1.1.1.1	192.168.2.4
Apr 25, 2024 13:51:01.988312960 CEST	52389	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:51:01.988679886 CEST	58639	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:51:02.451786041 CEST	57347	53	192.168.2.4	1.1.1.1
Apr 25, 2024 13:51:02.452183962 CEST	54058	53	192.168.2.4	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 25, 2024 13:50:00.219938993 CEST	192.168.2.4	1.1.1.1	c2a8	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 13:49:50.062659025 CEST	192.168.2.4	1.1.1.1	0x3218	Standard query (0)	1drv.ms	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:50.062948942 CEST	192.168.2.4	1.1.1.1	0x6a7	Standard query (0)	1drv.ms	65	IN (0x0001)	false
Apr 25, 2024 13:49:50.679817915 CEST	192.168.2.4	1.1.1.1	0x36c2	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:50.679948092 CEST	192.168.2.4	1.1.1.1	0x73a9	Standard query (0)	onedrive.live.com	65	IN (0x0001)	false
Apr 25, 2024 13:49:51.417618036 CEST	192.168.2.4	1.1.1.1	0x14	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:51.417757988 CEST	192.168.2.4	1.1.1.1	0x343b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 13:49:57.561954021 CEST	192.168.2.4	1.1.1.1	0x221	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:57.562102079 CEST	192.168.2.4	1.1.1.1	0xd46c	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:01.956351042 CEST	192.168.2.4	1.1.1.1	0xb5d0	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:01.956578970 CEST	192.168.2.4	1.1.1.1	0x33e8	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Apr 25, 2024 13:50:13.483202934 CEST	192.168.2.4	1.1.1.1	0x216d	Standard query (0)	messaging.engagement.office.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:13.483361006 CEST	192.168.2.4	1.1.1.1	0xe07c	Standard query (0)	messaging.engagement.office.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:13.792567015 CEST	192.168.2.4	1.1.1.1	0xda8c	Standard query (0)	spoprod-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:13.792809010 CEST	192.168.2.4	1.1.1.1	0xf41e	Standard query (0)	spoprod-a.akamaihd.net	65	IN (0x0001)	false
Apr 25, 2024 13:50:14.284044027 CEST	192.168.2.4	1.1.1.1	0xa0f8	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:14.284178972 CEST	192.168.2.4	1.1.1.1	0xb248	Standard query (0)	www.onenote.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:14.793823957 CEST	192.168.2.4	1.1.1.1	0xdaad	Standard query (0)	augloop.office.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:14.794277906 CEST	192.168.2.4	1.1.1.1	0xc76f	Standard query (0)	augloop.office.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:14.903568029 CEST	192.168.2.4	1.1.1.1	0xf375	Standard query (0)	storage.live.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:14.903758049 CEST	192.168.2.4	1.1.1.1	0x8b35	Standard query (0)	storage.live.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:14.911690950 CEST	192.168.2.4	1.1.1.1	0x2525	Standard query (0)	messaging.engagement.office.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:14.911818027 CEST	192.168.2.4	1.1.1.1	0x732e	Standard query (0)	messaging.engagement.office.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:14.998464108 CEST	192.168.2.4	1.1.1.1	0xc7ff	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:14.998652935 CEST	192.168.2.4	1.1.1.1	0x65fa	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:16.687489986 CEST	192.168.2.4	1.1.1.1	0x887f	Standard query (0)	augloop.office.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:16.687621117 CEST	192.168.2.4	1.1.1.1	0x722b	Standard query (0)	augloop.office.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:17.597778082 CEST	192.168.2.4	1.1.1.1	0xc3f8	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:17.598002911 CEST	192.168.2.4	1.1.1.1	0xed6	Standard query (0)	www.onenote.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:25.132276058 CEST	192.168.2.4	1.1.1.1	0xba25	Standard query (0)	file.documentoneviews.xyz	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:25.132622004 CEST	192.168.2.4	1.1.1.1	0x9a72	Standard query (0)	file.documentoneviews.xyz	65	IN (0x0001)	false
Apr 25, 2024 13:50:26.250065088 CEST	192.168.2.4	1.1.1.1	0xd2f6	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.250437975 CEST	192.168.2.4	1.1.1.1	0xf84d	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:26.251385927 CEST	192.168.2.4	1.1.1.1	0x98a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.251543045 CEST	192.168.2.4	1.1.1.1	0x4a49	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:26.982484102 CEST	192.168.2.4	1.1.1.1	0x2201	Standard query (0)	file.documentoneviews.xyz	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.982801914 CEST	192.168.2.4	1.1.1.1	0x28c1	Standard query (0)	file.documentoneviews.xyz	65	IN (0x0001)	false
Apr 25, 2024 13:50:27.395047903 CEST	192.168.2.4	1.1.1.1	0xf6a6	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:27.395550966 CEST	192.168.2.4	1.1.1.1	0x607	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:28.627818108 CEST	192.168.2.4	1.1.1.1	0x2c53	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:28.627963066 CEST	192.168.2.4	1.1.1.1	0xf998	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 25, 2024 13:50:28.734066010 CEST	192.168.2.4	1.1.1.1	0x28c8	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:28.734214067 CEST	192.168.2.4	1.1.1.1	0xa35	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Apr 25, 2024 13:51:01.988312960 CEST	192.168.2.4	1.1.1.1	0x8dbb	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:51:01.988679886 CEST	192.168.2.4	1.1.1.1	0x370d	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Apr 25, 2024 13:51:02.451786041 CEST	192.168.2.4	1.1.1.1	0xf0c2	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:51:02.452183962 CEST	192.168.2.4	1.1.1.1	0x5994	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 13:49:50.173160076 CEST	1.1.1.1	192.168.2.4	0x3218	No error (0)	1drv.ms		13.107.42.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:50.790462017 CEST	1.1.1.1	192.168.2.4	0x36c2	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:50.790462017 CEST	1.1.1.1	192.168.2.4	0x36c2	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:50.790462017 CEST	1.1.1.1	192.168.2.4	0x36c2	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:50.790462017 CEST	1.1.1.1	192.168.2.4	0x36c2	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:50.790462017 CEST	1.1.1.1	192.168.2.4	0x36c2	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:50.791182995 CEST	1.1.1.1	192.168.2.4	0x73a9	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:50.791182995 CEST	1.1.1.1	192.168.2.4	0x73a9	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:51.529974937 CEST	1.1.1.1	192.168.2.4	0x343b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 13:49:51.530024052 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:51.530024052 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:51.530024052 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:51.530024052 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:51.530024052 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:51.530024052 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:56.220257998 CEST	1.1.1.1	192.168.2.4	0x4ffe	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:56.220951080 CEST	1.1.1.1	192.168.2.4	0xdb4c	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:56.220951080 CEST	1.1.1.1	192.168.2.4	0xdb4c	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:56.241236925 CEST	1.1.1.1	192.168.2.4	0x403a	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:56.241236925 CEST	1.1.1.1	192.168.2.4	0x403a	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:56.242371082 CEST	1.1.1.1	192.168.2.4	0x8751	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:57.672476053 CEST	1.1.1.1	192.168.2.4	0xd46c	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:57.672601938 CEST	1.1.1.1	192.168.2.4	0x221	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:57.672601938 CEST	1.1.1.1	192.168.2.4	0x221	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:57.672601938 CEST	1.1.1.1	192.168.2.4	0x221	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:57.672601938 CEST	1.1.1.1	192.168.2.4	0x221	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:58.466391087 CEST	1.1.1.1	192.168.2.4	0x2566	No error (0)	onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:49:58.466391087 CEST	1.1.1.1	192.168.2.4	0x2566	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:49:58.466391087 CEST	1.1.1.1	192.168.2.4	0x2566	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:00.226902962 CEST	1.1.1.1	192.168.2.4	0x712b	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:00.226902962 CEST	1.1.1.1	192.168.2.4	0x712b	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:00.226902962 CEST	1.1.1.1	192.168.2.4	0x712b	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:01.413384914 CEST	1.1.1.1	192.168.2.4	0x11f2	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:01.413384914 CEST	1.1.1.1	192.168.2.4	0x11f2	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:01.413384914 CEST	1.1.1.1	192.168.2.4	0x11f2	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:02.068145037 CEST	1.1.1.1	192.168.2.4	0x33e8	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:02.068831921 CEST	1.1.1.1	192.168.2.4	0xb5d0	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:02.728610992 CEST	1.1.1.1	192.168.2.4	0x51bc	No error (0)	onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:02.728610992 CEST	1.1.1.1	192.168.2.4	0x51bc	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:02.728610992 CEST	1.1.1.1	192.168.2.4	0x51bc	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:05.594274044 CEST	1.1.1.1	192.168.2.4	0x81ad	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:05.594274044 CEST	1.1.1.1	192.168.2.4	0x81ad	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:08.990617037 CEST	1.1.1.1	192.168.2.4	0xbebb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:08.990617037 CEST	1.1.1.1	192.168.2.4	0xbebb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:12.945374012 CEST	1.1.1.1	192.168.2.4	0xf311	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:13.583982944 CEST	1.1.1.1	192.168.2.4	0x4bbf	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:13.584815979 CEST	1.1.1.1	192.168.2.4	0xbfb7	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:13.593105078 CEST	1.1.1.1	192.168.2.4	0x216d	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:13.593944073 CEST	1.1.1.1	192.168.2.4	0xe07c	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:13.902393103 CEST	1.1.1.1	192.168.2.4	0xda8c	No error (0)	spoprod-a.akamaihd.net	spoprod-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:13.903150082 CEST	1.1.1.1	192.168.2.4	0xf41e	No error (0)	spoprod-a.akamaihd.net	spoprod-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.394788027 CEST	1.1.1.1	192.168.2.4	0xb248	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.394788027 CEST	1.1.1.1	192.168.2.4	0xb248	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.394896030 CEST	1.1.1.1	192.168.2.4	0xa0f8	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.394896030 CEST	1.1.1.1	192.168.2.4	0xa0f8	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.394896030 CEST	1.1.1.1	192.168.2.4	0xa0f8	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.394896030 CEST	1.1.1.1	192.168.2.4	0xa0f8	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:14.394896030 CEST	1.1.1.1	192.168.2.4	0xa0f8	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:14.798286915 CEST	1.1.1.1	192.168.2.4	0xf89d	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.799119949 CEST	1.1.1.1	192.168.2.4	0xb9a9	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.903750896 CEST	1.1.1.1	192.168.2.4	0xdaad	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:14.903906107 CEST	1.1.1.1	192.168.2.4	0xc76f	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:15.014055014 CEST	1.1.1.1	192.168.2.4	0xf375	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:15.014055014 CEST	1.1.1.1	192.168.2.4	0xf375	No error (0)	common-geo.ha.1drv.com	common-us.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:15.014408112 CEST	1.1.1.1	192.168.2.4	0x8b35	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:15.014408112 CEST	1.1.1.1	192.168.2.4	0x8b35	No error (0)	common-geo.ha.1drv.com	common-us.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:15.021605968 CEST	1.1.1.1	192.168.2.4	0x2525	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:15.022305965 CEST	1.1.1.1	192.168.2.4	0x732e	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:15.108201027 CEST	1.1.1.1	192.168.2.4	0xc7ff	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:15.109061956 CEST	1.1.1.1	192.168.2.4	0x65fa	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:16.798094988 CEST	1.1.1.1	192.168.2.4	0x722b	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:16.798228025 CEST	1.1.1.1	192.168.2.4	0x887f	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:17.707848072 CEST	1.1.1.1	192.168.2.4	0xc3f8	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:17.707848072 CEST	1.1.1.1	192.168.2.4	0xc3f8	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:17.707848072 CEST	1.1.1.1	192.168.2.4	0xc3f8	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:17.707848072 CEST	1.1.1.1	192.168.2.4	0xc3f8	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:17.707848072 CEST	1.1.1.1	192.168.2.4	0xc3f8	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:17.723155022 CEST	1.1.1.1	192.168.2.4	0xed6	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:17.723155022 CEST	1.1.1.1	192.168.2.4	0xed6	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:22.760346889 CEST	1.1.1.1	192.168.2.4	0x9524	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:22.760346889 CEST	1.1.1.1	192.168.2.4	0x9524	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:25.278352022 CEST	1.1.1.1	192.168.2.4	0xba25	No error (0)	file.documentoneviews.xyz		104.21.34.125	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:25.278352022 CEST	1.1.1.1	192.168.2.4	0xba25	No error (0)	file.documentoneviews.xyz		172.67.205.14	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:25.281060934 CEST	1.1.1.1	192.168.2.4	0x9a72	No error (0)	file.documentoneviews.xyz			65	IN (0x0001)	false
Apr 25, 2024 13:50:26.360686064 CEST	1.1.1.1	192.168.2.4	0xd2f6	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.360686064 CEST	1.1.1.1	192.168.2.4	0xd2f6	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.360686064 CEST	1.1.1.1	192.168.2.4	0xd2f6	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.360686064 CEST	1.1.1.1	192.168.2.4	0xd2f6	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.361561060 CEST	1.1.1.1	192.168.2.4	0x98a	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.361561060 CEST	1.1.1.1	192.168.2.4	0x98a	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:26.361603022 CEST	1.1.1.1	192.168.2.4	0x4a49	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 25, 2024 13:50:27.093245029 CEST	1.1.1.1	192.168.2.4	0x2201	No error (0)	file.documentoneviews.xyz		172.67.205.14	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:27.093245029 CEST	1.1.1.1	192.168.2.4	0x2201	No error (0)	file.documentoneviews.xyz		104.21.34.125	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:27.096821070 CEST	1.1.1.1	192.168.2.4	0x28c1	No error (0)	file.documentoneviews.xyz			65	IN (0x0001)	false
Apr 25, 2024 13:50:27.504642010 CEST	1.1.1.1	192.168.2.4	0xf6a6	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:27.504642010 CEST	1.1.1.1	192.168.2.4	0xf6a6	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:27.505494118 CEST	1.1.1.1	192.168.2.4	0x607	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 25, 2024 13:50:28.737797976 CEST	1.1.1.1	192.168.2.4	0x2c53	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:28.737797976 CEST	1.1.1.1	192.168.2.4	0x2c53	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:28.738380909 CEST	1.1.1.1	192.168.2.4	0xf998	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 25, 2024 13:50:28.844305992 CEST	1.1.1.1	192.168.2.4	0x28c8	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:28.844305992 CEST	1.1.1.1	192.168.2.4	0x28c8	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:28.844305992 CEST	1.1.1.1	192.168.2.4	0x28c8	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:28.844305992 CEST	1.1.1.1	192.168.2.4	0x28c8	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:50:28.844959021 CEST	1.1.1.1	192.168.2.4	0xa35	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:44.636277914 CEST	1.1.1.1	192.168.2.4	0x42f5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:50:44.636277914 CEST	1.1.1.1	192.168.2.4	0x42f5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:51:01.263840914 CEST	1.1.1.1	192.168.2.4	0x44cd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:51:01.263840914 CEST	1.1.1.1	192.168.2.4	0x44cd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:51:02.100089073 CEST	1.1.1.1	192.168.2.4	0x370d	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:51:02.100936890 CEST	1.1.1.1	192.168.2.4	0x8dbb	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:51:02.562391996 CEST	1.1.1.1	192.168.2.4	0xf0c2	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:51:02.562460899 CEST	1.1.1.1	192.168.2.4	0x5994	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:51:05.403637886 CEST	1.1.1.1	192.168.2.4	0x5ec4	No error (0)	onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:51:05.403637886 CEST	1.1.1.1	192.168.2.4	0x5ec4	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:51:05.403637886 CEST	1.1.1.1	192.168.2.4	0x5ec4	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:51:06.254190922 CEST	1.1.1.1	192.168.2.4	0x1cb3	No error (0)	onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 13:51:06.254190922 CEST	1.1.1.1	192.168.2.4	0x1cb3	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 25, 2024 13:51:06.254190922 CEST	1.1.1.1	192.168.2.4	0x1cb3	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

1drv.ms

onedrive.live.com

fs.microsoft.com

https:

wise-m.public.cdn.office.net

wise.public.cdn.office.net

common.online.office.com

onenote.officeapps.live.com

usc-onenote.officeapps.live.com

www.onenote.com

file.documentoneviews.xyz

code.jquery.com

challenges.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	13.107.42.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:50 UTC	691	OUT	GET /o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS HTTP/1.1 Host: 1drv.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:49:50 UTC	527	IN	HTTP/1.1 301 Moved Permanently Location: https://onedrive.live.com/redir?resid=D9982686F6D14861!580&authkey=!ALMr6W1D5n9QeZ8&ithint=onenote&e=0OfhLS X-MSNSERVER: BL4PPF48A9C04E1 Strict-Transport-Security: max-age=31536000; includeSubDomains MS-CV: c7S/tJCO40aZbQufDlvW0A.0 X-AsmVersion: UNKNOWN; 19.1381.322.2019 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E4B3A0A6F3284823B0BDE8D9F0FAAE4B Ref B: ATL331000106053 Ref C: 2024-04-25T11:49:50Z Date: Thu, 25 Apr 2024 11:49:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	13.107.137.11	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:51 UTC	741	OUT	GET /redir?resid=D9982686F6D14861!580&authkey=!ALMr6W1D5n9QeZ8&ithint=onenote&e=0OfhLS HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:49:51 UTC	1124	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 260 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /edit?id=D9982686F6D14861!580&resid=D9982686F6D14861!580&ithint=onenote&authkey=!ALMr6W1D5n9QeZ8&wdo=2&cid=d9982686f6d14861 Set-Cookie: E=P:vBXc0B1l3Ig=:Y3DdsIe11rp49/pjS/F4l3OmRyM0398SKj4ezYz+rrg=:F; domain=.live.com; path=/ Set-Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 25-Apr-2024 10:09:51 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 5fd6fc6db4-2hx9m X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D960F93833214269A24486CA7F303F9F Ref B: BN3EDGE0511 Ref C: 2024-04-25T11:49:51Z Date: Thu, 25 Apr 2024 11:49:50 GMT Connection: close
2024-04-25 11:49:51 UTC	260	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 65 64 69 74 3f 69 64 3d 44 39 39 38 32 36 38 36 46 36 44 31 34 38 36 31 21 35 38 30 26 61 6d 70 3b 72 65 73 69 64 3d 44 39 39 38 32 36 38 36 46 36 44 31 34 38 36 31 21 35 38 30 26 61 6d 70 3b 69 74 68 69 6e 74 3d 6f 6e 65 6e 6f 74 65 26 61 6d 70 3b 61 75 74 68 6b 65 79 3d 21 41 4c 4d 72 36 57 31 44 35 6e 39 51 65 5a 38 26 61 6d 70 3b 77 64 6f 3d 32 26 61 6d 70 3b 63 69 64 3d 64 39 39 38 32 36 38 36 66 36 64 31 34 38 36 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/edit?id=D9982686F6D14861!580&resid=D9982686F6D14861!580&ithint=onenote&authkey=!ALMr6W1D5n9QeZ8&wdo=2&cid=d9982686f6d14861">here</a>.</h2></body></ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	13.107.137.11	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:51 UTC	928	OUT	GET /edit?id=D9982686F6D14861!580&resid=D9982686F6D14861!580&ithint=onenote&authkey=!ALMr6W1D5n9QeZ8&wdo=2&cid=d9982686f6d14861 HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: E=P:vBXc0B1l3Ig=:Y3DdsIe11rp49/pjS/F4l3OmRyM0398SKj4ezYz+rrg=:F; xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; xidseq=1
2024-04-25 11:49:52 UTC	883	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Type: text/html Expires: -1 Location: https://onedrive.live.com/view.aspx?resid=D9982686F6D14861%21580&authkey=!ALMr6W1D5n9QeZ8 Set-Cookie: E=P:DhMt0R1l3Ig=:+SdbehcNMdTMZVFU28tWJoWMw7l1ZNPySe+p+n2+Pvo=:F; domain=.live.com; path=/ Set-Cookie: xidseq=2; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 25-Apr-2024 10:09:51 GMT; path=/ Set-Cookie: wla42=; domain=live.com; expires=Thu, 02-May-2024 11:49:52 GMT; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 5fd6fc6db4-dff7t X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 542DC1ED208F4CD0AAF53837F046F59A Ref B: BN3EDGE0208 Ref C: 2024-04-25T11:49:51Z Date: Thu, 25 Apr 2024 11:49:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	13.107.137.11	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:52 UTC	877	OUT	GET /view.aspx?resid=D9982686F6D14861%21580&authkey=!ALMr6W1D5n9QeZ8 HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; E=P:DhMt0R1l3Ig=:+SdbehcNMdTMZVFU28tWJoWMw7l1ZNPySe+p+n2+Pvo=:F; xidseq=2; wla42=
2024-04-25 11:49:54 UTC	798	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 51341 Content-Type: text/html; charset=utf-8 Expires: -1 Set-Cookie: E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; domain=.live.com; path=/ Set-Cookie: xidseq=3; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Thu, 25-Apr-2024 10:09:52 GMT; path=/ Set-Cookie: wla42=; domain=live.com; expires=Thu, 02-May-2024 11:49:54 GMT; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 5fd6fc6db4-sppbr X-ODWebServer: nameastus2946819-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0C931581A02C4F998FD7FC10194D5214 Ref B: BN3EDGE1114 Ref C: 2024-04-25T11:49:52Z Date: Thu, 25 Apr 2024 11:49:53 GMT Connection: close
2024-04-25 11:49:54 UTC	3396	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 20 20 73 64 78 5f 68 74 6d 6c 22 20 73 74 79 6c 65 3d 22 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 26 23 35 39 3b 63 68 61 72 73 65 74 26 23 36 31 3b 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 50 Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" class=" responsive sdx_html" style=""> <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><meta name="title" content="P
2024-04-25 11:49:54 UTC	8192	IN	Data Raw: 6c 29 72 65 74 75 72 6e 21 31 3b 65 3d 53 79 6d 62 6f 6c 28 22 74 65 73 74 20 73 79 6d 62 6f 6c 22 29 3b 74 72 79 7b 53 74 72 69 6e 67 28 65 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 21 6e 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 26 26 21 21 6e 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 26 26 21 21 6e 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 74 6f 53 74 72 69 6e 67 54 61 67 5d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 69 2c 6f 2c 73 2c 61 3d 72 28 35 29 2c 75 3d 72 28 32 32 29 2c 63 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 2c 66 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: l)return!1;e=Symbol("test symbol");try{String(e)}catch(e){return!1}return!!n[typeof Symbol.iterator]&&!!n[typeof Symbol.toPrimitive]&&!!n[typeof Symbol.toStringTag]}},function(e,t,r){"use strict";var n,i,o,s,a=r(5),u=r(22),c=Object.create,f=Object.defineP
2024-04-25 11:49:54 UTC	4144	IN	Data Raw: 72 6f 6d 69 73 65 73 20 63 61 6c 6c 62 61 63 6b 20 63 61 6e 6e 6f 74 20 72 65 74 75 72 6e 20 74 68 61 74 20 73 61 6d 65 20 70 72 6f 6d 69 73 65 2e 22 29 29 7d 65 6c 73 65 20 6f 3d 6e 2c 61 3d 21 30 3b 74 2e 5f 73 74 61 74 65 21 3d 3d 52 7c 7c 28 69 26 26 61 3f 70 28 74 2c 6f 29 3a 75 3f 68 28 74 2c 73 29 3a 65 3d 3d 3d 44 3f 64 28 74 2c 6f 29 3a 65 3d 3d 3d 4e 26 26 68 28 74 2c 6f 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 65 5b 43 5d 3d 46 2b 2b 2c 65 2e 5f 73 74 61 74 65 3d 76 6f 69 64 20 30 2c 65 2e 5f 72 65 73 75 6c 74 3d 76 6f 69 64 20 30 2c 65 2e 5f 73 75 62 73 63 72 69 62 65 72 73 3d 5b 5d 7d 76 61 72 20 65 2c 69 2c 79 2c 78 2c 77 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e Data Ascii: romises callback cannot return that same promise."))}else o=n,a=!0;t._state!==R\|\|(i&&a?p(t,o):u?h(t,s):e===D?d(t,o):e===N&&h(t,o))}function b(e){e[C]=F++,e._state=void 0,e._result=void 0,e._subscribers=[]}var e,i,y,x,w=Array.isArray?Array.isArray:function
2024-04-25 11:49:54 UTC	8192	IN	Data Raw: 63 72 69 70 74 2c 63 75 72 72 65 6e 74 6c 79 41 64 64 69 6e 67 53 63 72 69 70 74 2c 6d 61 69 6e 53 63 72 69 70 74 2c 73 75 62 50 61 74 68 2c 76 65 72 73 69 6f 6e 3d 22 32 2e 32 2e 30 22 2c 63 6f 6d 6d 65 6e 74 52 65 67 45 78 70 3d 2f 28 5c 2f 5c 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 5c 2a 5c 2f 7c 28 5b 5e 3a 5d 7c 5e 29 5c 2f 5c 2f 28 2e 2a 29 24 29 2f 67 6d 2c 63 6a 73 52 65 71 75 69 72 65 52 65 67 45 78 70 3d 2f 5b 5e 2e 5d 5c 73 2a 72 65 71 75 69 72 65 5c 73 2a 5c 28 5c 73 2a 5b 22 27 5d 28 5b 5e 27 22 5c 73 5d 2b 29 5b 22 27 5d 5c 73 2a 5c 29 2f 67 2c 6a 73 53 75 66 66 69 78 52 65 67 45 78 70 3d 2f 5c 2e 6a 73 24 2f 2c 63 75 72 72 44 69 72 52 65 67 45 78 70 3d 2f 5e 5c 2e 5c 2f 2f 2c 6f 70 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 73 74 72 Data Ascii: cript,currentlyAddingScript,mainScript,subPath,version="2.2.0",commentRegExp=/(\/\([\s\S]?)\\/\|([^:]\|^)\/\/(.)$)/gm,cjsRequireRegExp=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,jsSuffixRegExp=/\.js$/,currDirRegExp=/^\.\//,op=Object.prototype,ostr
2024-04-25 11:49:54 UTC	8192	IN	Data Raw: 66 69 78 29 72 65 74 75 72 6e 20 75 3d 21 31 7d 7d 7d 29 3b 69 66 28 69 26 26 6f 2e 6c 65 6e 67 74 68 29 7b 28 65 3d 6d 61 6b 65 45 72 72 6f 72 28 22 74 69 6d 65 6f 75 74 22 2c 22 4c 6f 61 64 20 74 69 6d 65 6f 75 74 20 66 6f 72 20 6d 6f 64 75 6c 65 73 3a 20 22 2b 6f 2c 6e 75 6c 6c 2c 6f 29 29 2e 63 6f 6e 74 65 78 74 4e 61 6d 65 3d 64 2e 63 6f 6e 74 65 78 74 4e 61 6d 65 3b 72 65 74 75 72 6e 20 6a 28 65 29 7d 75 26 26 65 61 63 68 28 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 20 69 28 6f 2c 73 2c 61 29 7b 76 61 72 20 65 3d 6f 2e 6d 61 70 2e 69 64 3b 69 66 28 6f 2e 65 72 72 6f 72 29 6f 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 6f 2e 65 72 72 6f 72 29 3b 65 6c 73 65 7b 73 5b 65 5d 3d 21 30 3b 65 61 63 68 28 6f 2e 64 65 70 4d 61 70 73 Data Ascii: fix)return u=!1}}});if(i&&o.length){(e=makeError("timeout","Load timeout for modules: "+o,null,o)).contextName=d.contextName;return j(e)}u&&each(s,function(e){!function i(o,s,a){var e=o.map.id;if(o.error)o.emit("error",o.error);else{s[e]=!0;each(o.depMaps
2024-04-25 11:49:54 UTC	8192	IN	Data Raw: 55 72 6c 28 75 2c 74 2c 72 29 3b 69 66 28 72 65 71 2e 6a 73 45 78 74 52 65 67 45 78 70 2e 74 65 73 74 28 65 29 29 73 3d 65 2b 28 74 7c 7c 22 22 29 3b 65 6c 73 65 7b 6e 3d 67 2e 70 61 74 68 73 3b 66 6f 72 28 6f 3d 28 69 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 3b 30 3c 6f 3b 2d 2d 6f 29 69 66 28 61 3d 67 65 74 4f 77 6e 28 6e 2c 69 2e 73 6c 69 63 65 28 30 2c 6f 29 2e 6a 6f 69 6e 28 22 2f 22 29 29 29 7b 69 73 41 72 72 61 79 28 61 29 26 26 28 61 3d 61 5b 30 5d 29 3b 69 2e 73 70 6c 69 63 65 28 30 2c 6f 2c 61 29 3b 62 72 65 61 6b 7d 73 3d 69 2e 6a 6f 69 6e 28 22 2f 22 29 3b 73 3d 28 22 2f 22 3d 3d 3d 28 73 2b 3d 74 7c 7c 28 2f 5e 64 61 74 61 5c 3a 7c 5e 62 6c 6f 62 5c 3a 7c 5c 3f 2f 2e 74 65 73 74 28 73 29 7c 7c 72 3f 22 22 3a 22 2e 6a 73 Data Ascii: Url(u,t,r);if(req.jsExtRegExp.test(e))s=e+(t\|\|"");else{n=g.paths;for(o=(i=e.split("/")).length;0<o;--o)if(a=getOwn(n,i.slice(0,o).join("/"))){isArray(a)&&(a=a[0]);i.splice(0,o,a);break}s=i.join("/");s=("/"===(s+=t\|\|(/^data\:\|^blob\:\|\?/.test(s)\|\|r?"":".js
2024-04-25 11:49:54 UTC	8192	IN	Data Raw: 76 69 73 75 61 6c 55 70 64 61 74 65 73 46 6f 72 53 68 61 72 65 64 43 6f 6e 74 65 6e 74 22 3a 31 2c 22 65 6e 61 62 6c 65 41 6c 62 75 6d 73 56 69 65 77 22 3a 31 2c 22 69 73 45 6d 62 65 64 4c 69 6e 6b 44 69 73 61 62 6c 65 64 46 6f 72 56 69 64 65 6f 73 22 3a 31 2c 22 74 68 75 6d 62 6e 61 69 6c 43 72 6f 70 45 6e 61 62 6c 65 64 22 3a 31 2c 22 65 6e 61 62 6c 65 54 61 67 73 56 69 65 77 22 3a 31 2c 22 65 6e 61 62 6c 65 41 6c 62 75 6d 73 52 65 63 69 70 69 65 6e 74 56 69 65 77 22 3a 31 2c 22 63 6f 70 79 41 73 79 6e 63 45 6e 61 62 6c 65 64 22 3a 31 2c 22 69 73 55 73 65 72 49 6e 47 66 52 61 6d 70 22 3a 31 2c 22 78 62 6f 78 4d 75 73 69 63 55 72 6c 22 3a 22 68 74 74 70 73 5c 75 30 30 33 61 5c 75 30 30 32 66 5c 75 30 30 32 66 6d 75 73 69 63 2e 78 62 6f 78 2e 63 6f 6d 5c Data Ascii: visualUpdatesForSharedContent":1,"enableAlbumsView":1,"isEmbedLinkDisabledForVideos":1,"thumbnailCropEnabled":1,"enableTagsView":1,"enableAlbumsRecipientView":1,"copyAsyncEnabled":1,"isUserInGfRamp":1,"xboxMusicUrl":"https\u003a\u002f\u002fmusic.xbox.com\
2024-04-25 11:49:54 UTC	2841	IN	Data Raw: 20 66 6f 72 20 28 76 61 72 20 62 75 6e 64 6c 65 49 64 20 69 6e 20 63 6f 6e 66 69 67 2e 70 61 74 68 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 75 6e 64 6c 65 50 61 74 68 20 3d 20 63 6f 6e 66 69 67 2e 70 61 74 68 73 5b 62 75 6e 64 6c 65 49 64 5d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 66 61 6c 6c 62 61 63 6b 50 61 74 68 73 20 3d 20 5b 62 75 6e 64 6c 65 50 61 74 68 2c 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 2b 20 62 75 6e 64 6c 65 50 61 74 68 5d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 73 5b 62 75 6e 64 6c 65 49 64 5d 20 3d 20 66 61 6c 6c 62 61 63 6b 50 61 74 68 73 3b 0d 0a 20 20 20 20 20 Data Ascii: for (var bundleId in config.paths) { var bundlePath = config.paths[bundleId]; var fallbackPaths = [bundlePath, backupBaseUrl + bundlePath]; paths[bundleId] = fallbackPaths;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:53 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 11:49:53 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=155618 Date: Thu, 25 Apr 2024 11:49:53 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:54 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 11:49:54 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=155602 Date: Thu, 25 Apr 2024 11:49:54 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 11:49:54 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	152.195.19.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:57 UTC	604	OUT	GET /wise-m/owl/5mttl/production/100/manifest.js HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onedrive.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:49:57 UTC	1180	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 189 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/javascript Date: Thu, 25 Apr 2024 11:49:57 GMT Last-Modified: Tue, 23 Apr 2024 23:54:00 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Atlanta&ASN=60068&Country=US&Region=GA&RequestIdentifier=1652919327330147348812374346708613933266"}],"include_subdomains ":true} Server: ECAcc (agc/7FA9) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: e8619d4d-f01e-006f-5c06-9762f3000000 Content-Length: 5826 Connection: close
2024-04-25 11:49:57 UTC	5826	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 66 3d 7b 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 3a 22 32 30 32 34 30 34 32 31 2e 37 22 2c 66 69 6c 65 73 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 32 35 30 61 33 35 34 30 62 33 30 61 37 37 35 35 62 65 36 34 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 4b 73 47 58 6a 62 39 45 62 43 30 73 64 4d 32 34 75 73 36 4b 59 39 4a 6f 76 42 43 34 56 77 34 61 31 39 64 4e 7a 53 6b 53 54 69 48 71 52 38 42 57 39 77 68 78 57 7a 75 2f 2f 30 52 79 42 58 39 46 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 34 33 62 33 32 64 65 30 34 37 34 64 65 32 38 39 39 33 61 63 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 2f 65 4d 4c 35 63 44 62 34 58 46 32 46 42 4b 68 42 64 57 41 38 6c 54 79 79 69 4e 6a 34 36 4c 58 63 52 62 Data Ascii: (()=>{var f={clientVersion:"20240421.7",files:{"owl.js":["owl.250a3540b30a7755be64.js","sha384-KsGXjb9EbC0sdM24us6KY9JovBC4Vw4a19dNzSkSTiHqR8BW9whxWzu//0RyBX9F"],"owl.slim.js":["owl.slim.43b32de0474de28993ac.js","sha384-/eML5cDb4XF2FBKhBdWA8lTyyiNj46LXcRb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	152.195.19.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:57 UTC	600	OUT	GET /wise/owl/owl.slim.43b32de0474de28993ac.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onedrive.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:49:57 UTC	1189	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 195196 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 11:49:57 GMT Last-Modified: Tue, 23 Apr 2024 05:27:16 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Atlanta&ASN=60068&Country=US&Region=GA&RequestIdentifier=176195848260290764491952704182855486088"}],"include_subdomains ":true} Server: ECAcc (agc/7F11) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: e2a1d6e7-b01e-0023-2240-95f2c3000000 Content-Length: 187668 Connection: close
2024-04-25 11:49:57 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 65 2c 6f 2c 69 3d 7b 39 33 32 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 65 2e 64 28 74 2c 7b 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 6f 3d 65 28 34 34 30 31 29 2c 69 3d 65 28 38 35 37 29 2c 72 3d 65 28 37 36 35 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 48 3d 74 2c 65 7d 72 65 74 75 72 6e 20 6f 2e 5a 54 28 74 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 Data Ascii: var Microsoft;!function(){"use strict";var n,t,e,o,i={9323:function(n,t,e){e.d(t,{X:function(){return u}});var o=e(4401),i=e(857),r=e(765),u=function(n){function t(t){var e=n.call(this)\|\|this;return e.H=t,e}return o.ZT(t,n),Object.defineProperty(t.prototy
2024-04-25 11:49:57 UTC	1	IN	Data Raw: 7d Data Ascii: }
2024-04-25 11:49:57 UTC	16383	IN	Data Raw: 28 6e 2c 74 2c 65 29 7d 7d 28 28 6f 3d 74 2e 63 6e 2e 73 70 6c 69 63 65 28 30 2c 6e 3f 74 2e 61 6e 3a 74 2e 63 6e 2e 6c 65 6e 67 74 68 29 2c 69 3d 74 2e 76 6e 2c 73 3d 74 2e 6c 6e 2c 61 3d 74 2e 64 6e 2c 6c 3d 5b 5d 2c 63 3d 6f 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 69 66 28 6f 2e 47 3d 6e 2e 74 61 67 2c 6f 2e 54 3d 6e 2e 74 69 6d 65 73 74 61 6d 70 2d 74 2c 6f 2e 4d 3d 6e 2e 6d 65 73 73 61 67 65 2c 6f 2e 43 3d 6e 2e 63 61 74 65 67 6f 72 79 2c 6e 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 7b 76 61 72 20 69 3d 65 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 6e 2e 63 6f 72 72 65 6c 61 74 Data Ascii: (n,t,e)}}((o=t.cn.splice(0,n?t.an:t.cn.length),i=t.vn,s=t.ln,a=t.dn,l=[],c=o.map((function(n){return function(n,t,e){var o={};if(o.G=n.tag,o.T=n.timestamp-t,o.M=n.message,o.C=n.category,n.correlationId){var i=e.findIndex((function(t){return t===n.correlat
2024-04-25 11:49:57 UTC	16383	IN	Data Raw: 2c 6e 2e 43 6c 69 65 6e 74 53 65 6e 64 54 69 6d 65 3d 22 74 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3d 30 5d 3d 22 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 2c 6e 5b 6e 2e 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 3d 31 5d 3d 22 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 22 2c 6e 5b 6e 2e 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 3d 32 5d 3d 22 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 22 2c 6e 5b 6e 2e 49 6e 73 74 61 6c Data Ascii: ,n.ClientSendTime="t"}(a\|\|(a={})),function(n){n[n.AttemptToUseFunctionalityBeforeIitialization=0]="AttemptToUseFunctionalityBeforeIitialization",n[n.WorkerApiIsNotAvailable=1]="WorkerApiIsNotAvailable",n[n.InvalidWorkerUrl=2]="InvalidWorkerUrl",n[n.Instal
2024-04-25 11:49:57 UTC	2	IN	Data Raw: 54 72 Data Ascii: Tr
2024-04-25 11:49:57 UTC	16383	IN	Data Raw: 61 63 65 54 61 67 28 35 35 33 37 32 36 32 38 37 2c 69 2e 57 2e 64 6f 2c 72 2e 47 2e 49 6e 66 6f 2c 22 47 65 74 57 6f 70 69 44 61 74 61 3a 20 47 65 74 74 69 6e 67 20 57 6f 70 69 48 6f 73 74 44 61 74 61 20 66 72 6f 6d 20 64 72 69 76 65 20 69 74 65 6d 2e 20 5b 49 73 56 61 6c 69 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 21 68 2c 22 5d 22 29 29 3b 76 61 72 20 70 3d 7b 73 74 61 72 74 54 69 6d 65 3a 66 2c 65 6e 64 54 69 6d 65 3a 28 30 2c 6f 2e 56 46 29 28 29 7d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6c 35 29 28 22 77 6f 70 69 44 61 74 61 45 6e 64 54 69 6d 65 22 29 2c 7b 64 6f 63 75 6d 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 76 2c 77 6f 70 69 48 6f 73 74 44 61 74 61 3a 68 2c 66 65 74 63 68 44 69 61 67 6e 6f 73 74 69 63 73 3a 70 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 Data Ascii: aceTag(553726287,i.W.do,r.G.Info,"GetWopiData: Getting WopiHostData from drive item. [IsValid: ".concat(!!h,"]"));var p={startTime:f,endTime:(0,o.VF)()};return(0,o.l5)("wopiDataEndTime"),{documentIdentifier:v,wopiHostData:h,fetchDiagnostics:p}})).catch((f
2024-04-25 11:49:57 UTC	16383	IN	Data Raw: 70 65 64 20 6e 6f 74 20 6c 6f 61 64 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 65 29 3b 6e 75 6c 6c 3d 3d 42 7c 7c 42 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 37 35 34 31 39 34 30 33 2c 76 2e 57 2e 64 6f 2c 68 2e 47 2e 45 72 72 6f 72 2c 75 29 3b 76 61 72 20 73 3d 7b 77 61 63 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 41 55 2e 4e 6f 2c 71 6f 73 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 44 47 2e 51 6f 73 45 72 72 6f 72 5f 4f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 4e 6f 74 4c 6f 61 64 65 64 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 75 2c 65 72 72 6f 72 3a 72 2c 69 6e 53 74 61 67 69 6e 67 3a 21 31 7d 3b 69 26 26 69 28 73 29 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 61 28 6e 29 7d 29 29 29 2c 5b 32 5d 7d 29 29 7d 29 Data Ascii: ped not loaded: ".concat(!e);null==B\|\|B.ULS.sendTraceTag(575419403,v.W.do,h.G.Error,u);var s={wacErrorName:c.AU.No,qosErrorName:c.DG.QosError_OfficeBootstrapperNotLoaded,errorMessage:u,error:r,inStaging:!1};i&&i(s)}})).catch((function(n){a(n)}))),[2]}))})
2024-04-25 11:49:57 UTC	2	IN	Data Raw: 6d 65 Data Ascii: me
2024-04-25 11:49:57 UTC	16383	IN	Data Raw: 50 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 45 6e 64 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 45 6e 64 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 44 6f 6d 43 6f 6d 70 6c 65 74 65 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 64 69 72 65 63 74 43 6f 75 6e 74 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 76 69 67 61 74 69 Data Ascii: PageResponseStartTime:(null==t?void 0:t.timing.responseStart)\|\|0,owlFramePageResponseEndTime:(null==t?void 0:t.timing.responseEnd)\|\|0,owlFramePageDomCompleteTime:(null==t?void 0:t.timing.domComplete)\|\|0,owlFramePageRedirectCount:(null==t?void 0:t.navigati
2024-04-25 11:49:57 UTC	16383	IN	Data Raw: 57 61 63 44 6f 63 75 6d 65 6e 74 42 6f 6f 74 73 74 72 61 70 70 65 72 4c 6f 61 64 45 72 72 6f 72 22 2c 6e 2e 45 6f 3d 22 57 61 63 49 6e 69 74 69 61 6c 69 7a 65 57 6f 70 69 50 65 6e 64 69 6e 67 45 72 72 6f 72 22 2c 6e 2e 57 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 47 65 6e 65 72 69 63 42 6f 6f 74 45 72 72 6f 72 22 2c 6e 2e 46 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 31 45 72 72 6f 72 22 2c 6e 2e 79 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 22 2c 6e 2e 55 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 41 70 70 22 2c 6e 2e 54 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 4a 73 41 70 69 22 2c 6e 2e 41 6f 3d 22 57 61 63 44 6f 63 75 6d 65 Data Ascii: WacDocumentBootstrapperLoadError",n.Eo="WacInitializeWopiPendingError",n.Wo="WacDocumentGenericBootError",n.Fo="WacDocumentJsApiV1Error",n.yo="WacDocumentJsApiV2Error",n.Uo="WacDocumentJsApiV2Error_App",n.To="WacDocumentJsApiV2Error_JsApi",n.Ao="WacDocume

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	152.195.19.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:57 UTC	572	OUT	GET /wise/owl/onenote-boot.41519cd0b80015813aca.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:49:58 UTC	1189	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 195154 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 11:49:58 GMT Last-Modified: Tue, 23 Apr 2024 05:27:13 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Atlanta&ASN=60068&Country=US&Region=GA&RequestIdentifier=996963073978291469110509539053457156442"}],"include_subdomains ":true} Server: ECAcc (agc/7F78) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: fbbf8071-e01e-002e-6f40-953a17000000 Content-Length: 149717 Connection: close
2024-04-25 11:49:58 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4d 69 63 72 6f 73 6f 66 74 3f 4d 69 63 72 6f 73 6f 66 74 3a 7b 7d 3b 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 7c 7c 7b 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c Data Ascii: var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),
2024-04-25 11:49:58 UTC	1	IN	Data Raw: 6c Data Ascii: l
2024-04-25 11:49:58 UTC	16383	IN	Data Raw: 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5a 74 29 2c 74 68 69 73 2e 58 74 26 26 73 65 6c 66 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 58 74 29 2c 74 68 69 73 2e 5a 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 58 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 47 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 7a 74 2e 72 65 6d 6f 76 65 41 6c 6c 28 29 7d 2c 65 7d 28 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 52 65 62 6f 6f 74 3d 22 61 70 70 52 65 62 6f 6f 74 22 2c 65 2e 62 6f 6f 74 3d 22 62 6f 6f 74 22 2c 65 2e 63 6c 6f 73 65 54 61 62 3d 22 63 6c 6f 73 65 54 61 62 22 2c 65 2e 63 72 65 61 74 65 4e 65 77 3d 22 63 72 65 61 74 65 4e 65 77 22 2c 65 2e 64 69 73 70 6f 73 65 3d 22 64 69 73 70 6f 73 65 22 2c 65 2e 66 72 61 Data Ascii: earTimeout(this.Zt),this.Xt&&self.cancelIdleCallback(this.Xt),this.Zt=void 0,this.Xt=void 0,this.Gt=void 0,this.zt.removeAll()},e}();!function(e){e.appReboot="appReboot",e.boot="boot",e.closeTab="closeTab",e.createNew="createNew",e.dispose="dispose",e.fra
2024-04-25 11:49:58 UTC	16383	IN	Data Raw: 68 69 73 2e 24 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 28 65 2c 22 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 22 2b 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 2c 74 29 7d 2c 74 68 69 73 2e 5a 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 28 65 2c 22 4f 6e 55 6e 6c 6f 61 64 22 2c 74 29 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 74 68 69 73 2e 71 6f 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 30 7d 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 74 68 69 73 2e 4b 6f 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 2c 77 69 6e 64 Data Ascii: his.$o=function(){return ge(e,"VisibilityChange_"+document.visibilityState,t)},this.Zo=function(){return ge(e,"OnUnload",t)},window.addEventListener("beforeunload",this.qo,{capture:!0,once:!0}),window.addEventListener("pagehide",this.Ko,{capture:!0}),wind
2024-04-25 11:49:58 UTC	16383	IN	Data Raw: 74 6f 20 73 75 62 6d 69 74 20 6f 6e 20 72 65 74 72 79 2e 20 45 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 6a 28 65 29 29 29 2c 65 7d 29 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 56 69 73 69 62 69 6c 69 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 49 73 26 26 55 65 28 74 68 69 73 2e 49 73 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 77 72 3d 65 2c 74 68 69 73 2e 62 73 26 26 74 68 69 73 2e 62 73 2e 73 65 74 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 57 72 61 70 70 65 72 50 6f 73 74 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 79 Data Ascii: to submit on retry. Error: ".concat(j(e))),e}))}},e.prototype.setVisibility=function(e){this.Is&&Ue(this.Is,e)},e.prototype.setMessageHandler=function(e){this.wr=e,this.bs&&this.bs.setMessageHandler(e)},e.prototype.setWrapperPostMessage=function(e){this.y
2024-04-25 11:49:58 UTC	16383	IN	Data Raw: 6f 69 64 28 6f 2e 57 73 26 26 75 3d 3d 3d 4b 2e 79 6e 26 26 28 6f 2e 52 73 2e 70 75 73 68 28 63 29 2c 6f 2e 6a 74 2e 55 4c 53 2e 4a 65 28 35 34 33 32 30 37 38 38 38 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 4b 65 70 74 20 66 6f 72 20 6c 61 74 65 72 20 70 72 6f 63 65 73 73 3a 20 22 2e 63 6f 6e 63 61 74 28 75 29 29 29 29 3b 6f 2e 6a 74 2e 55 4c 53 2e 4a 65 28 35 39 36 34 36 34 32 38 38 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 22 2e 63 6f 6e 63 61 74 28 75 29 29 2c 75 3d 3d 3d 4b 2e 71 6e 26 26 28 63 2e 56 61 6c 75 65 73 3d 72 28 72 28 7b 7d 2c 63 2e 56 61 6c 75 65 73 7c 7c 7b 7d 29 2c 7b 73 65 6e 64 54 69 6d 65 41 73 43 6c 69 63 6b 54 69 6d 65 3a 63 2e 53 65 6e 64 54 69 6d 65 7d 29 29 3b 74 72 79 7b 64 Data Ascii: oid(o.Ws&&u===K.yn&&(o.Rs.push(c),o.jt.ULS.Je(543207888,C.B,A.Info,"Kept for later process: ".concat(u))));o.jt.ULS.Je(596464288,C.B,A.Info,"Processing message: ".concat(u)),u===K.qn&&(c.Values=r(r({},c.Values\|\|{}),{sendTimeAsClickTime:c.SendTime}));try{d
2024-04-25 11:49:58 UTC	16383	IN	Data Raw: 22 29 2c 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 61 2e 56 61 2c 35 65 33 29 2c 61 2e 68 61 2e 72 65 67 69 73 74 65 72 4d 65 73 73 61 67 65 50 61 79 6c 6f 61 64 48 61 6e 64 6c 65 72 28 4b 2e 6e 6e 2c 61 2e 42 61 29 2c 61 2e 68 61 2e 72 65 67 69 73 74 65 72 4d 65 73 73 61 67 65 50 61 79 6c 6f 61 64 48 61 6e 64 6c 65 72 28 4b 2e 47 6e 2c 61 2e 4c 61 29 3b 76 61 72 20 65 3d 6e 65 77 20 77 74 28 61 2e 6c 61 2c 61 2e 46 61 2c 61 2e 6a 74 2c 61 2e 68 61 2c 61 2e 43 61 2c 61 2e 50 61 29 3b 61 2e 4d 73 3d 65 2e 42 6f 6f 74 28 29 2c 61 2e 6a 61 26 26 61 2e 6a 61 28 61 2e 4d 73 29 7d 2c 74 68 69 73 2e 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 50 61 72 61 6c 6c 65 6c 69 7a 65 53 74 61 72 74 53 65 73 73 69 6f 6e 3a 61 2e 4d 61 2c 57 Data Ascii: "),window.setTimeout(a.Va,5e3),a.ha.registerMessagePayloadHandler(K.nn,a.Ba),a.ha.registerMessagePayloadHandler(K.Gn,a.La);var e=new wt(a.la,a.Fa,a.jt,a.ha,a.Ca,a.Pa);a.Ms=e.Boot(),a.ja&&a.ja(a.Ms)},this.Ja=function(){var e={ParallelizeStartSession:a.Ma,W
2024-04-25 11:49:58 UTC	5	IN	Data Raw: 6b 65 79 29 2c Data Ascii: key),
2024-04-25 11:49:58 UTC	16383	IN	Data Raw: 72 2b 3d 31 2c 6f 2d 3d 32 2a 65 2e 63 61 63 68 65 49 74 65 6d 4c 65 6e 67 74 68 29 7d 29 29 2c 72 3e 30 29 7b 76 61 72 20 73 3d 69 2e 6c 65 6e 67 74 68 2d 72 3b 66 74 2e 6c 6f 67 67 65 72 2e 55 4c 53 2e 4a 65 28 35 35 37 31 31 34 38 33 39 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 4f 70 65 72 61 74 69 6f 6e 3d 45 76 69 63 74 53 74 61 6c 65 43 61 63 68 65 2c 20 44 75 72 61 74 69 6f 6e 3d 22 2e 63 6f 6e 63 61 74 28 4e 28 29 2d 6e 2c 22 2c 20 63 6f 75 6e 74 3d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2c 20 72 65 6d 61 69 6e 69 6e 67 3d 22 29 2e 63 6f 6e 63 61 74 28 73 29 29 7d 7d 63 61 74 63 68 28 65 29 7b 66 74 2e 6c 6f 67 67 65 72 2e 55 4c 53 2e 4a 65 28 35 35 37 31 31 34 38 34 30 2c 43 2e 42 2c 41 2e 45 72 72 6f 72 2c 22 46 61 69 6c 75 72 65 20 74 6f 20 45 76 Data Ascii: r+=1,o-=2*e.cacheItemLength)})),r>0){var s=i.length-r;ft.logger.ULS.Je(557114839,C.B,A.Info,"Operation=EvictStaleCache, Duration=".concat(N()-n,", count=").concat(r,", remaining=").concat(s))}}catch(e){ft.logger.ULS.Je(557114840,C.B,A.Error,"Failure to Ev
2024-04-25 11:49:58 UTC	16383	IN	Data Raw: 6e 2e 6b 63 28 42 74 2e 44 69 73 70 6f 73 65 64 2c 7b 7d 29 2c 6e 2e 46 73 3d 7b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 2e 6a 74 2e 55 4c 53 2e 4a 65 28 35 38 39 31 30 38 38 31 35 2c 43 2e 42 2c 41 2e 45 72 72 6f 72 2c 22 6f 6e 46 72 61 6d 65 52 65 6d 6f 76 65 64 20 65 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 6a 28 65 29 29 29 7d 7d 29 2c 74 29 7d 2c 65 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 74 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 65 29 7b 76 61 72 20 74 3d 7b 65 6e 74 72 79 50 6f 69 6e 74 3a 65 2e 64 69 61 67 6e 6f 73 74 69 63 73 2e 65 6e 74 72 79 50 6f 69 6e 74 2c 75 73 65 72 43 6c 69 63 6b 54 69 6d 65 3a 65 2e 64 69 61 67 6e 6f 73 74 69 63 Data Ascii: n.kc(Bt.Disposed,{}),n.Fs={}}catch(e){n.jt.ULS.Je(589108815,C.B,A.Error,"onFrameRemoved error: ".concat(j(e)))}}),t)},e}();function qt(e,t,n,i,o){return new zt(e,t,n,i,o)}function Kt(e){var t={entryPoint:e.diagnostics.entryPoint,userClickTime:e.diagnostic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:58 UTC	714	OUT	POST /suite/RemoteUls.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&officeserverversion=20240421.7 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:49:58 UTC	780	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 37 39 36 32 37 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 32 2c 22 4d 22 3a 22 49 73 4f 77 6c 49 46 72 61 6d 65 42 6f 6f 74 54 72 65 61 74 6d 65 6e 74 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 33 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 36 35 37 38 35 38 34 2c 22 54 22 3a 33 2c 22 4d 22 3a 22 4c 65 61 6e 20 55 69 20 48 6f 73 74 3a 20 62 6f 6f 74 41 70 70 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 36 31 38 32 30 34 Data Ascii: {"T":1714045796278,"L":[{"G":521164238,"T":2,"M":"IsOwlIFrameBootTreatment: Disabled","C":3027,"D":50},{"G":521164238,"T":3,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":576578584,"T":3,"M":"Lean Ui Host: bootApp","C":3027,"D":50},{"G":54618204
2024-04-25 11:49:58 UTC	4209	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS3-ARRAffinity=a00015c8a1e5d0a13f591ec4fe56dd0711be2c6ce76dfd3cd567c135a8ddd0be;Path=/;Domain=common.online.office.com; samesite=none; secure X-CorrelationId: e4a1832b-3e6f-487f-91e8-2d0dffeaf2db X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00005204 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF0000945B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: CCA50074AB884033A0F79BADD430FD22 Ref B: ATL331000102033 Ref C: 2024-04-25T11:49:58Z Date: Thu, 25 Apr 2024 11:49:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:58 UTC	1470	OUT	POST /o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 4035 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://onedrive.live.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:49:58 UTC	4035	OUT	Data Raw: 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 34 77 44 6e 4a 65 38 75 42 35 43 50 56 5a 51 70 65 6a 72 65 52 50 45 47 63 6e 33 52 44 75 41 65 74 59 53 4d 6a 75 6b 5a 56 36 37 33 70 4a 4a 34 79 48 5a 7a 66 6b 43 68 63 57 55 49 45 57 4c 59 31 35 7a 63 38 51 4c 65 39 5f 4f 30 57 68 43 5a 4f 64 47 77 71 37 65 37 64 38 77 31 78 58 56 2d 5f 73 46 69 56 62 31 37 77 75 47 32 56 38 6e 61 30 62 74 69 49 5f 6e 58 34 7a 77 37 6e 6c 62 78 52 68 4c 75 56 48 5a 6b 30 55 52 65 4b 6b 2d 4a 36 72 38 62 42 78 36 67 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 5f 74 74 6c 3d 31 37 31 34 34 37 37 37 39 34 31 37 36 26 66 69 6c 65 4e 61 6d 65 3d 50 49 54 2b 48 65 67 6e 2b 41 53 26 66 69 6c 65 53 69 7a 65 3d 31 39 31 36 31 37 26 73 63 3d 68 6f 73 74 25 33 44 25 32 36 71 74 25 33 44 44 65 66 Data Ascii: access_token=4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g&access_token_ttl=1714477794176&fileName=PIT+Hegn+AS&fileSize=191617&sc=host%3D%26qt%3DDef
2024-04-25 11:49:59 UTC	5756	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure X-CorrelationId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Origin-Trial: AiEeevdgKBiq37XjJeDqmaccPhecbEm+bxflC7WOKkv5wnGfbdoVop99b8bLk4oXifN9pukpdcpoR4cipX8rbnEAAABueyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOmZhbHNlLCJmZWF0dXJlIjoiSGFwdGljc0RldmljZSIsImV4cGlyeSI6MTcxMzkxNjgwMH0= Origin-Trial: AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Origin-Agent-Cluster: ?1 X-OfficeFE: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff Content-Security-Policy-Report-Only: font-src data: 'self' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com sway.com .sway-cdn.com sway-cdn.com .sharepointonline.com spoprod-a.akamaihd.net .azureedge.net fs.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net .microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net .rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.cp.microsoft.com paymentinstruments.mp.microsoft.com paymentinstruments-int.mp.microsoft.com edge.payments.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net .video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net .msftauth.net .officeapps.live.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net .rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.cp.microsoft.com paymentinstruments.mp.microsoft.com paymentinstruments-int.mp.microsoft.com edge.payments.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net .video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net .msftauth.net .officeapps.live.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net sway.com .sway-cdn.com sway-cdn.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net ; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net sway.com .sway-cdn.com sway-cdn.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net ; media-src blob: .skype.com .skypeassets.com 'self' ; object-src 'self' ; child-src blob: * onenote:; worker-src blob: ; img-src data: blob:; report-uri /o/reportcsp.ashx Document-Policy: js-profiling Reporting-Endpoints: default="https://onenote.officeapps.live.com/o/BrowserReportingHandler.ashx" nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5a&DC=PUS13&FileSource=OneDriveWOPI"}]} server-timing: prerender;dur=6,render;dur=2,total;dur=8 X-OFFICEFD: BL6PEPF0001A294 X-WacFrontEnd: BL6PEPF0001A294 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: F7F5A0E957CD4E0EB11430D0397DFBCA Ref B: ATL331000101037 Ref C: 2024-04-25T11:49:58Z Date: Thu, 25 Apr 2024 11:49:58 GMT Connection: close
2024-04-25 11:49:59 UTC	3049	IN	Data Raw: 62 65 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 76 61 72 20 67 5f 66 69 72 73 74 42 79 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 20 66 75 6e 63 74 69 6f 6e 20 68 69 67 68 52 65 73 54 69 6d 65 53 74 61 6d 70 28 29 20 7b 20 69 66 20 28 70 65 72 66 Data Ascii: be2<!DOCTYPE html><html><head><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><script type="text/javascript"> var g_firstByte = new Date(); function highResTimeStamp() { if (perf
2024-04-25 11:49:59 UTC	7933	IN	Data Raw: 31 65 66 35 0d 0a 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 20 2e 63 6f 6c 6c 61 70 73 65 64 52 69 62 62 6f 6e 45 6d 62 65 64 4d 6f 64 65 20 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 33 66 33 66 33 3b 6c 65 66 74 3a 30 70 78 3b 74 6f 70 3a 34 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 53 50 4c 41 53 48 53 43 52 45 45 4e 5f 4f 4e 45 4e 4f 54 45 5f 53 4b 45 4c 45 54 41 4c 5f 52 45 57 52 49 54 45 5f 52 49 42 42 4f 4e 5f 43 4f 4e 54 41 49 Data Ascii: 1ef5-sizing:border-box;} .collapsedRibbonEmbedMode {height:100%;padding-top:30px;box-sizing:border-box;} .skeletalRibbon {background:#f3f3f3;left:0px;top:48px;width:100%;height:30px;position:absolute;} SPLASHSCREEN_ONENOTE_SKELETAL_REWRITE_RIBBON_CONTAI
2024-04-25 11:49:59 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 70 78 3b 77 69 64 74 68 3a 31 39 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 74 6f 70 3a 33 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 4e 61 76 70 61 6e 65 50 61 67 65 43 6f 6c 75 6d 6e 20 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 39 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 74 6f 70 3a 34 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 54 77 6f 50 61 6e 65 4e 61 76 50 61 67 65 43 6f 6c 75 6d 6e 20 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d Data Ascii: 2000px;width:192px; height: 100%;top:37px;position:absolute;} .skeletalNavpanePageColumn {display:inline-block;border-right:1px solid #d2d2d2;right:1px;width:192px; height: 100%;top:45px;position:absolute;} .skeletalTwoPaneNavPageColumn {display:inline-
2024-04-25 11:49:59 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2e 63 73 73 27 29 3b 22 20 20 2f 3e 3c 73 74 79 6c 65 3e 23 41 64 64 69 74 69 6f 6e 61 6c 42 61 72 73 2c 23 42 75 73 69 6e 65 73 73 42 61 72 2c 23 45 64 69 74 6f 72 42 61 72 73 2c 23 45 64 69 74 6f 72 43 6f 6e 74 61 69 6e 65 72 2c 23 46 61 72 50 61 6e 65 2c 23 48 65 61 64 65 72 2c 23 4b 65 79 62 6f 61 72 64 52 65 67 69 6f 6e 2c 23 4e 65 61 72 42 61 72 73 2c 23 4e 65 61 72 50 61 6e 65 2c 23 4e 6f 74 69 66 69 63 61 74 69 6f 6e 42 61 72 2c 23 52 69 62 62 6f 6e 2c 23 53 74 61 74 75 73 42 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 52 65 67 69 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 3a 31 20 31 Data Ascii: 2000.css');" /><style>#AdditionalBars,#BusinessBar,#EditorBars,#EditorContainer,#FarPane,#Header,#KeyboardRegion,#NearBars,#NearPane,#NotificationBar,#Ribbon,#StatusBar{display:none;position:relative}.Region{width:100%;height:100%;display:flex;flex:1 1
2024-04-25 11:49:59 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 68 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 49 63 6f 6e 2d 31 33 31 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 49 63 6f 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 70 65 61 6b 3a 6e 6f 6e 65 7d 2e 57 61 66 66 6c 65 2d 31 33 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: 2000lvetica,Arial,sans-serif}.headerPlaceholderIcon-131{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-family:HeaderPlaceholderIcons;font-style:normal;font-weight:400;speak:none}.Waffle-132:before{content:
2024-04-25 11:49:59 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 65 66 74 3a 36 34 32 70 78 3b 77 69 64 74 68 3a 32 37 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 45 78 74 65 6e 73 69 6f 6e 42 6f 78 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 38 37 39 70 78 3b 77 69 64 74 68 3a 32 32 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 45 78 74 65 6e 73 69 6f 6e 42 6f 78 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 39 32 36 70 78 3b 77 69 64 74 68 3a 33 37 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 Data Ascii: 2000eft:642px;width:27px"></span><span class="skeletalRibbonExtensionBox" role="presentation" style="left:879px;width:22px"></span><span class="skeletalRibbonExtensionBox" role="presentation" style="left:926px;width:37px"></span><span class="skeletalRib
2024-04-25 11:49:59 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 6e 69 74 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 33 31 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 37 39 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 34 73 3b 77 69 64 74 68 3a 33 33 37 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 4c 6f 6e 67 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 53 65 63 6f 6e 64 43 6f 6c 75 6d 6e 55 6e 69 74 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 33 33 32 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 38 33 37 73 3b 61 6e Data Ascii: 2000nit" role="presentation" style="top:310px;animation-delay:1.79s;animation-duration:4s;width:337px"></span><span class="skeletalUnit skeletalCanvasLongUnit skeletalCanvasSecondColumnUnit" role="presentation" style="top:332px;animation-delay:1.837s;an
2024-04-25 11:49:59 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 62 62 6f 6e 45 6e 61 62 6c 65 64 3a 20 27 66 61 6c 73 65 27 2c 46 6c 75 65 6e 74 56 39 42 75 74 74 6f 6e 42 52 53 49 73 45 6e 61 62 6c 65 64 3a 20 27 74 72 75 65 27 2c 46 6c 75 65 6e 74 32 53 74 79 6c 65 49 73 45 6e 61 62 6c 65 64 3a 20 27 74 72 75 65 27 2c 46 6c 75 65 6e 74 32 53 74 79 6c 65 46 47 4f 6e 6c 79 49 73 45 6e 61 62 6c 65 64 3a 20 27 74 72 75 65 27 2c 48 65 61 64 65 72 57 69 74 68 50 72 69 6d 61 72 79 43 6f 6c 6f 72 73 49 73 45 6e 61 62 6c 65 64 3a 20 27 66 61 6c 73 65 27 2c 46 6c 75 65 6e 74 56 39 48 65 61 64 65 72 42 75 74 74 6f 6e 49 73 45 6e 61 62 6c 65 64 3a 20 27 66 61 6c 73 65 27 2c 49 73 52 65 73 70 6f 6e 73 69 76 65 55 78 4f 6b 54 6f 53 68 6f 77 3a 20 27 74 72 75 65 27 2c 52 65 73 70 6f 6e 73 69 76 65 55 78 49 73 45 Data Ascii: 2000bbonEnabled: 'false',FluentV9ButtonBRSIsEnabled: 'true',Fluent2StyleIsEnabled: 'true',Fluent2StyleFGOnlyIsEnabled: 'true',HeaderWithPrimaryColorsIsEnabled: 'false',FluentV9HeaderButtonIsEnabled: 'false',IsResponsiveUxOkToShow: 'true',ResponsiveUxIsE
2024-04-25 11:49:59 UTC	5323	IN	Data Raw: 31 34 63 33 0d 0a 74 50 6f 73 74 42 6f 6f 74 28 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3e 67 5f 61 70 70 42 6f 6f 74 53 63 72 69 70 74 73 45 6e 64 54 69 6d 65 3d 6e 65 77 20 44 61 74 65 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 66 66 69 63 65 6f 6e 6c 69 6e 65 2f 6f 2f 73 2f 31 36 31 37 36 30 31 34 31 30 30 38 5f 41 70 70 5f 53 63 72 69 70 74 73 2f 77 70 35 2f 61 70 70 52 65 73 6f 75 72 63 65 4c 6f 61 64 65 72 2e 6d 69 6e 2e 6a 73 27 20 64 65 66 65 72 20 6f 6e 6c 6f 61 64 3d Data Ascii: 14c3tPostBoot()</script><script type='text/javascript'>g_appBootScriptsEndTime=new Date();</script><script type='text/javascript' src='https://res-1.cdn.office.net:443/officeonline/o/s/161760141008_App_Scripts/wp5/appResourceLoader.min.js' defer onload=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:58 UTC	841	OUT	POST /o/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:49:58 UTC	112	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 32 30 32 34 30 34 32 31 2e 37 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 69 6e 69 74 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"20240421.7\",\"state\":\"init\"}"}
2024-04-25 11:49:59 UTC	1017	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2b1e3143-829d-474f-a98a-284d2dc31117 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28F X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A28F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: BFB8B35CD05F4028AC4F6758A25FF3F2 Ref B: ATL331000108049 Ref C: 2024-04-25T11:49:58Z Date: Thu, 25 Apr 2024 11:49:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49754	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:49:58 UTC	867	OUT	POST /o/RemoteUls.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&officeserverversion=20240421.7 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 4285 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:49:58 UTC	4285	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 37 39 37 30 39 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 36 34 34 34 32 33 38 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 48 6f 73 74 49 6e 69 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 7b 5c 22 65 6e 74 72 79 50 6f 69 6e 74 5c 22 3a 5c 22 4f 74 68 65 72 5c 22 2c 5c 22 68 6f 73 74 50 61 67 65 46 69 72 73 74 46 6c 75 73 68 54 69 6d 65 5c 22 3a 31 37 31 34 30 34 35 37 39 36 32 38 31 2c 5c 22 75 73 65 72 43 6c 69 63 6b 54 69 6d 65 5c 22 3a 31 37 31 34 30 34 35 37 38 38 37 38 37 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 53 74 61 72 74 54 69 6d 65 5c 22 3a 31 37 31 34 30 34 35 37 39 36 32 38 33 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 45 6e 64 54 69 6d 65 5c 22 3a 31 37 31 34 30 34 35 37 39 Data Ascii: {"T":1714045797098,"L":[{"G":596444238,"T":1,"M":"HostInitDiagnostics: {\"entryPoint\":\"Other\",\"hostPageFirstFlushTime\":1714045796281,\"userClickTime\":1714045788787,\"officeBootstrapperStartTime\":1714045796283,\"officeBootstrapperEndTime\":171404579
2024-04-25 11:49:59 UTC	4391	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 9a9e2287-4bc7-4242-8c1c-2a75a7d8db5e X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF00009C3F X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00009C3F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 6978689755AA41F5B8FF5F4473E64ED4 Ref B: ATL331000108021 Ref C: 2024-04-25T11:49:58Z Date: Thu, 25 Apr 2024 11:49:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49765	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:00 UTC	659	OUT	OPTIONS /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid Origin: https://onenote.officeapps.live.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:00 UTC	1590	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 627b46a9-1137-4080-9f80-c387aafca93d X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A296 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt Access-Control-Max-Age: 86400 X-OFFICEFD: BL6PEPF0001A296 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: C8E482AD713E4B27AE3093BC52F3EEC2 Ref B: ATL331000107047 Ref C: 2024-04-25T11:50:00Z Date: Thu, 25 Apr 2024 11:50:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49766	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:01 UTC	1444	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":7,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:01 UTC	1580	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2a72dcd1-f006-4d19-95f0-5beb06e9aca7 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A283 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5b&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A283 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: FFDB51DED0A2430481543773345BA974 Ref B: ATL331000104029 Ref C: 2024-04-25T11:50:01Z Date: Thu, 25 Apr 2024 11:50:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49774	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:01 UTC	2308	OUT	POST /o/OneNote.ashx HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 3009 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-ServerSideRendering: RenderingNoImages X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 X-SessionStartDimensions: {"Application":"OneNote","Browser":"Chrome","BrowserMajorVersion":"117","BrowserVersion":"117.0.0","Host":"OneDriveWOPI","IsSynthetic":"False","Os":"Windows","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"OTHER","UiHost":"onedrivecom","UserSessionApplicationMode":"View","WACDatacenter":"PUS13"} sec-ch-ua-platform: "Windows" X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-WacCluster: PUS13 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:01 UTC	3009	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 31 2c 7b 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 6f 70 69 25 32 45 6f 6e 65 64 72 69 76 65 25 32 45 63 6f 6d 25 32 46 77 6f 70 69 25 32 46 66 6f 6c 64 65 72 73 25 32 46 44 39 39 38 32 36 38 36 46 36 44 31 34 38 36 31 25 32 31 35 38 30 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 34 77 44 6e 4a 65 38 75 42 35 43 50 56 5a 51 70 65 6a 72 65 52 50 45 47 63 6e 33 52 44 75 41 65 74 59 53 4d 6a 75 6b 5a 56 36 37 33 70 4a 4a 34 79 48 5a 7a 66 6b 43 68 63 57 55 49 45 57 4c 59 31 35 7a 63 38 51 4c 65 39 25 35 46 4f 30 57 68 43 5a 4f 64 47 77 71 37 65 37 64 38 77 31 78 58 56 25 32 44 25 35 46 73 46 69 56 62 31 37 77 75 47 32 56 38 6e 61 30 62 74 69 49 25 35 Data Ascii: {"Mode":1,"srs":[[1,{"FileId":"WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FD9982686F6D14861%21580&access_token=4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9%5FO0WhCZOdGwq7e7d8w1xXV%2D%5FsFiVb17wuG2V8na0btiI%5
2024-04-25 11:50:02 UTC	1093	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 137674 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: f29bc1b9-fd77-43ab-8f4f-91a3c9f90756 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF00019479 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00019479 X-WacFrontEnd: BL6PEPF00019479 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: C92A1385CAF64BB082ADB99F86CB1AD5 Ref B: ATL331000108011 Ref C: 2024-04-25T11:50:01Z Date: Thu, 25 Apr 2024 11:50:01 GMT Connection: close
2024-04-25 11:50:02 UTC	953	IN	Data Raw: ef bb bf 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 31 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 2c 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 45 6f 6e 65 64 72 69 76 65 5c 75 30 30 32 35 32 45 63 6f 6d 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 46 66 6f 6c 64 65 72 73 5c 75 30 30 32 35 32 46 44 39 39 38 32 36 38 36 46 36 44 31 34 38 36 31 5c 75 30 30 32 35 32 31 35 38 30 5c 75 30 30 32 36 61 63 Data Ascii: {"Responses":[[1,{"OperationId":1,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":"","FileId":"WOPIsrc=https\u00253A\u00252F\u00252Fwopi\u00252Eonedrive\u00252Ecom\u00252Fwopi\u00252Ffolders\u00252FD9982686F6D14861\u002521580\u0026ac
2024-04-25 11:50:02 UTC	8192	IN	Data Raw: 62 37 2d 39 64 34 66 2d 62 34 33 33 61 36 37 38 39 36 62 65 7d 7b 31 7d 22 2c 36 30 33 39 39 39 32 33 34 2c 22 7b 64 34 34 62 64 33 39 66 2d 31 63 39 38 2d 35 34 62 37 2d 39 64 34 66 2d 62 34 33 33 61 36 37 38 39 36 62 65 7d 7b 31 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 32 31 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 64 34 34 62 64 33 39 66 2d 31 63 39 38 2d 35 34 62 37 2d 39 64 34 66 2d 62 34 33 33 61 36 37 38 39 36 62 65 7c 31 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 34 36 39 37 37 30 32 35 35 2c 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 45 6f 6e 65 64 72 69 76 65 5c 75 30 30 32 35 32 45 63 6f 6d 5c 75 30 30 32 35 32 46 77 6f Data Ascii: b7-9d4f-b433a67896be}{1}",603999234,"{d44bd39f-1c98-54b7-9d4f-b433a67896be}{1}"]},{"ClassId":393221,"ObjectId":"d44bd39f-1c98-54b7-9d4f-b433a67896be\|1","Properties":[469770255,"WOPIsrc=https\u00253A\u00252F\u00252Fwopi\u00252Eonedrive\u00252Ecom\u00252Fwo
2024-04-25 11:50:02 UTC	6446	IN	Data Raw: 42 4a 62 38 43 31 67 5c 75 30 30 32 36 61 63 63 65 73 73 5f 74 6f 6b 65 6e 5f 74 74 6c 3d 31 37 31 34 34 37 37 37 39 34 31 37 36 22 2c 22 49 64 22 3a 22 36 35 31 66 35 63 38 33 2d 36 31 62 35 2d 34 31 30 33 2d 39 30 66 33 2d 66 33 38 37 36 38 32 61 31 31 62 36 7c 35 37 22 2c 22 52 65 6c 61 74 69 76 65 50 61 74 68 22 3a 6e 75 6c 6c 2c 22 49 73 46 6f 6c 64 65 72 43 65 6c 6c 22 3a 66 61 6c 73 65 2c 22 4f 70 73 22 3a 5b 5d 7d 5d 2c 22 50 69 6e 52 65 76 69 73 69 6f 6e 46 6f 72 41 75 67 4c 6f 6f 70 52 65 73 70 6f 6e 73 65 22 3a 30 2c 22 4c 61 74 65 73 74 52 65 76 69 73 69 6f 6e 49 64 22 3a 22 36 35 31 66 35 63 38 33 2d 36 31 62 35 2d 34 31 30 33 2d 39 30 66 33 2d 66 33 38 37 36 38 32 61 31 31 62 36 7c 35 37 22 2c 22 43 6c 69 65 6e 74 4b 6e 6f 77 6c 65 64 67 65 Data Ascii: BJb8C1g\u0026access_token_ttl=1714477794176","Id":"651f5c83-61b5-4103-90f3-f387682a11b6\|57","RelativePath":null,"IsFolderCell":false,"Ops":[]}],"PinRevisionForAugLoopResponse":0,"LatestRevisionId":"651f5c83-61b5-4103-90f3-f387682a11b6\|57","ClientKnowledge
2024-04-25 11:50:02 UTC	8192	IN	Data Raw: 6a 65 63 74 49 64 22 3a 22 30 33 30 34 61 33 63 31 2d 31 63 36 64 2d 34 66 65 30 2d 39 37 36 64 2d 66 39 32 34 65 61 38 61 62 34 35 38 7c 31 32 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 34 36 39 37 37 35 34 35 30 2c 22 70 22 2c 32 30 31 33 34 30 31 32 32 2c 22 32 22 2c 32 36 38 34 34 32 36 33 35 2c 22 32 32 22 2c 33 33 35 35 35 31 35 30 30 2c 22 34 32 37 38 31 39 30 30 38 30 22 2c 33 33 35 35 35 37 36 37 39 2c 22 30 22 2c 33 33 35 35 35 37 36 37 38 2c 22 30 22 2c 34 36 39 37 36 39 32 32 36 2c 22 43 61 6c 69 62 72 69 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 31 31 37 39 37 32 35 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 30 33 30 34 61 33 63 31 2d 31 63 36 64 2d 34 66 65 30 2d 39 37 36 64 2d 66 39 32 34 65 61 38 61 62 34 35 38 7c 31 33 22 2c 22 50 72 Data Ascii: jectId":"0304a3c1-1c6d-4fe0-976d-f924ea8ab458\|12","Properties":[469775450,"p",201340122,"2",268442635,"22",335551500,"4278190080",335557679,"0",335557678,"0",469769226,"Calibri"]},{"ClassId":1179725,"ObjectId":"0304a3c1-1c6d-4fe0-976d-f924ea8ab458\|13","Pr
2024-04-25 11:50:02 UTC	8192	IN	Data Raw: 63 38 33 2d 36 31 62 35 2d 34 31 30 33 2d 39 30 66 33 2d 66 33 38 37 36 38 32 61 31 31 62 36 7c 31 39 22 2c 22 52 65 6c 61 74 69 76 65 50 61 74 68 22 3a 6e 75 6c 6c 2c 22 49 73 46 6f 6c 64 65 72 43 65 6c 6c 22 3a 66 61 6c 73 65 2c 22 4f 70 73 22 3a 5b 5d 7d 2c 7b 22 42 61 73 65 49 64 22 3a 22 36 35 31 66 35 63 38 33 2d 36 31 62 35 2d 34 31 30 33 2d 39 30 66 33 2d 66 33 38 37 36 38 32 61 31 31 62 36 7c 31 39 22 2c 22 4f 62 6a 65 63 74 47 72 6f 75 70 73 22 3a 5b 7b 22 49 64 22 3a 22 34 38 62 35 32 38 61 65 2d 64 33 37 36 2d 34 63 66 66 2d 62 35 34 64 2d 63 38 35 39 35 37 61 30 64 32 66 33 7c 31 22 2c 22 4f 62 6a 65 63 74 73 22 3a 5b 7b 22 43 6c 61 73 73 49 64 22 3a 31 33 31 31 34 30 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 30 33 30 34 61 33 63 31 2d 31 63 36 Data Ascii: c83-61b5-4103-90f3-f387682a11b6\|19","RelativePath":null,"IsFolderCell":false,"Ops":[]},{"BaseId":"651f5c83-61b5-4103-90f3-f387682a11b6\|19","ObjectGroups":[{"Id":"48b528ae-d376-4cff-b54d-c85957a0d2f3\|1","Objects":[{"ClassId":131140,"ObjectId":"0304a3c1-1c6
2024-04-25 11:50:02 UTC	8192	IN	Data Raw: 32 34 7d 22 2c 35 33 36 38 37 38 34 35 37 2c 22 7b 30 33 30 34 61 33 63 31 2d 31 63 36 64 2d 34 66 65 30 2d 39 37 36 64 2d 66 39 32 34 65 61 38 61 62 34 35 38 7d 7b 32 34 7d 22 2c 36 30 33 39 38 36 39 37 35 2c 22 7b 36 35 31 66 35 63 38 33 2d 36 31 62 35 2d 34 31 30 33 2d 39 30 66 33 2d 66 33 38 37 36 38 32 61 31 31 62 36 7d 7b 32 36 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 33 30 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 36 35 31 66 35 63 38 33 2d 36 31 62 35 2d 34 31 30 33 2d 39 30 66 33 2d 66 33 38 37 36 38 32 61 31 31 62 36 7c 32 36 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 32 30 31 33 34 30 30 32 33 2c 22 30 22 2c 32 36 38 34 34 32 38 37 38 2c 22 31 30 33 33 22 2c 33 33 35 35 35 31 35 35 30 2c 22 31 22 2c 33 33 35 35 35 31 36 32 Data Ascii: 24}",536878457,"{0304a3c1-1c6d-4fe0-976d-f924ea8ab458}{24}",603986975,"{651f5c83-61b5-4103-90f3-f387682a11b6}{26}"]},{"ClassId":393230,"ObjectId":"651f5c83-61b5-4103-90f3-f387682a11b6\|26","Properties":[201340023,"0",268442878,"1033",335551550,"1",33555162
2024-04-25 11:50:02 UTC	8192	IN	Data Raw: 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 45 6f 6e 65 64 72 69 76 65 5c 75 30 30 32 35 32 45 63 6f 6d 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 46 66 69 6c 65 73 5c 75 30 30 32 35 32 46 44 39 39 38 32 36 38 36 46 36 44 31 34 38 36 31 5c 75 30 30 32 35 32 31 35 38 32 5c 75 30 30 32 36 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 34 77 49 42 50 35 50 54 43 5a 39 74 79 5c 75 30 30 32 35 35 46 39 5a 38 61 38 51 52 6c 5a 5a 34 48 38 58 49 4d 6b 63 31 38 4e 75 4e 37 6b 70 37 64 72 44 54 5c 75 30 30 32 35 35 46 74 6d 52 53 36 6e 35 49 68 76 67 4b 45 56 37 73 59 69 78 35 4d 50 65 76 4f 6c 54 33 4e 59 47 78 71 43 48 39 68 70 6a Data Ascii: FileId":"WOPIsrc=https\u00253A\u00252F\u00252Fwopi\u00252Eonedrive\u00252Ecom\u00252Fwopi\u00252Ffiles\u00252FD9982686F6D14861\u002521582\u0026access_token=4wIBP5PTCZ9ty\u00255F9Z8a8QRlZZ4H8XIMkc18NuN7kp7drDT\u00255FtmRS6n5IhvgKEV7sYix5MPevOlT3NYGxqCH9hpj
2024-04-25 11:50:02 UTC	8192	IN	Data Raw: 38 76 56 4f 6c 5c 75 30 30 32 46 6e 47 78 75 62 66 61 43 77 41 41 41 47 43 46 48 53 39 5c 75 30 30 32 42 76 58 56 6a 34 5c 75 30 30 32 42 49 66 66 64 6d 5c 75 30 30 32 46 6e 35 79 71 64 76 6e 6a 41 51 43 77 52 74 37 7a 62 51 38 63 33 48 64 53 5c 75 30 30 32 46 62 75 4e 71 66 70 72 69 6d 5c 75 30 30 32 46 35 42 77 41 41 41 45 5a 44 5c 75 30 30 32 46 37 4f 42 76 33 6a 30 63 66 58 4e 72 5c 75 30 30 32 46 6a 46 73 42 38 51 79 41 4d 41 59 45 33 38 36 54 63 5c 75 30 30 32 42 66 4d 35 6b 37 5c 75 30 30 32 46 59 76 46 35 5c 75 30 30 32 46 36 56 30 32 4b 75 33 5c 75 30 30 32 42 39 47 77 41 41 41 4d 43 59 54 4b 64 5c 75 30 30 32 46 73 4f 76 30 37 74 65 39 5c 75 30 30 32 42 4c 5c 75 30 30 32 42 63 5c 75 30 30 32 46 35 6a 65 49 38 5a 4e 41 4c 41 47 33 76 63 74 39 5c Data Ascii: 8vVOl\u002FnGxubfaCwAAAGCFHS9\u002BvXVj4\u002BIffdm\u002Fn5yqdvnjAQCwRt7zbQ8c3HdS\u002FbuNqfprim\u002F5BwAAAEZD\u002F7OBv3j0cfXNr\u002FjFsB8QyAMAYE386Tc\u002BfM5k7\u002FYvF5\u002F6V02Ku3\u002B9GwAAAMCYTKd\u002FsOv07te9\u002BL\u002Bc\u002F5jeI8ZNALAG3vct9\
2024-04-25 11:50:02 UTC	8192	IN	Data Raw: 4f 5c 75 30 30 32 42 39 32 56 70 44 69 7a 66 5c 75 30 30 32 42 55 71 44 47 33 38 5c 75 30 30 32 46 36 61 59 72 7a 5c 75 30 30 32 46 4d 51 65 37 34 32 31 5a 59 36 4f 4c 31 49 50 62 7a 78 32 57 4c 47 34 73 5c 75 30 30 32 46 5a 6b 5a 4e 50 7a 44 34 54 6c 78 5c 75 30 30 32 42 36 57 75 5c 75 30 30 32 46 70 33 34 48 64 42 39 57 5c 75 30 30 32 42 72 66 31 36 43 77 43 41 74 57 58 5c 75 30 30 32 46 47 51 44 6c 33 5c 75 30 30 32 46 73 5c 75 30 30 32 46 75 58 6e 73 44 52 4f 6c 58 71 4a 33 39 55 61 5c 75 30 30 32 42 75 43 6b 62 35 72 6e 41 6b 79 72 6e 4b 74 33 69 57 57 70 63 35 32 48 34 5c 75 30 30 32 42 55 6f 6c 5c 75 30 30 32 46 6f 47 74 78 76 55 31 48 75 56 4e 44 6a 66 5c 75 30 30 32 46 63 75 6d 75 72 37 4a 6f 66 75 63 68 33 58 77 70 64 59 36 36 52 46 32 5c 75 30 Data Ascii: O\u002B92VpDizf\u002BUqDG38\u002F6aYrz\u002FMQe7421ZY6OL1IPbzx2WLG4s\u002FZkZNPzD4Tlx\u002B6Wu\u002Fp34HdB9W\u002Brf16CwCAtWX\u002FGQDl3\u002Fs\u002FuXnsDROlXqJ39Ua\u002BuCkb5rnAkyrnKt3iWWpc52H4\u002BUol\u002FoGtxvU1HuVNDjf\u002Fcumur7Jofuch3XwpdY66RF2\u0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49773	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:01 UTC	1452	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":1290,"Value":"Making GetCells Request","Type":"BootLogs"},{"Index":2,"MsSinceStart":1291,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:01 UTC	1580	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: d3455d55-9198-4cc7-95ad-92973503b93f X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28B X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5a&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A28B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 1F26420955C449D3AF64C9DC6679D7A3 Ref B: ATL331000101017 Ref C: 2024-04-25T11:50:01Z Date: Thu, 25 Apr 2024 11:50:00 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49775	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:01 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:50:01 UTC	4251	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2b619f9b-181a-4c7a-9f66-3f2ac2bd9679 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A27D X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5b&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A27D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 0B392C7A477F41CEB5962D4FA4B7468E Ref B: ATL331000104019 Ref C: 2024-04-25T11:50:01Z Date: Thu, 25 Apr 2024 11:50:00 GMT Connection: close
2024-04-25 11:50:01 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49779	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:02 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:50:02 UTC	4251	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: cd32f97d-58d6-4d8b-af58-7a5f0de42615 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A27E X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5a&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A27E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: FCDDE00F0AC841BFB8291421D96B8167 Ref B: ATL331000101029 Ref C: 2024-04-25T11:50:02Z Date: Thu, 25 Apr 2024 11:50:02 GMT Connection: close
2024-04-25 11:50:02 UTC	81	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xh
2024-04-25 11:50:02 UTC	1127	IN	Data Raw: 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 65 72 72 6f 72 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 Data Ascii: tml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Internal server error.</title><style type="text/css">...body{margin:0;font-si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49782	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:02 UTC	1460	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":2,"MsSinceStart":2490,"Value":"Get cells response received:200","Type":"BootLogs"},{"Index":3,"MsSinceStart":2490,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:03 UTC	1580	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 870cde61-28e0-4a5a-bd16-72d20c12a6a3 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28D X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5d&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A28D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 003766803E754BC9828CDA984DAD6A60 Ref B: ATL331000107031 Ref C: 2024-04-25T11:50:02Z Date: Thu, 25 Apr 2024 11:50:02 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49783	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	653	OUT	GET /o/OneNote.ashx HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:03 UTC	1044	IN	HTTP/1.1 503 Service Unavailable Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 529d360d-9f94-4baa-83a0-59dadc595572 X-UserSessionId: 529d360d-9f94-4baa-83a0-59dadc595572 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A295 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A295 X-WacFrontEnd: BL6PEPF0001A295 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 5CAB4B8185394D948E52021C302925F5 Ref B: ATL331000101011 Ref C: 2024-04-25T11:50:03Z Date: Thu, 25 Apr 2024 11:50:02 GMT Connection: close
2024-04-25 11:50:03 UTC	33	IN	Data Raw: 31 62 0d 0a 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 0d 0a Data Ascii: 1bThe service is unavailable.
2024-04-25 11:50:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49784	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:50:03 UTC	4267	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: d0c22ce8-13da-42d4-bf70-b576b45f3ed6 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28B X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5c&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A28B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 880F0FB119914ABF8BABD10B3AA746B4 Ref B: ATL331000106045 Ref C: 2024-04-25T11:50:03Z Date: Thu, 25 Apr 2024 11:50:03 GMT Connection: close
2024-04-25 11:50:03 UTC	891	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int
2024-04-25 11:50:03 UTC	317	IN	Data Raw: 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 35 30 30 20 2d 20 49 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 65 72 72 6f 72 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 72 65 20 69 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 2c 20 61 6e 64 20 69 74 20 63 61 6e 6e 6f 74 20 62 65 20 64 Data Ascii: le></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>500 - Internal server error.</h2> <h3>There is a problem with the resource you are looking for, and it cannot be d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49785	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	1573	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":3,"MsSinceStart":2493,"Value":"Launching FastView from entry point WacBootGetCells","Type":"BootLogs"},{"Index":4,"MsSinceStart":2495,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":5,"MsSinceStart":3067,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:03 UTC	1580	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6919f7a6-6bc7-4a82-b165-38d74a2b0cc2 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A27F X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5d&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A27F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: CB565805E5E94952863F0A100DC548CA Ref B: ATL331000107045 Ref C: 2024-04-25T11:50:03Z Date: Thu, 25 Apr 2024 11:50:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49790	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	2169	OUT	POST /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FD9982686F6D14861%21580&access_token=4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9%5FO0WhCZOdGwq7e7d8w1xXV%2D%5FsFiVb17wuG2V8na0btiI%5FnX4zw7nlbxRhLuVHZk0UReKk%2DJ6r8bBx6g&access_token_ttl=1714477794176 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: false X-WacCluster: PUS13 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:03 UTC	1075	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 14aff737-5ab6-4aaf-88af-581d1fb72691 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF00019478 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00019478 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: CF4DA821E26347348ABFDFDAD3485A95 Ref B: ATL331000106047 Ref C: 2024-04-25T11:50:03Z Date: Thu, 25 Apr 2024 11:50:03 GMT Connection: close
2024-04-25 11:50:03 UTC	195	IN	Data Raw: 62 64 0d 0a 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 36 30 2c 7b 22 69 73 45 64 75 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 54 65 61 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 53 74 75 64 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 33 36 35 53 75 62 73 63 72 69 62 65 72 22 3a 66 61 6c 73 65 2c 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 30 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 7d 5d 5d 7d 0d 0a Data Ascii: bd{"Responses":[[60,{"isEducation":false,"isTeacher":false,"isStudent":false,"isO365Subscriber":false,"OperationId":0,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":""}]]}
2024-04-25 11:50:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49794	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	1929	OUT	GET /o/null&DataUrlEnabled=true HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 X-AccessTokenTtl: 1714477794176 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS13 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:04 UTC	664	IN	HTTP/1.1 302 Found Content-Length: 182 Content-Type: text/html; charset=utf-8 Location: /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true Set-Cookie: X-OFFICEFD: BL6PEPF00019479 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 2E2A74E57DEF4D8F9F898288F90C4B93 Ref B: ATL331000103029 Ref C: 2024-04-25T11:50:04Z Date: Thu, 25 Apr 2024 11:50:03 GMT Connection: close
2024-04-25 11:50:04 UTC	182	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 6f 2f 65 72 72 6f 72 2f 65 72 72 6f 72 2e 68 74 6d 6c 3f 61 73 70 78 65 72 72 6f 72 70 61 74 68 3d 2f 6f 2f 6e 75 6c 6c 26 61 6d 70 3b 44 61 74 61 55 72 6c 45 6e 61 62 6c 65 64 3d 74 72 75 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49796	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 16853 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-AccessTokenTtl: 1714477794176 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS13 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:03 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 38 30 32 30 37 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 32 30 30 32 35 36 37 39 2c 22 54 22 3a 2d 31 34 31 2c 22 4d 22 3a 22 53 65 74 41 70 70 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 74 75 73 3a 20 61 70 70 43 74 6f 72 53 74 61 72 74 69 6e 67 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 38 33 39 36 33 37 31 2c 22 54 22 3a 2d 31 33 32 2c 22 4d 22 3a 22 41 46 72 61 6d 65 77 6f 72 6b 41 70 70 6c 69 63 61 74 69 6f 6e 3a 3a 49 6e 69 74 69 61 6c 69 7a 65 3a 3a 49 73 4d 65 65 74 69 6e 67 4c 69 76 65 53 65 73 73 69 6f 6e 3a 20 66 61 6c 73 65 2e 20 4d 65 65 74 69 6e 67 49 64 3a 20 2e 20 49 73 4d 65 65 74 69 6e 67 50 72 65 73 65 6e 74 65 72 3a 20 66 61 6c 73 65 2e 20 4d 65 65 74 69 6e 67 4f 72 Data Ascii: {"T":1714045802076,"L":[{"G":20025679,"T":-141,"M":"SetAppInitializationStatus: appCtorStarting","C":306,"D":50},{"G":508396371,"T":-132,"M":"AFrameworkApplication::Initialize::IsMeetingLiveSession: false. MeetingId: . IsMeetingPresenter: false. MeetingOr
2024-04-25 11:50:03 UTC	469	OUT	Data Raw: 3a 32 36 33 2c 22 4d 22 3a 22 5b 46 61 73 74 56 69 65 77 45 78 74 65 6e 73 69 6f 6e 73 5d 20 52 65 6d 6f 76 65 64 20 66 61 73 74 56 69 65 77 2e 48 74 6d 6c 45 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 69 74 73 20 50 61 72 65 6e 74 4e 6f 64 65 22 2c 22 43 22 3a 33 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 31 39 36 38 36 35 33 30 2c 22 54 22 3a 32 36 33 2c 22 4d 22 3a 22 5b 46 61 73 74 56 69 65 77 45 78 74 65 6e 73 69 6f 6e 73 5d 20 53 75 63 63 65 65 64 65 64 20 74 6f 20 64 69 73 6d 69 73 73 20 46 61 73 74 56 69 65 77 22 2c 22 43 22 3a 33 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 31 39 37 35 36 31 30 34 2c 22 54 22 3a 32 36 34 2c 22 4d 22 3a 22 46 61 73 74 56 69 65 77 20 69 6e 74 65 72 61 63 74 69 76 69 74 79 20 68 69 73 74 6f 67 72 61 6d 3a 20 7b 5c Data Ascii: :263,"M":"[FastViewExtensions] Removed fastView.HtmlElement from its ParentNode","C":326,"D":50},{"G":19686530,"T":263,"M":"[FastViewExtensions] Succeeded to dismiss FastView","C":326,"D":50},{"G":19756104,"T":264,"M":"FastView interactivity histogram: {\
2024-04-25 11:50:04 UTC	1684	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 28cf06a4-b8df-49c7-a7e8-a49aed1e2eeb X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A293 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5b&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A293 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 39BEB34CEADA4064B12A19EE8B1CD68D Ref B: ATL331000104045 Ref C: 2024-04-25T11:50:04Z Date: Thu, 25 Apr 2024 11:50:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49795	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	975	OUT	POST /o/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:03 UTC	119	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 32 30 32 34 30 34 32 31 2e 37 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 62 6f 6f 74 53 75 63 63 65 73 73 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"20240421.7\",\"state\":\"bootSuccess\"}"}
2024-04-25 11:50:04 UTC	1055	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 73ed95e4-22ca-476a-8a4d-43ffc4b10c91 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0000D923 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0000D923 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 82F27EE73C8B40CEB03F1DFE44AB2457 Ref B: ATL331000108025 Ref C: 2024-04-25T11:50:04Z Date: Thu, 25 Apr 2024 11:50:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49798	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	1001	OUT	POST /o/RemoteUls.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&officeserverversion=20240421.7 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 6143 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:03 UTC	6143	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 37 39 37 31 32 35 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 31 38 34 38 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 75 6e 64 65 66 69 6e 65 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 31 38 34 38 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 35 37 31 34 32 37 31 2c 22 54 22 3a 31 38 34 39 2c 22 4d 22 3a 22 57 41 43 20 42 6f 6f 74 20 41 70 70 Data Ascii: {"T":1714045797125,"L":[{"G":595714715,"T":1848,"M":"Received messageId: Wac_AppBootState, correlation: undefined","C":379,"D":50},{"G":596464288,"T":1848,"M":"Processing message: Wac_AppBootState","C":379,"D":50},{"G":595714271,"T":1849,"M":"WAC Boot App
2024-04-25 11:50:04 UTC	4408	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: b5dd323f-9581-4dd3-ac8c-4bc49c68f1de X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28F X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5c&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A28F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 40233BB7D5D943159E572327F8515527 Ref B: ATL331000105017 Ref C: 2024-04-25T11:50:04Z Date: Thu, 25 Apr 2024 11:50:04 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49797	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:03 UTC	1000	OUT	POST /o/RemoteUls.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&officeserverversion=20240421.7 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 548 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:03 UTC	548	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 38 30 32 33 39 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 34 38 34 38 34 2c 22 54 22 3a 2d 33 38 2c 22 4d 22 3a 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 4a 53 41 50 49 20 72 65 73 6f 75 72 63 65 20 74 69 6d 69 6e 67 20 65 6e 74 72 79 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 30 39 31 34 36 35 35 2c 22 54 22 3a 2d 33 38 2c 22 4d 22 3a 22 54 69 6d 65 20 73 70 65 6e 74 20 6c 6f 67 67 69 6e 67 3a 20 32 2e 35 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 33 33 34 2c 22 54 22 3a 2d 33 38 2c 22 4d 22 3a 22 53 65 6e 64 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 4a 73 41 70 69 44 69 61 67 6e 6f 73 74 69 63 73 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 Data Ascii: {"T":1714045802391,"L":[{"G":595948484,"T":-38,"M":"Could not find JSAPI resource timing entry","C":379,"D":50},{"G":590914655,"T":-38,"M":"Time spent logging: 2.5","C":379,"D":50},{"G":596464334,"T":-38,"M":"Sending message: JsApiDiagnostics","C":379,"D"
2024-04-25 11:50:04 UTC	4464	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 223dd87a-179f-4807-922a-f94ccc5700e9 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0000D923 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0000D923 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control X-MSEdge-Ref: Ref A: C323FBC8FB55473DA22F94804F82B687 Ref B: ATL331000102017 Ref C: 2024-04-25T11:50:04Z Date: Thu, 25 Apr 2024 11:50:03 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49799	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:04 UTC	1547	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":5,"MsSinceStart":3119,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"},{"Index":6,"MsSinceStart":3475,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"},{"Index":7,"MsSinceStart":3653,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:04 UTC	1564	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 07308fed-fbfe-43d5-8167-d8d193e8305b X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A27A X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5c&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A27A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: D126FDB7F58E4958B312B7382C2C0F91 Ref B: ATL331000105031 Ref C: 2024-04-25T11:50:04Z Date: Thu, 25 Apr 2024 11:50:04 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49802	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:04 UTC	977	OUT	GET /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FD9982686F6D14861%21580&access_token=4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9%5FO0WhCZOdGwq7e7d8w1xXV%2D%5FsFiVb17wuG2V8na0btiI%5FnX4zw7nlbxRhLuVHZk0UReKk%2DJ6r8bBx6g&access_token_ttl=1714477794176 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:04 UTC	1217	IN	HTTP/1.1 412 Precondition Failed Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 9f618636-4032-4353-8e02-5c7e2c6a82a8 X-UserSessionId: 9f618636-4032-4353-8e02-5c7e2c6a82a8 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00012F7D X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-NewKey: Ydtx7lPoQigNrw0Fm2m0y2o9W83yWgOSO++WIMCY6dw=;EEuFpdJOaIdRLrSSd/uzBZl56NyheeV+/p9uxQuiT0o=,638496426045291303 X-OFFICEFD: SN3PEPF00012F7D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 7DCA510420124255AF7F87224B929FAC Ref B: ATL331000102027 Ref C: 2024-04-25T11:50:04Z Date: Thu, 25 Apr 2024 11:50:04 GMT Connection: close
2024-04-25 11:50:04 UTC	1512	IN	Data Raw: 35 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 31 32 20 Data Ascii: 5e1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>412
2024-04-25 11:50:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49806	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:04 UTC	1963	OUT	GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 X-AccessTokenTtl: 1714477794176 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS13 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:04 UTC	1005	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 4212 Content-Type: text/html Last-Modified: Sun, 07 Apr 2024 03:50:49 GMT Accept-Ranges: bytes ETag: "c2d50c79e88da1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7d91e307-ce11-4833-81e4-a6464d06baaf X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28C X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-OFFICEFD: BL6PEPF0001A28C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 65A1B5F37C664CBAB8618021FECEA700 Ref B: ATL331000107027 Ref C: 2024-04-25T11:50:04Z Date: Thu, 25 Apr 2024 11:50:04 GMT Connection: close
2024-04-25 11:50:04 UTC	1334	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></tit
2024-04-25 11:50:04 UTC	2878	IN	Data Raw: 20 67 65 74 58 6d 6c 48 74 74 70 52 65 71 75 65 73 74 4f 62 6a 65 63 74 28 29 20 7b 20 69 66 20 28 77 69 6e 64 6f 77 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 20 72 65 74 75 72 6e 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 29 20 72 65 74 75 72 6e 20 6e 65 77 20 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 73 58 6d 6c 32 2e 58 6d 6c 48 74 74 70 22 29 3b 20 7d 20 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 53 63 72 69 70 74 28 29 20 7b 20 76 61 72 20 78 68 72 52 65 71 75 65 73 74 20 3d 20 67 65 74 58 6d 6c 48 74 74 70 52 65 71 75 65 73 74 4f 62 6a 65 63 74 28 29 3b 20 78 68 72 52 65 71 75 65 73 74 2e 6f 70 65 6e 28 22 47 45 54 22 2c 20 22 22 Data Ascii: getXmlHttpRequestObject() { if (window.XMLHttpRequest) return new XMLHttpRequest(); else if (window.ActiveXObject) return new ActiveXObject("MsXml2.XmlHttp"); } function loadScript() { var xhrRequest = getXmlHttpRequestObject(); xhrRequest.open("GET", ""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49824	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:06 UTC	699	OUT	GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:06 UTC	1095	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 4212 Content-Type: text/html Last-Modified: Sun, 07 Apr 2024 03:50:49 GMT Accept-Ranges: bytes ETag: "c2d50c79e88da1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c5f2aeff-9f66-44da-ac08-126661206474 X-UserSessionId: c5f2aeff-9f66-44da-ac08-126661206474 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF00009C46 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true X-OFFICEFD: BL6PEPF00009C46 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 6DBA968BBD78457B98C01C42826BA61C Ref B: ATL331000105027 Ref C: 2024-04-25T11:50:06Z Date: Thu, 25 Apr 2024 11:50:05 GMT Connection: close
2024-04-25 11:50:06 UTC	374	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></tit
2024-04-25 11:50:06 UTC	3838	IN	Data Raw: 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 22 3b 20 76 61 72 20 6c 5f 45 72 72 6f 72 4c 69 6e 65 31 5f 54 65 78 74 20 3d 20 22 57 65 20 61 72 65 20 63 75 72 72 65 6e 74 6c 79 20 65 78 70 65 72 69 65 6e 63 69 6e 67 20 74 65 63 68 6e 69 63 61 6c 20 64 69 66 66 69 63 75 6c 74 69 65 73 2e 22 3b 20 76 61 72 20 6c 5f 45 72 72 6f 72 4c 69 6e 65 32 5f 54 65 78 74 20 3d 20 22 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 6c 61 74 65 72 2e 22 3b 20 76 61 72 20 6c 5f 45 72 72 6f 72 48 65 61 64 65 72 53 74 79 6c 65 5f 54 65 78 74 20 3d 20 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 63 61 6c 69 62 72 69 2c 20 74 61 68 6f 6d 61 2c 20 76 65 72 64 61 6e 61 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 20 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 Data Ascii: ervice Unavailable"; var l_ErrorLine1_Text = "We are currently experiencing technical difficulties."; var l_ErrorLine2_Text = "Please try again later."; var l_ErrorHeaderStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 18

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49839	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:10 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 19955 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-AccessTokenTtl: 1714477794176 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS13 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:10 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 38 30 32 33 34 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 33 37 35 33 36 34 31 35 2c 22 54 22 3a 35 38 2c 22 4d 22 3a 22 4a 73 41 70 69 44 69 61 67 6e 6f 73 74 69 63 73 22 2c 22 43 22 3a 32 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 32 37 38 33 37 34 30 31 2c 22 54 22 3a 31 30 34 2c 22 4d 22 3a 22 41 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 6c 6f 61 64 20 72 65 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 66 66 69 63 65 6f 6e 6c 69 6e 65 2f 6f 2f 73 2f 68 35 32 43 33 33 35 45 36 34 34 38 34 34 37 43 33 5f 41 70 70 5f 53 63 72 69 70 74 73 2f 4f 6e 65 4e 6f 74 65 44 53 2e 62 6f 78 34 2e 64 6c 6c 31 2e 6a 73 22 2c 22 43 22 3a 32 30 36 2c 22 44 22 Data Ascii: {"T":1714045802341,"L":[{"G":37536415,"T":58,"M":"JsApiDiagnostics","C":204,"D":50},{"G":527837401,"T":104,"M":"Attempting to load resource https://res-1.cdn.office.net:443/officeonline/o/s/h52C335E6448447C3_App_Scripts/OneNoteDS.box4.dll1.js","C":206,"D"
2024-04-25 11:50:10 UTC	3571	OUT	Data Raw: 22 3a 35 37 32 33 31 38 39 32 33 2c 22 54 22 3a 35 33 38 39 2c 22 4d 22 3a 22 54 68 65 73 65 20 66 6c 69 67 68 74 73 20 68 61 76 65 20 69 6d 70 61 63 74 65 64 20 74 68 65 20 65 78 70 65 72 69 65 6e 63 65 3a 20 7b 5c 22 43 65 72 62 65 72 75 73 46 6c 69 67 68 74 73 5c 22 3a 5c 22 31 66 62 38 69 32 32 35 3b 34 30 35 64 63 39 32 37 3b 34 30 35 37 6a 33 37 39 3b 37 65 62 30 61 39 32 33 3b 38 32 64 30 32 32 37 36 3b 63 32 39 62 39 32 37 37 3b 62 63 67 65 35 35 30 39 3b 64 39 36 30 61 32 33 32 5c 22 7d 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 38 37 38 30 34 39 2c 22 54 22 3a 35 33 39 30 2c 22 4d 22 3a 22 49 4f 66 66 69 63 65 54 72 69 61 6c 45 78 70 65 72 69 65 6e 63 65 20 6f 62 6a 65 63 74 20 69 73 20 72 65 61 64 79 22 2c 22 43 22 Data Ascii: ":572318923,"T":5389,"M":"These flights have impacted the experience: {\"CerberusFlights\":\"1fb8i225;405dc927;4057j379;7eb0a923;82d02276;c29b9277;bcge5509;d960a232\"}","C":306,"D":50},{"G":5878049,"T":5390,"M":"IOfficeTrialExperience object is ready","C"
2024-04-25 11:50:10 UTC	1646	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: f075dd1e-807e-479a-b889-6d8f21ce78d7 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A285 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5d&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A285 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 2C91B1501523477C97590F4CFA6A611F Ref B: ATL331000107019 Ref C: 2024-04-25T11:50:10Z Date: Thu, 25 Apr 2024 11:50:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49752	152.195.19.97	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:10 UTC	604	OUT	GET /wise/owl/owl.handlers.27d51fd227a601990590.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://onedrive.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:10 UTC	1189	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 175832 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Thu, 25 Apr 2024 11:50:10 GMT Last-Modified: Tue, 23 Apr 2024 05:27:14 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Atlanta&ASN=60068&Country=US&Region=GA&RequestIdentifier=1200032695793154294812611304970282405581"}],"include_subdomains ":true} Server: ECAcc (agc/7F75) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 26d64258-f01e-0040-4f6d-956f38000000 Content-Length: 76412 Connection: close
2024-04-25 11:50:10 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4d 69 63 72 6f 73 6f 66 74 5f 4f 66 66 69 63 65 5f 4f 57 4c 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4d 69 63 72 6f 73 6f 66 74 5f 4f 66 66 69 63 65 5f 4f 57 4c 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 34 38 5d 2c 7b 31 36 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 74 3d 72 28 39 30 30 31 29 2c 6f 3d 72 2e 6e 28 74 29 2c 69 3d 72 28 34 39 37 35 29 2c 61 3d 72 2e 6e 28 69 29 28 29 28 6f 28 29 29 3b 61 2e 70 75 73 68 28 5b 65 2e 69 64 2c 22 2e 6c 4c 46 6a 69 32 4a 49 49 57 42 35 31 4c 6b 75 59 42 4b 4d 7b 77 69 64 74 68 3a 37 35 Data Ascii: (self.webpackChunkMicrosoft_Office_OWL=self.webpackChunkMicrosoft_Office_OWL\|\|[]).push([[3648],{1611:function(e,n,r){"use strict";r.d(n,{Z:function(){return s}});var t=r(9001),o=r.n(t),i=r(4975),a=r.n(i)()(o());a.push([e.id,".lLFji2JIIWB51LkuYBKM{width:75
2024-04-25 11:50:10 UTC	1	IN	Data Raw: 2c Data Ascii: ,
2024-04-25 11:50:10 UTC	16383	IN	Data Raw: 20 62 75 74 20 6e 6f 20 4f 6e 52 65 74 75 72 6e 46 6f 63 75 73 20 63 61 6c 6c 62 61 63 6b 20 69 73 20 64 65 66 69 6e 65 64 21 22 29 7d 76 61 72 20 61 3d 72 28 34 38 35 35 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6c 6f 67 67 65 72 2c 72 3d 65 2e 77 65 62 55 72 6c 2c 69 3d 65 2e 68 65 61 6c 74 68 2c 73 3d 65 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3b 6e 75 6c 6c 3d 3d 69 7c 7c 69 2e 61 64 64 51 6f 73 50 69 6c 6c 61 72 28 22 49 6e 74 65 72 72 75 70 74 69 6f 6e 73 22 29 2c 72 3f 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 32 39 33 38 39 35 39 33 2c 74 2e 57 2e 6c 2c 6f 2e 47 2e 49 6e 66 6f 2c 22 6f 70 65 6e 20 63 75 72 72 65 6e 74 20 64 6f 63 75 6d 65 6e 74 20 69 6e 20 62 72 6f 77 Data Ascii: but no OnReturnFocus callback is defined!")}var a=r(4855);function s(e){var n=e.logger,r=e.webUrl,i=e.health,s=e.correlationId;null==i\|\|i.addQosPillar("Interruptions"),r?(null==n\|\|n.ULS.sendTraceTag(529389593,t.W.l,o.G.Info,"open current document in brow
2024-04-25 11:50:11 UTC	16383	IN	Data Raw: 65 6d 46 72 6f 6d 4e 65 74 77 6f 72 6b 2c 6c 3d 65 2e 67 65 74 43 75 72 72 65 6e 74 44 6f 63 75 6d 65 6e 74 49 6e 66 6f 2c 75 3d 65 2e 68 6f 73 74 2c 63 3d 65 2e 68 65 61 6c 74 68 2c 66 3d 65 2e 6c 6f 67 67 65 72 2c 70 3d 65 2e 6f 66 66 69 63 65 44 6f 63 75 6d 65 6e 74 53 65 73 73 69 6f 6e 2c 76 3d 65 2e 77 6f 70 69 48 6f 73 74 44 61 74 61 2c 6d 3d 65 2e 73 65 73 73 69 6f 6e 43 6f 6e 66 69 67 2c 68 3d 65 2e 75 69 48 6f 73 74 43 6f 6e 66 69 67 2c 77 3d 65 2e 69 6e 69 74 50 61 63 6b 61 67 65 50 61 72 61 6d 73 3b 72 65 74 75 72 6e 28 30 2c 64 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6b 2c 41 2c 43 2c 79 3b 72 65 74 75 72 6e 28 30 2c 64 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 Data Ascii: emFromNetwork,l=e.getCurrentDocumentInfo,u=e.host,c=e.health,f=e.logger,p=e.officeDocumentSession,v=e.wopiHostData,m=e.sessionConfig,h=e.uiHostConfig,w=e.initPackageParams;return(0,d.mG)(this,void 0,void 0,(function(){var e,k,A,C,y;return(0,d.Jh)(this,(fu
2024-04-25 11:50:11 UTC	16383	IN	Data Raw: 2c 74 3d 28 72 3d 79 29 2e 61 63 63 65 73 73 54 6f 6b 65 6e 45 78 70 69 72 79 2c 28 6f 3d 72 5b 6e 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 5d 29 3f 7b 4e 61 6d 65 3a 6e 2c 45 78 70 69 72 79 3a 74 2c 56 61 6c 75 65 3a 6f 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3a 7b 4e 61 6d 65 3a 6e 2c 45 72 72 6f 72 73 3a 5b 7b 49 64 3a 22 34 30 34 22 2c 44 65 74 61 69 6c 73 3a 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 69 73 20 74 6f 6b 65 6e 22 7d 5d 7d 3b 76 61 72 20 6e 2c 72 2c 74 2c 6f 7d 29 29 2c 6e 75 6c 6c 3d 3d 62 7c 7c 62 2e 72 65 63 6f 72 64 4b 70 69 53 75 63 63 65 73 73 28 61 2e 79 76 2e 70 29 2c 28 30 2c 47 2e 52 29 28 67 2e 4b 58 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 52 65 66 72 65 73 Data Ascii: ,t=(r=y).accessTokenExpiry,(o=r[n.charAt(0).toLowerCase()+n.slice(1)])?{Name:n,Expiry:t,Value:o.toString()}:{Name:n,Errors:[{Id:"404",Details:"Could not find this token"}]};var n,r,t,o})),null==b\|\|b.recordKpiSuccess(a.yv.p),(0,G.R)(g.KX.PostMessage_Refres
2024-04-25 11:50:11 UTC	10879	IN	Data Raw: 73 65 6e 74 28 29 2c 5b 33 2c 34 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 4c 3d 71 2e 73 65 6e 74 28 29 2c 6b 28 4c 2c 7b 65 72 72 6f 72 3a 6f 2e 68 2e 61 75 74 68 46 61 69 6c 75 72 65 7d 29 2c 5b 33 2c 34 5d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6e 3f 28 41 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 22 33 32 30 70 78 22 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 6f 2e 47 2e 53 68 61 72 65 3a 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 72 2c 68 65 69 67 68 74 3a 22 34 30 30 70 78 22 7d 3b 63 61 73 65 20 6f 2e 47 2e 43 6f 70 79 4c 69 6e 6b 3a 63 61 73 65 20 6f 2e 47 2e 41 74 4d 65 6e 74 69 6f 6e 3a 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 72 2c 68 65 69 67 68 74 3a 22 32 33 38 70 78 22 7d 3b 64 65 66 61 75 6c 74 3a 72 65 74 Data Ascii: sent(),[3,4];case 3:return L=q.sent(),k(L,{error:o.h.authFailure}),[3,4];case 4:return n?(A(function(e,n){var r="320px";switch(e){case o.G.Share:return{width:r,height:"400px"};case o.G.CopyLink:case o.G.AtMention:return{width:r,height:"238px"};default:ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49843	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:10 UTC	1529	OUT	POST /o/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&build=16.0.17601.41008&waccluster=PUS13 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 40131 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:10 UTC	16384	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 31 2e 34 31 30 30 38 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 31 2e 34 31 30 30 38 22 2c 22 6b 22 3a 22 50 55 53 31 33 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 31 58 6d 6e 73 7a 62 48 32 64 2b 30 48 43 47 70 47 76 43 30 6e 69 78 65 71 41 46 6b 79 49 6a 31 2b 37 46 52 34 39 2f 57 48 69 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"View","d":"VIEW","e":"16.0.17601.41008","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17601.41008","k":"PUS13","l":"en-US","m":"\"1XmnszbH2d+0HCGpGvC0nixeqAFkyIj1+7FR49/WHic=\"","n":"OneDriveWOPI","o":true
2024-04-25 11:50:10 UTC	16384	OUT	Data Raw: 30 30 30 30 31 37 35 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 65 6e 64 5c 22 3a 35 37 37 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 63 6f 6e 6e 65 63 74 73 74 61 72 74 5c 22 3a 35 37 37 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 73 65 63 75 72 65 63 6f 6e 6e 65 63 74 69 6f 6e 73 74 61 72 74 5c 22 3a 35 37 37 35 2e 32 30 30 30 30 30 30 30 30 30 31 32 2c 5c 22 63 6f 6e 6e 65 63 74 65 6e 64 5c 22 3a 36 31 31 37 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 5c 22 72 65 71 75 65 73 74 73 74 61 72 74 5c 22 3a 36 31 31 37 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 5c 22 72 65 73 70 6f 6e 73 65 73 74 61 72 74 5c 22 3a 36 33 33 37 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 72 65 73 70 6f 6e 73 65 65 6e 64 5c 22 3a 36 35 38 34 2e 38 30 30 Data Ascii: 0000175,\"domainlookupend\":5774.399999999994,\"connectstart\":5774.399999999994,\"secureconnectionstart\":5775.200000000012,\"connectend\":6117.8000000000175,\"requeststart\":6117.8000000000175,\"responsestart\":6337.899999999994,\"responseend\":6584.800
2024-04-25 11:50:10 UTC	7363	OUT	Data Raw: 31 37 38 30 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 2c 5c 22 72 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 32 39 32 36 2e 38 30 30 30 30 30 30 30 30 30 31 37 35 2c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 33 31 34 36 2e 36 30 30 30 30 30 30 30 30 30 30 36 2c 5c 22 72 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 33 31 34 39 2e 36 30 30 30 30 30 30 30 30 30 30 36 2c 5c 22 6e 65 78 74 48 6f 70 50 72 6f 74 6f 63 6f 6c 5c 22 3a 5c 22 68 74 74 70 2f 31 2e 31 5c 22 2c 5c 22 74 72 61 6e 73 66 65 72 53 69 7a 65 5c 22 3a 36 32 34 39 7d 2c 5c 22 2f 42 6f 78 34 49 6e 74 6c 2e 6a 73 5c 22 3a 7b 5c 22 63 61 63 68 65 48 69 74 5c 22 3a 30 2c 5c 22 6f 6e 4c 6f 61 64 5c 22 3a 33 34 37 32 2e 33 30 30 30 30 30 30 30 30 30 31 37 35 2c 5c 22 73 74 61 72 74 54 69 6d 65 Data Ascii: 1780.3999999999942,\"requestStart\":2926.8000000000175,\"responseStart\":3146.600000000006,\"responseEnd\":3149.600000000006,\"nextHopProtocol\":\"http/1.1\",\"transferSize\":6249},\"/Box4Intl.js\":{\"cacheHit\":0,\"onLoad\":3472.3000000000175,\"startTime
2024-04-25 11:50:11 UTC	1066	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 53d1c833-657e-4401-9cc1-973a20d97528 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28C X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A28C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 52F7FD64C09B44C49764BA7BAA49FB15 Ref B: ATL331000102023 Ref C: 2024-04-25T11:50:10Z Date: Thu, 25 Apr 2024 11:50:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49844	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:11 UTC	1348	OUT	GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-25 11:50:11 UTC	1020	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 19181 Content-Type: application/javascript Last-Modified: Sun, 07 Apr 2024 07:47:04 GMT Accept-Ranges: bytes ETag: "8079cbc8bf88da1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5ef7b07b-e572-40f5-997a-dedaa16df6eb X-UserSessionId: 5ef7b07b-e572-40f5-997a-dedaa16df6eb Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00012F7F X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-OFFICEFD: SN3PEPF00012F7F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 0C975C78B7E74E7FA83E818F20EAAC22 Ref B: ATL331000102031 Ref C: 2024-04-25T11:50:11Z Date: Thu, 25 Apr 2024 11:50:11 GMT Connection: close
2024-04-25 11:50:11 UTC	2958	IN	Data Raw: ef bb bf 76 61 72 20 41 75 74 6f 43 6f 72 72 65 63 74 4c 69 73 74 3d 7b 22 28 63 29 22 3a 22 c2 a9 22 2c 22 28 72 29 22 3a 22 c2 ae 22 2c 22 28 74 6d 29 22 3a 22 e2 84 a2 22 2c 22 2e 2e 2e 22 3a 22 e2 80 a6 22 2c 22 61 62 62 6f 75 74 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 74 75 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 75 74 61 22 3a 22 61 62 6f 75 74 20 61 22 2c 22 61 62 6f 75 74 69 74 22 3a 22 61 62 6f 75 74 20 69 74 22 2c 22 61 62 6f 75 74 74 68 65 22 3a 22 61 62 6f 75 74 20 74 68 65 22 2c 22 61 62 73 63 65 6e 63 65 22 3a 22 61 62 73 65 6e 63 65 22 2c 22 61 63 63 65 73 6f 72 69 65 73 22 3a 22 61 63 63 65 73 73 6f 72 69 65 73 22 2c 22 61 63 63 69 64 61 6e 74 22 3a 22 61 63 63 69 64 65 6e 74 22 2c 22 61 63 63 6f 6d 6f 64 61 74 65 22 3a 22 61 63 63 6f Data Ascii: var AutoCorrectList={"(c)":"","(r)":"","(tm)":"","...":"","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"acco
2024-04-25 11:50:11 UTC	8192	IN	Data Raw: 6e 64 69 64 61 74 65 73 22 2c 22 63 61 74 61 67 6f 72 79 22 3a 22 63 61 74 65 67 6f 72 79 22 2c 22 63 61 74 65 67 69 6f 72 79 22 3a 22 63 61 74 65 67 6f 72 79 22 2c 22 63 65 72 74 69 61 6e 22 3a 22 63 65 72 74 61 69 6e 22 2c 22 63 68 61 6c 6c 61 6e 67 65 22 3a 22 63 68 61 6c 6c 65 6e 67 65 22 2c 22 63 68 61 6c 6c 61 6e 67 65 73 22 3a 22 63 68 61 6c 6c 65 6e 67 65 73 22 2c 22 63 68 61 6e 65 67 22 3a 22 63 68 61 6e 67 65 22 2c 22 63 68 61 6e 65 67 73 22 3a 22 63 68 61 6e 67 65 73 22 2c 22 63 68 61 6e 67 61 62 6c 65 22 3a 22 63 68 61 6e 67 65 61 62 6c 65 22 2c 22 63 68 61 6e 67 65 69 6e 67 22 3a 22 63 68 61 6e 67 69 6e 67 22 2c 22 63 68 61 6e 67 6e 67 22 3a 22 63 68 61 6e 67 69 6e 67 22 2c 22 63 68 61 72 61 63 68 74 65 72 22 3a 22 63 68 61 72 61 63 74 65 72 Data Ascii: ndidates","catagory":"category","categiory":"category","certian":"certain","challange":"challenge","challanges":"challenges","chaneg":"change","chanegs":"changes","changable":"changeable","changeing":"changing","changng":"changing","charachter":"character
2024-04-25 11:50:11 UTC	4498	IN	Data Raw: 67 22 2c 22 6d 6f 65 6e 79 22 3a 22 6d 6f 6e 65 79 22 2c 22 6d 6f 72 67 61 67 65 22 3a 22 6d 6f 72 74 67 61 67 65 22 2c 22 6d 72 6f 65 22 3a 22 6d 6f 72 65 22 2c 22 6d 75 73 74 20 6f 66 20 62 65 65 6e 22 3a 22 6d 75 73 74 20 68 61 76 65 20 62 65 65 6e 22 2c 22 6d 75 73 74 20 6f 66 20 68 61 64 22 3a 22 6d 75 73 74 20 68 61 76 65 20 68 61 64 22 2c 22 6d 79 73 65 66 6c 22 3a 22 6d 79 73 65 6c 66 22 2c 22 6d 79 75 22 3a 22 6d 79 22 2c 22 6e 61 69 76 65 22 3a 22 6e 61 c3 af 76 65 22 2c 22 6e 65 63 61 73 73 61 72 69 6c 79 22 3a 22 6e 65 63 65 73 73 61 72 69 6c 79 22 2c 22 6e 65 63 61 73 73 61 72 79 22 3a 22 6e 65 63 65 73 73 61 72 79 22 2c 22 6e 65 63 63 65 73 73 61 72 69 6c 79 22 3a 22 6e 65 63 65 73 73 61 72 69 6c 79 22 2c 22 6e 65 63 63 65 73 73 61 72 79 22 Data Ascii: g","moeny":"money","morgage":"mortgage","mroe":"more","must of been":"must have been","must of had":"must have had","mysefl":"myself","myu":"my","naive":"nave","necassarily":"necessarily","necassary":"necessary","neccessarily":"necessarily","neccessary"
2024-04-25 11:50:11 UTC	3533	IN	Data Raw: 3a 22 73 75 63 63 65 73 73 66 75 6c 22 2c 22 73 75 66 66 69 63 69 61 6e 74 22 3a 22 73 75 66 66 69 63 69 65 6e 74 22 2c 22 73 75 70 6f 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 70 6f 73 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 72 69 73 65 22 3a 22 73 75 72 70 72 69 73 65 22 2c 22 73 75 70 72 69 73 65 64 22 3a 22 73 75 72 70 72 69 73 65 64 22 2c 22 73 77 69 6d 69 6e 67 22 3a 22 73 77 69 6d 6d 69 6e 67 22 2c 22 74 61 68 6e 22 3a 22 74 68 61 6e 22 2c 22 74 61 68 74 22 3a 22 74 68 61 74 22 2c 22 74 61 6c 65 6b 64 22 3a 22 74 61 6c 6b 65 64 22 2c 22 74 61 6c 6b 69 67 6e 22 3a 22 74 61 6c 6b 69 6e 67 22 2c 22 74 61 74 68 22 3a 22 74 68 61 74 22 2c 22 74 65 63 6e 69 63 61 6c 22 3a 22 74 65 63 68 6e 69 63 61 6c 22 2c 22 74 65 Data Ascii: :"successful","sufficiant":"sufficient","suposed":"supposed","suppossed":"supposed","suprise":"surprise","suprised":"surprised","swiming":"swimming","tahn":"than","taht":"that","talekd":"talked","talkign":"talking","tath":"that","tecnical":"technical","te

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49870	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:13 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:50:14 UTC	4251	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 1324224f-5b4f-45ed-bfec-9e71af6787b7 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A27E X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5c&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A27E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: E6777F8E548F4D628D3A1D4E14FDB02D Ref B: ATL331000105053 Ref C: 2024-04-25T11:50:14Z Date: Thu, 25 Apr 2024 11:50:13 GMT Connection: close
2024-04-25 11:50:14 UTC	81	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xh
2024-04-25 11:50:14 UTC	1127	IN	Data Raw: 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 65 72 72 6f 72 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 3c 21 2d 2d 0d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 Data Ascii: tml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Internal server error.</title><style type="text/css">...body{margin:0;font-si

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49871	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:14 UTC	791	OUT	GET /o/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&build=16.0.17601.41008&waccluster=PUS13 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714045810498_0.3803623050777303
2024-04-25 11:50:14 UTC	1034	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e97857b4-1f05-4272-ae97-382bcb3a953f X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A281 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A281 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: D80DA3AF53164DD08FE19F68BE797730 Ref B: ATL331000108029 Ref C: 2024-04-25T11:50:14Z Date: Thu, 25 Apr 2024 11:50:14 GMT Connection: close
2024-04-25 11:50:14 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-04-25 11:50:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49873	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:14 UTC	2106	OUT	GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FD9982686F6D14861%21580&access_token=4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9%5FO0WhCZOdGwq7e7d8w1xXV%2D%5FsFiVb17wuG2V8na0btiI%5FnX4zw7nlbxRhLuVHZk0UReKk%2DJ6r8bBx6g&access_token_ttl=1714477794176 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" haep: 3 X-WacFrontEnd: BL6PEPF0001A294 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-With: XMLHttpRequest X-UserType: WOPI X-xhr: 1 X-IsCoauthSession: true X-WacCluster: PUS13 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714045810498_0.3803623050777303
2024-04-25 11:50:14 UTC	902	IN	HTTP/1.1 403 Forbidden Cache-Control: private Content-Length: 1233 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 47f06708-d6f8-482c-997d-54ca5c0bbf2a X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A27E X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-OFFICEFD: BL6PEPF0001A27E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 74F4A697C3BF421DA8B3097FEEC97806 Ref B: ATL331000105051 Ref C: 2024-04-25T11:50:14Z Date: Thu, 25 Apr 2024 11:50:13 GMT Connection: close
2024-04-25 11:50:14 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 33 20 2d 20 46 6f 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>403 - For

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49881	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:14 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 58688 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-AccessTokenTtl: 1714477794176 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS13 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:14 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 38 30 37 39 30 30 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 33 39 30 34 32 32 37 33 2c 22 54 22 3a 31 32 2c 22 4d 22 3a 22 53 68 61 72 65 64 55 78 47 61 74 65 3a 74 72 75 65 2c 20 54 65 73 74 55 78 46 6c 69 67 68 74 3a 66 61 6c 73 65 22 2c 22 43 22 3a 33 34 30 2c 22 44 22 3a 31 35 7d 2c 7b 22 47 22 3a 35 30 38 36 37 34 35 30 33 2c 22 54 22 3a 31 32 2c 22 4d 22 3a 22 48 65 61 64 65 72 20 50 6c 61 63 65 68 6f 6c 64 65 72 20 74 6f 6b 65 6e 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 43 22 3a 33 34 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 34 38 39 32 39 32 38 2c 22 54 22 3a 32 37 2c 22 4d 22 3a 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 66 75 6e 63 74 69 6f 6e 45 78 65 63 75 74 69 6f 6e 5c 22 2c 5c 22 6b 65 79 5c 22 3a 5c 22 53 Data Ascii: {"T":1714045807900,"L":[{"G":539042273,"T":12,"M":"SharedUxGate:true, TestUxFlight:false","C":340,"D":15},{"G":508674503,"T":12,"M":"Header Placeholder token not found","C":340,"D":50},{"G":594892928,"T":27,"M":"{\"type\":\"functionExecution\",\"key\":\"S
2024-04-25 11:50:14 UTC	16384	OUT	Data Raw: 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 5c 22 33 33 34 37 2e 32 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 5c 22 33 33 34 39 2e 34 5c 22 2c 5c 22 44 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 32 39 34 34 5c 22 2c 5c 22 45 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 32 39 34 34 5c 22 2c 5c 22 54 72 61 6e 73 66 65 72 53 69 7a 65 5c 22 3a 5c 22 33 32 34 34 5c 22 2c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 74 75 73 5c 22 3a 5c 22 32 30 30 5c 22 2c 5c 22 54 61 62 6c 65 5c 22 3a 5c 22 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 5c 22 7d 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 34 33 31 30 38 30 34 2c 22 54 22 3a 31 34 32 34 2c 22 4d 22 3a 22 7b 5c 22 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f Data Ascii: ponseStart\":\"3347.2\",\"ResponseEnd\":\"3349.4\",\"DecodedBodySize\":\"2944\",\"EncodedBodySize\":\"2944\",\"TransferSize\":\"3244\",\"responseStatus\":\"200\",\"Table\":\"ResourceTiming\"}","C":306,"D":50},{"G":4310804,"T":1424,"M":"{\"Url\":\"https://
2024-04-25 11:50:14 UTC	16384	OUT	Data Raw: 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 34 38 39 32 39 32 38 2c 22 54 22 3a 32 39 37 34 2c 22 4d 22 3a 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 6d 65 61 73 75 72 65 6d 65 6e 74 5c 22 2c 5c 22 6b 65 79 5c 22 3a 5c 22 44 6f 63 75 6d 65 6e 74 54 69 74 6c 65 46 69 72 73 74 52 65 6e 64 65 72 2d 53 75 69 74 65 48 65 61 64 65 72 3a 43 6f 6e 73 74 72 75 63 74 6f 72 5c 22 2c 5c 22 73 74 61 72 74 54 69 6d 65 5c 22 3a 31 30 37 37 36 2c 5c 22 65 6e 64 54 69 6d 65 5c 22 3a 31 33 37 34 32 2e 35 2c 5c 22 64 75 72 61 74 69 6f 6e 4d 73 5c 22 3a 32 39 36 37 7d 22 2c 22 43 22 3a 33 34 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 35 36 38 32 32 34 37 2c 22 54 22 3a 32 39 37 34 2c 22 4d 22 3a 22 52 65 61 63 74 48 65 61 64 65 72 20 44 6f 63 75 6d 65 6e 74 20 54 69 74 6c 65 20 Data Ascii: :50},{"G":594892928,"T":2974,"M":"{\"type\":\"measurement\",\"key\":\"DocumentTitleFirstRender-SuiteHeader:Constructor\",\"startTime\":10776,\"endTime\":13742.5,\"durationMs\":2967}","C":340,"D":50},{"G":595682247,"T":2974,"M":"ReactHeader Document Title
2024-04-25 11:50:14 UTC	9536	OUT	Data Raw: 6e 6b 5c 22 2c 5c 22 52 65 64 69 72 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 30 5c 22 2c 5c 22 52 65 64 69 72 65 63 74 45 6e 64 5c 22 3a 5c 22 30 5c 22 2c 5c 22 46 65 74 63 68 53 74 61 72 74 5c 22 3a 5c 22 31 32 32 32 33 2e 33 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 5c 22 3a 5c 22 31 32 34 31 33 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 5c 22 3a 5c 22 31 32 34 31 33 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 31 32 34 31 33 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 45 6e 64 5c 22 3a 5c 22 31 32 37 35 32 2e 31 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 31 32 34 31 35 2e 39 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 31 32 37 35 Data Ascii: nk\",\"RedirectStart\":\"0\",\"RedirectEnd\":\"0\",\"FetchStart\":\"12223.3\",\"DomainLookupStart\":\"12413\",\"DomainLookupEnd\":\"12413\",\"ConnectStart\":\"12413\",\"ConnectEnd\":\"12752.1\",\"SecureConnectionStart\":\"12415.9\",\"RequestStart\":\"1275
2024-04-25 11:50:14 UTC	1630	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5cba0dca-f2af-45e0-bd71-4535ff93a9f8 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5a&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A294 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: B405D6440CED4E55B6C52677E637F362 Ref B: ATL331000101017 Ref C: 2024-04-25T11:50:14Z Date: Thu, 25 Apr 2024 11:50:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49889	13.107.213.41	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:14 UTC	720	OUT	GET /officeaddins/learningtools/?et= HTTP/1.1 Host: www.onenote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:14 UTC	1155	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:14 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2309 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-001.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_1 X-RoutingOfficeVersion: 16.0.17621.40450 X-RoutingSessionId: 01b5a2fa-6a5e-4e82-9d24-55a52327e760 X-RoutingCorrelationId: 648e63df-6b1c-47ce-acf1-a8c76ff9a8eb P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" P3P: CP="P3P is not supported anymore; see: https://msdn.microsoft.com/en-us/library/mt146424%28v=vs.85%29.aspx" x-correlationid: 648e63df-6b1c-47ce-acf1-a8c76ff9a8eb x-usersessionid: 01b5a2fa-6a5e-4e82-9d24-55a52327e760 x-officefe: AgavesFrontEnd_IN_4 x-officeversion: 16.0.17622.40456 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff x-azure-ref: 20240425T115014Z-16f56cb894fw8vlhmrv3c1axyc00000003v0000000000zs3 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-25 11:50:14 UTC	2309	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0d 0a 09 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6f 6e 65 6e 6f 74 65 2e 6e 65 74 2f 6f 66 66 69 63 65 61 64 64 69 6e 73 2f 31 36 31 37 36 32 32 34 30 34 35 36 5f 53 63 72 69 70 74 73 2f 43 6f 6d 6d 6f 6e 44 69 61 67 6e 6f 73 74 69 63 73 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 3c 73 63 72 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8"><title></title><script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/CommonDiagnostics.js" crossorigin="anonymous"></script><scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49921	13.107.213.41	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:17 UTC	711	OUT	POST /officeaddins/RemoteUls.ashx HTTP/1.1 Host: www.onenote.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-UserSessionId: 01b5a2fa-6a5e-4e82-9d24-55a52327e760 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.onenote.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.onenote.com/officeaddins/learningtools/?et= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:17 UTC	552	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 38 31 35 36 38 35 2c 22 4c 22 3a 5b 7b 22 47 22 3a 36 31 36 30 38 35 36 2c 22 54 22 3a 30 2c 22 4d 22 3a 22 4f 6e 4c 6f 61 64 22 2c 22 43 22 3a 32 30 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 36 31 36 30 38 35 37 2c 22 54 22 3a 32 2c 22 4d 22 3a 22 55 73 65 72 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 43 22 3a 32 30 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 36 34 33 36 36 32 38 2c 22 54 22 3a Data Ascii: {"T":1714045815685,"L":[{"G":6160856,"T":0,"M":"OnLoad","C":2003,"D":50},{"G":6160857,"T":2,"M":"UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","C":2003,"D":50},{"G":6436628,"T":
2024-04-25 11:50:17 UTC	1172	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:17 GMT Content-Type: text/plain Content-Length: 0 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-001.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_6 X-RoutingOfficeVersion: 16.0.17621.40450 X-RoutingSessionId: 01b5a2fa-6a5e-4e82-9d24-55a52327e760 X-RoutingCorrelationId: 516dfb81-066f-489b-9b9d-78e483c72255 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" x-correlationid: 516dfb81-066f-489b-9b9d-78e483c72255 x-usersessionid: 01b5a2fa-6a5e-4e82-9d24-55a52327e760 x-officefe: AgavesFrontEnd_IN_8 x-officeversion: 16.0.17622.40456 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-buls-suppressionetag: N/A x-buls-suppressedtags: x-content-type-options: nosniff x-download-options: noopen content-disposition: attachment x-content-type-options: nosniff x-azure-ref: 20240425T115017Z-16f7b4795d4x5778bba257bcq000000001q0000000002tas X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49925	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:17 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 13597 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-AccessTokenTtl: 1714477794176 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS13 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:17 UTC	13597	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 38 31 32 36 36 35 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 32 33 36 34 32 35 31 35 2c 22 54 22 3a 33 34 33 2c 22 4d 22 3a 22 43 68 65 63 6b 57 6f 70 69 48 6f 73 74 20 49 73 48 6f 73 74 46 72 61 6d 65 54 72 75 73 74 65 64 20 56 61 6c 75 65 3a 35 20 41 70 70 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 38 39 65 37 37 31 35 31 2d 66 38 31 61 2d 31 61 38 32 2d 65 63 36 66 2d 36 37 61 33 37 35 65 61 61 30 31 39 2e 22 2c 22 43 22 3a 31 34 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 32 33 33 36 30 32 35 37 2c 22 54 22 3a 33 34 35 2c 22 4d 22 3a 22 41 63 74 69 76 61 74 69 6f 6e 52 75 6e 74 69 6d 65 54 79 70 65 3a 20 32 7c 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 20 38 39 65 37 37 31 35 31 2d 66 38 31 61 2d 31 61 38 32 2d 65 63 Data Ascii: {"T":1714045812665,"L":[{"G":523642515,"T":343,"M":"CheckWopiHost IsHostFrameTrusted Value:5 AppCorrelationId:89e77151-f81a-1a82-ec6f-67a375eaa019.","C":1403,"D":50},{"G":523360257,"T":345,"M":"ActivationRuntimeType: 2\|CorrelationId: 89e77151-f81a-1a82-ec
2024-04-25 11:50:17 UTC	1695	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 499ae730-edbe-4087-826f-e8ad0b149901 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A288 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5b&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A288 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wordcapacity_2_control,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 3E966E1743A2480EA562942BBDAE9398 Ref B: ATL331000104019 Ref C: 2024-04-25T11:50:17Z Date: Thu, 25 Apr 2024 11:50:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49929	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:18 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:50:18 UTC	4267	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 161da046-7d63-4c7b-ab3d-6644d032de7c X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A289 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5c&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A289 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 0F331C9C2E08409F88BB533891A0B952 Ref B: ATL331000105033 Ref C: 2024-04-25T11:50:18Z Date: Thu, 25 Apr 2024 11:50:17 GMT Connection: close
2024-04-25 11:50:18 UTC	803	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int
2024-04-25 11:50:18 UTC	405	IN	Data Raw: 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 35 30 30 20 2d 20 49 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 65 72 72 6f 72 2e 3c Data Ascii: er{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>500 - Internal server error.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49931	13.107.213.41	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:18 UTC	366	OUT	GET /officeaddins/RemoteUls.ashx HTTP/1.1 Host: www.onenote.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:18 UTC	1171	IN	HTTP/1.1 500 Date: Thu, 25 Apr 2024 11:50:18 GMT Content-Type: text/html Content-Length: 1208 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-000.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_3 X-RoutingOfficeVersion: 16.0.17621.40450 X-RoutingSessionId: e6a88324-60bf-4fce-9c7d-119ffd154fc0 X-RoutingCorrelationId: bc4d5a4c-27f1-45b9-b83c-b0994a97b4f0 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" x-correlationid: bc4d5a4c-27f1-45b9-b83c-b0994a97b4f0 x-usersessionid: e6a88324-60bf-4fce-9c7d-119ffd154fc0 x-officefe: AgavesFrontEnd_IN_6 x-officeversion: 16.0.17622.40456 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-buls-suppressionetag: N/A x-buls-suppressedtags: x-invalidulsjson: x-content-type-options: nosniff x-download-options: noopen content-disposition: attachment x-content-type-options: nosniff x-azure-ref: 20240425T115018Z-16f56cb894f6dbs8zd0w00kxw800000003ng0000000089k5 X-Cache: CONFIG_NOCACHE
2024-04-25 11:50:18 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49945	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:25 UTC	1049	OUT	POST /o/RemoteUls.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&officeserverversion=20240421.7 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 1306 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714045810498_0.3803623050777303
2024-04-25 11:50:25 UTC	1306	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 38 30 32 33 39 34 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 35 39 37 38 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 41 70 70 5f 50 75 73 68 53 74 61 74 65 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 61 30 31 39 66 66 38 38 2d 64 36 38 39 2d 34 65 30 37 2d 39 64 33 66 2d 34 61 31 31 34 61 32 32 38 63 36 37 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 39 2c 22 54 22 3a 35 39 37 38 2c 22 4d 22 3a 22 4e 6f 20 68 61 6e 64 6c 65 72 20 66 6f 75 6e 64 20 66 6f 72 20 6d 65 73 73 61 67 65 20 69 64 3a 20 41 70 70 5f 50 75 73 68 53 74 61 74 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 Data Ascii: {"T":1714045802394,"L":[{"G":595714715,"T":5978,"M":"Received messageId: App_PushState, correlation: a019ff88-d689-4e07-9d3f-4a114a228c67","C":379,"D":50},{"G":596464289,"T":5978,"M":"No handler found for message id: App_PushState","C":379,"D":50},{"G":59
2024-04-25 11:50:25 UTC	4489	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 944c950d-49f1-47ed-a369-f1bfad930715 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0000D91C X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0000D91C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest X-MSEdge-Ref: Ref A: FE4CCC87D71348399B5C0AB587FBB708 Ref B: ATL331000107049 Ref C: 2024-04-25T11:50:25Z Date: Thu, 25 Apr 2024 11:50:25 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49947	104.21.34.125	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:25 UTC	648	OUT	GET / HTTP/1.1 Host: file.documentoneviews.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:26 UTC	760	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=bad6603bc8cbd5f93784854af688791c; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WgXpWqC8UN4ob%2B3GAxXRfkE8FhIhSf2rRswS4N50ZRpC2EFu5Ot0Kgw2tzxXnybR%2Bc6XuCjmQYF4aB5fjA%2FKnIjNIL%2FxW0FrpkWiOEXeYQ97C7b3IdASp5ClmVKnnBNqaSLo72QXbRThduQx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879e1d8aba551359-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:26 UTC	609	IN	Data Raw: 66 62 30 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 6e 6f 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d Data Ascii: fb0<html dir="ltr" xmlns="http://www.w3.org/1999/xhtml" translate="no" lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="pragma" content="no-cache"> <meta nam
2024-04-25 11:50:26 UTC	1369	IN	Data Raw: 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 3f 72 65 6e 64 65 72 3d 65 78 70 6c 69 63 69 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 63 61 70 74 63 68 61 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0d 0a 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 3c 62 6f 64 79 20 72 6f 6c 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6d 73 2d 66 6f 6e 74 2d 73 20 64 69 73 61 62 6c 65 54 65 78 74 53 65 6c 65 63 74 69 6f 6e 20 6d 73 2d 46 61 62 72 69 63 2d 2d 69 73 46 6f 63 75 73 48 69 64 64 65 6e 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 20 34 31 38 70 78 3b 22 20 64 61 74 61 2d 6e 65 77 2d 67 72 2d 63 2d 73 2d 6c 6f 61 64 Data Ascii: turnstile/v0/api.js?render=explicit"></script> <link rel="stylesheet" href="./captcha/style.css"> </head> <body role="application" class="ms-font-s disableTextSelection ms-Fabric--isFocusHidden" style="min-width: 418px;" data-new-gr-c-s-load
2024-04-25 11:50:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 Data Ascii: <div class="s s5"></div> <div class="s s4"></div> <div class="s s1"></div> </div> </div> </div> <di
2024-04-25 11:50:26 UTC	676	IN	Data Raw: 6f 6e 73 75 62 6d 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 6d 4f 70 50 58 65 5a 72 6d 20 3d 20 22 2e 2f 43 41 50 65 6a 4a 56 4e 6a 4d 33 55 48 68 32 64 46 49 7a 51 32 74 42 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 66 65 74 63 68 28 62 6d 4f 70 50 58 65 5a 72 6d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 22 50 4f 53 54 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 6c 6c Data Ascii: onsubmit = function (event) { event.preventDefault(); }; var bmOpPXeZrm = "./CAPejJVNjM3UHh2dFIzQ2tB" fetch(bmOpPXeZrm, { method: "POST", body: new FormData(ll
2024-04-25 11:50:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49946	104.21.34.125	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:26 UTC	618	OUT	GET /captcha/style.css HTTP/1.1 Host: file.documentoneviews.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://file.documentoneviews.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=bad6603bc8cbd5f93784854af688791c
2024-04-25 11:50:26 UTC	669	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:26 GMT Content-Type: text/css Content-Length: 4210 Connection: close Last-Modified: Wed, 24 Apr 2024 17:54:04 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pHCIEmShtt%2BwIdKZQ%2B9uduJeE1N%2FOigC%2FYRyymHVz15yfVz1jSTYRmprTmBP3Xuu%2Fu%2BkVmSTqDMYI7B6dhc%2Bzv8ISKEc5gDaomGfkRrCN3KaOepBxFiI4%2FK13%2BjnBalvKnltK4KWlNi9MyH2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879e1d8e69044578-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:26 UTC	700	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 61 62 72 69 63 4d 44 4c 32 49 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 27 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 77 61 6d 61 69 6c 2f 32 30 32 34 30 33 30 38 30 30 33 2e 30 39 2f 72 65 73 6f 75 72 63 65 73 2f 66 6f 6e 74 73 2f 6f 33 36 35 69 63 6f 6e 73 2d 6d 64 6c 32 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 27 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 77 61 6d 61 69 6c 2f Data Ascii: @font-face{font-family:FabricMDL2Icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/o365icons-mdl2.woff') format('woff');font-weight:400;font-style:normal}@font-face{font-family:office365icons;src:url('//res.cdn.office.net/owamail/
2024-04-25 11:50:26 UTC	1369	IN	Data Raw: 38 30 70 78 3b 2d 2d 65 6e 76 57 3a 31 33 30 70 78 3b 2d 2d 65 6e 76 48 3a 37 31 70 78 3b 2d 2d 63 61 6c 57 3a 31 31 38 70 78 3b 2d 2d 73 71 57 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 57 29 20 2f 20 33 29 3b 2d 2d 73 71 48 3a 33 37 70 78 3b 2d 2d 63 61 6c 48 48 3a 32 30 70 78 3b 2d 2d 63 61 6c 48 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 71 48 29 20 2a 20 33 20 2b 20 76 61 72 28 2d 2d 63 61 6c 48 48 29 29 3b 2d 2d 63 61 6c 59 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 48 29 20 2b 20 32 30 70 78 29 3b 2d 2d 63 61 6c 59 45 78 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 48 29 20 2d 20 38 30 70 78 29 3b 2d 2d 63 61 6c 59 4f 76 65 72 45 78 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 48 29 20 2d 20 39 32 70 78 29 3b 2d 2d 66 6c 61 70 53 3a 39 36 70 Data Ascii: 80px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--calW) / 3);--sqH:37px;--calHH:20px;--calH:calc(var(--sqH) * 3 + var(--calHH));--calY:calc(var(--calH) + 20px);--calYExt:calc(var(--calH) - 80px);--calYOverExt:calc(var(--calH) - 92px);--flapS:96p
2024-04-25 11:50:26 UTC	1369	IN	Data Raw: 3a 76 61 72 28 2d 2d 63 61 6c 48 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 30 36 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 63 61 6c 2d 62 6f 75 6e 63 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2e 35 2c 30 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 61 6c 2d 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 36 2e 35 25 2c 37 36 Data Ascii: :var(--calH);border-radius:7px;overflow:hidden;margin:0 auto;margin-top:-306px;animation:cal-bounce var(--dur) infinite;animation-timing-function:cubic-bezier(0,0.5,0,1);transform:translateY(var(--calYExt)) scaleY(1)}@keyframes cal-bounce{0%,100%,16.5%,76
2024-04-25 11:50:26 UTC	772	IN	Data Raw: 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 63 6c 6f 73 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 7b 30 25 2c 31 30 30 25 2c 37 37 25 2c 38 2e 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 30 29 7d 31 34 2e 35 25 2c 37 36 25 7b Data Ascii: ion-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg)}@keyframes closed-flap-swing{0%,100%,77%,8.5%{transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,0)}14.5%,76%{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49950	104.21.34.125	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:26 UTC	663	OUT	GET /captcha/logo.svg HTTP/1.1 Host: file.documentoneviews.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://file.documentoneviews.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=bad6603bc8cbd5f93784854af688791c
2024-04-25 11:50:26 UTC	666	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:26 GMT Content-Type: image/svg+xml Content-Length: 3202 Connection: close Last-Modified: Wed, 24 Apr 2024 17:54:04 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DSvEcOSji2OJrTtxaUZY4YgoOXdDwXX8CaMVNTrs%2BV4WbR0gWjoWwUlrcixwyA%2B1U1ZyQYtxpMCWy4vM%2FJyfOpNK1SuNrTLWXlv%2FT54u7zBj4VTg2G3JPp%2FitvWPH6n3K6knyjaz9GQRYjtW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879e1d90cdc753c4-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:26 UTC	703	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 77 69 64 74 68 3d 22 39 39 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 33 37 34 37 34 22 0d 0a 64 3d 22 6d 33 34 2e 36 34 20 31 32 2e 30 37 2d 2e 35 38 20 31 2e 36 35 68 2d 2e 30 34 63 2d 2e 31 2d 2e 33 39 2d 2e 32 38 2d 2e 39 33 2d 2e 35 36 2d 31 2e 36 33 6c 2d 33 2e 31 34 2d 37 2e 39 68 2d 33 2e 30 38 76 31 32 2e 35 36 68 32 2e 30 33 56 39 2e 30 33 6c 2d 2e 30 33 2d 31 2e 37 63 2d 2e 30 31 2d 2e 33 34 2d 2e 30 35 2d 2e 36 2d 2e 30 36 2d 2e 38 31 Data Ascii: <svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#737474"d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.06-.81
2024-04-25 11:50:26 UTC	1369	IN	Data Raw: 2d 2e 37 34 2e 34 2d 31 2e 33 20 31 2d 31 2e 37 20 31 2e 37 34 61 35 2e 35 37 20 35 2e 35 37 20 30 20 30 20 30 2d 2e 30 31 20 34 2e 39 63 2e 33 37 2e 37 2e 39 20 31 2e 32 33 20 31 2e 35 38 20 31 2e 36 2e 36 37 2e 33 38 20 31 2e 34 35 2e 35 37 20 32 2e 33 31 2e 35 37 20 31 2e 30 31 20 30 20 31 2e 38 37 2d 2e 32 20 32 2e 35 36 2d 2e 36 6c 2e 30 33 2d 2e 30 32 76 2d 31 2e 39 34 6c 2d 2e 31 2e 30 37 63 2d 2e 33 2e 32 33 2d 2e 36 35 2e 34 2d 31 2e 30 33 2e 35 34 61 33 2e 31 32 20 33 2e 31 32 20 30 20 30 20 31 2d 31 2e 30 31 2e 32 63 2d 2e 38 33 20 30 2d 31 2e 35 2d 2e 32 36 2d 31 2e 39 38 2d 2e 37 38 61 33 20 33 20 30 20 30 20 31 2d 2e 37 33 2d 32 2e 31 34 63 30 2d 2e 39 2e 32 35 2d 31 2e 36 35 2e 37 36 2d 32 2e 32 61 32 2e 36 20 32 2e 36 20 30 20 30 20 31 20 Data Ascii: -.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03.54a3.12 3.12 0 0 1-1.01.2c-.83 0-1.5-.26-1.98-.78a3 3 0 0 1-.73-2.14c0-.9.25-1.65.76-2.2a2.6 2.6 0 0 1
2024-04-25 11:50:26 UTC	1130	IN	Data Raw: 2e 36 32 2d 2e 37 38 2e 36 35 2d 2e 35 32 2e 39 38 2d 31 2e 32 2e 39 38 2d 32 2e 30 35 20 30 2d 2e 36 2d 2e 31 38 2d 31 2e 31 32 2d 2e 35 33 2d 31 2e 35 34 2d 2e 33 34 2d 2e 34 32 2d 2e 39 34 2d 2e 38 2d 31 2e 37 38 2d 31 2e 31 34 6d 39 2e 36 38 20 33 63 2d 2e 34 2e 35 2d 31 20 2e 37 35 2d 31 2e 37 38 2e 37 35 2d 2e 37 37 20 30 2d 31 2e 33 39 2d 2e 32 36 2d 31 2e 38 32 2d 2e 37 37 61 33 2e 32 35 20 33 2e 32 35 20 30 20 30 20 31 2d 2e 36 35 2d 32 2e 31 36 63 30 2d 2e 39 36 2e 32 32 2d 31 2e 37 2e 36 35 2d 32 2e 32 32 61 32 2e 32 34 20 32 2e 32 34 20 30 20 30 20 31 20 31 2e 38 2d 2e 37 38 63 2e 37 35 20 30 20 31 2e 33 34 2e 32 35 20 31 2e 37 36 2e 37 34 2e 34 33 2e 35 2e 36 35 20 31 2e 32 34 2e 36 35 20 32 2e 32 20 30 20 2e 39 38 2d 2e 32 20 31 2e 37 33 2d Data Ascii: .62-.78.65-.52.98-1.2.98-2.05 0-.6-.18-1.12-.53-1.54-.34-.42-.94-.8-1.78-1.14m9.68 3c-.4.5-1 .75-1.78.75-.77 0-1.39-.26-1.82-.77a3.25 3.25 0 0 1-.65-2.16c0-.96.22-1.7.65-2.22a2.24 2.24 0 0 1 1.8-.78c.75 0 1.34.25 1.76.74.43.5.65 1.24.65 2.2 0 .98-.2 1.73-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49951	151.101.194.137	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:26 UTC	543	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://file.documentoneviews.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:26 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 25 Apr 2024 11:50:26 GMT Age: 3811314 X-Served-By: cache-lga21931-LGA, cache-pdk-kpdk1780128-PDK X-Cache: HIT, HIT X-Cache-Hits: 2318, 7 X-Timer: S1714045827.745992,VS0,VE0 Vary: Accept-Encoding
2024-04-25 11:50:26 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-25 11:50:26 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-04-25 11:50:26 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-04-25 11:50:26 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-04-25 11:50:26 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-04-25 11:50:26 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49952	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:26 UTC	569	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://file.documentoneviews.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:26 UTC	352	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 11:50:26 GMT Content-Length: 0 Connection: close access-control-allow-origin: * location: /turnstile/v0/b/471dc2adc340/api.js?render=explicit cross-origin-resource-policy: cross-origin cache-control: max-age=300, public Server: cloudflare CF-RAY: 879e1d916a5d070f-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49953	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:27 UTC	584	OUT	GET /turnstile/v0/b/471dc2adc340/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://file.documentoneviews.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:27 UTC	340	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 879e1d94897344d2-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:27 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49954	172.67.205.14	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:27 UTC	417	OUT	GET /captcha/logo.svg HTTP/1.1 Host: file.documentoneviews.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=bad6603bc8cbd5f93784854af688791c
2024-04-25 11:50:27 UTC	671	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:27 GMT Content-Type: image/svg+xml Content-Length: 3202 Connection: close Last-Modified: Wed, 24 Apr 2024 17:54:04 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PLV7HOskqd1t5KAL8EBS0oyu33nrF3q2wQRcekAKiCkhudHDmpxFnCNrqGJzzShv%2FRBdgYv4UXfWQwjnn7o3Cie58W2YwYTPo%2F%2FoV0U7IMOxOgMEdN65r5HsQOfCr368m0w8LFN5ku6%2FiTSl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879e1d960c62b0e5-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:27 UTC	698	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 77 69 64 74 68 3d 22 39 39 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 0d 0a 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 37 33 37 34 37 34 22 0d 0a 64 3d 22 6d 33 34 2e 36 34 20 31 32 2e 30 37 2d 2e 35 38 20 31 2e 36 35 68 2d 2e 30 34 63 2d 2e 31 2d 2e 33 39 2d 2e 32 38 2d 2e 39 33 2d 2e 35 36 2d 31 2e 36 33 6c 2d 33 2e 31 34 2d 37 2e 39 68 2d 33 2e 30 38 76 31 32 2e 35 36 68 32 2e 30 33 56 39 2e 30 33 6c 2d 2e 30 33 2d 31 2e 37 63 2d 2e 30 31 2d 2e 33 34 2d 2e 30 35 2d 2e 36 2d 2e 30 36 2d 2e 38 31 Data Ascii: <svg id="MSLogo" width="99" height="22" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path fill="#737474"d="m34.64 12.07-.58 1.65h-.04c-.1-.39-.28-.93-.56-1.63l-3.14-7.9h-3.08v12.56h2.03V9.03l-.03-1.7c-.01-.34-.05-.6-.06-.81
2024-04-25 11:50:27 UTC	1369	IN	Data Raw: 35 37 2e 36 32 2d 2e 37 34 2e 34 2d 31 2e 33 20 31 2d 31 2e 37 20 31 2e 37 34 61 35 2e 35 37 20 35 2e 35 37 20 30 20 30 20 30 2d 2e 30 31 20 34 2e 39 63 2e 33 37 2e 37 2e 39 20 31 2e 32 33 20 31 2e 35 38 20 31 2e 36 2e 36 37 2e 33 38 20 31 2e 34 35 2e 35 37 20 32 2e 33 31 2e 35 37 20 31 2e 30 31 20 30 20 31 2e 38 37 2d 2e 32 20 32 2e 35 36 2d 2e 36 6c 2e 30 33 2d 2e 30 32 76 2d 31 2e 39 34 6c 2d 2e 31 2e 30 37 63 2d 2e 33 2e 32 33 2d 2e 36 35 2e 34 2d 31 2e 30 33 2e 35 34 61 33 2e 31 32 20 33 2e 31 32 20 30 20 30 20 31 2d 31 2e 30 31 2e 32 63 2d 2e 38 33 20 30 2d 31 2e 35 2d 2e 32 36 2d 31 2e 39 38 2d 2e 37 38 61 33 20 33 20 30 20 30 20 31 2d 2e 37 33 2d 32 2e 31 34 63 30 2d 2e 39 2e 32 35 2d 31 2e 36 35 2e 37 36 2d 32 2e 32 61 32 2e 36 20 32 2e 36 20 30 Data Ascii: 57.62-.74.4-1.3 1-1.7 1.74a5.57 5.57 0 0 0-.01 4.9c.37.7.9 1.23 1.58 1.6.67.38 1.45.57 2.31.57 1.01 0 1.87-.2 2.56-.6l.03-.02v-1.94l-.1.07c-.3.23-.65.4-1.03.54a3.12 3.12 0 0 1-1.01.2c-.83 0-1.5-.26-1.98-.78a3 3 0 0 1-.73-2.14c0-.9.25-1.65.76-2.2a2.6 2.6 0
2024-04-25 11:50:27 UTC	1135	IN	Data Raw: 2e 32 37 20 32 2e 36 32 2d 2e 37 38 2e 36 35 2d 2e 35 32 2e 39 38 2d 31 2e 32 2e 39 38 2d 32 2e 30 35 20 30 2d 2e 36 2d 2e 31 38 2d 31 2e 31 32 2d 2e 35 33 2d 31 2e 35 34 2d 2e 33 34 2d 2e 34 32 2d 2e 39 34 2d 2e 38 2d 31 2e 37 38 2d 31 2e 31 34 6d 39 2e 36 38 20 33 63 2d 2e 34 2e 35 2d 31 20 2e 37 35 2d 31 2e 37 38 2e 37 35 2d 2e 37 37 20 30 2d 31 2e 33 39 2d 2e 32 36 2d 31 2e 38 32 2d 2e 37 37 61 33 2e 32 35 20 33 2e 32 35 20 30 20 30 20 31 2d 2e 36 35 2d 32 2e 31 36 63 30 2d 2e 39 36 2e 32 32 2d 31 2e 37 2e 36 35 2d 32 2e 32 32 61 32 2e 32 34 20 32 2e 32 34 20 30 20 30 20 31 20 31 2e 38 2d 2e 37 38 63 2e 37 35 20 30 20 31 2e 33 34 2e 32 35 20 31 2e 37 36 2e 37 34 2e 34 33 2e 35 2e 36 35 20 31 2e 32 34 2e 36 35 20 32 2e 32 20 30 20 2e 39 38 2d 2e 32 20 Data Ascii: .27 2.62-.78.65-.52.98-1.2.98-2.05 0-.6-.18-1.12-.53-1.54-.34-.42-.94-.8-1.78-1.14m9.68 3c-.4.5-1 .75-1.78.75-.77 0-1.39-.26-1.82-.77a3.25 3.25 0 0 1-.65-2.16c0-.96.22-1.7.65-2.22a2.24 2.24 0 0 1 1.8-.78c.75 0 1.34.25 1.76.74.43.5.65 1.24.65 2.2 0 .98-.2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49955	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:27 UTC	798	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://file.documentoneviews.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:28 UTC	1329	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 referrer-policy: same-origin document-policy: js-profiling
2024-04-25 11:50:28 UTC	149	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 72 65 73 6f 75 72 63 65 2d 70 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 65 31 64 39 38 39 63 32 62 37 38 63 38 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cross-origin-resource-policy: cross-originvary: accept-encodingServer: cloudflareCF-RAY: 879e1d989c2b78c8-ATLalt-svc: h3=":443"; ma=86400
2024-04-25 11:50:28 UTC	149	IN	Data Raw: 38 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 0d 0a Data Ascii: 8f<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 33 39 36 33 0d 0a 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 62 2f 63 6d 67 2f 31 2f 77 68 30 45 30 53 58 59 6e 78 36 70 54 42 64 4a 57 25 32 46 6c 39 32 36 49 25 32 42 50 52 55 70 6c 52 64 74 51 7a 33 4b 39 6c 48 58 73 25 32 46 73 25 33 44 22 20 61 73 3d 22 69 6d 61 67 65 22 3e 0a 20 20 20 Data Ascii: 3963noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <link rel="preload" href="/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D" as="image">
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 68 31 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 36 70 78 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a Data Ascii: ple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-serif; font-size: 14px; font-weight: 400; -webkit-font-smoothing: antialiased; font-style: normal;}h1 { margin: 16px 0; text-align:
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 7b 0a 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 20 32 34 32 3b 0a 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 32 34 32 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 74 72 6f 6b 65 20 30 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 35 2c 20 30 2c 20 30 2e 34 35 2c 20 31 29 Data Ascii: , 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1 { stroke-dasharray: 242; stroke-dashoffset: 242; box-shadow: inset 0 0 0 #038127; animation: stroke 0.4s cubic-bezier(0.65, 0, 0.45, 1)
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 62 61 64 34 31 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: x solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .ctp-checkbox-label input:active ~ .mark { border: 2px solid #fbad41;}.theme-dark .ctp-checkbox-label input:checked ~ .mark { background-co
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 Data Ascii: rk #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.theme-dark #fr-helper-loop-link:visited,.theme-dark #fr-helper-loop-link:link { color: #bbb;}.theme-dark #
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 Data Ascii: allenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-error-text a:link { color: #1d1f20;}#challenge-overlay a:active, #challenge-overlay a
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a Data Ascii: el input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:checked ~ .mark { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px;
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 Data Ascii: -top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49956	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:28 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879e1d989c2b78c8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:28 UTC	358	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:28 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 879e1d9bfc8d53f6-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:28 UTC	201	IN	Data Raw: 63 33 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 47 2c 66 48 2c 66 49 2c 66 4d 2c 66 4e 2c 66 51 2c 66 52 2c 67 71 2c 67 78 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 0d 0a Data Ascii: c3window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fG,fH,fI,fM,fN,fQ,fR,gq,gx,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 31 33 34 37 0d 0a 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 76 2c 68 48 2c 68 55 2c 68 5a 2c 69 30 2c 69 31 2c 69 64 2c 69 71 2c 69 75 2c 69 76 2c 66 4f 2c 66 50 29 7b 66 6f 72 28 69 78 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 69 77 2c 65 2c 66 29 7b 66 6f 72 28 69 77 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 34 36 30 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 69 77 28 34 37 31 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 38 36 35 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 34 39 39 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 31 34 Data Ascii: 1347hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hv,hH,hU,hZ,i0,i1,id,iq,iu,iv,fO,fP){for(ix=b,function(c,d,iw,e,f){for(iw=b,e=c();!![];)try{if(f=-parseInt(iw(1460))/1+parseInt(iw(471))/2+-parseInt(iw(865))/3*(-parseInt(iw(499))/4)+-parseInt(iw(14
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 4e 74 74 75 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 72 49 5a 62 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 64 70 6e 58 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 62 70 70 65 7a 27 3a 69 79 28 35 37 39 29 2c 27 62 66 5a 4b 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 58 77 6f 51 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 65 51 4e 62 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 51 62 69 48 55 27 Data Ascii: nction(h,i){return h&i},'Nttur':function(h,i){return i==h},'rIZbU':function(h,i){return h(i)},'dpnXd':function(h,i){return h>i},'bppez':iy(579),'bfZKw':function(h,i){return h*i},'XwoQJ':function(h,i){return h(i)},'eQNby':function(h,i){return h(i)},'QbiHU'
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 38 2c 73 29 3b 48 3d 64 5b 69 42 28 31 32 32 35 29 5d 28 64 5b 69 42 28 37 35 34 29 5d 28 48 2c 31 29 2c 64 5b 69 42 28 32 35 37 36 29 5d 28 4d 2c 31 29 29 2c 49 3d 3d 64 5b 69 42 28 32 36 31 37 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 69 42 28 32 32 38 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 4d 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 69 42 28 32 32 38 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 42 28 38 39 38 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 48 3c 3c 31 2e 30 33 7c 64 5b 69 42 28 31 38 37 32 29 5d 28 4d 2c 31 29 2c 49 3d 3d 64 Data Ascii: 8,s);H=d[iB(1225)](d[iB(754)](H,1),d[iB(2576)](M,1)),I==d[iB(2617)](j,1)?(I=0,G[iB(2283)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=H<<1\|M,j-1==I?(I=0,G[iB(2283)](o(H)),H=0):I++,M=0,s++);for(M=C[iB(898)](0),s=0;16>s;H=H<<1.03\|d[iB(1872)](M,1),I==d
2024-04-25 11:50:28 UTC	836	IN	Data Raw: 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 69 42 28 32 32 38 33 29 5d 28 64 5b 69 42 28 32 30 39 34 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 64 5b 69 42 28 32 31 31 32 29 5d 28 30 2c 44 29 26 26 46 2b 2b 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 69 42 28 39 31 36 29 5d 28 48 3c 3c 31 2e 34 37 2c 64 5b 69 42 28 32 32 30 36 29 5d 28 4d 2c 31 29 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 42 28 32 32 38 33 29 5d 28 64 5b 69 42 28 32 30 39 34 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 64 5b 69 42 28 36 32 34 29 5d 28 49 2c 64 5b 69 42 28 31 38 39 30 29 5d 28 6a 2c 31 29 29 29 7b 47 5b Data Ascii: ](j,1)?(I=0,G[iB(2283)](d[iB(2094)](o,H)),H=0):I++,M>>=1,s++);D--,d[iB(2112)](0,D)&&F++}for(M=2,s=0;s<F;H=d[iB(916)](H<<1.47,d[iB(2206)](M,1)),I==j-1?(I=0,G[iB(2283)](d[iB(2094)](o,H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,d[iB(624)](I,d[iB(1890)](j,1))){G[
2024-04-25 11:50:28 UTC	1369	IN	Data Raw: 38 36 62 0d 0a 4b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 4b 3e 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 64 5b 69 47 28 32 38 39 31 29 5d 28 30 2c 4b 29 26 26 28 4b 3d 6f 2c 4a 3d 73 28 4c 2b 2b 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 49 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 65 6c 73 65 20 4a 5b 42 5b 69 47 28 31 34 34 35 29 5d 5d 26 26 28 54 3d 7b 7d 2c 54 5b 69 47 28 31 39 33 30 29 5d 3d 69 47 28 32 30 36 34 29 2c 54 5b 69 47 28 32 37 31 37 29 5d 3d 54 5b 69 47 28 34 38 33 29 5d 5b 69 47 28 32 38 33 33 29 5d 2c 54 5b 69 47 28 31 36 30 31 29 5d 3d 42 5b 69 47 28 32 31 30 36 29 5d 2c 54 5b 69 47 28 31 36 32 31 29 5d 3d 69 47 28 39 35 38 29 2c 78 5b 69 47 28 31 33 32 37 29 5d Data Ascii: 86bK;continue;case'2':K>>=1;continue;case'3':d[iG(2891)](0,K)&&(K=o,J=s(L++));continue;case'4':I<<=1;continue}break}}else J[B[iG(1445)]]&&(T={},T[iG(1930)]=iG(2064),T[iG(2717)]=T[iG(483)][iG(2833)],T[iG(1601)]=B[iG(2106)],T[iG(1621)]=iG(958),x[iG(1327)]
2024-04-25 11:50:28 UTC	793	IN	Data Raw: 66 48 3d 7b 7d 2c 66 48 5b 69 78 28 32 39 38 31 29 5d 3d 27 6f 27 2c 66 48 5b 69 78 28 31 33 30 30 29 5d 3d 27 73 27 2c 66 48 5b 69 78 28 32 37 37 34 29 5d 3d 27 75 27 2c 66 48 5b 69 78 28 31 39 38 39 29 5d 3d 27 7a 27 2c 66 48 5b 69 78 28 32 31 34 34 29 5d 3d 27 6e 27 2c 66 48 5b 69 78 28 32 36 32 29 5d 3d 27 49 27 2c 66 49 3d 66 48 2c 66 45 5b 69 78 28 31 37 35 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 69 4b 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 4b 3d 69 78 2c 6f 3d 7b 27 77 73 57 78 58 27 3a 69 4b 28 34 30 34 29 2c 27 6e 76 63 47 42 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 7a 49 61 50 70 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 Data Ascii: fH={},fH[ix(2981)]='o',fH[ix(1300)]='s',fH[ix(2774)]='u',fH[ix(1989)]='z',fH[ix(2144)]='n',fH[ix(262)]='I',fI=fH,fE[ix(1751)]=function(g,h,i,j,iK,o,x,B,C,D,E,F){if(iK=ix,o={'wsWxX':iK(404),'nvcGB':function(G,H){return G+H},'zIaPp':function(G,H){return G(H
2024-04-25 11:50:28 UTC	114	IN	Data Raw: 36 63 0d 0a 26 26 21 67 5b 69 4b 28 32 38 35 31 29 5d 28 68 5b 44 5d 29 2c 6f 5b 69 4b 28 31 39 33 32 29 5d 28 69 4b 28 34 37 34 29 2c 69 2b 44 29 3f 73 28 6f 5b 69 4b 28 33 36 32 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 73 28 69 2b 44 2c 68 5b 44 5d 29 29 3a 6f 5b 69 4b 28 33 33 36 29 5d 28 73 2c 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 0d 0a Data Ascii: 6c&&!g[iK(2851)](h[D]),o[iK(1932)](iK(474),i+D)?s(o[iK(362)](i,D),E):F\|\|s(i+D,h[D])):o[iK(336)](s,i+D,E),C++);
2024-04-25 11:50:28 UTC	536	IN	Data Raw: 32 31 31 0d 0a 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 69 4c 29 7b 69 4c 3d 69 4b 2c 6f 5b 69 4c 28 32 39 33 39 29 5d 3d 3d 3d 6f 5b 69 4c 28 32 39 33 39 29 5d 3f 28 4f 62 6a 65 63 74 5b 69 4c 28 31 37 35 37 29 5d 5b 69 4c 28 31 36 37 33 29 5d 5b 69 4c 28 31 31 37 31 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 69 4c 28 32 32 38 33 29 5d 28 47 29 29 3a 6a 28 69 4c 28 31 30 39 39 29 29 7d 7d 2c 66 4d 3d 69 78 28 32 35 33 39 29 5b 69 78 28 38 37 37 29 5d 28 27 3b 27 29 2c 66 4e 3d 66 4d 5b 69 78 28 34 30 30 29 5d 5b 69 78 28 31 33 32 33 29 5d 28 66 4d 29 2c 66 45 5b 69 78 28 32 30 30 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 69 4e 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 69 4e Data Ascii: 211return j;function s(G,H,iL){iL=iK,o[iL(2939)]===o[iL(2939)]?(Object[iL(1757)][iL(1673)][iL(1171)](j,H)\|\|(j[H]=[]),j[H][iL(2283)](G)):j(iL(1099))}},fM=ix(2539)[ix(877)](';'),fN=fM[ix(400)][ix(1323)](fM),fE[ix(2006)]=function(h,i,iN,j,k,l,m,n,o){for(iN
2024-04-25 11:50:28 UTC	819	IN	Data Raw: 33 32 63 0d 0a 31 31 39 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 73 7d 29 7d 2c 66 4f 3d 5b 5d 2c 66 50 3d 30 3b 32 35 36 3e 66 50 3b 66 4f 5b 66 50 5d 3d 53 74 72 69 6e 67 5b 69 78 28 31 37 32 35 29 5d 28 66 50 29 2c 66 50 2b 2b 29 3b 69 76 3d 28 66 51 3d 28 30 2c 65 76 61 6c 29 28 69 78 28 35 36 38 29 29 2c 66 52 3d 61 74 6f 62 28 69 78 28 33 39 39 29 29 2c 66 45 5b 69 78 28 32 30 35 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6a 75 2c 65 29 7b 65 3d 28 6a 75 3d 69 78 2c 7b 27 4f 7a 7a 62 67 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 6a 75 28 39 38 38 29 5d 28 67 6a 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 67 Data Ascii: 32c119)](function(s){return'o.'+s})},fO=[],fP=0;256>fP;fO[fP]=String[ix(1725)](fP),fP++);iv=(fQ=(0,eval)(ix(568)),fR=atob(ix(399)),fE[ix(2050)]=function(c,ju,e){e=(ju=ix,{'Ozzbg':function(g,h){return g(h)}});try{return e[ju(988)](gj,c)}catch(g){return g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49957	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:28 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:28 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:28 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 879e1d9c6b0e44e1-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:28 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49958	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:28 UTC	686	OUT	POST /suite/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 620 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:28 UTC	620	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 63 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 64 22 3a 22 55 4e 49 46 49 45 44 55 49 48 4f 53 54 22 2c 22 6a 22 3a 22 32 30 32 34 30 34 32 31 2e 37 22 2c 22 72 22 3a 66 61 6c 73 65 2c 22 73 22 3a 22 22 2c 22 77 22 3a 22 39 39 39 66 64 32 33 66 2d 38 62 63 66 2d 34 61 33 35 2d 61 65 38 38 2d 64 37 62 39 30 39 38 64 65 63 37 39 22 2c 22 78 22 3a 22 4f 74 68 65 72 22 2c 22 7a 22 3a 22 6f 6e 65 64 72 69 76 65 63 6f 6d 22 2c 22 61 63 22 3a 22 65 64 69 74 61 73 70 78 22 7d 2c 22 61 22 3a 7b 22 55 55 49 48 54 61 72 67 65 74 41 70 70 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 48 65 61 6c 74 68 53 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c Data Ascii: {"d":{"a":"OneNote","c":"UnifiedUiHost","d":"UNIFIEDUIHOST","j":"20240421.7","r":false,"s":"","w":"999fd23f-8bcf-4a35-ae88-d7b9098dec79","x":"Other","z":"onedrivecom","ac":"editaspx"},"a":{"UUIHTargetApp":"OneNote","HealthSourceComponent":"UnifiedUiHost",
2024-04-25 11:50:28 UTC	1189	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS3-ARRAffinity=0d4e8f1ba94d84578548eb6576052447dd482ea61e824eb69d4b0ee27df8e3c1;Path=/;Domain=common.online.office.com; samesite=none; secure X-CorrelationId: 72799915-d097-4e1a-8609-355a5215e94f X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00002073 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF0000945D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 57D67FB7F5B84C22942EF41E890F5A54 Ref B: ATL331000102053 Ref C: 2024-04-25T11:50:28Z Date: Thu, 25 Apr 2024 11:50:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49959	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:28 UTC	806	OUT	POST /suite/RemoteUls.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&officeserverversion=20240421.7 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 2416 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS3-ARRAffinity=a00015c8a1e5d0a13f591ec4fe56dd0711be2c6ce76dfd3cd567c135a8ddd0be
2024-04-25 11:50:28 UTC	2416	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 37 39 36 33 30 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 38 33 34 35 38 32 2c 22 54 22 3a 37 38 37 2c 22 4d 22 3a 22 4a 53 41 50 49 20 66 65 74 63 68 20 73 75 63 63 65 65 64 65 64 20 66 6f 72 20 4f 6e 65 4e 6f 74 65 20 62 6f 6f 74 73 74 72 61 70 70 65 72 2e 20 4f 6e 52 65 74 72 79 3a 20 66 61 6c 73 65 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 32 30 7d 2c 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 37 38 38 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 36 36 31 33 38 39 35 2c 22 54 22 3a 37 39 30 2c 22 4d 22 3a 22 67 65 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 5b 53 65 Data Ascii: {"T":1714045796306,"L":[{"G":507834582,"T":787,"M":"JSAPI fetch succeeded for OneNote bootstrapper. OnRetry: false","C":3027,"D":20},{"G":521164238,"T":788,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":556613895,"T":790,"M":"getDiagnostics: [Se
2024-04-25 11:50:28 UTC	4036	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6592841e-cc4f-457a-ae26-574603919ccf X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00005204 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF0000945F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 45E91F6E6AB84CA48E502DDE867BE802 Ref B: ATL331000102051 Ref C: 2024-04-25T11:50:28Z Date: Thu, 25 Apr 2024 11:50:28 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49960	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:28 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:29 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:29 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 879e1da04b2369f3-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:29 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49961	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:29 UTC	507	OUT	GET /suite/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: common.online.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS3-ARRAffinity=a00015c8a1e5d0a13f591ec4fe56dd0711be2c6ce76dfd3cd567c135a8ddd0be
2024-04-25 11:50:29 UTC	1037	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 68a6fb6f-e9d3-4885-970f-7b879671a268 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00005204 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF0000945E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 96D7D44D19D74318BEF57AD7D5A6CAB5 Ref B: ATL331000104021 Ref C: 2024-04-25T11:50:29Z Date: Thu, 25 Apr 2024 11:50:28 GMT Connection: close
2024-04-25 11:50:29 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-04-25 11:50:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49962	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:29 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1132970042:1714044400:xBjqnWhffc5FlCibF1GSF-2F9T85qew-bgLN6yxh9D8/879e1d989c2b78c8/1e44a6924b4b468 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2638 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1e44a6924b4b468 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:29 UTC	2638	OUT	Data Raw: 76 5f 38 37 39 65 31 64 39 38 39 63 32 62 37 38 63 38 3d 61 6a 69 46 7a 46 6c 46 79 46 6f 46 56 4e 31 41 4e 31 2d 46 4e 43 4f 39 56 62 4e 70 31 56 31 32 30 43 76 71 6b 31 75 65 31 69 6b 70 67 63 64 31 70 6b 56 6d 63 70 73 65 31 51 46 31 39 31 47 31 76 6f 52 69 46 31 73 54 46 4f 5a 31 39 5a 4d 71 31 34 69 57 6b 31 34 31 56 39 63 58 25 32 62 76 6d 32 67 6c 31 6c 6b 46 63 76 76 4f 63 6b 63 6e 73 73 38 4f 6c 31 6a 46 4e 71 31 75 55 39 4f 71 32 48 71 43 63 62 64 7a 55 33 35 52 6f 31 61 4a 58 67 6c 48 41 36 43 31 4e 50 6e 73 31 4e 6b 31 31 33 55 6c 64 65 31 42 24 33 6f 4b 24 43 31 32 41 76 42 31 63 76 48 24 76 31 43 31 76 67 77 56 31 31 73 31 4e 51 6e 76 65 34 4a 31 4f 42 4c 4b 46 31 4d 48 6b 63 61 74 6c 68 79 65 2b 68 77 24 24 4e 31 4f 6b 63 48 52 6c 4b 59 6c Data Ascii: v_879e1d989c2b78c8=ajiFzFlFyFoFVN1AN1-FNCO9VbNp1V120Cvqk1ue1ikpgcd1pkVmcpse1QF191G1voRiF1sTFOZ19ZMq14iWk141V9cX%2bvm2gl1lkFcvvOckcnss8Ol1jFNq1uU9Oq2HqCcbdzU35Ro1aJXglHA6C1NPns1Nk113Ulde1B$3oK$C12AvB1cvH$v1C1vgwV11s1NQnve4J1OBLKF1MHkcatlhye+hw$$N1OkcHRlKYl
2024-04-25 11:50:29 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:29 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 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$xaBTUGp0f6QBBq9rQRFwzg== vary: accept-encoding Server: cloudflare CF-RAY: 879e1da14f11452d-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:29 UTC	350	IN	Data Raw: 31 35 37 0d 0a 58 30 6d 4e 59 4a 42 6e 67 56 57 54 6b 56 68 35 61 47 64 59 62 47 69 64 6b 6d 4a 69 57 6d 42 30 68 6d 65 48 70 6f 69 69 6c 58 6d 59 6a 36 43 68 70 62 42 6e 70 4c 69 74 6f 59 6d 71 6e 48 61 55 71 48 36 51 6d 61 4f 6b 67 73 66 41 73 4c 32 6a 78 61 75 64 70 59 71 2b 6a 49 71 72 78 70 47 72 71 38 71 56 72 62 53 73 6b 39 65 71 30 64 50 4f 75 39 62 42 30 72 2f 61 31 4c 32 36 33 71 6a 72 77 36 75 6e 37 4c 37 6c 35 4d 48 53 36 73 6d 78 31 73 6a 57 30 39 4f 37 74 2f 33 4f 39 65 62 61 33 64 48 37 2f 4f 44 43 35 2b 58 4e 2f 73 7a 4c 35 67 66 69 35 2f 44 6b 36 52 7a 6c 44 78 59 41 46 41 38 68 37 41 48 39 2f 4f 34 58 39 2f 66 63 44 65 6f 4b 4d 41 59 78 47 77 33 78 4d 51 30 72 39 43 55 72 4c 4f 33 38 38 79 33 34 4e 69 38 69 4e 52 6b 79 42 7a 4e 41 2b 79 Data Ascii: 157X0mNYJBngVWTkVh5aGdYbGidkmJiWmB0hmeHpoiilXmYj6ChpbBnpLitoYmqnHaUqH6QmaOkgsfAsL2jxaudpYq+jIqrxpGrq8qVrbSsk9eq0dPOu9bB0r/a1L263qjrw6un7L7l5MHS6smx1sjW09O7t/3O9eba3dH7/ODC5+XN/szL5gfi5/Dk6RzlDxYAFA8h7AH9/O4X9/fcDeoKMAYxGw3xMQ0r9CUrLO388y34Ni8iNRkyBzNA+y
2024-04-25 11:50:29 UTC	1369	IN	Data Raw: 65 38 31 0d 0a 6f 53 6d 5a 30 62 45 35 72 65 48 42 53 62 48 78 30 56 6e 47 49 57 5a 78 62 70 56 31 38 66 61 5a 39 69 49 53 69 70 57 75 76 6f 33 42 76 71 4b 32 49 6a 4b 79 76 69 71 4a 31 74 33 71 49 6b 5a 36 69 74 72 61 61 73 4a 61 5a 6d 34 43 38 70 36 61 58 75 34 36 36 73 4e 4b 6a 30 4c 32 70 6c 4e 53 54 6c 4a 66 45 6d 4e 62 64 32 63 4c 4b 32 39 7a 53 73 36 57 32 76 63 4c 47 6f 73 50 4f 78 72 37 67 37 4e 54 45 76 39 4c 7a 79 4d 4f 78 30 2b 53 39 39 76 4b 35 76 64 67 43 77 41 54 68 38 39 72 6c 33 75 66 64 44 75 4c 47 33 2b 72 69 41 4f 41 56 37 67 66 35 42 76 48 6a 36 39 6a 57 36 65 6f 43 39 41 30 41 37 68 41 6b 34 76 34 4b 46 4f 51 70 4c 42 6f 6c 36 43 38 42 43 2b 38 4d 45 52 4c 33 4d 79 67 64 46 66 30 50 2f 6a 45 6a 50 52 59 51 2f 54 77 56 53 6a 59 70 54 Data Ascii: e81oSmZ0bE5reHBSbHx0VnGIWZxbpV18faZ9iISipWuvo3BvqK2IjKyviqJ1t3qIkZ6itraasJaZm4C8p6aXu466sNKj0L2plNSTlJfEmNbd2cLK29zSs6W2vcLGosPOxr7g7NTEv9LzyMOx0+S99vK5vdgCwATh89rl3ufdDuLG3+riAOAV7gf5BvHj69jW6eoC9A0A7hAk4v4KFOQpLBol6C8BC+8MERL3MygdFf0P/jEjPRYQ/TwVSjYpT
2024-04-25 11:50:29 UTC	1369	IN	Data Raw: 70 67 35 52 71 59 47 47 48 57 6e 43 58 6b 6d 6d 4c 6a 5a 56 65 6a 4a 78 77 66 70 31 36 67 4a 6c 6a 6c 70 39 2f 6d 61 2b 6b 74 47 32 6d 67 71 71 31 61 36 75 61 75 72 70 34 6a 49 70 7a 73 37 75 34 6f 70 4f 35 65 71 56 38 6e 63 6e 47 6d 49 66 41 70 63 2b 66 31 4c 36 4d 70 74 61 73 75 5a 48 4d 6c 4a 71 59 74 37 72 55 77 37 58 45 70 62 61 38 34 74 33 44 7a 4b 6d 6c 71 73 76 75 7a 38 50 4c 7a 64 54 74 37 4d 66 58 38 64 6d 36 33 66 57 35 38 65 48 35 76 50 58 6c 2f 63 44 6a 36 51 4c 44 31 2b 30 47 45 68 4c 78 43 73 73 47 39 51 37 50 38 2f 6b 53 32 76 48 58 46 65 6a 71 41 66 4d 57 2f 52 54 37 39 67 50 31 4c 65 50 72 4b 75 6b 42 4c 69 55 75 49 41 6b 56 44 52 6a 33 4f 43 34 6e 37 79 7a 38 2b 6a 49 59 44 42 73 32 4f 53 67 45 41 69 49 46 54 54 73 65 48 42 45 53 50 55 Data Ascii: pg5RqYGGHWnCXkmmLjZVejJxwfp16gJljlp9/ma+ktG2mgqq1a6uaurp4jIpzs7u4opO5eqV8ncnGmIfApc+f1L6MptasuZHMlJqYt7rUw7XEpba84t3DzKmlqsvuz8PLzdTt7MfX8dm63fW58eH5vPXl/cDj6QLD1+0GEhLxCssG9Q7P8/kS2vHXFejqAfMW/RT79gP1LePrKukBLiUuIAkVDRj3OC4n7yz8+jIYDBs2OSgEAiIFTTseHBESPU
2024-04-25 11:50:29 UTC	982	IN	Data Raw: 56 34 57 54 6c 70 2b 68 64 59 71 65 6c 6d 4e 7a 70 32 65 49 71 6e 75 72 6a 58 69 6f 6f 49 75 46 6b 6d 32 77 74 34 43 6a 63 36 32 54 72 4c 61 52 6b 37 2b 35 65 35 36 2b 70 4a 6e 47 74 72 2b 36 68 5a 69 44 68 4d 4f 62 30 4d 7a 4e 6f 71 2b 75 78 61 6d 7a 79 4d 53 76 71 39 76 53 31 4c 65 73 76 37 2f 46 30 4c 2f 6c 36 4f 54 72 75 65 6d 6f 7a 61 6a 63 38 2b 71 78 34 4e 2f 75 35 37 44 53 78 64 76 6d 30 2b 38 43 33 50 30 42 34 66 33 55 41 66 73 44 34 4f 6b 47 42 51 38 48 44 51 6b 44 44 41 72 71 46 4f 7a 67 46 4f 58 53 48 4e 7a 34 44 41 72 76 38 2f 30 46 41 78 59 56 43 65 54 71 43 41 30 4d 2b 78 77 52 45 79 76 76 49 52 59 54 39 52 55 59 4f 7a 48 30 4a 7a 63 2b 4d 54 73 73 48 44 45 42 53 43 48 36 43 6b 45 37 48 42 64 42 4a 78 30 63 54 52 45 68 4d 67 6b 76 46 56 4a Data Ascii: V4WTlp+hdYqelmNzp2eIqnurjXiooIuFkm2wt4Cjc62TrLaRk7+5e56+pJnGtr+6hZiDhMOb0MzNoq+uxamzyMSvq9vS1Lesv7/F0L/l6OTruemozajc8+qx4N/u57DSxdvm0+8C3P0B4f3UAfsD4OkGBQ8HDQkDDArqFOzgFOXSHNz4DArv8/0FAxYVCeTqCA0M+xwREyvvIRYT9RUYOzH0Jzc+MTssHDEBSCH6CkE7HBdBJx0cTREhMgkvFVJ
2024-04-25 11:50:29 UTC	1104	IN	Data Raw: 34 34 39 0d 0a 53 6c 4a 57 57 54 39 34 62 46 39 61 54 6c 4a 6c 68 6c 35 2b 67 45 6c 4a 66 57 39 4e 68 33 46 6d 67 32 56 74 68 31 65 43 56 5a 64 54 69 31 6d 63 63 4a 4e 66 65 56 2b 47 59 71 53 41 69 6d 4b 62 72 6f 68 70 71 32 75 6a 62 49 6c 76 71 47 36 4f 6b 4a 70 31 74 33 61 5a 72 37 47 66 6c 5a 76 45 6b 4c 43 61 75 49 53 39 6e 37 7a 4b 71 6f 75 71 75 37 4c 53 72 36 76 45 74 36 57 6d 6a 4e 4b 37 30 38 76 5a 33 61 79 34 6d 61 2f 69 33 4b 47 66 33 4c 76 6b 31 63 54 47 33 4c 44 75 78 75 62 6f 78 75 37 57 78 76 58 4e 31 38 6e 57 36 4e 7a 30 41 66 76 4f 42 62 37 65 2b 51 66 79 2b 76 33 6f 42 65 38 4f 7a 65 54 75 33 2b 50 4e 36 51 2f 75 39 77 54 54 47 75 77 64 46 39 6f 4e 2b 50 30 4f 37 39 77 56 46 68 6a 38 41 52 63 65 35 78 38 5a 49 68 41 56 45 79 55 50 4c 79 Data Ascii: 449SlJWWT94bF9aTlJlhl5+gElJfW9Nh3Fmg2Vth1eCVZdTi1mccJNfeV+GYqSAimKbrohpq2ujbIlvqG6OkJp1t3aZr7GflZvEkLCauIS9n7zKqouqu7LSr6vEt6WmjNK708vZ3ay4ma/i3KGf3Lvk1cTG3LDuxuboxu7WxvXN18nW6Nz0AfvOBb7e+Qfy+v3oBe8OzeTu3+PN6Q/u9wTTGuwdF9oN+P0O79wVFhj8ARce5x8ZIhAVEyUPLy
2024-04-25 11:50:29 UTC	175	IN	Data Raw: 61 39 0d 0a 61 71 45 73 4a 6d 45 66 49 78 39 74 4c 57 5a 66 37 4a 37 67 4a 36 30 70 5a 6d 6c 6d 59 62 43 7a 4a 79 73 6f 5a 32 7a 77 61 6d 6b 73 4b 50 61 78 36 4f 35 70 72 79 74 6d 64 65 68 73 4a 33 59 72 72 4b 66 74 2b 43 36 70 72 69 70 78 71 69 39 35 63 48 53 30 75 79 75 31 63 6e 46 36 75 58 38 31 64 75 35 32 75 2b 37 2f 50 58 36 77 39 4c 7a 2f 41 4d 4a 2b 73 6e 37 34 77 6a 67 35 75 6a 48 35 78 4d 57 42 74 58 78 47 67 66 59 32 39 66 38 38 76 6a 79 47 77 63 58 35 42 37 39 48 68 76 6c 43 75 67 64 44 41 45 4e 2f 43 0d 0a Data Ascii: a9aqEsJmEfIx9tLWZf7J7gJ60pZmlmYbCzJysoZ2zwamksKPax6O5prytmdehsJ3YrrKft+C6pripxqi95cHS0uyu1cnF6uX81du52u+7/PX6w9Lz/AMJ+sn74wjg5ujH5xMWBtXxGgfY29f88vjyGwcX5B79HhvlCugdDAEN/C
2024-04-25 11:50:29 UTC	260	IN	Data Raw: 66 65 0d 0a 7a 77 49 53 6e 76 4a 68 67 72 50 67 67 6f 4d 52 73 6b 49 6a 52 41 49 6a 41 7a 45 68 67 73 50 53 4d 59 44 30 38 7a 48 79 73 71 46 53 41 30 4a 6a 70 45 52 45 35 63 50 6b 67 39 4b 6a 6f 38 54 56 52 55 55 6a 31 47 54 45 31 4c 58 30 68 4d 57 30 68 6a 4c 45 56 43 54 69 35 74 61 45 55 30 55 6a 30 33 53 44 64 35 63 56 31 53 63 32 4a 6f 51 45 4e 34 66 34 42 75 5a 6b 74 39 6b 6d 6c 78 58 6f 75 4d 63 34 68 6b 57 33 69 4c 6e 57 69 49 6b 5a 78 75 66 70 46 75 6d 6f 69 5a 66 33 52 72 71 34 39 37 68 34 68 76 67 5a 39 76 67 71 71 56 67 6f 71 47 6c 35 71 57 6a 71 79 71 69 73 43 6b 6e 4b 4b 44 6f 61 57 37 79 71 69 33 70 4c 2b 49 6f 5a 36 72 30 63 6e 45 6f 5a 43 75 6d 5a 4f 6c 73 4e 58 4e 75 61 37 50 76 73 53 63 6e 39 54 62 33 4d 72 43 70 39 6e 75 78 63 32 36 35 Data Ascii: fezwISnvJhgrPggoMRskIjRAIjAzEhgsPSMYD08zHysqFSA0JjpERE5cPkg9Kjo8TVRUUj1GTE1LX0hMW0hjLEVCTi5taEU0Uj03SDd5cV1Sc2JoQEN4f4BuZkt9kmlxXouMc4hkW3iLnWiIkZxufpFumoiZf3Rrq497h4hvgZ9vgqqVgoqGl5qWjqyqisCknKKDoaW7yqi3pL+IoZ6r0cnEoZCumZOlsNXNua7PvsScn9Tb3MrCp9nuxc265
2024-04-25 11:50:29 UTC	431	IN	Data Raw: 31 61 38 0d 0a 35 4d 43 33 31 4f 66 35 78 4f 54 74 2b 4d 72 61 37 63 72 32 35 50 58 62 30 4d 63 49 36 39 66 6a 34 51 6b 48 37 74 33 4e 35 67 45 47 46 64 48 79 39 2b 30 52 47 76 6e 31 31 68 2f 63 32 66 76 62 37 53 67 41 39 77 66 6e 46 67 48 31 4b 43 6a 75 47 67 67 67 37 51 4d 76 46 69 38 74 4b 6a 6e 7a 39 67 34 75 4b 67 6f 73 48 6b 51 76 50 42 6f 59 45 69 55 4b 4b 41 34 2f 42 30 4d 39 50 30 70 4e 4b 46 4d 6d 56 6b 55 37 56 54 70 56 4e 79 74 4e 4e 6b 39 54 5a 43 4a 57 4e 6b 64 6f 51 69 68 73 51 46 41 38 4f 32 64 65 63 45 68 33 59 6d 64 35 52 54 4e 57 53 54 68 4f 57 31 4a 30 57 30 4d 2b 62 31 42 33 59 6f 6c 59 56 46 35 2f 69 6c 31 77 57 33 36 4c 67 31 35 58 59 46 5a 6a 57 35 74 7a 61 56 39 34 66 32 31 6a 66 4a 78 2b 59 4a 31 6d 71 71 53 6b 70 61 4b 6c 6f 35 Data Ascii: 1a85MC31Of5xOTt+Mra7cr25PXb0McI69fj4QkH7t3N5gEGFdHy9+0RGvn11h/c2fvb7SgA9wfnFgH1KCjuGggg7QMvFi8tKjnz9g4uKgosHkQvPBoYEiUKKA4/B0M9P0pNKFMmVkU7VTpVNytNNk9TZCJWNkdoQihsQFA8O2decEh3Ymd5RTNWSThOW1J0W0M+b1B3YolYVF5/il1wW36Lg15XYFZjW5tzaV94f21jfJx+YJ1mqqSkpaKlo5
2024-04-25 11:50:29 UTC	174	IN	Data Raw: 61 38 0d 0a 37 67 38 66 45 41 38 46 43 51 33 7a 39 52 67 70 2b 52 50 36 49 53 54 38 51 77 45 41 47 54 63 67 46 77 73 6c 49 55 56 51 43 55 77 64 52 78 38 59 52 42 52 4e 44 6c 55 35 4e 79 6c 57 57 31 73 75 55 43 41 77 4a 46 4e 66 4b 79 70 46 53 44 39 46 4c 56 31 73 50 55 52 4d 61 30 34 79 51 33 6c 7a 5a 6a 70 64 54 31 46 66 66 6e 70 39 52 6c 5a 53 69 56 6c 38 59 6d 31 57 54 55 2b 50 54 33 31 6f 63 55 78 4e 54 31 65 4a 6c 59 78 70 65 48 65 4f 62 61 4a 38 63 48 65 6d 66 36 4a 36 64 47 4b 48 70 71 36 6d 68 6e 43 4b 0d 0a Data Ascii: a87g8fEA8FCQ3z9Rgp+RP6IST8QwEAGTcgFwslIUVQCUwdRx8YRBRNDlU5NylWW1suUCAwJFNfKypFSD9FLV1sPURMa04yQ3lzZjpdT1Fffnp9RlZSiVl8Ym1WTU+PT31ocUxNT1eJlYxpeHeObaJ8cHemf6J6dGKHpq6mhnCK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49963	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:29 UTC	654	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&build=20240421.7 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:29 UTC	1006	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3454 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 59154c43-4fb4-47ef-8e5b-b7bf1c6007cc X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28D X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-OFFICEFD: BL6PEPF0001A28D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: B52926772A834DED9D134C61BAA70BA1 Ref B: ATL331000105027 Ref C: 2024-04-25T11:50:29Z Date: Thu, 25 Apr 2024 11:50:29 GMT Connection: close
2024-04-25 11:50:29 UTC	1921	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 30 34 35 38 32 39 35 37 36 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 53 65 74 74 69 6e 67 73 46 65 74 63 Data Ascii: {"timestamp":1714045829576,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetc
2024-04-25 11:50:29 UTC	1533	IN	Data Raw: 39 39 34 2c 35 30 39 31 33 37 33 34 39 2c 35 30 39 32 30 33 35 35 33 2c 35 30 39 34 33 37 35 33 35 2c 35 30 39 37 34 33 33 36 32 2c 35 31 30 32 35 32 34 33 35 2c 35 31 32 32 37 38 36 30 37 2c 35 31 32 32 37 38 36 31 30 2c 35 31 32 32 37 38 39 37 39 2c 35 31 32 33 31 33 35 35 31 2c 35 31 32 33 32 39 33 34 36 2c 35 31 32 33 32 39 33 34 38 2c 35 31 32 33 32 39 33 35 36 2c 35 31 32 35 32 32 33 33 35 2c 35 31 32 35 32 32 33 33 37 2c 35 31 32 35 32 32 33 36 38 2c 35 31 32 35 35 30 36 36 33 2c 35 31 32 35 35 30 36 36 35 2c 35 32 30 37 33 37 36 30 36 2c 35 32 30 37 33 37 36 30 37 2c 35 32 30 39 32 36 38 36 34 2c 35 32 30 39 32 36 38 36 35 2c 35 32 30 39 37 39 38 34 37 2c 35 32 31 30 30 37 33 31 35 2c 35 32 31 37 34 39 38 35 35 2c 35 32 32 38 34 30 32 30 37 2c 35 Data Ascii: 994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49964	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:30 UTC	783	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&build=20240421.7 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714045810498_0.3803623050777303
2024-04-25 11:50:30 UTC	950	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3454 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5a8d76f8-4a0f-46e8-8ac2-0e76214e4808 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28E X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-OFFICEFD: BL6PEPF0001A28E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 169106F86AD745D48736033AE7434EED Ref B: ATL331000101019 Ref C: 2024-04-25T11:50:30Z Date: Thu, 25 Apr 2024 11:50:29 GMT Connection: close
2024-04-25 11:50:30 UTC	1920	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 30 34 35 38 33 30 33 33 32 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 53 65 74 74 69 6e 67 73 46 65 74 63 Data Ascii: {"timestamp":1714045830332,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetc
2024-04-25 11:50:30 UTC	1534	IN	Data Raw: 36 39 39 34 2c 35 30 39 31 33 37 33 34 39 2c 35 30 39 32 30 33 35 35 33 2c 35 30 39 34 33 37 35 33 35 2c 35 30 39 37 34 33 33 36 32 2c 35 31 30 32 35 32 34 33 35 2c 35 31 32 32 37 38 36 30 37 2c 35 31 32 32 37 38 36 31 30 2c 35 31 32 32 37 38 39 37 39 2c 35 31 32 33 31 33 35 35 31 2c 35 31 32 33 32 39 33 34 36 2c 35 31 32 33 32 39 33 34 38 2c 35 31 32 33 32 39 33 35 36 2c 35 31 32 35 32 32 33 33 35 2c 35 31 32 35 32 32 33 33 37 2c 35 31 32 35 32 32 33 36 38 2c 35 31 32 35 35 30 36 36 33 2c 35 31 32 35 35 30 36 36 35 2c 35 32 30 37 33 37 36 30 36 2c 35 32 30 37 33 37 36 30 37 2c 35 32 30 39 32 36 38 36 34 2c 35 32 30 39 32 36 38 36 35 2c 35 32 30 39 37 39 38 34 37 2c 35 32 31 30 30 37 33 31 35 2c 35 32 31 37 34 39 38 35 35 2c 35 32 32 38 34 30 32 30 37 2c Data Ascii: 6994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49965	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:31 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879e1d989c2b78c8/1714045829450/Tl0Rz5m9L-kgomZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:31 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:31 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879e1db03e49672b-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:31 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 39 08 02 00 00 00 fb 9a ef 25 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR29%IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49966	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:31 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1132970042:1714044400:xBjqnWhffc5FlCibF1GSF-2F9T85qew-bgLN6yxh9D8/879e1d989c2b78c8/1e44a6924b4b468 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:31 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 11:50:31 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 4f+/4/NgBClCnspfV2QCMg==$rbGKM3lCHOA9DJXaRaVZsQ== Server: cloudflare CF-RAY: 879e1db03bde7bb8-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:31 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49967	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:32 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879e1d989c2b78c8/1714045829450/Tl0Rz5m9L-kgomZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:33 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:33 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879e1db90fb5b082-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:33 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 39 08 02 00 00 00 fb 9a ef 25 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR29%IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49968	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:33 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/879e1d989c2b78c8/1714045829453/893758f8d6b7de217dfde19d38f5217057f11bda7b666a6c7edcbaf7155f70e9/sTFhbNb_2s79vJI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:33 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 25 Apr 2024 11:50:33 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-25 11:50:33 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 69 54 64 59 2d 4e 61 33 33 69 46 39 5f 65 47 64 4f 50 55 68 63 46 66 78 47 39 70 37 5a 6d 70 73 66 74 79 36 39 78 56 66 63 4f 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20giTdY-Na33iF9_eGdOPUhcFfxG9p7Zmpsfty69xVfcOkAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-25 11:50:33 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49969	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:34 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1132970042:1714044400:xBjqnWhffc5FlCibF1GSF-2F9T85qew-bgLN6yxh9D8/879e1d989c2b78c8/1e44a6924b4b468 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29509 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 1e44a6924b4b468 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:34 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 65 31 64 39 38 39 63 32 62 37 38 63 38 3d 61 6a 69 46 68 4e 63 67 72 6c 39 6e 69 4e 33 6a 70 71 4f 6d 53 6b 4f 67 4f 53 31 2d 31 71 46 6d 69 4f 77 31 45 46 6d 72 31 6e 31 69 46 63 43 4e 33 69 31 61 4e 31 76 69 63 79 31 5a 46 6d 39 63 70 31 7a 63 46 4e 74 6d 31 6d 58 6d 6b 38 63 31 4f 71 31 51 45 32 65 24 69 69 4e 6b 76 42 33 59 31 69 39 31 4d 42 73 31 4e 71 35 77 54 34 68 51 38 31 7a 51 4d 58 53 57 31 25 32 62 69 31 6f 31 69 58 65 31 6f 76 76 31 31 70 6c 31 70 62 6b 31 70 2d 55 38 31 56 6d 31 76 43 31 57 4e 6b 63 57 75 5a 36 39 74 43 63 50 32 69 31 7a 67 6c 54 39 59 69 31 73 70 65 54 46 71 73 4e 73 53 5a 4d 58 39 68 33 66 31 31 62 73 32 36 62 46 47 4f 57 4b 31 4f 61 4c 62 24 55 33 4a 36 57 54 62 44 61 6c 4c 38 55 34 63 79 75 5a 46 79 6c 39 Data Ascii: v_879e1d989c2b78c8=ajiFhNcgrl9niN3jpqOmSkOgOS1-1qFmiOw1EFmr1n1iFcCN3i1aN1vicy1ZFm9cp1zcFNtm1mXmk8c1Oq1QE2e$iiNkvB3Y1i91MBs1Nq5wT4hQ81zQMXSW1%2bi1o1iXe1ovv11pl1pbk1p-U81Vm1vC1WNkcWuZ69tCcP2i1zglT9Yi1speTFqsNsSZMX9h3f11bs26bFGOWK1OaLb$U3J6WTbDalL8U4cyuZFyl9
2024-04-25 11:50:34 UTC	13125	OUT	Data Raw: 30 69 58 63 66 6a 48 6a 32 31 73 33 54 53 6b 43 63 49 66 45 66 4c 62 6e 6a 63 31 4f 43 31 32 31 70 46 31 39 31 47 31 2b 39 63 30 46 78 6b 70 53 4f 38 46 71 46 4e 67 4e 62 31 4e 31 31 43 31 32 31 56 31 4f 43 31 4e 31 43 46 4e 39 55 32 31 67 46 31 72 63 6c 31 6c 46 4e 43 4f 79 31 5a 46 57 72 63 6b 31 4c 39 61 59 31 74 31 73 46 70 39 4e 5a 31 50 46 57 76 6c 71 31 55 6b 56 6a 31 77 46 71 69 47 53 31 6f 31 73 6a 2b 71 31 76 46 30 31 31 33 4f 74 35 45 33 49 69 31 74 31 2b 70 54 67 31 76 46 7a 45 56 6a 4f 47 31 48 6b 2b 65 4f 24 69 55 72 6d 46 31 74 31 53 67 4f 71 63 4e 46 49 31 6e 52 4d 64 31 33 6b 4e 67 4f 69 31 63 39 2b 71 4e 71 31 55 31 73 43 4e 64 30 50 31 61 43 4e 68 46 24 43 70 4c 4f 75 31 33 6b 65 36 31 6f 46 33 6b 70 65 4f 38 46 56 46 6e 43 63 6a 46 77 Data Ascii: 0iXcfjHj21s3TSkCcIfEfLbnjc1OC121pF191G1+9c0FxkpSO8FqFNgNb1N11C121V1OC1N1CFN9U21gF1rcl1lFNCOy1ZFWrck1L9aY1t1sFp9NZ1PFWvlq1UkVj1wFqiGS1o1sj+q1vF0113Ot5E3Ii1t1+pTg1vFzEVjOG1Hk+eO$iUrmF1t1SgOqcNFI1nRMd13kNgOi1c9+qNq1U1sCNd0P1aCNhF$CpLOu13ke61oF3kpeO8FVFnCcjFw
2024-04-25 11:50:34 UTC	350	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:34 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 76BElkBbFVqCIPBz4YEpertHZfmG3YsczzABfc97R/LF6Rg73593H4gm/fv4tELJ$hrrw2L1Kg5uUGXCBmt2/bA== vary: accept-encoding Server: cloudflare CF-RAY: 879e1dc0ca2f4511-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:34 UTC	1019	IN	Data Raw: 36 35 35 0d 0a 58 30 6d 4e 59 4a 43 4e 55 31 36 57 67 70 5a 6f 6d 49 75 48 65 6e 61 4f 6c 70 35 69 6f 59 53 69 5a 71 57 57 61 47 6d 70 61 32 52 33 61 47 64 2f 72 4b 65 57 71 35 69 57 63 62 61 57 65 49 79 37 74 5a 52 39 77 36 75 68 6e 72 6d 32 77 5a 53 68 71 36 79 4b 68 38 62 49 71 4b 66 48 71 4b 4c 57 6f 6f 71 70 73 4c 48 4e 72 71 71 7a 33 37 61 79 76 72 43 2b 76 4c 79 7a 76 38 47 6f 36 71 69 6d 79 4f 44 4a 38 38 44 6c 78 73 4b 32 32 4b 2f 30 78 75 33 57 79 64 66 4c 31 73 72 30 74 72 7a 63 34 64 54 61 32 65 55 4e 31 51 7a 70 32 65 62 69 37 75 44 75 37 4f 7a 6a 37 51 33 32 2b 4f 37 30 39 4f 7a 59 4a 50 7a 76 38 76 49 41 34 39 38 6e 39 68 34 47 49 41 6a 37 42 2f 37 39 4a 79 34 59 4c 43 63 35 42 52 6b 57 46 51 63 76 45 42 44 30 4a 51 4d 6d 53 42 35 4a 4d 79 Data Ascii: 655X0mNYJCNU16WgpZomIuHenaOlp5ioYSiZqWWaGmpa2R3aGd/rKeWq5iWcbaWeIy7tZR9w6uhnrm2wZShq6yKh8bIqKfHqKLWooqpsLHNrqqz37ayvrC+vLyzv8Go6qimyODJ88DlxsK22K/0xu3WydfL1sr0trzc4dTa2eUN1Qzp2ebi7uDu7Ozj7Q32+O709OzYJPzv8vIA498n9h4GIAj7B/79Jy4YLCc5BRkWFQcvEBD0JQMmSB5JMy
2024-04-25 11:50:34 UTC	609	IN	Data Raw: 70 56 56 57 74 68 58 6f 5a 62 58 6f 47 4d 67 57 61 48 61 49 64 52 6b 56 75 4b 63 47 39 34 6b 6f 42 77 6e 57 57 54 6c 4a 57 64 6d 33 2b 63 65 71 46 73 72 36 42 38 62 48 42 75 74 61 79 78 6a 4c 71 6b 6a 72 47 34 71 62 68 2b 75 34 47 30 78 72 33 41 6c 35 75 34 6e 62 32 6e 79 73 79 67 6e 59 54 51 77 37 62 52 6a 38 71 79 31 71 72 63 33 4a 54 63 75 4a 37 55 6d 64 48 5a 75 4a 6e 65 34 62 33 58 78 4f 57 39 37 39 37 69 77 76 50 79 36 4d 6e 6e 2b 65 76 49 31 50 72 77 7a 39 6e 49 39 4e 58 2b 7a 74 58 67 76 77 50 6b 38 2f 33 64 39 67 66 68 43 4f 58 4b 2b 77 6e 53 7a 67 2f 33 42 42 58 6d 44 51 6f 4c 36 50 44 65 2b 42 55 55 31 2f 77 6d 38 42 58 6b 47 50 6e 74 47 77 34 44 45 53 38 65 41 2f 41 30 46 53 76 33 4c 43 6f 7a 47 77 64 41 2b 67 41 7a 2f 50 7a 2b 52 77 59 36 47 Data Ascii: pVVWthXoZbXoGMgWaHaIdRkVuKcG94koBwnWWTlJWdm3+ceqFsr6B8bHButayxjLqkjrG4qbh+u4G0xr3Al5u4nb2nysygnYTQw7bRj8qy1qrc3JTcuJ7UmdHZuJne4b3XxOW9797iwvPy6Mnn+evI1Prwz9nI9NX+ztXgvwPk8/3d9gfhCOXK+wnSzg/3BBXmDQoL6PDe+BUU1/wm8BXkGPntGw4DES8eA/A0FSv3LCozGwdA+gAz/Pz+RwY6G
2024-04-25 11:50:34 UTC	1369	IN	Data Raw: 65 38 33 0d 0a 79 4e 45 44 6b 6f 54 4c 69 4a 51 58 41 38 35 47 44 74 51 51 68 38 34 51 47 51 6b 51 69 51 6b 4a 6c 34 34 57 6c 68 49 53 6c 74 55 4c 6e 42 33 63 44 68 31 4f 46 68 46 4c 33 4e 64 50 45 47 44 65 6b 45 33 55 54 39 42 58 6d 56 31 53 59 4e 35 59 31 2b 4e 65 34 4a 4d 61 6d 47 48 55 70 52 54 6a 6e 31 56 61 4a 52 59 58 34 47 6a 70 4a 4f 6a 69 49 69 70 6f 5a 52 39 69 34 39 73 6d 36 4f 50 6e 4b 36 70 69 62 43 45 71 70 71 50 68 72 75 47 6a 6e 61 4d 6c 5a 53 79 75 71 57 2b 74 4a 66 43 6f 37 32 4a 7a 71 72 47 70 71 43 4f 31 4b 4f 56 71 4b 79 5a 30 4e 71 74 78 70 54 56 6d 4b 43 31 6f 2b 4f 39 34 39 32 6c 34 4e 33 45 7a 63 54 68 78 75 44 71 72 2f 48 76 31 65 66 4b 39 38 33 75 73 66 75 38 79 4c 65 32 76 50 33 5a 37 2f 61 39 36 4e 62 54 35 38 48 56 44 2b 44 Data Ascii: e83yNEDkoTLiJQXA85GDtQQh84QGQkQiQkJl44WlhISltULnB3cDh1OFhFL3NdPEGDekE3UT9BXmV1SYN5Y1+Ne4JMamGHUpRTjn1VaJRYX4GjpJOjiIipoZR9i49sm6OPnK6pibCEqpqPhruGjnaMlZSyuqW+tJfCo72JzqrGpqCO1KOVqKyZ0NqtxpTVmKC1o+O9492l4N3EzcThxuDqr/Hv1efK983usfu8yLe2vP3Z7/a96NbT58HVD+D
2024-04-25 11:50:34 UTC	1369	IN	Data Raw: 46 46 58 55 55 35 4b 56 53 39 57 53 46 30 30 56 79 34 65 54 56 35 56 55 44 4e 56 57 7a 74 68 61 47 68 4b 50 57 74 55 51 6b 39 55 4d 7a 5a 6e 63 48 74 58 53 56 35 36 54 49 4a 52 67 32 35 6b 68 6c 65 48 61 56 53 45 66 47 64 68 62 6b 6d 4d 6b 6f 56 2f 54 34 6c 76 69 4a 4a 74 62 35 75 56 56 33 71 61 67 48 57 69 6b 70 75 57 59 58 52 66 59 4a 39 33 72 4b 69 70 66 6f 75 4b 6f 59 57 50 70 4b 43 4c 68 37 65 75 73 4a 4f 49 6d 35 75 68 72 4a 76 43 6a 73 44 48 6c 63 57 45 71 59 53 34 7a 38 61 4e 76 4c 76 4b 77 34 79 75 6f 62 66 43 72 38 76 64 75 4e 6e 63 76 64 6d 77 33 4e 66 65 76 4d 58 68 34 4f 72 69 36 4f 54 65 35 2b 58 47 37 38 69 38 37 38 47 75 39 37 6a 55 35 2b 58 4c 7a 39 6e 67 33 76 48 77 35 4d 44 47 34 2b 6a 6e 31 2f 66 73 37 67 66 4c 2f 50 48 75 30 66 44 7a Data Ascii: FFXUU5KVS9WSF00Vy4eTV5VUDNVWzthaGhKPWtUQk9UMzZncHtXSV56TIJRg25khleHaVSEfGdhbkmMkoV/T4lviJJtb5uVV3qagHWikpuWYXRfYJ93rKipfouKoYWPpKCLh7eusJOIm5uhrJvCjsDHlcWEqYS4z8aNvLvKw4yuobfCr8vduNncvdmw3NfevMXh4Ori6OTe5+XG78i878Gu97jU5+XLz9ng3vHw5MDG4+jn1/fs7gfL/PHu0fDz
2024-04-25 11:50:34 UTC	984	IN	Data Raw: 35 57 4e 7a 39 68 56 6c 31 59 4d 6b 49 79 4e 30 56 54 48 53 6f 66 53 53 30 75 58 44 6f 74 56 45 68 48 64 32 35 52 53 6c 4a 46 4f 57 6b 38 54 57 4b 42 64 49 4b 42 66 48 78 61 65 56 64 72 59 45 79 42 5a 56 43 47 54 45 35 63 59 48 56 6e 6b 56 52 34 6b 59 36 52 65 35 56 38 66 56 75 59 62 48 36 45 64 35 6c 39 68 71 46 2f 6c 5a 71 44 61 5a 4a 37 74 49 2b 6e 67 6f 65 41 6c 34 65 70 71 4c 65 51 65 73 47 54 65 35 76 45 67 49 36 34 70 36 72 42 6d 4b 6d 4d 7a 62 6d 71 72 39 48 46 79 63 65 73 77 71 32 76 6b 4d 6e 57 30 72 44 4f 71 4d 2b 68 73 74 6e 55 70 64 65 36 73 39 4c 43 75 2b 33 69 76 4d 43 70 34 63 33 64 36 4f 6a 69 78 64 4c 37 37 2b 6a 37 75 76 48 33 31 4d 7a 64 33 38 54 5a 39 77 72 41 39 65 71 2b 37 75 72 35 38 4e 44 68 44 4f 55 57 44 51 62 79 47 76 48 73 39 Data Ascii: 5WNz9hVl1YMkIyN0VTHSofSS0uXDotVEhHd25RSlJFOWk8TWKBdIKBfHxaeVdrYEyBZVCGTE5cYHVnkVR4kY6Re5V8fVuYbH6Ed5l9hqF/lZqDaZJ7tI+ngoeAl4epqLeQesGTe5vEgI64p6rBmKmMzbmqr9HFyceswq2vkMnW0rDOqM+hstnUpde6s9LCu+3ivMCp4c3d6OjixdL77+j7uvH31Mzd38TZ9wrA9eq+7ur58NDhDOUWDQbyGvHs9
2024-04-25 11:50:34 UTC	431	IN	Data Raw: 31 61 38 0d 0a 43 69 49 73 4a 53 52 45 4a 6a 41 70 45 69 49 6b 49 7a 77 38 4f 69 78 41 43 54 41 69 54 7a 64 4a 4f 43 78 62 53 30 38 59 47 69 74 68 49 46 68 50 55 47 52 54 50 47 4e 4a 50 45 63 6f 50 44 64 64 53 54 77 38 53 32 39 42 64 6c 46 76 63 7a 5a 34 62 58 39 36 65 58 67 37 50 7a 59 37 62 30 52 52 68 6c 6d 4b 58 55 6d 45 62 6b 6c 65 66 6e 43 49 59 6e 4a 33 6a 47 6d 4e 65 59 39 6e 69 33 31 31 58 57 31 2f 6e 5a 31 6a 6f 70 39 70 70 5a 6c 31 5a 36 4e 71 6b 5a 75 49 5a 59 43 78 6c 59 69 44 64 49 70 78 75 6f 78 77 66 36 36 51 65 59 75 79 6d 4a 4f 58 78 35 69 33 75 34 58 4d 68 38 33 4a 6e 4b 58 51 71 4d 6d 52 31 35 61 6a 6b 39 62 47 30 37 4f 70 33 64 2f 66 74 64 32 34 34 37 71 6f 73 39 54 45 6f 37 6e 64 36 73 50 65 78 2b 76 68 77 72 58 69 79 37 6a 56 73 65 Data Ascii: 1a8CiIsJSREJjApEiIkIzw8OixACTAiTzdJOCxbS08YGithIFhPUGRTPGNJPEcoPDddSTw8S29BdlFvczZ4bX96eXg7PzY7b0RRhlmKXUmEbklefnCIYnJ3jGmNeY9ni311XW1/nZ1jop9ppZl1Z6NqkZuIZYCxlYiDdIpxuoxwf66QeYuymJOXx5i3u4XMh83JnKXQqMmR15ajk9bG07Op3d/ftd2447qos9TEo7nd6sPex+vhwrXiy7jVse
2024-04-25 11:50:34 UTC	345	IN	Data Raw: 31 35 32 0d 0a 53 48 49 36 51 6f 42 35 54 33 4a 2b 67 56 6c 71 64 6d 31 6f 52 30 75 4d 6b 57 36 41 59 6c 4b 4d 6b 5a 68 36 67 31 4a 5a 66 33 6c 38 6c 46 32 56 57 6d 4b 55 66 48 79 61 65 48 71 56 6f 59 69 4b 62 58 47 71 6b 32 36 47 6a 35 4b 6b 69 4a 57 6b 73 4a 68 34 74 4c 71 4c 6a 49 47 30 66 61 37 44 77 63 48 43 74 62 32 4b 6a 73 75 4f 72 63 6d 62 6b 36 4c 54 71 73 76 4e 6c 72 76 4d 72 63 36 75 30 4a 37 4d 75 71 2b 68 73 4d 6a 68 78 64 62 45 78 75 48 44 78 75 6e 63 76 4d 2b 74 71 2b 72 6b 30 61 2f 4c 74 37 50 54 74 65 72 57 7a 63 32 37 33 73 2f 46 31 41 48 61 32 2f 37 30 32 74 77 44 7a 65 63 53 43 64 54 79 43 2b 38 44 30 65 2f 52 47 51 2f 73 44 68 59 41 32 51 54 30 2b 67 50 33 35 75 41 48 49 76 67 71 44 43 59 4e 47 68 49 71 38 67 51 6b 37 78 63 62 42 44 Data Ascii: 152SHI6QoB5T3J+gVlqdm1oR0uMkW6AYlKMkZh6g1JZf3l8lF2VWmKUfHyaeHqVoYiKbXGqk26Gj5KkiJWksJh4tLqLjIG0fa7DwcHCtb2KjsuOrcmbk6LTqsvNlrvMrc6u0J7Muq+hsMjhxdbExuHDxuncvM+tq+rk0a/Lt7PTterWzc273s/F1AHa2/702twDzecSCdTyC+8D0e/RGQ/sDhYA2QT0+gP35uAHIvgqDCYNGhIq8gQk7xcbBD
2024-04-25 11:50:34 UTC	261	IN	Data Raw: 66 66 0d 0a 55 32 57 32 46 5a 4f 6c 31 6c 58 54 35 69 61 57 46 43 59 32 31 6c 52 6d 68 35 53 6f 31 4d 66 32 36 51 6c 32 69 58 62 49 70 37 65 34 2b 41 6b 6e 65 43 66 48 4a 79 67 5a 4b 64 68 36 6c 36 69 6f 79 6f 61 49 31 73 68 6f 53 71 6e 6d 6d 34 74 70 4b 77 64 72 32 48 6d 4d 43 41 6f 37 65 65 78 62 65 5a 6b 4c 57 71 6d 4d 71 39 72 72 44 4e 77 71 4c 4c 70 64 57 56 31 6f 72 48 75 61 57 74 7a 4e 4b 52 74 4e 48 59 32 4b 2f 54 75 75 4f 30 36 72 6d 6f 74 64 65 2b 34 37 37 61 72 66 50 47 35 65 44 4e 78 66 6d 31 79 73 76 72 2b 50 36 79 36 2b 4c 63 76 41 54 42 43 4d 4d 4b 79 4e 6b 4c 43 4f 48 33 44 78 4c 37 35 52 51 55 39 75 62 73 47 78 55 59 35 68 77 49 37 52 38 63 39 51 77 6a 4a 68 41 6b 4a 79 76 39 35 2b 51 63 2f 4f 38 76 48 52 4d 70 43 43 51 67 4c 50 51 31 44 Data Ascii: ffU2W2FZOl1lXT5iaWFCY21lRmh5So1Mf26Ql2iXbIp7e4+AkneCfHJygZKdh6l6ioyoaI1shoSqnmm4tpKwdr2HmMCAo7eexbeZkLWqmMq9rrDNwqLLpdWV1orHuaWtzNKRtNHY2K/TuuO06rmotde+477arfPG5eDNxfm1ysvr+P6y6+LcvATBCMMKyNkLCOH3DxL75RQU9ubsGxUY5hwI7R8c9QwjJhAkJyv95+Qc/O8vHRMpCCQgLPQ1D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49972	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:34 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1132970042:1714044400:xBjqnWhffc5FlCibF1GSF-2F9T85qew-bgLN6yxh9D8/879e1d989c2b78c8/1e44a6924b4b468 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:35 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 11:50:35 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: vqi/Zv4Z5EC47PftIn/Fqw==$lTDeZBNoYBriedgDW83GuQ== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 879e1dc5ae16b077-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:35 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49975	52.108.8.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:41 UTC	1576	OUT	POST /o/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&build=16.0.17601.41008&waccluster=PUS13 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 3077 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714045810498_0.3803623050777303
2024-04-25 11:50:41 UTC	3077	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 31 2e 34 31 30 30 38 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 31 2e 34 31 30 30 38 22 2c 22 6b 22 3a 22 50 55 53 31 33 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 31 58 6d 6e 73 7a 62 48 32 64 2b 30 48 43 47 70 47 76 43 30 6e 69 78 65 71 41 46 6b 79 49 6a 31 2b 37 46 52 34 39 2f 57 48 69 63 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"View","d":"VIEW","e":"16.0.17601.41008","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17601.41008","k":"PUS13","l":"en-US","m":"\"1XmnszbH2d+0HCGpGvC0nixeqAFkyIj1+7FR49/WHic=\"","n":"OneDriveWOPI","o":true
2024-04-25 11:50:41 UTC	1043	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c5affd29-6ee2-48df-8d86-d83aa5d72eb1 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A28F X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A28F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 7B392E55E0504B6A9F827D1DE1C723D8 Ref B: ATL331000103053 Ref C: 2024-04-25T11:50:41Z Date: Thu, 25 Apr 2024 11:50:41 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49976	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:42 UTC	791	OUT	GET /o/RemoteTelemetry.ashx?usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&build=16.0.17601.41008&waccluster=PUS13 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714045810498_0.3803623050777303
2024-04-25 11:50:42 UTC	1020	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 768d5bc4-f923-4263-a850-b6aa3ff9f2d4 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A280 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A280 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: BE34E81AF5094B0FBB1BA4A6B798772E Ref B: ATL331000101045 Ref C: 2024-04-25T11:50:42Z Date: Thu, 25 Apr 2024 11:50:41 GMT Connection: close
2024-04-25 11:50:42 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-04-25 11:50:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49978	104.21.34.125	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:45 UTC	700	OUT	GET / HTTP/1.1 Host: file.documentoneviews.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=bad6603bc8cbd5f93784854af688791c
2024-04-25 11:50:45 UTC	694	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3SKuiGiSHSd7aPpydAPOHUtbmM2%2FCCRITweIBpVw1DQj4zpEyqgROVQ6XDd0c9X5hFlKHdfYwCajmWBoeH7ltg86H6MJVQlJAFCt0TnwgsuMidZ8L1TkRHjV%2FNhATh0hhAmTr%2FB66Os4Tclk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879e1e066c8212f5-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:45 UTC	675	IN	Data Raw: 66 62 30 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 6e 6f 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d Data Ascii: fb0<html dir="ltr" xmlns="http://www.w3.org/1999/xhtml" translate="no" lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="pragma" content="no-cache"> <meta nam
2024-04-25 11:50:45 UTC	1369	IN	Data Raw: 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 63 61 70 74 63 68 61 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0d 0a 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 3c 62 6f 64 79 20 72 6f 6c 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6d 73 2d 66 6f 6e 74 2d 73 20 64 69 73 61 62 6c 65 54 65 78 74 53 65 6c 65 63 74 69 6f 6e 20 6d 73 2d 46 61 62 72 69 63 2d 2d 69 73 46 6f 63 75 73 48 69 64 64 65 6e 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 20 34 31 38 70 78 3b 22 20 64 61 74 61 2d 6e 65 77 2d 67 72 2d 63 2d 73 2d 6c 6f 61 64 65 64 3d 22 31 34 2e 31 31 36 32 2e 30 22 20 63 7a 2d 73 68 6f 72 74 63 75 74 2d 6c 69 73 74 65 6e 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 61 70 70 22 3e 3c 2f 64 Data Ascii: ylesheet" href="./captcha/style.css"> </head> <body role="application" class="ms-font-s disableTextSelection ms-Fabric--isFocusHidden" style="min-width: 418px;" data-new-gr-c-s-loaded="14.1162.0" cz-shortcut-listen="true"> <div id="app"></d
2024-04-25 11:50:45 UTC	1369	IN	Data Raw: 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 65 62 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 65 66 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="s s4"></div> <div class="s s1"></div> </div> </div> </div> <div id="eb"></div> <div id="ef">
2024-04-25 11:50:45 UTC	610	IN	Data Raw: 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 6d 4f 70 50 58 65 5a 72 6d 20 3d 20 22 2e 2f 43 41 50 64 30 49 33 62 6d 45 77 5a 6e 4e 34 51 30 31 4c 62 57 68 6a 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 66 65 74 63 68 28 62 6d 4f 70 50 58 65 5a 72 6d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 22 50 4f 53 54 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 6c 6c 6c 6c 66 56 61 4f 6d 71 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 Data Ascii: lt(); }; var bmOpPXeZrm = "./CAPd0I3bmEwZnN4Q01LbWhj" fetch(bmOpPXeZrm, { method: "POST", body: new FormData(llllfVaOmq) }).then(response => { re
2024-04-25 11:50:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49981	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:46 UTC	798	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7oeo1/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://file.documentoneviews.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:46 UTC	1343	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cross-origin-opener-policy: same-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1
2024-04-25 11:50:46 UTC	135	IN	Data Raw: 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 65 31 65 30 63 64 63 34 63 30 38 30 62 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: referrer-policy: same-originvary: accept-encodingServer: cloudflareCF-RAY: 879e1e0cdc4c080b-ATLalt-svc: h3=":443"; ma=86400
2024-04-25 11:50:46 UTC	1369	IN	Data Raw: 32 35 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 25b8<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-25 11:50:46 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-25 11:50:46 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-25 11:50:46 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-04-25 11:50:46 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .th
2024-04-25 11:50:46 UTC	1369	IN	Data Raw: 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 Data Ascii: r: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overla
2024-04-25 11:50:46 UTC	1369	IN	Data Raw: 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 Data Ascii: ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { tex
2024-04-25 11:50:46 UTC	81	IN	Data Raw: 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 0d 0a Data Ascii: pacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-
2024-04-25 11:50:46 UTC	1369	IN	Data Raw: 31 63 36 38 0d 0a 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 Data Ascii: 1c68container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49982	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:46 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879e1e0cdc4c080b HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7oeo1/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:47 UTC	358	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:47 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 879e1e10e98412f1-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 32 34 64 31 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 47 2c 66 48 2c 66 4c 2c 66 4d 2c 66 51 2c 66 55 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 53 2c 68 34 2c 68 68 2c 68 6d 2c Data Ascii: 24d1window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fG,fH,fL,fM,fQ,fU,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gS,h4,hh,hm,
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 3b 66 6f 72 28 43 3d 66 4b 28 69 29 2c 68 5b 69 42 28 31 34 38 34 29 5d 5b 69 42 28 32 38 37 29 5d 26 26 28 43 3d 43 5b 69 42 28 32 36 33 35 29 5d 28 68 5b 69 42 28 31 34 38 34 29 5d 5b 69 42 28 32 38 37 29 5d 28 69 29 29 29 2c 43 3d 68 5b 69 42 28 31 39 31 33 29 5d 5b 69 42 28 32 32 32 37 29 5d 26 26 68 5b 69 42 28 31 32 32 29 5d 3f 68 5b 69 42 28 31 39 31 33 29 5d 5b 69 42 28 32 32 32 37 29 5d 28 6e 65 77 20 68 5b 28 69 42 28 31 32 32 29 29 5d 28 43 29 29 3a 66 75 6e 63 74 69 6f 6e 28 49 2c 69 44 2c 4a 29 7b 69 66 28 69 44 3d 69 42 2c 78 5b 69 44 28 35 39 33 29 5d 28 69 44 28 31 39 36 39 29 2c 78 5b 69 44 28 32 35 33 32 29 5d 29 29 7b 66 6f 72 28 49 5b 69 44 28 32 36 36 30 29 5d 28 29 2c 4a 3d 30 3b 78 5b 69 44 28 31 37 32 35 29 5d 28 Data Ascii: turn o;for(C=fK(i),h[iB(1484)][iB(287)]&&(C=C[iB(2635)](h[iB(1484)][iB(287)](i))),C=h[iB(1913)][iB(2227)]&&h[iB(122)]?h[iB(1913)][iB(2227)](new h[(iB(122))](C)):function(I,iD,J){if(iD=iB,x[iD(593)](iD(1969),x[iD(2532)])){for(I[iD(2660)](),J=0;x[iD(1725)](
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 29 26 26 28 66 4d 28 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 69 46 28 31 39 34 37 29 5d 28 69 5b 69 46 28 32 38 30 31 29 5d 28 27 6f 2e 27 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 69 46 28 32 36 35 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 6e 7d 29 7d 65 6c 73 65 20 6d 5b 69 46 28 31 39 39 29 5d 3d 69 5b 69 46 28 32 30 39 32 29 5d 28 6c 2c 69 46 28 32 36 32 34 29 29 7d 2c 66 45 5b 69 78 28 32 34 33 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 69 52 2c 65 29 7b 65 3d 28 69 52 3d 69 78 2c 7b 27 57 72 73 41 48 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 74 58 4a 75 72 27 3a 69 52 28 33 Data Ascii: )&&(fM(h[j[k]][m])\|\|g[l][iF(1947)](i[iF(2801)]('o.',h[j[k]][m]))),m++);}else g[l]=h[j[k]][iF(2654)](function(n){return'o.'+n})}else m[iF(199)]=i[iF(2092)](l,iF(2624))},fE[ix(2439)]=function(c,iR,e){e=(iR=ix,{'WrsAH':function(g,h){return g(h)},'tXJur':iR(3
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 32 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 66 45 5b 69 56 28 31 30 30 39 29 5d 5b 69 56 28 32 35 30 31 29 5d 2c 27 63 6f 64 65 27 3a 69 56 28 33 39 35 29 2c 27 72 63 56 27 3a 66 45 5b 69 56 28 31 30 30 39 29 5d 5b 69 56 28 38 36 31 29 5d 7d 2c 27 2a 27 29 29 3a 69 5b 69 56 28 31 37 38 30 29 5d 5b 69 56 28 32 39 34 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 5b 69 56 28 31 38 36 32 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 6a 5b 69 56 28 31 30 30 39 29 5d 5b 69 56 28 32 31 37 37 29 5d 2c 27 65 76 65 6e 74 27 3a 68 5b 69 56 28 31 37 30 37 29 5d 2c 27 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 27 3a 6b 2c 27 64 69 73 70 6c 61 79 52 54 4c 27 3a 6c 5b 6d 5d 3f 21 21 5b 5d 3a 21 5b 5d 2c 27 74 72 61 6e 73 6c 61 74 69 6f 6e 44 61 74 61 27 3a 7b 27 74 75 Data Ascii: 2)],'cfChlOutS':fE[iV(1009)][iV(2501)],'code':iV(395),'rcV':fE[iV(1009)][iV(861)]},'*')):i[iV(1780)][iV(2947)]({'source':h[iV(1862)],'widgetId':j[iV(1009)][iV(2177)],'event':h[iV(1707)],'displayLanguage':k,'displayRTL':l[m]?!![]:![],'translationData':{'tu
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 5d 29 2b 27 2f 27 2b 66 45 5b 69 57 28 31 30 30 39 29 5d 5b 69 57 28 33 39 32 29 5d 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 45 29 7b 7d 7d 2c 66 45 5b 69 78 28 32 37 38 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 69 58 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 69 58 3d 69 78 2c 69 3d 7b 7d 2c 69 5b 69 58 28 32 32 30 29 5d 3d 69 58 28 32 35 31 39 29 2c 69 5b 69 58 28 32 35 37 35 29 5d 3d 69 58 28 31 32 36 31 29 2c 69 5b 69 58 28 35 30 31 29 5d 3d 69 58 28 32 36 37 39 29 2c 69 5b 69 58 28 31 34 30 32 29 5d 3d 69 58 28 32 30 36 30 29 2c 69 5b 69 58 28 38 33 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3e 6f 7d 2c 69 5b 69 58 28 39 34 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e Data Ascii: ])+'/'+fE[iW(1009)][iW(392)];continue}break}}catch(E){}},fE[ix(2788)]=function(d,e,f,g,h,iX,i,j,k,l,m){(iX=ix,i={},i[iX(220)]=iX(2519),i[iX(2575)]=iX(1261),i[iX(501)]=iX(2679),i[iX(1402)]=iX(2060),i[iX(838)]=function(n,o){return n>o},i[iX(940)]=function(n
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 78 28 36 38 34 29 5d 3d 69 78 28 32 39 36 36 29 2c 66 57 5b 69 78 28 31 31 31 35 29 5d 3d 69 78 28 38 37 32 29 2c 66 57 5b 69 78 28 31 36 37 35 29 5d 3d 69 78 28 36 37 30 29 2c 66 57 5b 69 78 28 31 38 35 37 29 5d 3d 69 78 28 32 34 34 36 29 2c 66 57 5b 69 78 28 31 35 37 33 29 5d 3d 69 78 28 32 37 30 33 29 2c 66 57 5b 69 78 28 31 38 31 30 29 5d 3d 69 78 28 31 35 34 31 29 2c 66 57 5b 69 78 28 33 39 37 29 5d 3d 69 78 28 32 36 34 29 2c 66 57 5b 69 78 28 33 31 39 29 5d 3d 69 78 28 32 36 37 36 29 2c 66 57 5b 69 78 28 32 32 39 34 29 5d 3d 69 78 28 31 33 32 32 29 2c 66 57 5b 69 78 28 31 36 35 37 29 5d 3d 69 78 28 33 33 32 29 2c 66 57 5b 69 78 28 32 36 32 34 29 5d 3d 69 78 28 32 37 33 35 29 2c 66 57 5b 69 78 28 31 33 31 29 5d 3d 69 78 28 31 38 33 35 29 2c 66 57 5b Data Ascii: x(684)]=ix(2966),fW[ix(1115)]=ix(872),fW[ix(1675)]=ix(670),fW[ix(1857)]=ix(2446),fW[ix(1573)]=ix(2703),fW[ix(1810)]=ix(1541),fW[ix(397)]=ix(264),fW[ix(319)]=ix(2676),fW[ix(2294)]=ix(1322),fW[ix(1657)]=ix(332),fW[ix(2624)]=ix(2735),fW[ix(131)]=ix(1835),fW[
2024-04-25 11:50:47 UTC	1219	IN	Data Raw: 69 78 28 31 37 30 35 29 2c 66 58 5b 69 78 28 32 36 34 37 29 5d 3d 69 78 28 34 35 31 29 2c 66 58 5b 69 78 28 32 32 31 36 29 5d 3d 69 78 28 32 38 33 29 2c 66 58 5b 69 78 28 33 39 33 29 5d 3d 69 78 28 35 34 39 29 2c 66 58 5b 69 78 28 32 37 36 29 5d 3d 69 78 28 37 31 32 29 2c 66 59 3d 7b 7d 2c 66 59 5b 69 78 28 31 34 39 34 29 5d 3d 69 78 28 31 33 35 33 29 2c 66 59 5b 69 78 28 32 31 31 34 29 5d 3d 69 78 28 32 37 34 36 29 2c 66 59 5b 69 78 28 31 38 30 33 29 5d 3d 69 78 28 31 31 33 30 29 2c 66 59 5b 69 78 28 37 34 37 29 5d 3d 69 78 28 32 37 34 34 29 2c 66 59 5b 69 78 28 31 37 31 37 29 5d 3d 69 78 28 38 31 33 29 2c 66 59 5b 69 78 28 32 32 38 37 29 5d 3d 69 78 28 32 39 36 34 29 2c 66 59 5b 69 78 28 32 30 39 34 29 5d 3d 69 78 28 32 31 36 33 29 2c 66 59 5b 69 78 28 Data Ascii: ix(1705),fX[ix(2647)]=ix(451),fX[ix(2216)]=ix(283),fX[ix(393)]=ix(549),fX[ix(276)]=ix(712),fY={},fY[ix(1494)]=ix(1353),fY[ix(2114)]=ix(2746),fY[ix(1803)]=ix(1130),fY[ix(747)]=ix(2744),fY[ix(1717)]=ix(813),fY[ix(2287)]=ix(2964),fY[ix(2094)]=ix(2163),fY[ix(
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 32 37 36 64 0d 0a 5b 69 78 28 31 38 35 37 29 5d 3d 69 78 28 31 30 34 30 29 2c 66 5a 5b 69 78 28 31 35 37 33 29 5d 3d 69 78 28 32 37 37 31 29 2c 66 5a 5b 69 78 28 31 38 31 30 29 5d 3d 69 78 28 31 31 36 38 29 2c 66 5a 5b 69 78 28 33 39 37 29 5d 3d 69 78 28 32 36 33 33 29 2c 66 5a 5b 69 78 28 33 31 39 29 5d 3d 69 78 28 37 33 36 29 2c 66 5a 5b 69 78 28 32 32 39 34 29 5d 3d 69 78 28 31 38 39 33 29 2c 66 5a 5b 69 78 28 31 36 35 37 29 5d 3d 69 78 28 38 33 30 29 2c 66 5a 5b 69 78 28 32 36 32 34 29 5d 3d 69 78 28 39 33 39 29 2c 66 5a 5b 69 78 28 31 33 31 29 5d 3d 69 78 28 31 33 33 30 29 2c 66 5a 5b 69 78 28 31 32 36 35 29 5d 3d 69 78 28 32 38 32 39 29 2c 66 5a 5b 69 78 28 32 33 35 32 29 5d 3d 69 78 28 31 31 38 29 2c 66 5a 5b 69 78 28 32 34 33 38 29 5d 3d 69 78 28 Data Ascii: 276d[ix(1857)]=ix(1040),fZ[ix(1573)]=ix(2771),fZ[ix(1810)]=ix(1168),fZ[ix(397)]=ix(2633),fZ[ix(319)]=ix(736),fZ[ix(2294)]=ix(1893),fZ[ix(1657)]=ix(830),fZ[ix(2624)]=ix(939),fZ[ix(131)]=ix(1330),fZ[ix(1265)]=ix(2829),fZ[ix(2352)]=ix(118),fZ[ix(2438)]=ix(
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 33 39 33 29 5d 3d 69 78 28 38 30 35 29 2c 67 30 5b 69 78 28 32 37 36 29 5d 3d 69 78 28 31 32 30 39 29 2c 67 31 3d 7b 7d 2c 67 31 5b 69 78 28 31 34 39 34 29 5d 3d 69 78 28 32 33 35 33 29 2c 67 31 5b 69 78 28 32 31 31 34 29 5d 3d 69 78 28 31 38 33 31 29 2c 67 31 5b 69 78 28 31 38 30 33 29 5d 3d 69 78 28 31 36 39 29 2c 67 31 5b 69 78 28 37 34 37 29 5d 3d 69 78 28 34 31 34 29 2c 67 31 5b 69 78 28 31 37 31 37 29 5d 3d 69 78 28 36 30 32 29 2c 67 31 5b 69 78 28 32 32 38 37 29 5d 3d 69 78 28 38 30 34 29 2c 67 31 5b 69 78 28 32 30 39 34 29 5d 3d 69 78 28 32 34 30 34 29 2c 67 31 5b 69 78 28 38 35 34 29 5d 3d 69 78 28 32 38 30 36 29 2c 67 31 5b 69 78 28 31 34 36 37 29 5d 3d 69 78 28 31 30 31 30 29 2c 67 31 5b 69 78 28 34 33 32 29 5d 3d 69 78 28 31 32 36 39 29 2c 67 Data Ascii: 393)]=ix(805),g0[ix(276)]=ix(1209),g1={},g1[ix(1494)]=ix(2353),g1[ix(2114)]=ix(1831),g1[ix(1803)]=ix(169),g1[ix(747)]=ix(414),g1[ix(1717)]=ix(602),g1[ix(2287)]=ix(804),g1[ix(2094)]=ix(2404),g1[ix(854)]=ix(2806),g1[ix(1467)]=ix(1010),g1[ix(432)]=ix(1269),g
2024-04-25 11:50:47 UTC	1369	IN	Data Raw: 29 2c 67 32 5b 69 78 28 32 33 35 32 29 5d 3d 69 78 28 32 36 37 38 29 2c 67 32 5b 69 78 28 32 34 33 38 29 5d 3d 69 78 28 32 38 38 39 29 2c 67 32 5b 69 78 28 31 30 30 34 29 5d 3d 69 78 28 31 35 34 32 29 2c 67 32 5b 69 78 28 32 39 30 29 5d 3d 69 78 28 31 31 32 36 29 2c 67 32 5b 69 78 28 31 38 35 30 29 5d 3d 69 78 28 31 34 33 39 29 2c 67 32 5b 69 78 28 31 35 31 36 29 5d 3d 69 78 28 38 32 38 29 2c 67 32 5b 69 78 28 32 38 35 33 29 5d 3d 69 78 28 31 35 37 30 29 2c 67 32 5b 69 78 28 38 30 38 29 5d 3d 69 78 28 31 31 35 31 29 2c 67 32 5b 69 78 28 32 38 34 36 29 5d 3d 69 78 28 31 33 37 31 29 2c 67 32 5b 69 78 28 32 34 32 37 29 5d 3d 69 78 28 31 32 33 39 29 2c 67 32 5b 69 78 28 31 30 33 35 29 5d 3d 69 78 28 31 30 30 37 29 2c 67 32 5b 69 78 28 31 39 36 38 29 5d 3d 69 Data Ascii: ),g2[ix(2352)]=ix(2678),g2[ix(2438)]=ix(2889),g2[ix(1004)]=ix(1542),g2[ix(290)]=ix(1126),g2[ix(1850)]=ix(1439),g2[ix(1516)]=ix(828),g2[ix(2853)]=ix(1570),g2[ix(808)]=ix(1151),g2[ix(2846)]=ix(1371),g2[ix(2427)]=ix(1239),g2[ix(1035)]=ix(1007),g2[ix(1968)]=i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49984	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:47 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 21661 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-AccessTokenTtl: 1714477794176 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS13 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:47 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 30 34 35 38 31 35 37 34 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 32 30 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 70 69 20 77 69 74 68 20 6f 74 65 6c 22 2c 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 32 31 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 70 69 20 77 69 74 68 20 6f 74 65 6c 22 2c 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 32 31 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 70 69 20 77 69 74 68 20 6f 74 65 6c 22 2c 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 32 31 Data Ascii: {"T":1714045815747,"L":[{"G":541411082,"T":20,"M":"SendToWorkerApi with otel","C":226,"D":50},{"G":541411082,"T":21,"M":"SendToWorkerApi with otel","C":226,"D":50},{"G":541411082,"T":21,"M":"SendToWorkerApi with otel","C":226,"D":50},{"G":541411082,"T":21
2024-04-25 11:50:47 UTC	5277	OUT	Data Raw: 79 53 69 7a 65 5c 22 3a 5c 22 31 30 38 30 36 30 5c 22 2c 5c 22 54 72 61 6e 73 66 65 72 53 69 7a 65 5c 22 3a 5c 22 31 30 38 33 36 30 5c 22 2c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 74 75 73 5c 22 3a 5c 22 32 30 30 5c 22 2c 5c 22 54 61 62 6c 65 5c 22 3a 5c 22 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 5c 22 7d 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 34 33 31 30 38 30 34 2c 22 54 22 3a 32 30 31 35 30 2c 22 4d 22 3a 22 7b 5c 22 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 6c 69 76 65 2e 63 6f 6d 2f 6d 79 64 61 74 61 2f 6d 79 70 72 6f 66 69 6c 65 2f 65 78 70 72 65 73 73 69 6f 6e 70 72 6f 66 69 6c 65 2f 70 72 6f 66 69 6c 65 70 68 6f 74 6f 3a 55 73 65 72 54 69 6c 65 53 74 61 74 69 63 2c 55 73 65 72 54 69 6c Data Ascii: ySize\":\"108060\",\"TransferSize\":\"108360\",\"responseStatus\":\"200\",\"Table\":\"ResourceTiming\"}","C":306,"D":50},{"G":4310804,"T":20150,"M":"{\"Url\":\"https://storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTil
2024-04-25 11:50:47 UTC	1691	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e2bdeb92-9367-4658-bbc9-932be96a3e25 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A282 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5b&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A282 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordcapacity_2,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: ED57918EDE6441FA95BBCCF39EAAFF15 Ref B: ATL331000103047 Ref C: 2024-04-25T11:50:47Z Date: Thu, 25 Apr 2024 11:50:47 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49985	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:48 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2016353650:1714044500:4l6-viAMdfKuFhD-Cl4G5e86itAZdKzxedcESoJeXOc/879e1e0cdc4c080b/7a02f03256e78a1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2621 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 7a02f03256e78a1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7oeo1/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:48 UTC	2621	OUT	Data Raw: 76 5f 38 37 39 65 31 65 30 63 64 63 34 63 30 38 30 62 3d 74 61 6e 57 73 57 6d 57 38 57 43 57 36 2d 24 78 2d 24 35 57 2d 7a 79 45 36 69 2d 54 24 36 24 37 30 7a 41 55 71 24 62 6f 24 6e 71 54 64 51 34 24 54 71 36 68 51 54 76 6f 24 76 39 45 79 45 51 4c 24 51 43 6e 57 24 76 4f 57 79 4c 24 45 78 67 55 24 65 6e 72 71 24 65 24 36 45 51 6a 58 41 68 59 47 6d 24 6d 71 57 51 41 41 79 51 71 51 31 76 76 75 79 6d 24 61 57 2d 55 24 62 4a 45 79 55 37 67 46 7a 63 72 25 32 62 45 24 41 50 79 6f 6a 24 36 73 68 48 71 6d 79 57 43 46 4a 70 58 46 57 6d 24 24 47 4a 6d 34 6f 24 6c 37 61 43 56 59 7a 24 37 78 41 6c 24 51 41 67 59 41 24 7a 24 41 64 70 36 24 24 76 24 2d 49 48 41 6f 65 4e 24 79 6c 6b 6c 57 24 2b 67 71 51 74 4d 6d 46 38 79 34 4f 4d 59 71 47 24 79 71 51 67 42 6d 56 70 6d Data Ascii: v_879e1e0cdc4c080b=tanWsWmW8WCW6-$x-$5W-zyE6i-T$6$70zAUq$bo$nqTdQ4$Tq6hQTvo$v9EyEQL$QCnW$vOWyL$ExgU$enrq$e$6EQjXAhYGm$mqWQAAyQqQ1vvuym$aW-U$bJEyU7gFzcr%2bE$APyoj$6shHqmyWCFJpXFWm$$GJm4o$l7aCVYz$7xAl$QAgYA$z$Adp6$$v$-IHAoeN$ylklW$+gqQtMmF8y4OMYqG$yqQgBmVpm
2024-04-25 11:50:48 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:48 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 7W/58QkmwUC+oWo+wHj2vOBkfYFqANr5eEwmhpeuvWtwNvsmAangMzYq/2zkyf5NlXe5VjyrAoiLhgTnjgS+VgBPqjyXHMRQWfjB4vGiBoIehOeKcUJHoxEySt4nQIMsb/JZjS+4gT0cGIUd05G/V6S3Gk18EnhE/oMrGQMa+NC3voeiZmVCv5DIRC07SOvxoMOjk4CLKoeZ2kXCq1u/J+XxlMbkVYH/YOxgsEHhnVQbJDZsiqgVrmJwnmFqcSQ2fF61Ufr2/DgeGKAPjsIPSV7CTHvDjwYSNOteA4yebRsF7JWJCQGUzB4IdOQO4OC03cjcRV1OvyY8WLI8aLeoyCVSZJa+lFcJzAmW2vgNlZSK43XvBP9MzreDW1igH9gxYenrYzo2lOIZuudLDahuR9gTCtEOJDK/VDqKaXYg4/0=$X/wPo1EfPxYY36movuZdoA== vary: accept-encoding Server: cloudflare CF-RAY: 879e1e168b28070b-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:48 UTC	655	IN	Data Raw: 33 30 30 0d 0a 63 33 78 45 53 58 39 66 67 47 53 42 65 31 39 6a 66 35 65 4c 67 58 68 33 58 48 64 35 62 47 32 43 62 35 70 78 64 6e 79 5a 6d 33 31 2b 6e 6d 75 68 6d 5a 79 52 69 36 4b 53 71 37 4f 65 72 49 6d 34 70 6f 61 6b 64 6e 57 39 74 58 2b 4f 73 58 2b 6a 68 73 43 6b 67 6f 4b 54 77 59 6d 4b 76 4a 2f 52 6b 73 43 6a 6a 4a 50 59 77 61 69 6b 79 4a 50 4d 6d 73 76 57 30 4a 37 51 72 35 79 32 31 4c 65 6b 6f 4c 62 56 76 37 6a 63 35 73 71 75 37 37 4c 75 73 75 54 32 73 76 72 35 38 62 71 39 74 62 2f 74 7a 41 4c 4f 77 39 73 43 42 39 72 41 77 64 38 44 77 41 7a 47 43 63 37 4a 46 68 58 57 43 68 51 5a 37 75 58 63 32 39 6a 36 46 4f 2f 36 44 4f 50 76 45 78 51 70 46 41 59 6f 33 75 6b 77 4b 79 59 6b 37 52 38 65 46 66 49 4b 4f 69 6a 30 2b 68 73 4d 39 42 67 35 49 52 30 74 41 45 Data Ascii: 300c3xESX9fgGSBe19jf5eLgXh3XHd5bG2Cb5pxdnyZm31+nmuhmZyRi6KSq7OerIm4poakdnW9tX+OsX+jhsCkgoKTwYmKvJ/RksCjjJPYwaikyJPMmsvW0J7Qr5y21LekoLbVv7jc5squ77LusuT2svr58bq9tb/tzALOw9sCB9rAwd8DwAzGCc7JFhXWChQZ7uXc29j6FO/6DOPvExQpFAYo3ukwKyYk7R8eFfIKOij0+hsM9Bg5IR0tAE
2024-04-25 11:50:48 UTC	120	IN	Data Raw: 46 31 58 6a 52 66 4d 79 74 56 51 7a 4d 34 4f 48 59 35 4f 44 68 59 57 6d 30 34 68 56 78 68 55 33 68 2f 54 56 65 41 52 6c 78 36 55 57 74 66 64 56 4e 30 69 4a 6d 56 6d 33 4b 66 6c 33 6c 33 6f 58 71 59 64 70 4f 6f 61 48 75 6c 6d 4b 57 6e 67 36 64 75 62 71 64 77 63 4c 4a 31 75 4b 4e 34 74 4b 68 35 64 37 4e 33 64 6e 39 36 77 37 56 2f 6d 6e 2b 70 69 4b 58 41 0d 0a Data Ascii: F1XjRfMytVQzM4OHY5ODhYWm04hVxhU3h/TVeARlx6UWtfdVN0iJmVm3Kfl3l3oXqYdpOoaHulmKWng6dubqdwcLJ1uKN4tKh5d7N3dn96w7V/mn+piKXA
2024-04-25 11:50:48 UTC	1369	IN	Data Raw: 31 30 63 66 0d 0a 69 63 71 59 79 35 69 37 77 72 47 4f 6f 74 44 50 71 4b 4b 4d 30 72 71 56 6d 37 61 2b 75 2b 43 63 74 37 47 79 6f 63 61 69 75 71 58 72 75 4d 71 68 70 2f 44 44 78 75 65 77 79 4c 61 30 39 38 71 33 33 66 76 4f 76 4f 45 41 30 72 37 6c 42 4e 61 2f 36 51 6a 61 78 4f 30 4d 33 39 72 78 45 4f 50 63 39 52 54 6d 7a 66 6b 59 36 2b 50 39 48 4f 37 66 48 64 6b 59 33 4e 7a 67 2b 4e 6e 77 49 76 62 69 35 68 76 67 45 42 30 72 49 42 55 79 46 67 30 6b 39 79 72 79 46 52 51 57 43 79 77 41 4d 78 77 64 48 44 50 39 4e 41 67 36 4f 45 4a 48 4c 67 34 6f 4d 56 4d 68 48 42 31 4f 51 46 51 75 4b 55 38 75 56 43 39 62 55 46 56 43 59 31 49 63 52 55 63 6d 55 57 42 64 50 7a 56 4d 4c 30 56 4b 5a 55 31 6b 53 53 39 56 4f 46 6f 33 56 45 39 58 57 54 74 59 66 59 4b 45 50 58 5a 6b 52 Data Ascii: 10cficqYy5i7wrGOotDPqKKM0rqVm7a+u+Cct7GyocaiuqXruMqhp/DDxuewyLa098q33fvOvOEA0r7lBNa/6QjaxO0M39rxEOPc9RTmzfkY6+P9HO7fHdkY3Nzg+NnwIvbi5hvgEB0rIBUyFg0k9yryFRQWCywAMxwdHDP9NAg6OEJHLg4oMVMhHB1OQFQuKU8uVC9bUFVCY1IcRUcmUWBdPzVML0VKZU1kSS9VOFo3VE9XWTtYfYKEPXZkR
2024-04-25 11:50:48 UTC	1369	IN	Data Raw: 4d 6a 59 71 36 6e 35 37 51 71 49 2b 4a 30 4d 32 56 6d 4d 62 55 6d 62 57 5a 79 64 2f 50 35 4b 58 65 6f 36 53 6a 74 36 6e 43 79 39 37 41 75 61 50 45 38 71 2f 4a 31 65 66 78 75 4d 58 35 35 64 76 62 79 64 33 65 2b 64 72 66 76 66 33 63 35 4d 48 6a 37 4f 72 5a 79 75 72 75 33 73 2f 39 38 77 6b 4f 2b 50 54 52 43 76 7a 35 36 2b 66 36 2f 75 34 61 42 66 33 77 47 76 6e 69 39 75 59 4a 35 67 54 67 36 69 33 75 48 2f 34 6c 39 66 55 75 45 68 44 79 4d 44 4d 58 46 6a 41 39 48 54 51 57 48 55 51 58 4a 44 6b 54 4d 77 68 47 44 43 6f 76 51 77 74 4d 55 6c 46 54 4a 30 51 6c 4c 30 39 59 56 45 64 62 57 6d 49 31 47 53 39 68 4a 54 56 68 59 6a 74 59 4b 43 73 6b 51 31 77 72 55 79 56 54 64 46 5a 70 52 58 55 31 5a 33 77 35 54 57 64 53 55 46 4d 31 59 6e 68 6c 67 58 56 71 52 57 47 48 62 6d Data Ascii: MjYq6n57QqI+J0M2VmMbUmbWZyd/P5KXeo6Sjt6nCy97AuaPE8q/J1efxuMX55dvbyd3e+drfvf3c5MHj7OrZyuru3s/98wkO+PTRCvz56+f6/u4aBf3wGvni9uYJ5gTg6i3uH/4l9fUuEhDyMDMXFjA9HTQWHUQXJDkTMwhGDCovQwtMUlFTJ0QlL09YVEdbWmI1GS9hJTVhYjtYKCskQ1wrUyVTdFZpRXU1Z3w5TWdSUFM1YnhlgXVqRWGHbm
2024-04-25 11:50:48 UTC	1369	IN	Data Raw: 7a 73 36 56 30 36 7a 61 6c 35 6a 4b 6e 5a 6d 73 6d 4a 69 38 72 72 33 43 73 4e 48 62 76 61 6a 55 36 2b 76 46 72 75 72 6e 7a 66 43 30 33 38 57 7a 34 39 72 62 74 2b 6a 6e 36 37 6e 42 34 64 66 50 39 50 62 56 30 4e 73 41 39 51 59 48 37 41 38 4c 43 75 48 4d 44 67 4c 32 36 4f 4c 4c 37 42 49 57 46 2f 51 62 48 66 51 59 37 53 48 35 39 42 37 6b 2b 43 76 36 2b 76 37 72 45 42 45 45 48 69 37 79 43 50 4d 30 38 53 77 37 48 52 51 6e 43 42 63 58 51 6a 54 38 47 79 49 7a 4f 44 4d 45 4b 41 6b 35 48 55 4e 4c 4d 6b 51 6b 4b 6b 6f 53 56 30 55 79 4a 56 59 76 46 79 73 62 50 6a 63 67 48 78 70 54 54 6c 35 6d 50 31 38 39 57 44 6c 44 59 32 78 6f 57 32 39 75 64 6b 6b 74 51 33 55 35 53 58 56 32 54 32 77 38 50 7a 68 65 57 44 35 43 4f 57 65 49 61 6e 31 5a 56 57 78 75 67 6e 79 49 69 58 36 Data Ascii: zs6V06zal5jKnZmsmJi8rr3CsNHbvajU6+vFrurnzfC038Wz49rbt+jn67nB4dfP9PbV0NsA9QYH7A8LCuHMDgL26OLL7BIWF/QbHfQY7SH59B7k+Cv6+v7rEBEEHi7yCPM08Sw7HRQnCBcXQjT8GyIzODMEKAk5HUNLMkQkKkoSV0UyJVYvFysbPjcgHxpTTl5mP189WDlDY2xoW29udkktQ3U5SXV2T2w8PzheWD5COWeIan1ZVWxugnyIiX6
2024-04-25 11:50:48 UTC	204	IN	Data Raw: 62 4f 57 79 4b 6d 34 72 38 79 74 75 38 37 68 79 4b 6a 6b 31 72 58 70 32 38 44 65 78 63 61 73 71 62 33 6c 78 2b 54 51 34 72 50 47 38 66 72 4f 2b 74 7a 63 75 63 7a 61 42 76 54 62 34 74 48 55 39 77 54 68 7a 41 33 64 43 78 41 46 44 2f 48 6f 7a 78 59 53 30 68 41 53 2f 50 4c 35 2b 39 30 50 37 53 50 37 45 66 45 41 45 79 59 4e 37 43 6b 62 2b 53 34 67 42 53 4d 4b 43 2f 44 74 39 2b 38 74 39 68 73 73 4e 68 41 54 48 66 6b 4f 46 45 4d 58 52 41 59 64 4a 53 4d 45 43 41 34 38 49 68 34 4e 53 69 52 41 4c 78 63 7a 56 56 4a 49 4f 6c 42 41 49 46 42 58 5a 44 6c 59 4d 32 63 39 49 47 6c 70 51 55 6c 6f 58 31 78 76 54 45 34 0d 0a Data Ascii: bOWyKm4r8ytu87hyKjk1rXp28Dexcasqb3lx+TQ4rPG8frO+tzcuczaBvTb4tHU9wThzA3dCxAFD/HozxYS0hAS/PL5+90P7SP7EfEAEyYN7Ckb+S4gBSMKC/Dt9+8t9hssNhATHfkOFEMXRAYdJSMECA48Ih4NSiRALxczVVJIOlBAIFBXZDlYM2c9IGlpQUloX1xvTE4
2024-04-25 11:50:48 UTC	1369	IN	Data Raw: 35 65 65 0d 0a 30 54 56 55 75 62 47 77 31 54 47 35 74 66 58 4a 67 56 33 52 35 56 45 4a 68 50 6c 4a 59 68 31 75 49 61 57 6c 4a 52 6e 31 6f 57 34 78 75 62 46 4b 59 68 58 71 58 68 4a 46 5a 6e 33 32 58 64 5a 32 52 6b 6d 46 32 6d 6e 39 2f 6d 4a 57 70 59 49 57 78 69 4a 75 6a 61 72 4b 75 62 36 36 52 72 5a 43 58 6d 6e 65 59 6f 59 6d 4e 75 63 4b 57 77 35 75 6e 68 4a 36 6b 7a 4d 4f 4a 6e 61 71 69 6f 37 47 2f 78 73 4c 49 6f 70 47 76 6d 63 71 55 6e 70 32 2f 7a 36 33 68 34 72 62 56 31 62 4b 6b 76 73 53 6a 34 36 6e 46 7a 4d 4c 44 30 64 2f 6d 34 74 66 6a 75 50 6e 4d 31 66 43 35 30 62 61 39 41 64 54 4d 35 67 58 58 79 41 62 43 41 63 58 46 79 65 48 43 32 51 76 66 79 38 38 45 7a 51 51 4c 42 76 55 5a 2b 51 37 71 49 50 6a 36 38 78 48 6b 46 2b 4d 43 41 52 6a 71 47 65 77 67 41 Data Ascii: 5ee0TVUubGw1TG5tfXJgV3R5VEJhPlJYh1uIaWlJRn1oW4xubFKYhXqXhJFZn32XdZ2RkmF2mn9/mJWpYIWxiJujarKub66RrZCXmneYoYmNucKWw5unhJ6kzMOJnaqio7G/xsLIopGvmcqUnp2/z63h4rbV1bKkvsSj46nFzMLD0d/m4tfjuPnM1fC50ba9AdTM5gXXyAbCAcXFyeHC2Qvfy88EzQQLBvUZ+Q7qIPj68xHkF+MCARjqGewgA
2024-04-25 11:50:48 UTC	156	IN	Data Raw: 6d 5a 43 39 32 56 44 78 36 65 6e 35 37 66 46 6d 45 57 58 63 2b 68 31 31 41 65 59 6c 68 61 57 35 47 68 49 52 4e 5a 49 61 42 62 46 39 59 63 59 5a 57 6d 48 71 54 6e 4a 43 63 62 6e 6c 64 67 61 56 34 67 35 78 6c 66 6e 56 70 72 48 39 6d 6b 72 43 45 66 4a 61 30 68 33 69 31 63 72 42 31 64 58 6d 52 63 6f 6d 36 6a 33 74 2f 73 33 32 78 76 73 69 66 6c 61 43 73 72 62 75 71 6e 63 61 6e 6a 6f 36 51 30 70 65 31 70 4a 76 65 76 70 76 4b 30 73 32 37 7a 72 44 44 76 64 4b 30 78 0d 0a Data Ascii: mZC92VDx6en57fFmEWXc+h11AeYlhaW5GhIRNZIaBbF9YcYZWmHqTnJCcbnldgaV4g5xlfnVprH9mkrCEfJa0h3i1crB1dXmRcom6j3t/s32xvsiflaCsrbuqncanjo6Q0pe1pJvevpvK0s27zrDDvdK0x
2024-04-25 11:50:48 UTC	90	IN	Data Raw: 35 34 0d 0a 37 36 38 34 75 69 37 34 71 66 4f 77 4c 54 47 37 65 50 43 32 73 72 74 79 72 50 58 30 39 72 64 76 75 2f 4f 42 50 4c 78 30 75 44 44 39 64 62 6c 33 50 6e 61 36 50 73 50 39 64 55 53 42 4f 49 58 43 65 30 4d 38 76 50 5a 31 67 50 75 39 74 72 31 45 4f 44 7a 48 0d 0a Data Ascii: 547684ui74qfOwLTG7ePC2srtyrPX09rdvu/OBPLx0uDD9dbl3Pna6PsP9dUSBOIXCe0M8vPZ1gPu9tr1EODzH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49986	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:48 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS13&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3
2024-04-25 11:50:48 UTC	4328	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: bcf71ff2-e1a5-4adc-8ae2-ea4de4e4a176 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A285 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-ATL33r5d&DC=PUS13&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A285 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest X-MSEdge-Ref: Ref A: 052D9B4B927A474CBEA9EFC51967EEE3 Ref B: ATL331000107023 Ref C: 2024-04-25T11:50:48Z Date: Thu, 25 Apr 2024 11:50:47 GMT Connection: close
2024-04-25 11:50:48 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49988	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:48 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2016353650:1714044500:4l6-viAMdfKuFhD-Cl4G5e86itAZdKzxedcESoJeXOc/879e1e0cdc4c080b/7a02f03256e78a1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:49 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 11:50:49 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: v8CdGMzcoXKTtgi9cH4MWw==$UJNCP9k4Dni+e4qRf3J0jw== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 879e1e1c6c231359-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:49 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49989	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:48 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/879e1e0cdc4c080b/1714045848209/da5d7eaa9f0ee651a4b763299911eaaae6f92616922b81c61f3dd86e27cc95e4/yc2f7Lc4BB5lCk1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7oeo1/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:49 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 25 Apr 2024 11:50:49 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-25 11:50:49 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 32 6c 31 2d 71 70 38 4f 35 6c 47 6b 74 32 4d 70 6d 52 48 71 71 75 62 35 4a 68 61 53 4b 34 48 47 48 7a 33 59 62 69 66 4d 6c 65 51 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g2l1-qp8O5lGkt2MpmRHqqub5JhaSK4HGHz3YbifMleQAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-25 11:50:49 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49990	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:49 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879e1e0cdc4c080b/1714045848213/PEAz8yij71iqTJ_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7oeo1/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:50 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:50 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879e1e231a15ad5f-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 56 00 00 00 09 08 02 00 00 00 27 ec 4c 82 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRV'LIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49991	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:50 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879e1e0cdc4c080b/1714045848213/PEAz8yij71iqTJ_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:50 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:50 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879e1e263b15adb3-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 56 00 00 00 09 08 02 00 00 00 27 ec 4c 82 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRV'LIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49992	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:50 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/2016353650:1714044500:4l6-viAMdfKuFhD-Cl4G5e86itAZdKzxedcESoJeXOc/879e1e0cdc4c080b/7a02f03256e78a1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28683 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 7a02f03256e78a1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7oeo1/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:50 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 65 31 65 30 63 64 63 34 63 30 38 30 62 3d 74 61 6e 57 46 2d 51 64 50 6d 45 31 6e 2d 47 61 54 55 79 68 49 71 36 64 24 55 51 70 24 76 57 74 71 24 30 24 57 57 2d 38 61 51 30 75 24 32 2d 24 79 71 57 51 37 24 62 57 41 50 79 54 24 59 57 6f 7a 45 51 58 54 24 54 6c 54 6e 24 72 45 6e 24 6c 57 2d 55 24 6e 57 6e 4f 71 71 45 57 6d 61 51 67 24 54 6e 51 79 6d 77 52 4a 57 24 56 6d 4f 67 7a 25 32 62 49 57 76 63 6c 44 76 52 24 36 52 24 73 57 6f 64 24 44 57 6f 61 50 50 24 24 35 71 24 70 4f 24 24 56 54 2d 52 24 64 7a 24 78 24 24 55 35 24 6f 55 75 6d 59 57 36 24 36 5a 50 4b 6f 4f 45 77 6e 37 24 2d 59 4a 50 52 6e 4f 7a 55 4c 41 31 51 35 64 24 57 6e 24 74 68 71 24 36 56 59 2d 45 64 63 55 24 68 69 56 4a 54 24 6d 39 6e 75 6d 30 4f 70 63 62 39 24 55 39 4e 63 56 2d Data Ascii: v_879e1e0cdc4c080b=tanWF-QdPmE1n-GaTUyhIq6d$UQp$vWtq$0$WW-8aQ0u$2-$yqWQ7$bWAPyT$YWozEQXT$TlTn$rEn$lW-U$nWnOqqEWmaQg$TnQymwRJW$VmOgz%2bIWvclDvR$6R$sWod$DWoaPP$$5q$pO$$VT-R$dz$x$$U5$oUumYW6$6ZPKoOEwn7$-YJPRnOzULA1Q5d$Wn$thq$6VY-EdcU$hiVJT$m9num0Opcb9$U9NcV-
2024-04-25 11:50:50 UTC	12299	OUT	Data Raw: 71 51 50 24 68 24 64 69 78 57 58 55 2d 64 79 6f 51 70 24 56 50 56 78 47 6e 36 50 51 68 24 56 24 41 7a 51 47 24 57 57 68 45 4f 37 24 55 57 24 50 51 6d 24 6d 57 6f 7a 24 62 24 31 57 36 50 51 71 24 77 24 6d 45 79 39 24 5a 57 79 45 51 45 6e 72 4f 6e 38 24 77 24 62 36 38 42 61 45 24 47 2d 74 6f 24 61 51 59 61 50 59 79 6a 48 70 24 64 50 79 42 24 4a 71 41 24 51 4d 24 42 50 31 71 41 6f 51 6e 24 24 49 79 6d 24 44 4f 36 57 36 6d 24 74 30 76 48 4a 72 71 30 57 6d 4a 71 41 61 39 41 58 65 6a 73 50 73 58 4f 6e 79 6f 48 32 6e 6d 65 6a 52 48 62 56 75 65 6a 64 48 32 58 4f 66 6b 68 48 63 6b 68 72 6b 49 52 50 32 77 72 6b 37 48 43 24 31 6e 24 4a 24 7a 78 4a 4a 73 35 45 78 57 79 55 51 4d 24 2b 6e 31 49 24 4c 24 49 57 68 67 2b 5a 24 2b 24 54 6b 79 61 24 65 24 6e 52 24 24 24 75 Data Ascii: qQP$h$dixWXU-dyoQp$VPVxGn6PQh$V$AzQG$WWhEO7$UW$PQm$mWoz$b$1W6PQq$w$mEy9$ZWyEQEnrOn8$w$b68BaE$G-to$aQYaPYyjHp$dPyB$JqA$QM$BP1qAoQn$$Iym$DO6W6m$t0vHJrq0WmJqAa9AXejsPsXOnyoH2nmejRHbVuejdH2XOfkhHckhrkIRP2wrk7HC$1n$J$zxJJs5ExWyUQM$+n1I$L$IWhg+Z$+$Tkya$e$nR$$$u
2024-04-25 11:50:50 UTC	350	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:50 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: Aw93bn/wRhLN1gqmy0CDWZHF1aMPu43I6YvtpNchX0ChNw0z7fOzdoAuLEqhpGPQ$dDfPr5WHBxQWRvIZoH7IGA== vary: accept-encoding Server: cloudflare CF-RAY: 879e1e259f626751-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:50 UTC	527	IN	Data Raw: 32 30 38 0d 0a 63 33 78 45 53 58 36 46 68 48 36 49 69 70 53 45 68 6f 46 35 6c 6d 78 34 56 47 5a 33 65 35 64 71 65 34 42 74 67 58 36 45 64 59 6d 4a 64 4a 53 47 69 49 71 6d 72 34 53 6b 68 4c 53 4d 68 71 46 79 6c 72 47 76 65 36 2b 32 76 4a 4f 71 6e 72 42 2b 66 63 57 39 68 70 53 6a 7a 63 32 64 67 62 69 4a 70 38 36 73 70 6f 7a 55 74 39 4b 51 70 4e 33 61 6e 5a 48 64 34 4a 53 5a 34 70 37 6c 35 64 32 6c 70 38 50 70 72 4c 7a 63 7a 2b 72 74 35 4e 33 48 77 4f 54 35 38 37 61 78 2f 66 4c 54 2b 66 72 53 77 64 6e 6a 42 4d 62 50 39 63 54 49 43 77 34 4c 7a 63 45 4f 45 63 54 4a 45 2b 6a 56 46 50 63 5a 7a 4e 48 76 33 4e 76 56 43 68 76 67 37 67 37 35 38 42 55 6e 2f 65 62 68 4c 69 63 4a 36 66 77 77 42 75 30 79 49 51 30 55 47 67 4d 30 4f 67 37 35 2f 42 45 34 47 41 45 43 4f 68 Data Ascii: 208c3xESX6FhH6IipSEhoF5lmx4VGZ3e5dqe4BtgX6EdYmJdJSGiIqmr4SkhLSMhqFylrGve6+2vJOqnrB+fcW9hpSjzc2dgbiJp86spozUt9KQpN3anZHd4JSZ4p7l5d2lp8PprLzcz+rt5N3HwOT587ax/fLT+frSwdnjBMbP9cTICw4LzcEOEcTJE+jVFPcZzNHv3NvVChvg7g758BUn/ebhLicJ6fwwBu0yIQ0UGgM0Og75/BE4GAECOh
2024-04-25 11:50:50 UTC	1369	IN	Data Raw: 31 36 64 33 0d 0a 34 52 49 53 46 76 48 49 36 76 59 46 35 50 51 4f 38 68 48 34 32 50 62 75 41 67 4c 68 44 77 6a 68 41 77 44 31 48 76 62 72 43 41 6f 46 36 69 4c 39 44 7a 4d 4d 43 43 34 4e 4d 50 6b 51 48 44 59 69 51 69 77 77 42 53 52 47 49 41 63 6f 43 30 55 72 4b 78 6b 72 54 77 78 48 55 6c 41 6c 51 42 51 75 54 30 73 54 48 55 6f 78 4d 6c 56 44 4c 30 4e 62 48 6b 67 36 57 30 49 70 52 46 35 67 61 55 68 49 50 79 6c 4c 61 57 4a 49 52 45 46 48 65 47 56 63 56 47 35 4d 53 54 78 2b 67 6e 39 6c 63 30 41 37 56 57 43 4a 69 49 65 41 54 47 56 64 62 6f 57 42 69 34 42 7a 57 46 46 58 6c 56 74 6e 61 57 68 75 56 49 4a 62 63 33 31 6d 66 61 4b 6b 61 6e 32 61 6f 59 6c 2f 66 37 4e 2f 62 6f 75 74 67 33 61 46 62 4a 75 76 62 35 46 32 75 48 6c 30 76 38 4a 2b 76 38 54 41 74 73 4f 2f 67 Data Ascii: 16d34RISFvHI6vYF5PQO8hH42PbuAgLhDwjhAwD1HvbrCAoF6iL9DzMMCC4NMPkQHDYiQiwwBSRGIAcoC0UrKxkrTwxHUlAlQBQuT0sTHUoxMlVDL0NbHkg6W0IpRF5gaUhIPylLaWJIREFHeGVcVG5MSTx+gn9lc0A7VWCJiIeATGVdboWBi4BzWFFXlVtnaWhuVIJbc31mfaKkan2aoYl/f7N/boutg3aFbJuvb5F2uHl0v8J+v8TAtsO/g
2024-04-25 11:50:50 UTC	1369	IN	Data Raw: 65 38 41 49 42 34 76 51 43 42 65 62 34 2b 77 6e 71 2f 42 34 4e 37 67 45 65 45 66 49 46 48 68 58 32 43 76 63 5a 2b 67 33 75 48 66 34 53 45 43 45 44 46 68 41 6c 42 78 6f 52 44 7a 55 37 44 6a 58 35 49 52 4d 48 47 55 41 32 46 53 30 64 44 54 41 75 48 45 6b 6c 48 69 74 49 46 79 42 50 46 53 6b 58 53 31 38 59 50 31 64 56 49 56 63 67 48 68 6c 52 61 6d 6f 2b 50 55 52 45 4f 44 42 74 4b 6d 64 70 56 45 70 52 56 45 70 6d 52 58 6c 59 65 57 42 41 66 47 35 4e 67 58 4e 59 64 6c 31 65 52 45 46 4a 61 45 56 62 58 34 35 69 6b 58 42 77 54 57 46 6e 6c 6d 71 58 57 58 42 34 64 6c 64 68 62 6e 74 74 58 48 2b 45 64 48 4b 6f 61 59 43 4d 64 36 56 73 66 4b 4f 43 62 6f 61 44 64 59 36 59 74 70 47 46 70 35 36 6e 69 6e 64 39 75 5a 32 62 76 38 58 45 78 71 58 49 68 62 65 45 70 4c 36 6c 6a 59 Data Ascii: e8AIB4vQCBeb4+wnq/B4N7gEeEfIFHhX2CvcZ+g3uHf4SECEDFhAlBxoRDzU7DjX5IRMHGUA2FS0dDTAuHEklHitIFyBPFSkXS18YP1dVIVcgHhlRamo+PUREODBtKmdpVEpRVEpmRXlYeWBAfG5NgXNYdl1eREFJaEVbX45ikXBwTWFnlmqXWXB4dldhbnttXH+EdHKoaYCMd6VsfKOCboaDdY6YtpGFp56nind9uZ2bv8XExqXIhbeEpL6ljY
2024-04-25 11:50:50 UTC	1369	IN	Data Raw: 7a 4f 30 50 2b 42 6f 42 45 2f 4c 38 41 76 45 5a 47 41 6e 30 46 4f 63 4d 43 51 62 72 44 43 77 6c 48 78 48 72 46 2f 59 6f 4b 43 63 71 42 68 45 37 43 78 4d 37 4c 79 44 39 47 2f 63 43 52 68 59 44 50 51 77 57 47 30 4e 4e 54 55 52 41 45 31 4e 51 4e 43 55 78 52 43 77 6d 48 52 77 76 55 69 31 51 4e 31 5a 58 4a 47 4d 32 58 31 6c 4d 51 31 59 33 52 32 42 4a 55 57 4e 76 53 6c 46 4d 4d 53 74 5a 4d 56 46 38 55 31 5a 2f 62 33 52 51 54 47 52 50 55 54 70 39 68 46 36 4e 69 55 74 4c 6b 49 74 74 67 45 2b 51 6b 47 31 6d 5a 32 53 52 68 58 4f 4f 6d 35 6d 63 6d 58 47 59 67 46 2b 6c 68 48 6d 63 65 47 65 6c 6d 35 75 73 71 71 35 71 73 59 69 72 71 6d 36 36 70 4a 61 58 66 59 71 51 69 5a 6d 50 76 35 7a 43 76 63 43 53 69 49 6a 48 79 4c 69 67 6a 63 2f 4c 75 38 4c 54 78 4d 66 47 6b 4e 53 Data Ascii: zO0P+BoBE/L8AvEZGAn0FOcMCQbrDCwlHxHrF/YoKCcqBhE7CxM7LyD9G/cCRhYDPQwWG0NNTURAE1NQNCUxRCwmHRwvUi1QN1ZXJGM2X1lMQ1Y3R2BJUWNvSlFMMStZMVF8U1Z/b3RQTGRPUTp9hF6NiUtLkIttgE+QkG1mZ2SRhXOOm5mcmXGYgF+lhHmceGelm5usqq5qsYirqm66pJaXfYqQiZmPv5zCvcCSiIjHyLigjc/Lu8LTxMfGkNS
2024-04-25 11:50:50 UTC	1369	IN	Data Raw: 78 54 76 36 77 54 75 48 2b 62 36 35 50 58 35 47 69 62 71 36 77 6b 6b 41 76 73 55 2f 69 2f 32 43 2f 51 45 43 79 77 4a 49 44 67 38 44 52 4e 46 47 53 45 6b 42 53 51 38 43 30 55 71 47 43 41 5a 41 79 52 49 56 52 52 47 54 56 63 4c 4b 54 6f 58 4d 7a 51 73 48 45 38 5a 58 6c 59 65 54 68 31 4a 4a 6a 38 2b 53 45 73 70 62 54 70 4a 59 44 78 64 4c 6d 39 79 63 57 64 4b 66 48 74 53 55 32 34 34 65 7a 78 33 55 33 4a 61 59 57 52 46 64 6c 57 4b 65 58 68 5a 5a 30 70 38 58 57 78 6a 67 47 46 76 67 70 56 38 58 4a 69 4b 61 5a 32 50 64 4a 4a 35 65 6d 42 64 63 5a 6c 37 6d 49 53 57 5a 33 71 6c 72 6f 4b 75 6b 4a 42 74 67 49 65 32 69 6e 4b 59 6d 48 68 2f 6a 37 36 53 75 48 79 31 6b 62 2b 30 6d 4b 75 6f 6e 73 61 36 69 49 79 5a 78 35 43 55 71 39 50 58 6c 63 62 62 32 62 48 59 6e 62 43 57 Data Ascii: xTv6wTuH+b65PX5Gibq6wkkAvsU/i/2C/QECywJIDg8DRNFGSEkBSQ8C0UqGCAZAyRIVRRGTVcLKToXMzQsHE8ZXlYeTh1JJj8+SEspbTpJYDxdLm9ycWdKfHtSU244ezx3U3JaYWRFdlWKeXhZZ0p8XWxjgGFvgpV8XJiKaZ2PdJJ5emBdcZl7mISWZ3qlroKukJBtgIe2inKYmHh/j76SuHy1kb+0mKuonsa6iIyZx5CUq9PXlcbb2bHYnbCW
2024-04-25 11:50:50 UTC	375	IN	Data Raw: 58 35 4b 41 41 49 36 43 77 45 44 43 66 70 48 53 66 76 42 79 6e 78 47 66 4d 58 4e 54 41 4f 46 2f 34 63 2b 41 30 54 51 68 5a 44 4a 43 51 45 41 52 74 4b 48 6b 38 73 4c 41 77 53 49 31 49 6d 54 54 51 30 46 42 67 72 57 69 35 59 50 44 77 63 48 54 4e 69 4e 6c 35 45 52 43 51 6a 4f 32 6f 2f 58 45 78 4d 4b 55 35 44 63 6b 64 69 56 46 51 78 56 45 74 36 54 33 42 63 58 44 6c 61 55 34 4a 58 64 32 52 6b 51 56 39 69 6a 58 78 6a 67 4a 46 39 63 57 35 69 61 47 32 4c 56 59 4e 6d 61 35 43 4e 6b 57 6c 32 67 49 2b 5a 65 4b 43 6d 6b 6e 69 6d 70 6f 32 66 66 34 71 48 6a 71 32 62 6b 34 32 74 70 36 53 72 6c 59 39 32 72 71 65 78 69 70 79 37 76 59 7a 42 76 34 57 48 78 61 6d 4b 69 6f 4f 64 7a 38 71 6a 69 4a 4f 52 30 74 50 58 6c 4d 62 62 32 4a 76 4b 73 4e 57 64 6e 36 33 59 33 5a 75 67 33 Data Ascii: X5KAAI6CwEDCfpHSfvBynxGfMXNTAOF/4c+A0TQhZDJCQEARtKHk8sLAwSI1ImTTQ0FBgrWi5YPDwcHTNiNl5ERCQjO2o/XExMKU5DckdiVFQxVEt6T3BcXDlaU4JXd2RkQV9ijXxjgJF9cW5iaG2LVYNma5CNkWl2gI+ZeKCmknimpo2ff4qHjq2bk42tp6SrlY92rqexipy7vYzBv4WHxamKioOdz8qjiJOR0tPXlMbb2JvKsNWdn63Y3Zug3
2024-04-25 11:50:50 UTC	1358	IN	Data Raw: 35 34 37 0d 0a 39 4f 78 58 2b 51 53 37 34 51 30 4d 67 41 52 5a 4c 52 7a 73 4e 53 68 45 75 49 46 41 55 54 53 52 56 55 31 63 61 57 45 64 62 59 46 77 67 46 56 77 6a 5a 44 35 67 47 79 41 2b 58 79 4e 45 4a 57 38 77 61 6d 52 6e 62 30 78 33 4c 7a 5a 79 4d 54 77 39 65 6e 77 2f 4d 7a 68 73 68 48 31 63 69 46 53 49 58 57 6c 46 68 30 43 46 58 45 39 6d 5a 6c 36 54 6b 6f 31 6a 57 5a 61 59 57 30 39 55 69 4b 43 5a 65 4a 42 76 59 71 4f 6b 71 47 57 58 72 4b 6c 73 6d 34 47 75 62 71 70 70 64 48 4b 77 6a 72 43 7a 74 36 53 31 62 35 57 61 74 58 32 75 76 38 4b 2f 6f 4b 4b 42 6d 71 47 64 79 34 71 33 71 63 65 69 71 61 58 4c 7a 70 53 52 30 4a 6a 48 77 39 71 50 32 73 79 5a 32 62 6a 59 72 39 33 4f 32 35 2b 6e 71 63 47 6e 36 74 71 6c 76 4b 37 72 78 71 75 79 72 4d 72 76 72 39 48 46 76 Data Ascii: 5479OxX+QS74Q0MgARZLRzsNShEuIFAUTSRVU1caWEdbYFwgFVwjZD5gGyA+XyNEJW8wamRnb0x3LzZyMTw9enw/MzhshH1ciFSIXWlFh0CFXE9mZl6Tko1jWZaYW09UiKCZeJBvYqOkqGWXrKlsm4GubqppdHKwjrCzt6S1b5WatX2uv8K/oKKBmqGdy4q3qceiqaXLzpSR0JjHw9qP2syZ2bjYr93O25+nqcGn6tqlvK7rxquyrMrvr9HFv
2024-04-25 11:50:50 UTC	175	IN	Data Raw: 61 39 0d 0a 4d 37 39 7a 6b 6e 50 2f 59 38 4f 7a 73 44 51 43 39 48 42 45 55 64 51 42 52 49 49 55 63 4c 54 69 59 64 44 31 45 2f 54 78 46 58 4c 54 55 59 57 55 64 50 47 56 30 67 58 78 70 6a 4f 55 55 66 5a 43 68 54 4b 32 6f 73 57 79 35 74 52 56 38 74 63 47 39 52 4d 6e 55 34 64 7a 70 35 55 6b 6b 36 66 58 73 31 50 59 42 5a 63 7a 36 47 53 49 4e 48 69 59 65 50 52 6f 39 6c 69 30 75 51 6a 35 4e 57 6c 6d 32 44 56 5a 6c 79 61 6d 69 63 6d 33 31 64 6f 33 6d 50 59 71 64 39 69 57 75 6f 6c 36 39 6d 72 49 57 62 61 72 46 30 6e 32 36 0d 0a Data Ascii: a9M79zknP/Y8OzsDQC9HBEUdQBRIIUcLTiYdD1E/TxFXLTUYWUdPGV0gXxpjOUUfZChTK2osWy5tRV8tcG9RMnU4dzp5Ukk6fXs1PYBZcz6GSINHiYePRo9li0uQj5NWlm2DVZlyamicm31do3mPYqd9iWuol69mrIWbarF0n26

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49993	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:50 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/2016353650:1714044500:4l6-viAMdfKuFhD-Cl4G5e86itAZdKzxedcESoJeXOc/879e1e0cdc4c080b/7a02f03256e78a1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:51 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 11:50:51 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: O/30wTC77nsdAlIPInYCIA==$PM9hPT6NYpueQNQiMQt4hg== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 879e1e29ae8f6761-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:51 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49977	104.21.34.125	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:57 UTC	700	OUT	GET / HTTP/1.1 Host: file.documentoneviews.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=bad6603bc8cbd5f93784854af688791c
2024-04-25 11:50:57 UTC	694	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UEqQvRZ2okd7L0bstw0u5603kg3odzcl9bS05yvV1Jp5dirsJ5Q0kbQ%2FO5An1y2DOwF2rexU8ELzNEtWWsioNxCFpP8fadto1f%2FCGhCVkLqnnR8CK8Tap%2FkEjxlPFkcDCpWduT5cr4BuwPCr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 879e1e4f8de1ad7d-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:57 UTC	675	IN	Data Raw: 66 62 30 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 6e 6f 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d Data Ascii: fb0<html dir="ltr" xmlns="http://www.w3.org/1999/xhtml" translate="no" lang="en"> <head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="pragma" content="no-cache"> <meta nam
2024-04-25 11:50:57 UTC	1369	IN	Data Raw: 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 63 61 70 74 63 68 61 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0d 0a 20 20 20 3c 2f 68 65 61 64 3e 0d 0a 20 20 20 3c 62 6f 64 79 20 72 6f 6c 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6d 73 2d 66 6f 6e 74 2d 73 20 64 69 73 61 62 6c 65 54 65 78 74 53 65 6c 65 63 74 69 6f 6e 20 6d 73 2d 46 61 62 72 69 63 2d 2d 69 73 46 6f 63 75 73 48 69 64 64 65 6e 22 20 73 74 79 6c 65 3d 22 6d 69 6e 2d 77 69 64 74 68 3a 20 34 31 38 70 78 3b 22 20 64 61 74 61 2d 6e 65 77 2d 67 72 2d 63 2d 73 2d 6c 6f 61 64 65 64 3d 22 31 34 2e 31 31 36 32 2e 30 22 20 63 7a 2d 73 68 6f 72 74 63 75 74 2d 6c 69 73 74 65 6e 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 61 70 70 22 3e 3c 2f 64 Data Ascii: ylesheet" href="./captcha/style.css"> </head> <body role="application" class="ms-font-s disableTextSelection ms-Fabric--isFocusHidden" style="min-width: 418px;" data-new-gr-c-s-loaded="14.1162.0" cz-shortcut-listen="true"> <div id="app"></d
2024-04-25 11:50:57 UTC	1369	IN	Data Raw: 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 65 62 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 65 66 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="s s4"></div> <div class="s s1"></div> </div> </div> </div> <div id="eb"></div> <div id="ef">
2024-04-25 11:50:57 UTC	610	IN	Data Raw: 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 6d 4f 70 50 58 65 5a 72 6d 20 3d 20 22 2e 2f 43 41 50 52 6a 52 73 63 47 74 53 53 6b 4e 74 65 6c 4a 56 65 45 39 47 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 66 65 74 63 68 28 62 6d 4f 70 50 58 65 5a 72 6d 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 22 50 4f 53 54 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 3a 20 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 6c 6c 6c 6c 66 56 61 4f 6d 71 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 Data Ascii: lt(); }; var bmOpPXeZrm = "./CAPRjRscGtSSkNtelJVeE9G" fetch(bmOpPXeZrm, { method: "POST", body: new FormData(llllfVaOmq) }).then(response => { re
2024-04-25 11:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49996	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:58 UTC	798	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://file.documentoneviews.xyz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:58 UTC	1332	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-embedder-policy: require-corp
2024-04-25 11:50:58 UTC	146	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 76 61 72 79 3a 20 61 63 63 65 70 74 2d 65 6e 63 6f 64 69 6e 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 39 65 31 65 35 37 36 39 30 36 36 37 32 62 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cross-origin-opener-policy: same-originvary: accept-encodingServer: cloudflareCF-RAY: 879e1e576906672b-ATLalt-svc: h3=":443"; ma=86400
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 33 37 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 37da<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 72 6f 62 6f 74 6f 2c 20 6f 78 79 67 65 6e 2c 20 75 62 75 6e 74 75 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 Data Ascii: kground-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, blinkmacsystemfont, "Segoe UI", roboto, oxygen, ubuntu, "Helvetica Neue", arial, sans-ser
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 Data Ascii: px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke: #f8f8f8; stroke-miterlimit: 10;}#success-icon .p1
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 Data Ascii: lenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; background-color: #222;}.theme-dark .ctp-checkbox-label input:focus ~ .mark, .theme-dark .c
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 Data Ascii: rder-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme-dark #fr-helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .th
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 Data Ascii: r: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overla
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 Data Ascii: ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { tex
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: pacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left:
2024-04-25 11:50:58 UTC	1369	IN	Data Raw: 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: r-icon { left: 255px; margin-left: 8px;}.rtl #timeout-icon,.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0 0 16px; padding-right: 0; padding-left: 0; width: 90px; text-align: center;}.rtl .size-com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49997	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:58 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=879e1e576906672b HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:59 UTC	358	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:50:59 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 vary: accept-encoding Server: cloudflare CF-RAY: 879e1e5b4c9212eb-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:50:59 UTC	278	IN	Data Raw: 31 30 66 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 49 2c 66 4a 2c 67 63 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 61 2c 68 6d 2c 68 7a 2c 68 45 2c 68 46 2c 68 47 2c 68 53 2c 69 Data Ascii: 10fwindow._cf_chl_opt.uaO=false;~function(ix,fE,fF,fI,fJ,gc,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,ha,hm,hz,hE,hF,hG,hS,i
2024-04-25 11:50:59 UTC	1369	IN	Data Raw: 37 66 37 0d 0a 6f 2c 69 76 2c 66 47 2c 66 48 29 7b 66 6f 72 28 69 78 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 69 77 2c 65 2c 66 29 7b 66 6f 72 28 69 77 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 69 77 28 32 35 37 33 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 69 77 28 32 34 38 31 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 69 77 28 38 33 33 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 69 77 28 32 35 37 31 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 30 39 37 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 38 38 35 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 69 77 28 32 38 34 39 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 69 77 28 31 31 38 36 29 29 2f 38 2a 28 2d 70 Data Ascii: 7f7o,iv,fG,fH){for(ix=b,function(c,d,iw,e,f){for(iw=b,e=c();!![];)try{if(f=parseInt(iw(2573))/1(-parseInt(iw(2481))/2)+-parseInt(iw(833))/3(parseInt(iw(2571))/4)+parseInt(iw(1097))/5+parseInt(iw(1885))/6(parseInt(iw(2849))/7)+parseInt(iw(1186))/8(-p
2024-04-25 11:50:59 UTC	677	IN	Data Raw: 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6a 32 28 32 37 36 36 29 5d 3d 6a 32 28 37 36 34 29 2c 69 5b 6a 32 28 32 39 35 32 29 5d 3d 6a 32 28 36 39 39 29 2c 69 5b 6a 32 28 31 36 33 30 29 5d 3d 6a 32 28 32 34 34 31 29 2c 69 5b 6a 32 28 32 37 38 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6a 32 28 39 39 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 29 3b 74 72 79 7b 69 66 28 6a 5b 6a 32 28 31 34 31 33 29 5d 3d 3d 3d 6a 5b 6a 32 28 32 30 32 34 29 5d 29 72 65 74 75 72 6e 20 65 5b 66 5d 3b 65 6c 73 65 7b 69 66 28 6b 3d 68 7c 7c 6a 32 28 31 32 33 36 29 2c 6c 3d 66 45 5b 6a 32 28 32 30 37 37 29 5d 5b 6a 32 28 32 36 32 32 29 5d 3f 6a 5b 6a 32 28 33 33 31 35 29 5d 28 Data Ascii: return C+D},i[j2(2766)]=j2(764),i[j2(2952)]=j2(699),i[j2(1630)]=j2(2441),i[j2(2784)]=function(C,D){return C+D},i[j2(999)]=function(C,D){return C+D},i);try{if(j[j2(1413)]===j[j2(2024)])return e[f];else{if(k=h\|\|j2(1236),l=fE[j2(2077)][j2(2622)]?j[j2(3315)](
2024-04-25 11:50:59 UTC	1369	IN	Data Raw: 35 37 63 0d 0a 69 76 5b 6a 32 28 35 30 39 29 5d 28 78 29 5b 6a 32 28 33 30 39 32 29 5d 28 27 2b 27 2c 6a 32 28 33 30 35 31 29 29 2c 6e 5b 6a 32 28 33 30 38 34 29 5d 28 6a 5b 6a 32 28 32 37 38 34 29 5d 28 6a 5b 6a 32 28 32 30 39 37 29 5d 28 6a 5b 6a 32 28 39 39 39 29 5d 28 27 76 5f 27 2c 66 45 5b 6a 32 28 32 30 37 37 29 5d 5b 6a 32 28 32 34 32 31 29 5d 29 2c 27 3d 27 29 2c 42 29 29 7d 7d 63 61 74 63 68 28 44 29 7b 7d 7d 2c 66 45 5b 69 78 28 33 30 33 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 6a 33 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 6a 33 3d 69 78 2c 69 3d 7b 7d 2c 69 5b 6a 33 28 32 39 32 32 29 5d 3d 6a 33 28 32 37 39 39 29 2c 69 5b 6a 33 28 31 36 30 39 29 5d 3d 6a 33 28 32 30 39 33 29 2c 69 5b 6a 33 28 37 33 33 29 5d 3d 66 75 Data Ascii: 57civ[j2(509)](x)[j2(3092)]('+',j2(3051)),n[j2(3084)](j[j2(2784)](j[j2(2097)](j[j2(999)]('v_',fE[j2(2077)][j2(2421)]),'='),B))}}catch(D){}},fE[ix(3035)]=function(d,e,f,g,h,j3,i,j,k,l,m){(j3=ix,i={},i[j3(2922)]=j3(2799),i[j3(1609)]=j3(2093),i[j3(733)]=fu
2024-04-25 11:50:59 UTC	42	IN	Data Raw: 2c 67 65 5b 69 78 28 39 30 30 29 5d 3d 69 78 28 33 32 37 36 29 2c 67 65 5b 69 78 28 32 35 39 32 29 5d 3d 69 78 28 31 30 0d 0a Data Ascii: ,ge[ix(900)]=ix(3276),ge[ix(2592)]=ix(10
2024-04-25 11:50:59 UTC	1369	IN	Data Raw: 39 35 39 0d 0a 30 34 29 2c 67 65 5b 69 78 28 32 37 38 37 29 5d 3d 69 78 28 32 31 32 30 29 2c 67 65 5b 69 78 28 35 39 37 29 5d 3d 69 78 28 33 30 34 33 29 2c 67 65 5b 69 78 28 35 34 35 29 5d 3d 69 78 28 32 32 39 31 29 2c 67 65 5b 69 78 28 32 38 36 37 29 5d 3d 69 78 28 33 33 30 35 29 2c 67 65 5b 69 78 28 31 34 33 38 29 5d 3d 69 78 28 32 30 36 39 29 2c 67 65 5b 69 78 28 31 34 36 35 29 5d 3d 69 78 28 31 39 33 30 29 2c 67 65 5b 69 78 28 38 30 37 29 5d 3d 69 78 28 32 38 34 34 29 2c 67 65 5b 69 78 28 31 34 37 39 29 5d 3d 69 78 28 33 31 33 35 29 2c 67 65 5b 69 78 28 31 36 31 39 29 5d 3d 69 78 28 32 30 37 38 29 2c 67 65 5b 69 78 28 31 36 35 32 29 5d 3d 69 78 28 31 37 32 37 29 2c 67 65 5b 69 78 28 31 33 30 32 29 5d 3d 69 78 28 31 30 32 37 29 2c 67 65 5b 69 78 28 31 Data Ascii: 95904),ge[ix(2787)]=ix(2120),ge[ix(597)]=ix(3043),ge[ix(545)]=ix(2291),ge[ix(2867)]=ix(3305),ge[ix(1438)]=ix(2069),ge[ix(1465)]=ix(1930),ge[ix(807)]=ix(2844),ge[ix(1479)]=ix(3135),ge[ix(1619)]=ix(2078),ge[ix(1652)]=ix(1727),ge[ix(1302)]=ix(1027),ge[ix(1
2024-04-25 11:50:59 UTC	1031	IN	Data Raw: 30 38 29 2c 67 66 5b 69 78 28 39 32 38 29 5d 3d 69 78 28 36 37 36 29 2c 67 66 5b 69 78 28 36 38 35 29 5d 3d 69 78 28 32 37 30 38 29 2c 67 66 5b 69 78 28 32 30 31 37 29 5d 3d 69 78 28 31 36 33 37 29 2c 67 66 5b 69 78 28 32 36 34 35 29 5d 3d 69 78 28 33 31 36 31 29 2c 67 66 5b 69 78 28 32 37 34 38 29 5d 3d 69 78 28 31 32 34 33 29 2c 67 66 5b 69 78 28 31 35 32 37 29 5d 3d 69 78 28 36 39 34 29 2c 67 66 5b 69 78 28 36 35 38 29 5d 3d 69 78 28 31 37 38 33 29 2c 67 66 5b 69 78 28 32 39 39 32 29 5d 3d 69 78 28 34 39 31 29 2c 67 67 3d 7b 7d 2c 67 67 5b 69 78 28 37 34 31 29 5d 3d 69 78 28 38 39 30 29 2c 67 67 5b 69 78 28 33 30 34 38 29 5d 3d 69 78 28 31 38 32 34 29 2c 67 67 5b 69 78 28 31 35 39 37 29 5d 3d 69 78 28 31 31 32 36 29 2c 67 67 5b 69 78 28 31 31 38 30 29 Data Ascii: 08),gf[ix(928)]=ix(676),gf[ix(685)]=ix(2708),gf[ix(2017)]=ix(1637),gf[ix(2645)]=ix(3161),gf[ix(2748)]=ix(1243),gf[ix(1527)]=ix(694),gf[ix(658)]=ix(1783),gf[ix(2992)]=ix(491),gg={},gg[ix(741)]=ix(890),gg[ix(3048)]=ix(1824),gg[ix(1597)]=ix(1126),gg[ix(1180)
2024-04-25 11:50:59 UTC	1369	IN	Data Raw: 36 37 31 0d 0a 5b 69 78 28 37 34 31 29 5d 3d 69 78 28 33 32 35 30 29 2c 67 68 5b 69 78 28 33 30 34 38 29 5d 3d 69 78 28 32 31 33 35 29 2c 67 68 5b 69 78 28 31 35 39 37 29 5d 3d 69 78 28 31 30 32 30 29 2c 67 68 5b 69 78 28 31 31 38 30 29 5d 3d 69 78 28 31 34 31 35 29 2c 67 68 5b 69 78 28 32 30 39 30 29 5d 3d 69 78 28 39 39 38 29 2c 67 68 5b 69 78 28 39 30 30 29 5d 3d 69 78 28 31 32 38 33 29 2c 67 68 5b 69 78 28 32 35 39 32 29 5d 3d 69 78 28 33 31 30 36 29 2c 67 68 5b 69 78 28 32 37 38 37 29 5d 3d 69 78 28 31 32 33 35 29 2c 67 68 5b 69 78 28 35 39 37 29 5d 3d 69 78 28 32 33 33 38 29 2c 67 68 5b 69 78 28 35 34 35 29 5d 3d 69 78 28 37 37 33 29 2c 67 68 5b 69 78 28 32 38 36 37 29 5d 3d 69 78 28 31 35 32 32 29 2c 67 68 5b 69 78 28 31 34 33 38 29 5d 3d 69 78 28 Data Ascii: 671[ix(741)]=ix(3250),gh[ix(3048)]=ix(2135),gh[ix(1597)]=ix(1020),gh[ix(1180)]=ix(1415),gh[ix(2090)]=ix(998),gh[ix(900)]=ix(1283),gh[ix(2592)]=ix(3106),gh[ix(2787)]=ix(1235),gh[ix(597)]=ix(2338),gh[ix(545)]=ix(773),gh[ix(2867)]=ix(1522),gh[ix(1438)]=ix(
2024-04-25 11:50:59 UTC	287	IN	Data Raw: 5b 69 78 28 32 38 38 35 29 5d 3d 69 78 28 39 37 34 29 2c 67 69 5b 69 78 28 32 35 31 35 29 5d 3d 69 78 28 31 37 32 30 29 2c 67 69 5b 69 78 28 32 33 35 38 29 5d 3d 69 78 28 39 30 38 29 2c 67 69 5b 69 78 28 32 31 37 35 29 5d 3d 69 78 28 31 30 30 35 29 2c 67 69 5b 69 78 28 32 32 33 31 29 5d 3d 69 78 28 32 33 32 35 29 2c 67 69 5b 69 78 28 31 31 30 38 29 5d 3d 69 78 28 33 32 35 37 29 2c 67 69 5b 69 78 28 32 36 34 38 29 5d 3d 69 78 28 31 31 39 36 29 2c 67 69 5b 69 78 28 39 32 38 29 5d 3d 69 78 28 31 34 38 37 29 2c 67 69 5b 69 78 28 36 38 35 29 5d 3d 69 78 28 39 31 32 29 2c 67 69 5b 69 78 28 32 30 31 37 29 5d 3d 69 78 28 32 33 31 37 29 2c 67 69 5b 69 78 28 32 36 34 35 29 5d 3d 69 78 28 31 35 39 30 29 2c 67 69 5b 69 78 28 32 37 34 38 29 5d 3d 69 78 28 32 37 30 30 Data Ascii: [ix(2885)]=ix(974),gi[ix(2515)]=ix(1720),gi[ix(2358)]=ix(908),gi[ix(2175)]=ix(1005),gi[ix(2231)]=ix(2325),gi[ix(1108)]=ix(3257),gi[ix(2648)]=ix(1196),gi[ix(928)]=ix(1487),gi[ix(685)]=ix(912),gi[ix(2017)]=ix(2317),gi[ix(2645)]=ix(1590),gi[ix(2748)]=ix(2700
2024-04-25 11:50:59 UTC	1369	IN	Data Raw: 39 32 32 0d 0a 36 35 38 29 5d 3d 69 78 28 36 30 38 29 2c 67 69 5b 69 78 28 32 39 39 32 29 5d 3d 69 78 28 31 39 34 35 29 2c 67 6a 3d 7b 7d 2c 67 6a 5b 69 78 28 37 34 31 29 5d 3d 69 78 28 31 37 34 33 29 2c 67 6a 5b 69 78 28 33 30 34 38 29 5d 3d 69 78 28 31 37 34 35 29 2c 67 6a 5b 69 78 28 31 35 39 37 29 5d 3d 69 78 28 32 34 34 38 29 2c 67 6a 5b 69 78 28 31 31 38 30 29 5d 3d 69 78 28 38 36 36 29 2c 67 6a 5b 69 78 28 32 30 39 30 29 5d 3d 69 78 28 32 31 38 39 29 2c 67 6a 5b 69 78 28 39 30 30 29 5d 3d 69 78 28 31 32 30 30 29 2c 67 6a 5b 69 78 28 32 35 39 32 29 5d 3d 69 78 28 31 30 32 33 29 2c 67 6a 5b 69 78 28 32 37 38 37 29 5d 3d 69 78 28 33 32 35 31 29 2c 67 6a 5b 69 78 28 35 39 37 29 5d 3d 69 78 28 32 34 37 34 29 2c 67 6a 5b 69 78 28 35 34 35 29 5d 3d 69 78 Data Ascii: 922658)]=ix(608),gi[ix(2992)]=ix(1945),gj={},gj[ix(741)]=ix(1743),gj[ix(3048)]=ix(1745),gj[ix(1597)]=ix(2448),gj[ix(1180)]=ix(866),gj[ix(2090)]=ix(2189),gj[ix(900)]=ix(1200),gj[ix(2592)]=ix(1023),gj[ix(2787)]=ix(3251),gj[ix(597)]=ix(2474),gj[ix(545)]=ix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49998	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:50:59 UTC	915	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/425347568:1714044350:Xtnq43eSNgLYqswN5KdEy1gj3tEaeqmPTupcyyEuy9c/879e1e576906672b/c0b6f73c23f6855 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2636 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: c0b6f73c23f6855 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:50:59 UTC	2636	OUT	Data Raw: 76 5f 38 37 39 65 31 65 35 37 36 39 30 36 36 37 32 62 3d 38 47 45 59 74 59 39 59 51 59 4f 59 48 54 6e 6a 54 6e 6f 59 54 63 6b 57 48 34 54 4b 6e 48 6e 50 42 63 72 44 79 6e 65 73 6e 45 79 4b 6c 69 61 6e 4b 79 48 70 69 4b 4e 73 6e 38 59 48 57 6e 33 6e 2d 4f 36 45 59 6e 4e 68 59 6b 33 6e 57 79 69 70 76 6e 70 42 54 34 6e 70 63 69 6d 6e 77 37 37 74 73 6e 69 59 66 6e 58 54 6e 73 24 24 70 72 6e 73 47 32 6d 32 54 66 6b 68 6e 39 63 69 51 2d 37 32 30 65 65 6e 56 38 34 6d 77 55 6a 42 74 70 5a 63 4c 54 67 24 72 70 6e 6e 43 74 33 56 6a 7a 69 70 57 6d 71 4a 52 4c 32 47 74 50 79 66 6e 6b 42 73 76 6c 79 69 35 6e 24 31 30 6a 31 63 6e 50 6a 72 25 32 62 6e 69 73 53 31 72 6e 63 6e 72 6c 6d 48 6e 6e 4e 6e 54 2d 38 72 72 39 2d 6e 6b 56 62 50 79 6e 53 72 79 69 38 71 38 74 51 24 Data Ascii: v_879e1e576906672b=8GEYtY9YQYOYHTnjTnoYTckWH4TKnHnPBcrDynesnEyKlianKyHpiKNsn8YHWn3n-O6EYnNhYk3nWyipvnpBT4npcimnw77tsniYfnXTns$$prnsG2m2Tfkhn9ciQ-720eenV84mwUjBtpZcLTg$rpnnCt3VjzipWmqJRL2GtPyfnkBsvlyi5n$10j1cnPjr%2bnisS1rncnrlmHnnNnT-8rr9-nkVbPynSryi8q8tQ$
2024-04-25 11:51:00 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:51:00 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: V+ZaymEpB1NuVDQt5pRJhGk0f49BL7lYMJ3t/fJCME0/Y41JnpAOV86ijYLjNdBpRiI1L8V/OScBirQRHA+JHSFkzXtXA/ZLKQyd+HGFwNWEjIhH8wpe9aY9+po0/blS68ePN/do30/RAOprJkVqkSEzvymsRmB6u9+YLk68gTrmJsWVDrOcCw4Igsp6Cq6CI2KbobBHjY8/6HsCGt3hW5I/q6XXluXHHgBc6pcJ+4LBd3pHmcrha8p1pS/loncCufbWfqoOxSyTS4jEjjRXNUxko6iCH0v2ax3bsTS1kctfhk6KPziA5LPN03I7HlQvwY5wFIvJepnrH5/Cqhg+WwrKbJ4vMDwpl/an3ljig3eoaOchQ18G9Gp11e6alFydSw6Rprbu8eGv9vGUKcnHUYKoQSWCStzfwtwruwXrMYV5RmG/fd1kzpAxnpXStrgp9XstTku+DFHu6NlB00ZXVKbWKfmHnwGt9bwdoGp5doA=$Ifhqt2gCzL1J5qE1seAaMw== vary: accept-encoding Server: cloudflare CF-RAY: 879e1e609860addb-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:51:00 UTC	591	IN	Data Raw: 33 35 66 0d 0a 69 59 78 35 64 34 79 52 58 55 6c 6d 68 49 65 57 68 5a 6c 69 6b 6f 39 38 63 32 61 4f 6c 6d 2b 44 6c 34 47 61 6e 61 46 69 63 71 65 4a 69 71 53 4c 65 48 78 37 6b 6f 53 70 68 33 4b 71 6d 49 4f 6b 71 48 53 75 73 37 71 64 65 5a 6d 67 66 4b 61 54 6a 38 6d 45 75 4d 43 67 68 4d 71 6a 6d 6f 6a 53 70 71 2b 6c 6b 4b 72 49 72 5a 4b 55 71 72 6d 5a 6e 38 32 77 32 65 50 45 31 72 71 78 34 62 7a 67 75 2b 72 57 6f 4c 72 49 32 39 7a 42 39 65 33 42 73 4d 50 5a 2b 73 2f 38 33 66 37 55 32 77 44 36 38 50 58 30 2b 50 7a 2b 33 2b 44 34 43 38 63 4d 35 4e 76 77 2f 64 7a 76 38 4d 34 59 43 66 6f 61 2b 4e 72 71 48 68 62 75 32 2f 41 59 38 75 58 68 45 2b 4c 36 34 68 6a 34 39 75 30 64 44 77 63 67 4c 67 55 68 4c 77 30 43 4f 7a 73 4d 4c 42 6b 2b 45 78 73 68 4f 52 73 6a 42 51 Data Ascii: 35fiYx5d4yRXUlmhIeWhZliko98c2aOlm+Dl4GanaFicqeJiqSLeHx7koSph3KqmIOkqHSus7qdeZmgfKaTj8mEuMCghMqjmojSpq+lkKrIrZKUqrmZn82w2ePE1rqx4bzgu+rWoLrI29zB9e3BsMPZ+s/83f7U2wD68PX0+Pz+3+D4C8cM5Nvw/dzv8M4YCfoa+NrqHhbu2/AY8uXhE+L64hj49u0dDwcgLgUhLw0COzsMLBk+ExshORsjBQ
2024-04-25 11:51:00 UTC	279	IN	Data Raw: 38 63 45 77 51 61 4e 77 56 4c 47 54 39 45 4f 43 4e 4f 51 6a 4a 47 56 6c 4d 53 55 6c 6b 69 4f 6b 6f 64 4e 79 70 4b 51 69 45 31 51 46 41 67 4d 43 52 4b 58 56 5a 74 57 6a 30 6e 55 56 70 41 62 33 52 31 63 48 4a 4e 61 55 73 34 61 54 59 39 50 47 35 75 61 6d 32 42 62 6c 4e 44 65 59 6c 33 51 57 46 72 53 59 52 68 63 6d 4a 66 61 5a 4a 66 6c 35 64 53 6c 5a 61 51 58 56 74 52 64 5a 31 35 66 33 78 67 70 34 4b 57 65 49 56 7a 67 4a 61 42 69 59 4e 70 6b 4b 32 6b 70 71 4b 77 71 4c 70 77 76 4a 6d 62 64 33 61 55 76 37 53 37 6b 70 32 55 73 38 43 2f 6d 34 4c 4b 72 73 4b 35 75 72 2b 4f 77 49 75 77 31 4e 54 52 69 38 57 5a 31 74 6a 50 34 4e 58 68 6e 65 48 57 35 74 75 30 6f 71 6d 79 71 73 7a 66 34 71 66 52 72 73 58 76 78 63 72 7a 37 4d 6a 6d 78 65 58 4e 2b 66 6e 65 38 4e 33 53 32 Data Ascii: 8cEwQaNwVLGT9EOCNOQjJGVlMSUlkiOkodNypKQiE1QFAgMCRKXVZtWj0nUVpAb3R1cHJNaUs4aTY9PG5uam2BblNDeYl3QWFrSYRhcmJfaZJfl5dSlZaQXVtRdZ15f3xgp4KWeIVzgJaBiYNpkK2kpqKwqLpwvJmbd3aUv7S7kp2Us8C/m4LKrsK5ur+OwIuw1NTRi8WZ1tjP4NXhneHW5tu0oqmyqszf4qfRrsXvxcrz7MjmxeXN+fne8N3S2
2024-04-25 11:51:00 UTC	1369	IN	Data Raw: 31 35 63 33 0d 0a 77 33 51 76 79 41 78 72 6a 46 74 59 52 48 77 45 59 2b 42 62 69 2b 53 62 37 45 43 6a 38 39 50 67 4b 44 76 77 6d 45 69 6b 46 37 53 41 79 43 67 4d 43 38 78 41 53 4d 42 6f 4d 48 54 6f 34 4d 50 34 4f 2f 67 4d 5a 41 79 63 38 50 68 38 4f 51 6a 34 62 44 6b 34 4b 53 78 46 44 46 6c 46 52 58 45 6c 51 4d 6a 68 58 4c 30 6f 7a 5a 57 5a 64 59 6a 49 6a 61 53 70 6e 57 53 64 6d 62 57 38 77 62 55 52 78 4e 47 39 46 4e 48 6c 62 4e 56 42 47 55 30 31 41 63 56 56 55 4e 7a 35 6f 53 48 71 44 52 34 70 2f 66 49 70 5a 53 32 56 64 64 4a 4a 65 6c 31 4f 4f 62 35 78 6b 57 58 4e 6e 64 4a 31 7a 58 35 64 58 57 48 65 63 61 4b 6c 70 70 47 79 45 6d 6f 47 45 66 71 53 4c 6a 49 2b 4a 68 58 69 78 64 70 4f 36 6e 4c 31 39 72 58 79 2f 6d 72 2b 41 77 37 32 33 69 4c 65 47 76 34 75 42 Data Ascii: 15c3w3QvyAxrjFtYRHwEY+Bbi+Sb7ECj89PgKDvwmEikF7SAyCgMC8xASMBoMHTo4MP4O/gMZAyc8Ph8OQj4bDk4KSxFDFlFRXElQMjhXL0ozZWZdYjIjaSpnWSdmbW8wbURxNG9FNHlbNVBGU01AcVVUNz5oSHqDR4p/fIpZS2VddJJel1OOb5xkWXNndJ1zX5dXWHecaKlppGyEmoGEfqSLjI+JhXixdpO6nL19rXy/mr+Aw723iLeGv4uB
2024-04-25 11:51:00 UTC	1369	IN	Data Raw: 54 79 30 42 50 71 46 65 59 4a 45 42 6a 36 47 53 4d 69 32 76 30 61 39 41 62 37 4b 50 37 39 49 41 72 37 2f 67 59 65 41 67 63 4d 4d 6a 49 5a 4f 52 73 79 39 42 2f 35 45 68 63 38 4b 7a 77 63 2f 6b 4a 4a 2b 69 63 34 47 6b 59 73 4c 45 4d 37 4d 68 74 46 55 53 64 4c 44 31 59 6b 4f 6c 45 2b 54 52 6b 35 54 55 73 61 4a 46 31 48 57 69 52 66 55 31 38 65 4e 56 63 75 4c 6b 73 6b 52 30 39 4e 51 57 4a 46 52 6b 5a 5a 65 6b 6f 36 63 6f 42 4e 4f 58 64 6b 67 48 70 6e 57 59 61 4c 64 7a 35 46 56 34 4a 62 53 49 65 47 64 58 56 77 54 35 64 73 63 32 69 54 6c 58 68 57 6e 33 43 41 57 6e 57 4e 64 59 69 64 67 70 57 47 68 32 53 70 6a 4b 4a 73 6f 6e 47 41 67 36 61 67 69 49 32 70 65 48 75 50 65 71 71 32 6c 61 47 2b 72 5a 65 39 70 35 53 34 78 36 4c 47 69 4a 79 74 67 71 76 42 71 63 36 72 70 Data Ascii: Ty0BPqFeYJEBj6GSMi2v0a9Ab7KP79IAr7/gYeAgcMMjIZORsy9B/5Ehc8Kzwc/kJJ+ic4GkYsLEM7MhtFUSdLD1YkOlE+TRk5TUsaJF1HWiRfU18eNVcuLkskR09NQWJFRkZZeko6coBNOXdkgHpnWYaLdz5FV4JbSIeGdXVwT5dsc2iTlXhWn3CAWnWNdYidgpWGh2SpjKJsonGAg6agiI2peHuPeqq2laG+rZe9p5S4x6LGiJytgqvBqc6rp
2024-04-25 11:51:00 UTC	1369	IN	Data Raw: 47 41 50 33 32 46 66 49 67 39 42 51 48 4a 50 41 65 36 76 67 44 39 65 77 74 37 41 30 6b 4b 76 45 4a 4e 53 77 57 4d 42 73 5a 4d 42 4d 33 39 77 77 79 46 69 30 5a 45 68 67 31 52 69 56 4a 53 54 34 49 53 79 73 2b 45 6b 4a 51 52 77 67 50 4f 54 51 33 54 52 4d 75 50 46 73 75 56 43 31 67 56 44 41 39 56 54 4d 6c 49 43 4a 45 53 7a 35 46 55 54 39 41 53 55 74 30 4d 55 74 44 4f 53 78 6f 53 7a 63 35 61 30 68 59 62 33 4a 44 64 57 46 6b 63 6e 69 41 57 6f 32 44 56 6e 35 4f 5a 57 75 52 59 57 78 54 56 49 61 44 55 4a 78 6c 68 32 5a 58 6b 34 36 61 6f 59 39 2f 6d 6d 4a 79 67 4b 4f 6e 68 32 69 61 67 71 2b 74 6a 33 42 7a 6a 4a 47 58 75 4a 53 70 74 48 57 33 64 4a 4b 70 69 61 4f 4e 6c 36 4c 46 77 62 47 6d 79 70 2f 46 6f 49 61 6a 68 71 4c 53 7a 59 71 32 79 4a 66 4e 74 70 4b 76 31 62 Data Ascii: GAP32FfIg9BQHJPAe6vgD9ewt7A0kKvEJNSwWMBsZMBM39wwyFi0ZEhg1RiVJST4ISys+EkJQRwgPOTQ3TRMuPFsuVC1gVDA9VTMlICJESz5FUT9ASUt0MUtDOSxoSzc5a0hYb3JDdWFkcniAWo2DVn5OZWuRYWxTVIaDUJxlh2ZXk46aoY9/mmJygKOnh2iagq+tj3BzjJGXuJSptHW3dJKpiaONl6LFwbGmyp/FoIajhqLSzYq2yJfNtpKv1b
2024-04-25 11:51:00 UTC	1369	IN	Data Raw: 41 52 6f 54 34 52 2f 6b 49 76 67 42 42 77 33 6c 4d 41 34 6b 46 51 73 67 4a 79 41 57 4c 79 33 35 4e 2f 55 66 45 44 41 75 50 68 59 44 4a 52 6f 54 49 68 73 36 4b 6b 59 67 47 42 70 4d 42 45 30 77 4d 43 42 41 4a 6b 77 32 54 78 6f 7a 52 7a 6c 59 4c 6c 6b 78 4f 42 34 34 4d 68 6f 7a 57 53 46 6d 48 30 6b 36 58 47 6c 6f 4c 30 4e 7a 55 45 46 51 5a 30 4e 58 55 32 34 33 53 58 42 62 63 30 4a 4e 51 46 78 58 68 55 56 64 68 6f 52 4c 51 47 4e 6c 55 57 79 49 5a 32 53 4c 61 57 31 52 63 46 5a 79 64 48 64 74 61 32 6d 43 6f 33 31 62 6d 35 32 4a 70 6f 71 44 6c 61 70 67 70 5a 47 75 6e 34 75 64 73 6e 61 74 6d 62 61 6c 75 6e 4b 6f 65 71 65 63 6e 37 6d 62 6e 61 62 44 6d 73 54 42 78 72 4f 48 7a 49 57 46 6e 73 37 44 70 73 53 2b 6a 39 6a 53 79 37 75 61 78 4c 47 76 71 62 57 7a 75 4a 2f Data Ascii: ARoT4R/kIvgBBw3lMA4kFQsgJyAWLy35N/UfEDAuPhYDJRoTIhs6KkYgGBpMBE0wMCBAJkw2TxozRzlYLlkxOB44MhozWSFmH0k6XGloL0NzUEFQZ0NXU243SXBbc0JNQFxXhUVdhoRLQGNlUWyIZ2SLaW1RcFZydHdta2mCo31bm52JpoqDlapgpZGun4udsnatmbalunKoeqecn7mbnabDmsTBxrOHzIWFns7DpsS+j9jSy7uaxLGvqbWzuJ/
2024-04-25 11:51:00 UTC	103	IN	Data Raw: 50 6e 72 4b 65 76 71 44 66 44 74 4a 53 49 33 38 78 4d 49 4f 53 59 34 4f 68 4d 77 39 54 4d 39 49 45 4d 59 49 6a 70 48 49 43 59 2b 48 54 59 73 54 44 78 42 43 7a 73 51 42 7a 56 56 57 51 73 33 52 45 6b 73 4d 6d 42 54 4d 56 46 57 54 57 46 6c 58 55 67 68 61 43 52 49 61 53 5a 70 59 43 4d 71 58 6d 56 76 4c 6e 0d 0a Data Ascii: PnrKevqDfDtJSI38xMIOSY4OhMw9TM9IEMYIjpHICY+HTYsTDxBCzsQBzVVWQs3REksMmBTMVFWTWFlXUghaCRIaSZpYCMqXmVvLn
2024-04-25 11:51:00 UTC	1369	IN	Data Raw: 37 34 32 0d 0a 45 32 54 44 64 6d 64 55 77 31 50 32 67 7a 58 6b 32 43 55 31 39 42 58 6d 4b 46 59 55 70 62 69 34 74 61 67 57 74 79 61 46 47 4a 56 35 4e 52 68 48 70 74 55 35 6c 76 6b 34 79 67 58 49 47 61 6f 33 5a 6a 5a 61 75 6e 5a 49 69 59 65 36 46 70 67 71 4a 74 6f 70 4f 47 67 35 47 30 63 5a 53 55 6b 62 61 65 6f 4c 37 41 73 36 2b 41 74 70 62 43 6c 49 4b 6e 68 38 72 4c 6e 49 71 61 6b 64 47 51 31 4d 79 51 71 38 54 46 79 4d 66 56 71 4e 4c 64 72 4d 37 4f 30 4e 33 51 74 72 66 69 32 65 54 4f 70 74 37 69 72 4f 61 73 35 38 54 42 33 2b 37 6a 74 37 50 4c 7a 75 76 77 34 62 7a 53 41 73 7a 46 39 66 44 61 32 64 33 45 35 65 7a 4a 36 76 6e 44 44 38 6b 46 79 2b 4c 76 42 52 63 52 31 75 59 51 35 2f 41 4f 41 68 76 65 48 64 30 46 49 4f 59 42 47 76 34 66 39 75 59 73 43 68 73 42 Data Ascii: 742E2TDdmdUw1P2gzXk2CU19BXmKFYUpbi4tagWtyaFGJV5NRhHptU5lvk4ygXIGao3ZjZaunZIiYe6FpgqJtopOGg5G0cZSUkbaeoL7As6+AtpbClIKnh8rLnIqakdGQ1MyQq8TFyMfVqNLdrM7O0N3Qtrfi2eTOpt7irOas58TB3+7jt7PLzuvw4bzSAszF9fDa2d3E5ezJ6vnDD8kFy+LvBRcR1uYQ5/AOAhveHd0FIOYBGv4f9uYsChsB
2024-04-25 11:51:00 UTC	496	IN	Data Raw: 68 35 4e 33 4a 4f 57 33 68 77 61 33 4f 44 5a 57 64 69 68 48 4b 48 57 46 65 46 5a 56 35 72 61 59 52 77 59 6f 6c 75 68 32 78 68 63 4a 46 36 6e 59 35 35 59 4a 4f 42 65 58 42 65 62 70 46 65 59 59 57 49 6e 36 6d 4b 72 49 47 67 67 61 6d 43 6f 35 47 6c 6f 70 71 6a 74 36 6d 74 72 37 6d 74 6a 72 75 37 73 4c 48 48 76 62 4e 2f 69 4c 2b 33 75 35 6e 42 75 36 4f 6c 77 37 37 4f 77 5a 4f 31 74 4c 69 34 79 38 61 39 77 4a 75 73 75 62 6a 53 77 72 65 33 78 38 72 41 32 36 4f 6d 77 75 2f 78 38 62 72 67 38 4c 33 47 73 65 54 4f 37 4e 7a 47 79 37 62 50 38 64 6a 31 75 64 6e 56 31 4e 72 35 2b 75 58 57 36 38 4d 4d 39 2f 33 38 2f 50 34 54 43 66 51 46 38 65 6e 31 39 4e 63 62 44 52 4c 72 46 66 58 2b 4a 52 7a 31 42 50 50 6f 4b 75 59 47 48 52 77 44 4c 43 4c 6f 4a 78 30 65 46 41 34 58 4d Data Ascii: h5N3JOW3hwa3ODZWdihHKHWFeFZV5raYRwYoluh2xhcJF6nY55YJOBeXBebpFeYYWIn6mKrIGggamCo5Glopqjt6mtr7mtjru7sLHHvbN/iL+3u5nBu6Olw77OwZO1tLi4y8a9wJusubjSwre3x8rA26Omwu/x8brg8L3GseTO7NzGy7bP8dj1udnV1Nr5+uXW68MM9/38/P4TCfQF8en19NcbDRLrFfX+JRz1BPPoKuYGHRwDLCLoJx0eFA4XM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49999	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:51:00 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/425347568:1714044350:Xtnq43eSNgLYqswN5KdEy1gj3tEaeqmPTupcyyEuy9c/879e1e576906672b/c0b6f73c23f6855 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:51:00 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 11:51:00 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: xHEaHNWlb3FZznM5AtyhVQ==$/OrwBkfOZHUAwRjUsta/1A== Server: cloudflare CF-RAY: 879e1e664cca457d-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:51:00 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50000	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:51:01 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/879e1e576906672b/1714045860060/7eb10584b47ebef15a36e1d2449c633b2e1389ebaeb51aef3011a8b0995049d1/GtfpEtK3Q1gcsHW HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:51:01 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 25 Apr 2024 11:51:01 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-04-25 11:51:01 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 66 72 45 46 68 4c 52 2d 76 76 46 61 4e 75 48 53 52 4a 78 6a 4f 79 34 54 69 65 75 75 74 52 72 76 4d 42 47 6f 73 4a 6c 51 53 64 45 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gfrEFhLR-vvFaNuHSRJxjOy4TieuutRrvMBGosJlQSdEAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-25 11:51:01 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50002	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:51:02 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879e1e576906672b/1714045860065/ZPYzggQx1W7KVLI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:51:02 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:51:02 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879e1e706bc006e2-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:51:02 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2d 00 00 00 28 08 02 00 00 00 e5 b5 e4 7e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR-(~IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50005	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:51:02 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/879e1e576906672b/1714045860065/ZPYzggQx1W7KVLI HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:51:03 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:51:02 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 879e1e73a88353d3-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:51:03 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2d 00 00 00 28 08 02 00 00 00 e5 b5 e4 7e 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR-(~IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50009	104.17.3.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:51:02 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/425347568:1714044350:Xtnq43eSNgLYqswN5KdEy1gj3tEaeqmPTupcyyEuy9c/879e1e576906672b/c0b6f73c23f6855 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29239 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: c0b6f73c23f6855 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:51:02 UTC	16384	OUT	Data Raw: 76 5f 38 37 39 65 31 65 35 37 36 39 30 36 36 37 32 62 3d 38 47 45 59 4a 54 69 6c 66 39 57 7a 45 54 78 47 4b 44 6b 70 24 79 73 24 6b 6d 6e 33 6e 6b 4e 59 73 71 57 54 77 6e 49 59 69 47 6e 6c 6e 55 54 6e 6b 79 59 69 50 6e 65 59 72 66 6b 4b 6e 31 59 73 63 65 32 57 6e 4c 34 57 59 6e 43 59 59 69 6d 6e 39 63 6e 68 58 54 4e 69 54 68 6e 75 59 72 32 6e 57 59 73 70 6e 6c 52 32 67 59 6e 75 6e 48 57 30 6c 33 4c 45 54 65 61 36 65 68 57 69 53 6e 73 47 69 48 76 6e 73 47 66 66 36 72 6e 6b 65 45 6e 6b 57 63 32 59 6b 30 6e 54 47 6e 72 51 45 6e 5a 58 39 50 70 45 47 6e 62 5a 73 6e 4e 67 48 31 44 36 73 6e 73 4a 69 31 63 77 4b 67 66 32 39 6c 4a 43 4a 46 4d 59 6e 65 66 59 6e 7a 33 44 73 63 53 36 57 6e 4c 66 35 54 70 6e 2d 70 31 50 2d 5a 5a 43 33 35 70 4e 4c 38 71 33 6d 72 6f 74 Data Ascii: v_879e1e576906672b=8GEYJTilf9WzETxGKDkp$ys$kmn3nkNYsqWTwnIYiGnlnUTnkyYiPneYrfkKn1Ysce2WnL4WYnCYYimn9cnhXTNiThnuYr2nWYspnlR2gYnunHW0l3LETea6ehWiSnsGiHvnsGff6rnkeEnkWc2Yk0nTGnrQEnZX9PpEGnbZsnNgH1D6snsJi1cwKgf29lJCJFMYnefYnz3DscS6WnLf5Tpn-p1P-ZZC35pNL8q3mrot
2024-04-25 11:51:02 UTC	12855	OUT	Data Raw: 4e 4d 67 34 4e 47 69 6e 6b 63 6e 32 6e 65 6e 6b 6e 4e 59 72 63 69 52 69 4e 6e 6d 2d 43 63 4b 75 67 39 6e 36 6e 48 66 6e 30 6e 38 59 54 47 6e 46 6e 6e 79 4b 70 79 4e 6e 4b 79 48 32 69 72 6e 4c 79 54 57 69 35 6e 76 79 6b 34 6e 66 6e 57 63 72 61 6e 37 6e 54 63 4b 44 69 76 6e 31 6e 70 44 69 32 6e 79 47 6e 79 69 33 6e 6b 54 69 6e 69 56 63 38 63 6b 6e 69 24 6e 6b 53 4b 70 6e 47 32 64 59 6b 6e 69 4b 59 70 6e 6b 6c 69 32 66 57 52 73 65 69 78 6e 31 66 73 70 69 6c 6e 6a 59 6b 6e 6e 6f 59 33 59 70 47 35 4b 59 50 61 6d 57 6b 42 6e 53 45 72 79 69 71 36 56 59 38 79 69 7a 6e 50 42 6e 45 69 69 6e 37 59 72 63 69 4b 59 70 74 6b 6e 69 7a 6e 6e 79 64 47 6e 6a 4d 36 79 72 59 69 73 6e 72 6e 48 34 6e 4b 7a 48 79 6b 6c 6e 4f 53 57 6e 70 66 69 6f 62 73 6e 38 73 69 63 6e 4f 59 73 Data Ascii: NMg4NGinkcn2nenknNYrciRiNnm-CcKug9n6nHfn0n8YTGnFnnyKpyNnKyH2irnLyTWi5nvyk4nfnWcran7nTcKDivn1npDi2nyGnyi3nkTiniVc8ckni$nkSKpnG2dYkniKYpnkli2fWRseixn1fspilnjYknnoY3YpG5KYPamWkBnSEryiq6VY8yiznPBnEiin7YrciKYptkniznnydGnjM6yrYisnrnH4nKzHyklnOSWnpfiobsn8sicnOYs
2024-04-25 11:51:03 UTC	350	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 11:51:03 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: ghHk02MhMEXQkIem6w3AmMSQ1tYQkyRixRohXh9douLS3CBqcm1NxoKCTcRgp3TY$rqdzn0KvSvfSU/aEXoeerQ== vary: accept-encoding Server: cloudflare CF-RAY: 879e1e73edf3ad98-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:51:03 UTC	784	IN	Data Raw: 33 30 39 0d 0a 69 59 78 35 64 34 31 72 59 59 68 6c 6c 48 47 4f 61 34 6c 72 5a 57 39 70 54 35 32 51 67 4a 47 68 6c 49 52 32 57 4b 47 49 64 35 4b 65 6f 36 43 50 62 4a 6d 47 6d 34 2b 52 71 4a 61 50 74 70 61 43 72 34 61 65 76 37 75 34 6a 37 36 30 67 36 4a 38 70 5a 36 31 67 72 54 42 6d 71 32 34 6e 61 57 63 71 73 53 66 77 4e 66 4a 70 63 75 76 79 36 33 54 73 65 43 31 33 62 66 6c 74 5a 36 67 74 73 57 6a 70 63 50 6d 77 61 33 45 34 74 72 6a 33 76 50 49 38 66 54 5a 7a 73 58 56 2b 38 2f 4e 41 76 6e 4e 41 67 62 6c 42 74 7a 68 39 77 4c 66 31 4d 51 4e 35 4e 73 51 45 2b 62 65 7a 41 48 72 47 76 6b 62 37 75 66 78 47 76 62 71 44 4f 48 36 2f 68 33 59 2f 66 59 45 46 78 72 6e 36 65 54 36 48 66 44 70 43 53 44 73 42 41 30 51 47 51 30 4e 4d 67 73 65 4f 68 2f 2b 4d 53 30 76 4c 69 Data Ascii: 309iYx5d41rYYhllHGOa4lrZW9pT52QgJGhlIR2WKGId5Keo6CPbJmGm4+RqJaPtpaCr4aev7u4j760g6J8pZ61grTBmq24naWcqsSfwNfJpcuvy63TseC13bfltZ6gtsWjpcPmwa3E4trj3vPI8fTZzsXV+8/NAvnNAgblBtzh9wLf1MQN5NsQE+bezAHrGvkb7ufxGvbqDOH6/h3Y/fYEFxrn6eT6HfDpCSDsBA0QGQ0NMgseOh/+MS0vLi
2024-04-25 11:51:03 UTC	1369	IN	Data Raw: 63 38 34 0d 0a 4c 47 39 31 71 6d 74 6c 74 61 75 73 35 4f 7a 76 4d 6e 4b 75 75 53 75 76 39 7a 49 73 4d 71 6e 34 39 72 69 79 62 6a 6b 30 71 6a 62 76 2b 69 73 30 4d 2f 44 72 50 69 34 74 2f 6f 41 75 64 6a 59 38 4e 66 32 30 4f 4c 65 38 2b 6e 34 77 39 67 4f 41 4f 72 36 37 77 6b 4c 45 74 45 4b 30 63 73 46 43 39 76 79 48 52 54 64 32 51 2f 30 2f 42 54 6b 45 64 72 6b 46 69 63 66 4b 2b 51 76 2b 69 63 62 45 42 58 79 39 68 41 44 47 78 41 39 44 51 78 41 4c 43 41 54 4e 7a 62 32 4a 55 55 43 47 51 4a 45 47 45 63 65 4c 43 30 2f 4f 6b 4a 49 52 30 39 43 45 52 52 55 4c 79 74 48 46 52 77 39 4f 54 39 42 59 46 51 63 56 54 64 53 58 47 42 58 53 30 52 48 61 53 70 51 4f 30 64 70 4d 43 6c 70 61 44 68 33 64 48 4a 54 4d 56 79 41 55 48 56 6c 65 33 64 65 58 6e 31 42 58 6e 6c 63 6a 6b 64 Data Ascii: c84LG91qmtltaus5OzvMnKuuSuv9zIsMqn49riybjk0qjbv+is0M/DrPi4t/oAudjY8Nf20OLe8+n4w9gOAOr67wkLEtEK0csFC9vyHRTd2Q/0/BTkEdrkFicfK+Qv+icbEBXy9hADGxA9DQxALCATNzb2JUUCGQJEGEceLC0/OkJIR09CERRULytHFRw9OT9BYFQcVTdSXGBXS0RHaSpQO0dpMClpaDh3dHJTMVyAUHVle3deXn1BXnlcjkd
2024-04-25 11:51:03 UTC	1369	IN	Data Raw: 71 47 30 32 4e 62 52 70 4d 76 64 33 72 4f 65 6f 4c 75 73 73 2b 62 6c 31 74 54 71 76 4c 6e 48 71 64 72 48 32 72 33 46 7a 76 57 2b 36 63 37 44 2b 2b 6e 7a 36 64 6e 37 74 75 45 44 34 74 34 47 38 50 7a 69 43 63 6e 46 34 4d 54 4f 32 74 34 54 2f 64 37 79 43 65 73 42 38 74 44 5a 31 66 54 55 33 53 45 42 49 77 37 75 2f 74 7a 68 49 50 41 71 2b 51 51 72 49 67 45 4e 34 75 38 66 4a 54 51 45 46 77 4c 33 4a 2f 6f 6e 39 68 67 4e 38 52 68 44 44 78 34 31 4a 55 42 44 4d 77 55 4a 50 79 6b 6d 48 42 41 51 4b 69 74 53 4a 79 55 6a 52 56 4a 55 4e 7a 49 58 57 6c 56 58 4e 43 34 35 4c 6c 59 6d 56 79 68 56 5a 79 70 43 51 69 5a 5a 50 6a 6c 52 52 32 4e 6c 51 7a 41 31 5a 45 74 37 52 58 70 2f 4f 6d 35 41 55 55 4e 57 66 58 68 63 57 59 42 70 65 49 43 47 61 6b 64 73 51 32 35 75 55 47 5a 78 Data Ascii: qG02NbRpMvd3rOeoLuss+bl1tTqvLnHqdrH2r3FzvW+6c7D++nz6dn7tuED4t4G8PziCcnF4MTO2t4T/d7yCesB8tDZ1fTU3SEBIw7u/tzhIPAq+QQrIgEN4u8fJTQEFwL3J/on9hgN8RhDDx41JUBDMwUJPykmHBAQKitSJyUjRVJUNzIXWlVXNC45LlYmVyhVZypCQiZZPjlRR2NlQzA1ZEt7RXp/Om5AUUNWfXhcWYBpeICGakdsQ25uUGZx
2024-04-25 11:51:03 UTC	473	IN	Data Raw: 61 78 7a 4a 69 65 6f 4e 47 36 33 75 4c 64 32 4c 2f 70 71 74 6a 46 7a 36 6e 61 35 4e 76 68 7a 4f 37 78 74 75 48 48 77 2f 48 4a 73 2b 7a 70 7a 63 72 78 34 4f 4f 38 31 75 50 49 39 4d 72 56 79 2b 37 63 41 2b 63 53 7a 63 55 57 38 52 55 48 47 67 2f 32 31 77 76 73 48 42 66 59 36 67 73 44 34 50 45 41 41 50 37 32 41 79 73 43 37 43 66 6d 41 66 6f 4c 49 68 34 7a 38 68 41 75 49 76 6f 71 4f 66 59 59 50 79 6b 34 52 44 63 43 46 66 67 6f 48 6b 4d 64 51 52 77 47 49 55 6b 73 47 77 39 51 51 6b 51 51 54 56 45 76 46 45 30 74 54 31 38 30 48 43 73 69 4d 6b 4e 6b 4a 45 4d 31 4d 6b 42 64 58 69 63 70 61 6d 41 74 53 6d 46 6c 4c 57 46 43 55 54 46 30 56 46 56 5a 64 30 34 2b 66 6e 74 53 52 49 47 41 64 48 65 41 53 55 56 47 68 45 78 4b 66 6f 74 37 59 6f 4f 52 6a 32 36 48 6c 56 69 59 56 Data Ascii: axzJieoNG63uLd2L/pqtjFz6na5NvhzO7xtuHHw/HJs+zpzcrx4OO81uPI9MrVy+7cA+cSzcUW8RUHGg/21wvsHBfY6gsD4PEAAP72AysC7CfmAfoLIh4z8hAuIvoqOfYYPyk4RDcCFfgoHkMdQRwGIUksGw9QQkQQTVEvFE0tT180HCsiMkNkJEM1MkBdXicpamAtSmFlLWFCUTF0VFVZd04+fntSRIGAdHeASUVGhExKfot7YoORj26HlViYV
2024-04-25 11:51:03 UTC	1359	IN	Data Raw: 35 34 38 0d 0a 53 33 39 48 44 63 69 49 79 41 37 48 69 4d 6e 47 44 67 69 4b 30 4d 65 4a 69 74 43 52 43 41 77 53 6b 51 7a 4e 69 68 49 4e 6a 67 74 4c 6a 59 38 56 6b 38 38 59 6a 39 6f 4d 6a 51 2b 62 55 64 4e 59 54 30 74 52 33 42 43 59 45 6c 42 52 6b 30 34 66 48 74 5a 50 6a 31 77 55 6e 70 34 66 59 4e 58 57 58 5a 58 58 56 65 4c 64 31 64 62 53 5a 42 38 68 6f 4e 2f 6b 6b 70 31 63 59 39 59 62 31 78 52 6f 58 6c 5a 6a 4b 53 65 6c 33 65 65 66 6c 79 56 6d 70 31 37 62 33 71 68 63 62 43 74 73 70 43 4e 6d 4c 56 78 64 6e 4f 52 71 4c 65 54 6d 4b 71 4f 66 71 4f 75 6e 4c 56 37 79 4b 75 45 6f 4c 71 6e 72 6f 65 65 79 4a 43 64 78 6f 33 43 6f 70 58 62 6b 71 71 73 33 38 32 79 74 75 4b 57 70 62 69 34 77 65 4b 2b 34 4e 76 4e 77 4b 76 61 76 75 48 67 76 2f 43 78 31 65 4c 5a 39 38 76 Data Ascii: 548S39HDciIyA7HiMnGDgiK0MeJitCRCAwSkQzNihINjgtLjY8Vk88Yj9oMjQ+bUdNYT0tR3BCYElBRk04fHtZPj1wUnp4fYNXWXZXXVeLd1dbSZB8hoN/kkp1cY9Yb1xRoXlZjKSel3eeflyVmp17b3qhcbCtspCNmLVxdnORqLeTmKqOfqOunLV7yKuEoLqnroeeyJCdxo3CopXbkqqs382ytuKWpbi4weK+4NvNwKvavuHgv/Cx1eLZ98v
2024-04-25 11:51:03 UTC	598	IN	Data Raw: 32 34 66 0d 0a 67 51 34 38 76 30 75 4e 41 48 36 44 45 44 36 41 44 59 38 43 51 55 55 53 41 4e 4f 55 43 51 75 51 52 35 41 46 41 30 6a 53 30 6c 4c 4e 7a 59 6f 50 31 59 76 54 52 70 52 4f 46 42 61 50 44 77 38 51 32 6b 72 50 45 35 74 51 57 5a 67 53 6b 70 31 55 6e 56 78 53 7a 4e 72 52 6b 56 70 66 6e 35 2b 53 30 4e 57 65 31 68 6c 67 46 4e 32 68 30 70 6a 65 6f 70 78 51 33 39 4a 67 57 32 54 53 59 4a 32 56 70 70 56 6a 70 6d 4d 6c 70 6c 63 70 46 61 66 68 33 31 32 64 33 61 4c 61 71 79 71 68 32 36 72 6d 34 31 79 67 37 4f 76 73 49 75 33 73 6f 35 36 75 6e 32 50 77 62 4f 73 74 38 43 33 78 59 53 6d 79 4c 53 72 7a 4d 4f 37 6e 6f 6e 51 76 63 6d 71 79 71 79 6a 73 4e 53 77 79 36 72 66 79 37 33 51 7a 4f 4c 69 32 4c 36 67 30 39 37 47 36 62 32 32 36 75 6a 4f 72 72 48 6a 34 65 54 Data Ascii: 24fgQ48v0uNAH6DED6ADY8CQUUSANOUCQuQR5AFA0jS0lLNzYoP1YvTRpROFBaPDw8Q2krPE5tQWZgSkp1UnVxSzNrRkVpfn5+S0NWe1hlgFN2h0pjeopxQ39JgW2TSYJ2VppVjpmMlplcpFafh312d3aLaqyqh26rm41yg7OvsIu3so56un2PwbOst8C3xYSmyLSrzMO7nonQvcmqyqyjsNSwy6rfy73QzOLi2L6g097G6b226ujOrrHj4eT
2024-04-25 11:51:03 UTC	514	IN	Data Raw: 31 66 62 0d 0a 72 62 6a 54 79 74 72 78 74 64 66 7a 74 39 76 69 34 50 77 47 39 4e 38 43 39 67 54 59 39 2f 30 46 36 63 37 37 46 42 58 70 36 67 66 54 38 77 37 70 39 74 76 78 31 74 63 58 47 52 45 52 33 50 73 53 41 53 41 67 35 53 55 6c 2f 65 30 71 42 2f 6e 38 4e 53 63 6d 37 42 49 34 44 44 59 53 47 7a 34 71 2f 43 73 4b 47 53 49 32 42 76 77 34 42 6b 46 46 4f 42 38 72 4f 79 4a 41 43 43 70 49 45 6b 77 4e 57 42 67 36 57 46 67 62 56 45 6c 49 4d 44 41 33 48 53 31 6e 47 54 4a 6b 5a 32 55 65 57 6b 6c 62 61 47 4d 79 52 30 4a 49 61 69 6c 53 63 6d 5a 31 55 6b 39 4d 61 54 31 4b 4f 56 68 69 62 58 55 35 65 48 74 72 66 6d 64 4d 5a 45 2b 49 5a 32 56 7a 67 46 43 54 55 56 57 4a 68 5a 6c 30 65 32 78 36 56 71 4a 7a 6b 31 35 64 66 6d 4a 37 59 35 79 43 61 36 4e 38 65 49 4b 4d 6a 6e Data Ascii: 1fbrbjTytrxtdfzt9vi4PwG9N8C9gTY9/0F6c77FBXp6gfT8w7p9tvx1tcXGRER3PsSASAg5SUl/e0qB/n8NScm7BI4DDYSGz4q/CsKGSI2Bvw4BkFFOB8rOyJACCpIEkwNWBg6WFgbVElIMDA3HS1nGTJkZ2UeWklbaGMyR0JIailScmZ1Uk9MaT1KOVhibXU5eHtrfmdMZE+IZ2VzgFCTUVWJhZl0e2x6VqJzk15dfmJ7Y5yCa6N8eIKMjn
2024-04-25 11:51:03 UTC	259	IN	Data Raw: 66 64 0d 0a 48 64 47 31 34 4c 32 78 63 62 46 42 79 64 6e 78 68 63 56 64 73 56 7a 32 43 57 32 70 44 58 32 4a 68 67 49 57 4a 62 55 70 6f 62 6d 6d 49 55 34 68 73 6a 70 4b 59 66 59 31 7a 69 48 42 5a 58 71 53 4f 6c 58 65 63 6b 5a 64 6d 69 6e 6d 72 70 62 42 6e 70 4a 4f 31 6b 4b 65 4c 6b 70 6d 71 64 36 53 48 72 58 71 30 6c 4c 2b 39 6f 73 57 36 6d 70 71 56 79 61 75 47 6c 38 2b 34 6f 70 33 54 76 49 71 75 78 36 65 32 75 64 66 53 33 4b 7a 53 73 38 69 32 6d 61 4b 65 75 75 54 63 6e 73 53 69 35 72 6d 6a 70 65 58 78 76 65 44 70 38 4d 48 6e 32 4f 2b 72 73 64 71 79 78 76 7a 6f 73 74 72 33 30 2f 44 6c 42 76 33 54 35 50 76 66 35 74 37 37 42 76 7a 78 43 2f 50 79 35 77 66 55 42 51 49 59 45 63 37 54 31 51 73 4f 41 69 51 66 2f 75 33 65 43 4f 4c 79 34 65 6b 68 46 69 50 2b 34 76 Data Ascii: fdHdG14L2xcbFBydnxhcVdsVz2CW2pDX2JhgIWJbUpobmmIU4hsjpKYfY1ziHBZXqSOlXeckZdminmrpbBnpJO1kKeLkpmqd6SHrXq0lL+9osW6mpqVyauGl8+4op3TvIqux6e2udfS3KzSs8i2maKeuuTcnsSi5rmjpeXxveDp8MHn2O+rsdqyxvzostr30/DlBv3T5Pvf5t77BvzxC/Py5wfUBQIYEc7T1QsOAiQf/u3eCOLy4ekhFiP+4v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50010	104.17.2.184	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:51:04 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/425347568:1714044350:Xtnq43eSNgLYqswN5KdEy1gj3tEaeqmPTupcyyEuy9c/879e1e576906672b/c0b6f73c23f6855 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 11:51:04 UTC	377	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 11:51:04 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: jliRMvLHDh7NYEAJJA8rtw==$OZRrl/a6NN5tu8PTagdhaw== cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 879e1e7daabb7bc0-ATL alt-svc: h3=":443"; ma=86400
2024-04-25 11:51:04 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50011	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:51:05 UTC	2139	OUT	POST /o/OneNote.ashx?perfTag=GetChanges_2 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 2429 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-ServerSideRendering: RenderingFull X-WacFrontEnd: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-Key: 6sX7dsnZn2zRHhIbdzNyxhnwG9HUuVquiAQsxG+qIt8=;2U2URVnIl1DPU+CFqlCmJydUxUs+vy+YKdyk0CSJW9A=,638496425990039955 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wDnJe8uB5CPVZQpejreRPEGcn3RDuAetYSMjukZV673pJJ4yHZzfkChcWUIEWLY15zc8QLe9_O0WhCZOdGwq7e7d8w1xXV-_sFiVb17wuG2V8na0btiI_nX4zw7nlbxRhLuVHZk0UReKk-J6r8bBx6g X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 X-AccessTokenTtl: 1714477794176 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS13 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=WQvHP%2FnA4E%2BGbOPnCbaA4g.0.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FD9982686F6D14861!580&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdorigin=Other&wdhostclicktime=1714045788787&jsapi=1&jsapiver=v1&newsession=1&corrid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&usid=999fd23f-8bcf-4a35-ae88-d7b9098dec79&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714045810498_0.3803623050777303
2024-04-25 11:51:05 UTC	2429	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 32 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 44 65 70 65 6e 64 65 6e 74 4f 6e 22 3a 30 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 53 65 73 73 69 6f 6e 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 4d 61 63 68 69 6e 65 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 43 6c 75 73 74 65 72 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 53 65 73 73 69 6f 6e 48 61 73 42 61 63 6b 75 70 22 3a 66 61 6c 73 65 2c 22 57 61 63 69 69 45 6e 61 62 6c 65 64 52 65 71 75 65 73 74 73 22 3a 30 2c 22 53 65 74 74 69 6e 67 73 52 6f 75 74 65 64 54 6f 53 65 72 76 65 72 22 3a 30 2c 22 4c 69 6e 65 61 67 65 49 64 22 3a 6e 75 6c 6c 2c 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 Data Ascii: {"Mode":1,"srs":[[2,{"OperationId":1,"DependentOn":0,"LocalCobaltSessionId":null,"LocalCobaltMachineId":null,"LocalCobaltClusterId":null,"LocalCobaltSessionHasBackup":false,"WaciiEnabledRequests":0,"SettingsRoutedToServer":0,"LineageId":null,"FileId":"WOP
2024-04-25 11:51:06 UTC	1338	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 1066 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-ROUTED-TO-TARGET-SERVER-PATH: WAC_WFE_AFFINITY_TARGET_URL X-CorrelationId: 742b235e-5e4e-427b-9430-99ae92205cc5 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-CorrelationId: 742b235e-5e4e-427b-9430-99ae92205cc5 X-UserSessionId: 999fd23f-8bcf-4a35-ae88-d7b9098dec79 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A294 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A27A X-WacFrontEnd: BL6PEPF0001A294 X-Powered-By: ARR/3.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 5364300D195E45B6BE1EBB08ED7F7CB7 Ref B: ATL331000108029 Ref C: 2024-04-25T11:51:05Z Date: Thu, 25 Apr 2024 11:51:05 GMT Connection: close
2024-04-25 11:51:06 UTC	19	IN	Data Raw: ef bb bf 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 32 Data Ascii: {"Responses":[[2
2024-04-25 11:51:06 UTC	1047	IN	Data Raw: 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 2c 22 50 61 72 74 4d 65 72 67 65 49 6e 66 6f 22 3a 30 2c 22 52 6f 6f 74 43 65 6c 6c 49 64 22 3a 22 6e 75 6c 6c 22 2c 22 41 76 61 69 6c 61 62 6c 65 46 69 6c 65 41 63 63 65 73 73 22 3a 32 2c 22 52 65 76 69 73 69 6f 6e 4c 69 73 74 22 3a 5b 5d 2c 22 50 69 6e 52 65 76 69 73 69 6f 6e 46 6f 72 41 75 67 4c 6f 6f 70 52 65 73 70 6f 6e 73 65 22 3a 30 2c 22 43 6c 69 65 6e 74 4b 6e 6f 77 6c 65 64 67 65 22 3a 22 68 41 41 6d 41 69 41 41 39 6a 56 36 4d 6d 45 48 46 45 53 57 68 6c 48 70 41 47 5a 36 54 61 51 41 65 43 Data Ascii: ,{"OperationId":1,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":"","PartMergeInfo":0,"RootCellId":"null","AvailableFileAccess":2,"RevisionList":[],"PinRevisionForAugLoopResponse":0,"ClientKnowledge":"hAAmAiAA9jV6MmEHFESWhlHpAGZ6TaQAeC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50012	52.108.9.12	443	2004	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 11:51:06 UTC	722	OUT	GET /o/OneNote.ashx?perfTag=GetChanges_2 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=e7c34fb1-c5a2-47d9-a540-e5af807bf652&&ODSP-ODWEB-ODCF&153; wla42=; E=P:9ujm0R1l3Ig=:7UMMemLIxxKMvZIN+EAISaeGW2qss0JclU6kb0JELuc=:F; xidseq=3; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1714045810498_0.3803623050777303
2024-04-25 11:51:06 UTC	1075	IN	HTTP/1.1 503 Service Unavailable Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c7591b53-9ef9-45e1-abee-fd1a3c897f5f X-UserSessionId: c7591b53-9ef9-45e1-abee-fd1a3c897f5f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00012CE8 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00012CE8 X-WacFrontEnd: SN3PEPF00012CE8 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 253855F8AC544C8E88A31BC505152954 Ref B: ATL331000102033 Ref C: 2024-04-25T11:51:06Z Date: Thu, 25 Apr 2024 11:51:06 GMT Connection: close
2024-04-25 11:51:06 UTC	33	IN	Data Raw: 31 62 0d 0a 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 0d 0a Data Ascii: 1bThe service is unavailable.
2024-04-25 11:51:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	13:49:43
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:49:45
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1948,i,4432349157033959140,1943977196617917275,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:49:48
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Chrome DOM: 5.7	OCR Text: : Verifying... CLOUDFLARE Microsoft
Source: Chrome DOM: 4.13	OCR Text: : Verifying.. CLOUDFLARE Microsoft
Source: Chrome DOM: 6.10	OCR Text: Verifying... CLOUDFLARE Microsoft

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/uk8wm/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7oeo1/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/7oeo1/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/4s955/0x4AAAAAAAYJtDaaWRzo6gAt/auto/normal	HTTP Parser: No favicon

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: file.documentoneviews.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: file.documentoneviews.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: file.documentoneviews.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: file.documentoneviews.xyz

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.204.65
Source: unknown	TCP traffic detected without corresponding DNS query: 23.47.204.65
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: 1drv.ms
Source: global traffic	DNS traffic detected: DNS query: onedrive.live.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: common.online.office.com
Source: global traffic	DNS traffic detected: DNS query: onenoteonline.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: messaging.engagement.office.com
Source: global traffic	DNS traffic detected: DNS query: spoprod-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: www.onenote.com
Source: global traffic	DNS traffic detected: DNS query: augloop.office.com
Source: global traffic	DNS traffic detected: DNS query: storage.live.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: file.documentoneviews.xyz
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Windows Analysis Report
https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS