Edit tour

Windows Analysis Report
https://site-stlp3.powerappsportals.com/

Overview

General Information

Sample URL:	https://site-stlp3.powerappsportals.com/
Analysis ID:	1431935
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1976,i,9534878376555673015,4045820380616337241,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://site-stlp3.powerappsportals.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://site-stlp3.powerappsportals.com/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://site-stlp3.powerappsportals.com/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on image similarity)

Source: https://site-stlp3.powerappsportals.com/

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://site-stlp3.powerappsportals.com/	Matcher: Template: microsoft matched
Source: https://site-stlp3.powerappsportals.com/	Matcher: Template: microsoft matched

Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: Form action: https://usebasin.com/f/7243e1a5b734 powerappsportals usebasin
Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: Form action: https://usebasin.com/f/7243e1a5b734 powerappsportals usebasin

Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0&sso_reload=true#	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#	HTTP Parser: Number of links: 0
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f...	HTTP Parser: Number of links: 0

Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: Title: Home does not match URL
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0&sso_reload=true#	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: <input type="password" .../> found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0&sso_reload=true#	HTTP Parser: <input type="password" .../> found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#	HTTP Parser: <input type="password" .../> found

Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: No favicon
Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: No favicon

Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: No <meta name="author".. found
Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0&sso_reload=true#	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0&sso_reload=true#	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#	HTTP Parser: No <meta name="author".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f	HTTP Parser: No <meta name="author".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f	HTTP Parser: No <meta name="author".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f	HTTP Parser: No <meta name="author".. found

Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://site-stlp3.powerappsportals.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0&sso_reload=true#	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0&sso_reload=true#	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#	HTTP Parser: No <meta name="copyright".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f...	HTTP Parser: No <meta name="copyright".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f...	HTTP Parser: No <meta name="copyright".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.26.118.82:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.26.118.82:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 184.26.118.82
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb497.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.bundle-6e25944320.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-style.bundle-0d8f841437.css HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/web.png HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/close.png HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry.bundle-02a4a6c393.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-6e937472b9.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/web.png HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/img/close.png HTTP/1.1Host: content.powerapps.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf.bundle-d31fe485ce.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/app.BootstrapV5.bundle-7aa0129ad7.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/main.4ee557b783.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/284.48b2b8c307.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/706.48a99f6c78.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/997.dc24e4c793.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/919.9b534cdc48.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/137.8295ee7e5a.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/73.fa3cf8a2fa.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/980.de82a8d903.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/372.1490f8bbd1.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /resource/powerappsportal/controls/host/741.64da153a30.chunk.js HTTP/1.1Host: content.powerapps.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://site-stlp3.powerappsportals.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: site-stlp3.powerappsportals.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: content.powerapps.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: passwordreset.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com

Source: chromecache_191.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_114.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_170.2.dr, chromecache_131.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_170.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1
Source: chromecache_126.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_194.2.dr	String found in binary or memory: http://malsup.com/jquery/form/
Source: chromecache_131.2.dr	String found in binary or memory: http://medialize.github.io/URI.js
Source: chromecache_194.2.dr	String found in binary or memory: http://timeago.yarp.com/
Source: chromecache_194.2.dr	String found in binary or memory: http://www.coolite.com/
Source: chromecache_194.2.dr	String found in binary or memory: http://www.coolite.com/).
Source: chromecache_194.2.dr	String found in binary or memory: http://www.datejs.com/
Source: chromecache_194.2.dr	String found in binary or memory: http://www.datejs.com/license/.
Source: chromecache_194.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_126.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_120.2.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.
Source: chromecache_120.2.dr	String found in binary or memory: https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.
Source: chromecache_110.2.dr	String found in binary or memory: https://account.live.com/resetpassword.aspx
Source: chromecache_120.2.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb4
Source: chromecache_120.2.dr	String found in binary or memory: https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.bundle-6e25944320.cs
Source: chromecache_197.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceObserver/PerformanceObserver
Source: chromecache_197.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming
Source: chromecache_200.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_123.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_123.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_179.2.dr, chromecache_145.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_131.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker
Source: chromecache_170.2.dr	String found in binary or memory: https://github.com/Eonasdan/bootstrap-datetimepicker/
Source: chromecache_197.2.dr	String found in binary or memory: https://github.com/Microsoft/ApplicationInsights-JS#example-setting-cloud-role-name
Source: chromecache_126.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/gjunge/rateit.js
Source: chromecache_194.2.dr	String found in binary or memory: https://github.com/malsup/form
Source: chromecache_179.2.dr, chromecache_145.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_114.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_179.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_109.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_120.2.dr	String found in binary or memory: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-8
Source: chromecache_109.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_166.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_120.2.dr	String found in binary or memory: https://site-stlp3.prod-eu-il0101-1.eur.powerappsmtportals.com
Source: chromecache_131.2.dr	String found in binary or memory: https://underscorejs.org
Source: chromecache_120.2.dr	String found in binary or memory: https://usebasin.com/f/7243e1a5b734

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.26.118.82:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.26.118.82:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@18/171@20/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1976,i,9534878376555673015,4045820380616337241,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://site-stlp3.powerappsportals.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1976,i,9534878376555673015,4045820380616337241,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_200.2.dr, chromecache_128.2.dr, chromecache_117.2.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_200.2.dr, chromecache_128.2.dr, chromecache_117.2.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://site-stlp3.powerappsportals.com/	100%	Avira URL Cloud	phishing
https://site-stlp3.powerappsportals.com/	0%	Virustotal		Browse
https://site-stlp3.powerappsportals.com/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	0%	Virustotal	Browse
part-0013.t-0009.t-msedge.net	0%	Virustotal	Browse
cs1100.wpc.omegacdn.net	0%	Virustotal	Browse
aadcdn.msftauth.net	0%	Virustotal	Browse
site-stlp3.powerappsportals.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	0%	Avira URL Cloud	safe
http://www.datejs.com/	0%	Avira URL Cloud	safe
http://www.datejs.com/license/.	0%	Avira URL Cloud	safe
http://medialize.github.io/URI.js	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
http://www.datejs.com/	0%	Virustotal		Browse
http://www.coolite.com/).	0%	Avira URL Cloud	safe
http://www.datejs.com/license/.	0%	Virustotal		Browse
http://www.coolite.com/	0%	Avira URL Cloud	safe
https://site-stlp3.prod-eu-il0101-1.eur.powerappsmtportals.com	0%	Avira URL Cloud	safe
http://medialize.github.io/URI.js	0%	Virustotal		Browse
https://usebasin.com/f/7243e1a5b734	0%	Avira URL Cloud	safe
http://www.coolite.com/).	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	0%	Virustotal		Browse
http://www.coolite.com/	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
part-0013.t-0009.t-msedge.net	13.107.213.41	true	false	0%, Virustotal, Browse	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	0%, Virustotal, Browse	unknown
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	162.222.107.23	true	false	0%, Virustotal, Browse	unknown
www.google.com	192.178.50.36	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
passwordreset.microsoftonline.com	unknown	unknown	false		high
site-stlp3.powerappsportals.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
identity.nel.measure.office.net	unknown	unknown	false		high
content.powerapps.com	unknown	unknown	false		high
aadcdn.msftauth.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
login.microsoftonline.com	unknown	unknown	false		high
ajax.aspnetcdn.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://content.powerapps.com/resource/powerappsportal/img/close.png	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css	false		high
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#	false		high
https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.bundle-6e25944320.css	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://content.powerapps.com/resource/powerappsportal/dist/pcf-style.bundle-0d8f841437.css	false		high
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f_-K5v6je-9_-8W7yne_fwNHZzvsYr-izsXF7SEU1qZUq_IKY6NZ0iW9QOmjrsdWGulJ0KC5mT6RN3foI_xuHrubz1_k324KI6Xe6_Y4ReBOBTgCz_PYV29kHl373388efNWobBCIzcwx64V3_zvJ79ez1y-9eVP977_7cHX_0jPbnxuGN5UNkkvXIFxxbK3m4Rp4LXbTqURVnhtCWPRc06mKzSF8p0HxcxL0&mkt=en-US&hosted=0&device_platform=Windows+10	false		high
https://content.powerapps.com/resource/powerappsportal/dist/app.BootstrapV5.bundle-7aa0129ad7.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/main.4ee557b783.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/919.9b534cdc48.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-6e937472b9.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/137.8295ee7e5a.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb497.css	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pcf.bundle-d31fe485ce.js	false		high
https://site-stlp3.powerappsportals.com/	true		unknown
https://content.powerapps.com/resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/706.48a99f6c78.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js	false		high
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0&sso_reload=true#	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/997.dc24e4c793.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/73.fa3cf8a2fa.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/741.64da153a30.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/980.de82a8d903.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js	false		high
https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry.bundle-02a4a6c393.js	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/372.1490f8bbd1.chunk.js	false		high
https://content.powerapps.com/resource/powerappsportal/img/web.png	false		high
https://content.powerapps.com/resource/powerappsportal/controls/host/284.48b2b8c307.chunk.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.datejs.com/	chromecache_194.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://content.powerapps.com/resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb4	chromecache_120.2.dr	false		high
http://www.datejs.com/license/.	chromecache_194.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/PerformanceObserver/PerformanceObserver	chromecache_197.2.dr	false		high
http://jqueryui.com	chromecache_170.2.dr, chromecache_131.2.dr	false		high
http://medialize.github.io/URI.js	chromecache_131.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://login.windows-ppe.net	chromecache_109.2.dr	false		high
https://fontawesome.com/license/free	chromecache_123.2.dr	false		high
https://reactjs.org/link/react-polyfills	chromecache_166.2.dr	false		high
http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1	chromecache_170.2.dr	false		high
https://fontawesome.com	chromecache_123.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_194.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_179.2.dr	false		high
https://login.microsoftonline.com	chromecache_109.2.dr	false		high
https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-8	chromecache_120.2.dr	false		high
http://getbootstrap.com)	chromecache_114.2.dr	false	Avira URL Cloud: safe	low
https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.bundle-6e25944320.cs	chromecache_120.2.dr	false		high
https://github.com/Eonasdan/bootstrap-datetimepicker/	chromecache_170.2.dr	false		high
https://underscorejs.org	chromecache_131.2.dr	false		high
https://github.com/Microsoft/ApplicationInsights-JS#example-setting-cloud-role-name	chromecache_197.2.dr	false		high
https://account.live.com/resetpassword.aspx	chromecache_110.2.dr	false		high
http://www.coolite.com/).	chromecache_194.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.coolite.com/	chromecache_194.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://timeago.yarp.com/	chromecache_194.2.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_179.2.dr, chromecache_145.2.dr	false		high
http://malsup.com/jquery/form/	chromecache_194.2.dr	false		high
https://site-stlp3.prod-eu-il0101-1.eur.powerappsmtportals.com	chromecache_120.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/PerformanceResourceTiming	chromecache_197.2.dr	false		high
http://knockoutjs.com/	chromecache_126.2.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_126.2.dr	false		high
https://getbootstrap.com/)	chromecache_179.2.dr, chromecache_145.2.dr	false		high
http://fb.me/use-check-prop-types	chromecache_191.2.dr	false		high
https://usebasin.com/f/7243e1a5b734	chromecache_120.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_126.2.dr	false		high
https://github.com/gjunge/rateit.js	chromecache_177.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_114.2.dr	false		high
https://fb.me/react-polyfills	chromecache_200.2.dr	false		high
https://github.com/malsup/form	chromecache_194.2.dr	false		high
https://github.com/Eonasdan/bootstrap-datetimepicker	chromecache_131.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.36	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.41	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.107.213.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431935
Start date and time:	2024-04-26 02:01:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://site-stlp3.powerappsportals.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@18/171@20/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0# Browse: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638065388671150131.MWY4YjNjYTQtNTFmMS00M2YyLWFiMDMtODcxY2Q1ZmJiYjUzYWEyMDNlMDItYWJmZC00NWI4LTk4YmEtYTQ0ZTQ2M2IzZGM0&ui_locales=en-US&mkt=en-US&client-request-id=ddf2ecdc-1c13-4db2-a2ab-f8bd1bbc39e6&msafed=0&state=sUWNscrYJUxZs9mshlKw9Y83-mKozfCKPu6zCZiYDOxB8xlrpFnhT2_UOOrCFBA3-VEWpaBt9lCe73r0oFx86y72sEqzGudHikLFzqW9pJzvNl_ZF2U6CjUzj6n9Xr6ZVXIaNfHh7RDcQ40hrwnCcz8i0dtH389hk-_FX7p7GeoAVwZztx0J8PGvruy278xnm1OhBf4X4NwOxbCOC3M8s7SHeKMKi50y1nN1JSFKQzBcyYVRiiWvsuek3bJSDI3uaDKxiY2A87Irk4XRCocg1InS1EzinHL82aI6AtoHQqK3kvV4mn0KOIYGjEpu5MjDwfpH3lrftUemfhZ8Bv91oYVZAgnDznBDUqnYlgU2Hd0&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.16.0.0#

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.50.35, 142.250.217.206, 172.253.123.84, 34.104.35.123, 20.107.224.11, 20.50.201.204, 192.178.50.74, 142.250.64.234, 172.217.165.202, 142.251.35.234, 142.250.64.170, 192.178.50.42, 172.217.3.74, 172.217.15.202, 142.250.217.234, 142.250.189.138, 142.250.217.170, 142.250.217.202, 52.165.165.26, 162.222.107.23, 51.116.246.106, 192.229.211.108, 20.166.126.56, 20.190.157.11, 40.126.29.13, 40.126.29.6, 40.126.29.10, 40.126.29.12, 40.126.29.9, 40.126.29.15, 40.126.29.7, 104.89.170.193, 104.89.170.198, 40.126.28.19, 40.126.28.21, 40.126.7.32, 40.126.28.11, 40.126.28.14, 40.126.28.20, 40.126.28.12, 40.126.28.22, 142.250.64.138, 172.217.2.202, 13.85.23.206, 20.190.152.80, 40.126.24.145, 20.190.152.144, 40.126.24.16, 20.190.152.23, 152.199.4.33, 20.190.157.16, 142.250.64.163
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, na.privatelink.msidentity.com, clientservices.googleapis.com, ak.privatelink.msidentity.com, clients2.google.com, ocsp.digicert.com, login.live.com, update.googleapis.com, www.ppev6tm.aadg.akadns.net, fs.microsoft.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, www.tm.f.prd.aadg.akadns.net, aadcdn.msauth.net, eu.events.data.trafficmanager.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, www.tm.f.prd.aadg.trafficmanager.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, ppe.v6.aadg.privatelink.msidentity.com, eu-mobile.events.data.microsoft.com, onedscolprdweu10.westeurope.cloudapp.azure.com, www.tm.lg.prod.aadmsa.trafficmanager.net, onedscolprdgwc06.germanywestcentral.cloudapp.azure.com, a1894.dscb.akamai.net, mscomajax.vo.msecnd.net, pa-static-ms.afd.azureedge.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com,
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=8IBgKXep-w0vV5UPqDJDTY8epjRoLG_0rXcDKtlaPG420fG2HgGQ8EOkm_6HrfRae37YInMUZoRuxaQj-bPJBJ7-CB4LqWjQgQXp18R1fm2k2x0RENYsDjxNMsUnDS_Ep0c8eQP4FtY5L2K8XtT7FUPJiTx81AcEhPpkJTnLcj0RVdL-drZ4wxUAAiEAzOAUMcG8KI6oaIvL8oVT_iTY8th2oeXIR8y61DSmsD3LID81&t=74258c30
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (941), with CRLF line terminators
Category:	dropped
Size (bytes):	51589
Entropy (8bit):	4.646217667415746
Encrypted:	false
SSDEEP:	768:3VBsqcE3UwIROL5IBRe7RMCb9OlQfWGfAlBRsYXzrSSl:3VLUrRVBRe7eCElQfWGfAlBRsYX6Sl
MD5:	F282C9B1CE944931B4F460583A0FFF26
SHA1:	44E7559869DCE672C4338F2307D5D79E395BDA95
SHA-256:	9AA44EC9CD4C759074BBD58E3F44F830154A85B89375B5AF853B16795BFA37D2
SHA-512:	C536CD41824B172C6D94B4EC7D645EA1AF8A36A6B35F7559EE2D174C6AA5232FB06DCB9E2D4E923D068C7698B6D8C911CC1365C9175870C5B5AFEB896C71DEDA
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="../favicon.ico?v=1342177280" />.... <script src="//ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="../js/jquery-3.6.0.min.js">\

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12980
Entropy (8bit):	4.656952280411437
Encrypted:	false
SSDEEP:	384:QjJmcs01WskN59g1+VW1aEV4xvbw94l1R5SUcZEWajJIcjqTqxBojafes0OPUE9h:t4i7l1rSVajJWjs0O8E9h
MD5:	8EDFCD3F7A179CFF6B123DFF50F29770
SHA1:	7A2D9BB4B9F6072AB3049E6421021A5BA0A3DADF
SHA-256:	D0B747C7F7414A08B0D5107832B2F4BB44A9BB4A3AAD28390F58EDE8BBEA6AE1
SHA-512:	169D1C71078DCB1C65B3CBAFBA3379B94718D6C1E472990666430A6B2C0483CC9B27E13820A29D2DCA2364D3CD3F7D2ECDED48B9ACF406BF74CB505489FB9503
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/js/Button.js?v=1342177280
Preview:	.//------------------------------------------------------------..// Copyright (c) Microsoft Corporation. All rights reserved...//------------------------------------------------------------....var Button = new Object();....Button.ActiveButton = null;..Button.FocusButton = null;..Button.DefaultButton = null;..Button.CancelButton = null;..Button.ActivatedButtonID = null;..Button.Groups = {};....Button.SetText = function(id, text) {.. var button = document.getElementById(id);.. if (button != null) {.. for (var i = 0; i < button.children.length; i++) {.. var ch = button.children[i];.. if (ch.tagName.toLowerCase() == 'span') {.. ch.innerHTML = text; //// TODO: this causes the text wrapped with an <a> tag to get inserted in Firefox, which needs to get fixed... break;.. }.. }.. }.. var span = document.getElementById(id + '_disabled');.. if (span != null) {.. for (var i = 0; i < span.childr

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4807
Entropy (8bit):	4.941343369031878
Encrypted:	false
SSDEEP:	96:+/dEWd/fIdnKK6nKLkAXnKwnnKUUBiz3QNeVKpMmT0IB:qdXd/AdnKK6nK4InKwnnKUUBiQeVKpME
MD5:	633E70F51B5C0319AF3ACF16EC1AE7B6
SHA1:	D28238721914C98998ACC0485CCEBF230F01A520
SHA-256:	FB076F7948CA70EB1F51334FE4C473C40BBE3BCEB105981C482BB8634FF98081
SHA-512:	1509681E13367F0264CC341C1752B9EF7FFE0714098615282DB2B3688C24AF50D1052421DD606FCFCF942C0BE2D59B7694FA59150923F427FCD807530C56998A
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js
Preview:	.//// Wrapper class for client logger for below purposes..//// 1. Abstracting CST framework code from manual trace log APIs. ..//// 2. Constrolling instantiation of CST framework code in clientLogger.js based on whether telemetry is enabled..class ClientLogWrapper {...../// Constructor which also creates an instance of actual logger if telemetry is enabled...constructor() {....try {.....if (Helper.isTelemetryEnabled()) {......ClientLogger.getLogger();.....}....}....catch (exception) {.....console.warn(exception);....}...}...../// Gets the client log wrapper. Creates new instance if not already created...static getLogger() {....if (!window.clientLogWrapper) {.....window.clientLogWrapper = new ClientLogWrapper();....}......return window.clientLogWrapper;...}...../// Trace info log.../// For component, subComponent, action, tag, it is recommended to use standard short and crisp one worder string..../// Examples:.../// for component: entity_grid, entity_form etc.../// For SubComponent: f

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	32393
Entropy (8bit):	4.985347904131718
Encrypted:	false
SSDEEP:	384:KI00egu/6okkbsEI4tiSQ8B5As94Cus9SKjI:rEgEts
MD5:	0C43FD50AC7D990966F36E1BBB024EF5
SHA1:	F2B217453B7EEDBC610814307A30AAD3155C5A8C
SHA-256:	C9AED7D050235E00A87F6FDC8B47FD6C9E3A0ADB1F0A844BD90145277BA9CFF6
SHA-512:	9659ADBFAC93206091CBD0E85AC0F741FC3AC0988A8EC50587B6B04010CC04CDC17D69E7E8BB9AEA22C1C55BF5B5CB88ACA9785232BDCE69B3E593F50CC9EB0A
Malicious:	false
Reputation:	low
URL:	https://site-stlp3.powerappsportals.com/theme.css
Preview:	/!.. Bootstrap v3.3.6 (http://getbootstrap.com).. * Copyright 2011-2015 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. */....h1.underline,..h4.underline {.. border-bottom: 1px solid #bcbcbc;.. padding-bottom: 21px;..}....@media (max-width: 767px) {.. .. .text_center-mobile {.. text-align: center;.. }..}.......btn-lg-home {.. padding: 20px 40px;.. font-size: 15px;..}.......btn-info-home {.. color: #fff;.. border-color: #fff;.. background: transparent;..}.....btn-info-home:hover {.. color: #000;.. border-color: #000;.. background: #fff;..}.....btn-info-home:active {.. color: #000;.. border-color: #000;.. background: #fff;..}.....btn-info-home:focus {.. color: #000;.. border-color: #000;.. background: #fff;..}.......breadcrumb > li a {.. color: #302ce1;.. padding: 2px 4px;..}...breadcrumb > li a:hover {.. color: #302ce1;..}.......pagination > li > a,...pagination > li > span {.. background-color: transparent;..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1401), with CRLF line terminators
Category:	downloaded
Size (bytes):	52600
Entropy (8bit):	4.713321669209547
Encrypted:	false
SSDEEP:	768:3VNBS6cDwIRfL5IBRe7RMCb9plQfWGfAlBRsYXzrSSl:3VKJrRyBRe7eCPlQfWGfAlBRsYX6Sl
MD5:	7603088C6AB899BB2079D60D44DC4DF8
SHA1:	1DB9E77E868F9B06B7B22937D113A3AAFD9751DE
SHA-256:	8C6AF43B243D7AA37B526D1F645B283A11732A6D45F11114259CBC77F4182CCC
SHA-512:	D5BF772832918956E0C90DB2B7A78788CDA56A93B2DCD05A629E2A1DA2D902591E686F5374D6AB9C6A6F0ED52F47193C2EAB419DC2CCDC4B2E4411BBD1C3661A
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZM9jNt0AMXj5C5cI0pDy6dguIEBUZL8_bfjj5OK5NhxnORsXy5xEnuJEseO_4m_Yjtf3tgYO1XiGEDdOJaqEyogIbHd1JWqrAwFoarTjb3CXLE86elJT3rS7xUOqDJOlUEZfJaDZXD0CUlTVZKsTkoENKkSyU5AiSEsqoRPWeIqgjRljqObheLTv1_8cevjh_L9Hy5_-ehn9s9z7NBJkjA-qlQ2m005sG1kWmUz8Cru2J8if7aGP2LYYww7y-5bfknrnmdjimAAVSUYhqJxvApwAi_LA53U58pc73USpSd6chcAGeq744GIZEFOVMHc6rCDG14L6XMt1Qf1nSworiw0E33Q8gweAGXQJI97C1L36slVDzB6HSjDZmo0ZPAke0PlVokDX0kQodR6kb1mB5E3CoM4Ocv9lY21gRKbkd7StkbMerHjtjeszhAlrx2kNt8-WVEpbyBdULc1ZutGoeg7PTjSVDXixRpHlPr1QTiuJazLWzQRgUDcMtSOhnF9mTZWUwktjsV0OWDDVrpW3JEhQo3ir5bMKZ8dRpTRHzbHii059KlgdkjgRBufN1MGgWkiEQzrLEojcUiHdMMKuP7GSJMtaDEnjXW02kGa2foerjo1mxySykbdTniVJ2QmpruS1ZbbqAp2uK_gra7Y7qQ1c6f3TxEarOOVtSAmra7QJFZjob1FOuQYuhktyOEpH5gzvOl38XqKfOmYgeMmxSWB1Fm2icW6T3o-aKtNvTGvh6uqPBc2digRbmQnmuXZjsHU1iwe6H2Dm_lC6tcEbenr7kyD0hSc5z58DTNr-DB3PYhmYx-l4wQFfnyRo4PQ8tH0MIwCG7nW63Bbw4r6r5MCzypzrvt4D3u2995Bvlj8IHOY-fQdkDs6OCgUM6_c5R52f_-K5v6je-9_-8W7yne_fwNHZzvsYr-izsXF7SEU1qZUq_IKY6NZ0iW9QOmjrsdWGulJ0KC5mT6RN3foI_xuHrubz1_k324KI6Xe6_Y4ReBOBTgCz_PYV29kHl373388efNWobBCIzcwx64V3_zvJ79ez1y-9eVP977_7cHX_0jPbnxuGN5UNkkvXIFxxbK3m4Rp4LXbTqURVnhtCWPRc06mKzSF8p0HxcxL0&mkt=en-US&hosted=0&device_platform=Windows+10
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="favicon.ico?v=1342177280" />.... <script src="//ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="js/jquery-3.6.0.min.js">\x3C/sc

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	7.762338770217686
Encrypted:	false
SSDEEP:	48:c/CeK/fE+XoVldIkPdTWbuf173xX964boBdIhLE:ntcx/Iksbuf17f64borIK
MD5:	8DC34013E911C5F68FC2BCA0400CB06F
SHA1:	16BAFA91AF100D65C4945F04E0C6E1643B98CF00
SHA-256:	795029D360C3D16233FCE96F1BFF13C261535C0885FAE806CFF766F32D96BCEE
SHA-512:	83ACA42A30BFD629BC1E88D3ED154475E7949C1B154D19E6C9EF1DE825BA7967C0B6DA9EE79E7B420668242CCE5931DF344C97278A254F0A72C3D09EABED6051
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....pHYs...........S.....tEXtCreation Time.05/06/16...o....tEXtSoftware.Adobe Fireworks CS6.....qIDATh..=l.E.....H..H*.\|... ...&.D..).@....&...N....)_.E ...(.p...p(H...Ht... ..0............i.}s.....{`ss....;.......:...u..."....Az.r.%.9.\|....wU.j...o....N4...~....g.u.=`.;..9.7.%....Ad#......9....~7.....&.a........`]x^D....&,"..kv.l..K.S+!....#{.xm.;..%.+F<.\..#...bN...2...\.".I..U]..#.dWy$."r.2;Z...w)oD..H..u..M.'.k70.<4aG..`'~......k31W.2!Ue.A"..j....X..C...dNUd.... .j.\|c."..../..P.MXD......C`>7Y.K...n.....U..#..^4....Uu...Q.);.`9q.53..n.@.......A6.E,6.-d; ........nl.>..."..N7..9\6.....p^a..4aG...3...gUu#..j...2............f.....^.)...Udo'&..G.C.Z...L).....".t...pCD..n..a.....E....F...o.k.Y+b...[...gT..... ...]....V..m.!\..SCwh8w..J^.3N........\.W.....3.....lP.Da........-..........@_...i......r..%..)E.Q...3..M..o.$...`...".......-/EHIDZ.q.MC.......D.Q..".. ..#...................1...p.x?dKP.=...{u\.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39862)
Category:	downloaded
Size (bytes):	977847
Entropy (8bit):	5.3506013175263405
Encrypted:	false
SSDEEP:	6144:TAv4KHFaJIIfJz6u4CyjtjTNSuu94DGfiiVD12rWmE2TxNwMkzJKs41dC/jSaLjn:TKJH2JN4xxRSukrWWMuXfQ/Cehc
MD5:	E303D5355313048BECBD7E9429825F82
SHA1:	4ECFDB3DCA8F4AD156D0A0F12FB2ABBB1DBF6D67
SHA-256:	CED5EA5C04E6DD8807FA46B2052888EB4798E557C507FC2EC75463FEE17A9AEA
SHA-512:	2DD6CFF9B75FE25F1000CDC54F63209D11E9E90860F8CE23A492E1AFA28A7ADDB8E5262031BFF3772174F001ABFD19A5FD655AC562E4297667C8F4DA26B71AC7
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js
Preview:	var __assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("React"),require("Fela")):"function"==typeof define&&define.amd?define("ReactFela",["React","Fela"],t):"object"==typeof exports?exports.ReactFela=t(require("React"),require("Fela")):e.ReactFela=t(e.React,e.Fela)}(window,function(n,o){return function(n){var o={};function r(e){if(o[e])return o[e].exports;var t=o[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,r),t.l=!0,t.exports}return r.m=n,r.c=o,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=pABuACtOHeR2qfgdogWC1i7MDlgaaHZbkwqAUHVAo2RW2y-jVK3wb5E0zydvyg8qV_AtdJgrBmigahsAmL7VDrO4JanmpKN1xCxw6Z1Db4kzIHsl8aYq_JZSmEDHSi7ZbO0u3sGH90Ma9TyUQWYM8gzFgerZ9aY5JvX29BQy4pSpRO6X0EfehBKZShfJgJqTqoIWTVHb0r8OZQhoxNvuUORx0HA7E4tVm-bRHmrzDaY1&t=74258c30
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65160)
Category:	downloaded
Size (bytes):	367017
Entropy (8bit):	5.798817566638038
Encrypted:	false
SSDEEP:	3072:RrUEL8JWA94HCLwQICCRd3dDLHPiSHAxocMVYVjLa7pF1Pw57ea5KiO2fQKLBqyb:RM4HC8ECRd3davx7onn4LjQ4p/1eEUy
MD5:	2BA0EDD83E28C5A92B840DC691F50AA6
SHA1:	BF795B8A32D64A413E8C7C041809DA049E23502A
SHA-256:	12888A55D11DCB9A085FFE5A6005A688CFFEDB07AFBAFD68B76FBC6AC1DB19F3
SHA-512:	55DAB90207D80CEE31448DED2F26BE7D2E1D0648ACFCD5C9DAEAC129B3B0C381733FBB0F69AEA9F01DD8BF65416BA584485A0C5B4A720D49892948E9FEBB5AF4
Malicious:	false
Reputation:	low
URL:	https://site-stlp3.powerappsportals.com/thumbnail.css
Preview:	. <html>. <head>. <link rel="preconnect" href="https://site-stlp3.prod-eu-il0101-1.eur.powerappsmtportals.com" crossorigin>. <link rel="dns-prefetch" href="https://site-stlp3.prod-eu-il0101-1.eur.powerappsmtportals.com" >.. <base href="https://site-stlp3.prod-eu-il0101-1.eur.powerappsmtportals.com" />.. Render the bootstrap file -->. <link rel="stylesheet" href="data:text/css;base64,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

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	24038
Entropy (8bit):	5.992474931914016
Encrypted:	false
SSDEEP:	384:cLU4fKWVUvyZk56/1+fZfMj8hTb5nz0bnOWWWWWWWWWWWWWWWWWWWWWWWWWqvESs:cLxfKW6yZk8/iZfMjYxnzonm9MaKcuwW
MD5:	877784A5F5808CEFA2B61E73BFCF8EAE
SHA1:	6A0E7EDA2734D7BBBA3CE38D37B347DF001B1DBF
SHA-256:	BE7F0632337BC381D4962125545A5CC3C1E84E2D03DBDB97AB3D79AD78B91B6D
SHA-512:	DABFFC928F7ED2A2D05003DAEF643806BD1CEC6B98E705F7415A82AFE7034F4E1E8A70C5AE69B094A948EEDAB4E8B76DCF72DF881DA092FE4AB76DA0EEFB8C3C
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/favicon.ico?v=1342177280
Preview:	......@@.... .(@..F... .... .(...n@........ .(....P........ .(....Y..(...@......... ............................................................W.X..~S...W...X...X...X..X..V..p...}.............................................................kQ.W*..S$..wK..k..k..k..m..m..p..q..q..r..~......".........................................................................t..s'..^...\...^..._..._...`...a...b...e....M.................................................................fF.^...sB...m...v...w...x...x...y...{...{............%...#..."..."... ......................................................................v.._..xL...V...X...X...Y...Z...Z...\...`..}N...k#....................................................................rO4.Y+...T...k...q...q...p...q...q...u...}...."...$... .................................................................................j...S...T...X...Z...Y...Z...[...Z...]..._..{O...o?...........................................

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	471
Entropy (8bit):	7.197252382638843
Encrypted:	false
SSDEEP:	12:6v/7eM/H/HTOlHAbsnwpncDR1pxInjqrrgRRIEw6Jz:qHTO0Gwpnc7pOnjqngRR1nJz
MD5:	C651D60A08FF0F579E2EB9BE6043A3C6
SHA1:	E7BCBB896EEA20A4DC68EDD2EF5B336E92690A55
SHA-256:	7B4B6ADAA1DDA648143A18A52B51DFAAB54775BDB6284DFF5C869235CD385230
SHA-512:	017C29423F096A45AD5D1002B2F14E27A8298F144A962B78F46A96626A1027D5E4EC57468CD8F8C5B9E97461FA651452A1786CD9F5F76264652D03F55D516138
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<...GIDAT8O...@...;Wa.`.X....b....... A.F....K...a..t*{3.e...K.....C..0.....)~;.eYvP....L}.KAEQP.4..WYd....mV]..m....$M...`...C.$R.......`..dM.T....,RU..TU..`.'0.!...D[`p..W)D8,dv]Wt....\^v.$.s..`.i...!...D..e$......$.8../..8....;..\6,...f\|....n.....e..M...g.O.9....q..&........0.w...k...z....\.iZ..c.;.F...Uq7.'Y....X ....IEND.B`.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65312), with CRLF line terminators
Category:	downloaded
Size (bytes):	101839
Entropy (8bit):	4.782242219512222
Encrypted:	false
SSDEEP:	1536:JBgMCMPMCMjMCM4MCMwMCM3spL709gbPMfjSFOTyPGuhprfZCS:Jw709gMGFiyPGuhpfZCS
MD5:	2CE6EFB497D50E0FBD335FF651D0E961
SHA1:	4A644F008F5535E2B15DE5A72ACD498C2D5C59C8
SHA-256:	37AD3F3C0DB53E8E6D68199A6DF828E7DB31ABE1DE721CB7475A840A6C10C215
SHA-512:	A613C8FC0805A9F35A83F422012CB9C8A7ABC334ACC6EBF1ABC4BFE8793AFC2A652BC60539DA2EC6182ED48628972B5DB16DFA3E4AF7E3A47AC9C634CF85897A
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb497.css
Preview:	/!.. Font Awesome Free 6.2.1 by @fontawesome - https://fontawesome.com.. * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License).. * Copyright 2022 Fonticons, Inc... */...fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-regular,.fa-sharp,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10x{font-size:10em}.fa-2xs{font-size:.625em;line-height:.1em;vertical-align:.225em}.fa-xs{font-size:.75em;

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8048)
Category:	downloaded
Size (bytes):	8249
Entropy (8bit):	5.4065446030035265
Encrypted:	false
SSDEEP:	192:bwmDjTrwqkYH8a8uzJWfQgm+wwGUFjn8PPTl9zdvt:EAvvkYzz3gm+w6MPTPzdl
MD5:	04EDA68D3B1E6FB4FD1CCF34C97FC60D
SHA1:	5C57FEAAE7D0C713F8857AA7FD43685F961953DD
SHA-256:	28EB143BE1AC49BF6A651E37F78FDDDDE60721B454A8AD2B482A862883F68F0C
SHA-512:	45B36AD30D05DF3539A25684FD600721C352E0D9C615D8BE8795EC40BA608720967E6A17CBE7D7DD4D59B8825FB09570FA5A1A0580E558BE5B47351BBC617EEE
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/main.4ee557b783.chunk.js
Preview:	(()=>{"use strict";var e,r,t,o,n,a,f,i,l,u,c,s,d,p,h,v,m,g,b,y,w={6744:(e,r,t)=>{./!. Copyright (C) Microsoft Corporation. All rights reserved.. */.Promise.all([t.e(284),t.e(706),t.e(505),t.e(585),t.e(829),t.e(593),t.e(741)]).then(t.bind(t,1961))}},j={};function P(e){var r=j[e];if(void 0!==r)return r.exports;var t=j[e]={id:e,loaded:!1,exports:{}};return w[e].call(t.exports,t,t.exports,P),t.loaded=!0,t.exports}P.m=w,P.c=j,P.n=e=>{var r=e&&e.__esModule?()=>e.default:()=>e;return P.d(r,{a:r}),r},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,P.t=function(t,o){if(1&o&&(t=this(t)),8&o)return t;if("object"==typeof t&&t){if(4&o&&t.__esModule)return t;if(16&o&&"function"==typeof t.then)return t}var n=Object.create(null);P.r(n);var a={};e=e\|\|[null,r({}),r([]),r(r)];for(var f=2&o&&t;"object"==typeof f&&!~e.indexOf(f);f=r(f))Object.getOwnPropertyNames(f).forEach((e=>a[e]=()=>t[e]));return a.default=()=>t,P.d(n,a),n},P.d=(e,r)=>{for(var t in r)P.o(r,t)&&!P.o(e,t)&&Object.def

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45529)
Category:	downloaded
Size (bytes):	141305
Entropy (8bit):	5.430788281341128
Encrypted:	false
SSDEEP:	1536:5FZ5ELQbTPRUbx3jog/MhTyvRkmYWp0BSYmvIxdL/Bpns0Vgt2CTJm0wTxFojd9K:jEArg/MMNn3vIPzDk80ZjT0qcePgT
MD5:	1A0C9CD8426709A1C5AC8EB19013CB72
SHA1:	21FEB1E3BBEC4F6271D3FC68A71F928B86840810
SHA-256:	D12F35509E7EBCD8AF368FAF23C490FDA08FA0CB21171AB6B60AE2468242E500
SHA-512:	FE9EBA6B17A674CABD0545579264B54F7AAAA9068529681A7F376EDE79083F8615F041B43C41F13E4BE49AD4AF13E1CFBA36E7157EBBD1C11ADE72C9A31A6FC8
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,r,i=n[0],a=n[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61934), with no line terminators
Category:	downloaded
Size (bytes):	540928
Entropy (8bit):	5.543222650034138
Encrypted:	false
SSDEEP:	12288:jPy8qWOEskJTejucy2jmfQHe3JtZhaJDnPeOKgxPRfvk:7bDskJTejucy2jmfQHe3JtZhaJDnPdx6
MD5:	7A30F503A320780EC05DF202681107C0
SHA1:	F44EEAAF99F66C65BC2C88A23B0D728B068BBF8A
SHA-256:	B72202B93CB6846A30AA5BC342FD49D2C2957650B22A2909EF51D606EDF3F84E
SHA-512:	18739AD076E00C69352FC7D5EDF4869F8196C3AB32D7A8B8DC1A3FA8B059F1D6A94AE9F46220F07C298CAEBC39D035EDE8563C9422CE3997C34544F86FE2C1B8
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/706.48a99f6c78.chunk.js
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[706,73],{3132:(e,t,n)=>{"use strict";n.d(t,{t:()=>o});var r=n(8169);function o(e,t,n){void 0===n&&(n=!0);var o=!1;if(e&&t)if(n)if(e===t)o=!0;else for(o=!1;t;){var i=(0,r.G)(t);if(i===e){o=!0;break}t=i}else e.contains&&(o=e.contains(t));return o}},7018:(e,t,n)=>{"use strict";n.d(t,{X:()=>o});var r=n(8169);function o(e,t,n){return null!=n\|\|(n=document),e&&e!==n.body?t(e)?e:o((0,r.G)(e),t):null}},8169:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=!0),e&&(t&&function(e){var t,n;return e&&(n=e)&&n._virtual&&(t=e._virtual.parent),t}(e)\|\|e.parentNode&&e.parentNode)}n.d(t,{G:()=>r})},9996:(e,t,n)=>{"use strict";n.d(t,{w:()=>i});var r=n(7018),o=n(3029);function i(e,t,n){var i=(0,r.X)(e,(function(e){return t===e\|\|e.hasAttribute(o.Y)}),n);return null!==i&&i.hasAttribute(o.Y)}},3029:(e,t,n)=>{"use strict";n.d(t,{U:()=>o,Y:()=>r});var r="data-portal-element";function o(e){e.setAttribu

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1838)
Category:	downloaded
Size (bytes):	1887
Entropy (8bit):	5.183476430031409
Encrypted:	false
SSDEEP:	48:imcClmcCojYEjvNkjul8Vv30IFC/cYPhsjr3Xls2Osmip9sHoyWsplWrMY0wsTS9:1PMPojYEjvNkjulgvEX/DJOHlcm9RT2e
MD5:	7DBD35E13D4C51D6A56D158E5FAD9E3E
SHA1:	4040E247C7679FA8D4BF704CDA84CE619031A3AF
SHA-256:	1581B01CD30CFDCBB70895091AD04C3C720B7C4A77FDAC3EDF0A60D61125AEB2
SHA-512:	6EF0C74F5E85E97DC786E6AD053EB8793A93760371A2BB6FEB2F39924B7C77F621D319578E32BD11A91685D60D85F86D6C1608A6C4E11F256C130E26ADFDF154
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/980.de82a8d903.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[980,740],{3980:(e,t,o)=>{o.r(t),o.d(t,{AnnounceProvider:()=>M,AnnounceProvider_unstable:()=>M,BackgroundAppearanceProvider:()=>g,CustomStyleHooksContext_unstable:()=>h,CustomStyleHooksProvider_unstable:()=>y,OverridesProvider_unstable:()=>p,PortalMountNodeProvider:()=>H,Provider_unstable:()=>b,ThemeClassNameProvider_unstable:()=>a,ThemeContext_unstable:()=>r,ThemeProvider_unstable:()=>u,TooltipVisibilityProvider_unstable:()=>c,useAnnounce:()=>O,useAnnounce_unstable:()=>O,useBackgroundAppearance:()=>w,useCustomStyleHook_unstable:()=>A,useFluent_unstable:()=>x,useOverrides_unstable:()=>f,usePortalMountNode:()=>S,useThemeClassName_unstable:()=>d,useTooltipVisibility_unstable:()=>C});var n=o(829);const r=n.createContext(void 0),u=r.Provider,s=n.createContext(void 0),i="",a=s.Provider;function d(){var e;return null!==(e=n.useContext(s))&&void 0!==e?e:i}const v=n.createContext(vo

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/header_Microsoft.png
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65445)
Category:	downloaded
Size (bytes):	540779
Entropy (8bit):	5.304612083500325
Encrypted:	false
SSDEEP:	6144:k87cPYYGRPJ9As5j9534cMPRLyWtEWT0m9c3+PJ0FEdtrwC:k8oYYwPIkj4fZ7ieg8tkC
MD5:	6E937472B9DB7B458321E595DC5A7874
SHA1:	ADC4F08B33ABD52FCD837EFA4D71D9D0B187807A
SHA-256:	34BC432F07C09EC5D54BEDC4E181EBBCA481BA4D9904C7CCE5C255760A6BC851
SHA-512:	924D141322C36C10F86D266DA00AB2D0CA4D5F9362318AF2B97D1C410D832D87B4D2151F4D03BCB6EDF336B2DC6B989A13241E461ECE4154E55C2388E1506C6E
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-6e937472b9.js
Preview:	/! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(k,e){"use strict";var t=[],n=Object.getPrototypeOf,a=t.slice,m=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},l=t.push,s=t.indexOf,i={},r=i.toString,g=i.hasOwnProperty,o=g.toString,u=o.call(Object),v={},y=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},_=function(e){return null!=e&&e===e.window},D=k.document,h={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,i){var n,s,r=(i=i\|\|D).createElement("script");if(r.text=e,t)for(n in h)(s=t[n]\|\|t.getAttribute&&t.getAttribute(n))&&r.setAttribute(n,s);i.head.appendChild(r).parentNode.removeChild(r)}funct

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	237
Entropy (8bit):	6.43867499964275
Encrypted:	false
SSDEEP:	6:6v/lhPUg/6TsR/4x3zZeu9HsFImSAtIn4Y7FdLLZChrT8up:6v/7t/6Ts/qzMW5mtIn4wmRZ
MD5:	74710B068526106916E5A9AE5B70FA64
SHA1:	2E7344458A5EB6EFB65976EE144BBEDBA680B5AC
SHA-256:	55B9B171BB9BC15ACDD21C7A186E1268BC774B6A7C5A6FBC2F2BFEE564890325
SHA-512:	6D66F49A52C8A4E0EEB0C4F67DC85CAFEE5C2F8716E8E80EB5BE6C266F4E7CFC161EA5B0937A383BA13B1DD5B97742D70FA9630A502F87BE622FF0512BA63047
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............2.....pHYs.................sRGB.........gAMA......a.....IDATx...... ...(./K vd........v........!.`?p.......]'g.."...,6%..`gC..%`s.$"..<...=....e..4X.._kQ...e..h.-.}...3=.e/.D..C....ob41.x.....IEND.B`.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12429
Entropy (8bit):	4.880328887313854
Encrypted:	false
SSDEEP:	192:x8GsutherY4/qX0Ii8tPNS3ndq3yFwmLkwjPuqwnESBX3Sri6K4Cl44B6QRguaZ:xBjiUSCDnyQRq
MD5:	A17520454D4A65A399B863B5CC46D3FC
SHA1:	0A02C72D7AFCD5198C590108E7F2302A1F75544D
SHA-256:	62E5E7DC19D018BEDB24E2C89ED41271B9D94A6DDE3359CC9CABBC315385C0E5
SHA-512:	0757698DC40D0AC165F159270375514A543448FB2A3E7B3B70EB500180EA00FDA3A4FC7F77C48EA013C3BAC082C092BB852CF86F7D4C0094596DE6917DCA1449
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/css/Style.css?v=1342177280
Preview:	* {.. line-break: strict..}....body,..input,..select,..textarea,..button,..legend {.. font-weight: normal;.. font-family: "Segoe UI-Regular-final", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. font-size: 12px;.. line-height: 19px;.. letter-spacing: .01em;.. color: #666666..}....span.requiredstar {.. font-weight: normal;.. font-family: "Segoe UI-Regular-final", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. font-size: 12px;.. color: #a80f22..}....h1,..h2,..h3,..h4,..h5,..h6 {.. font-weight: normal;.. font-family: "SegoeUI-Light-final", "Segoe UI Light", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. color: #333333;.. margin: 0 0 0 0;.. cursor: default..}....h1 {.. font-size: 32px;.. line-height: normal;.. letter-spacing: -.01em;.. padding-left: 0px;.. padding-right: 0px..}....h2 {.. font-size: 22px;.. line-height: normal;.. letter-spacing: -.01em..}....h3 {.. font-size: 13px;

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5959)
Category:	downloaded
Size (bytes):	7358
Entropy (8bit):	5.290110055150946
Encrypted:	false
SSDEEP:	96:1PMP4PUIbvGKuG8LDCJQDYIerVaK/PI31VqrLIItKn2vtyEUX6AOY6CM5Jqg9MLz:xP/ZAPCCDJKKTUKnMQzmkMHtAai+XW
MD5:	7EF86DBDAC5AAD364C6C735F2EBD504F
SHA1:	61B6761D2CB035217644E7FDA54A85476275B01E
SHA-256:	696867A3BFEA199054A2D5696BFC09B5E56A655A635526A7991D9353F73D9BCD
SHA-512:	A5F26E8148540D5F9210DAA4219D025E5052CCADFBE1B464AA1265ECF419D3D007B9AE6107FDF51854AA5D740F7B463DBE59530C8BD93DC4FD28654CC7F2C337
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/919.9b534cdc48.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[919,140],{321:e=>{./.object-assign.(c) Sindre Sorhus.@license MIT./.var t=Object.getOwnPropertySymbols,r=Object.prototype.hasOwnProperty,n=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},r=0;r<10;r++)t["_"+String.fromCharCode(r)]=r;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var n={};return"abcdefghijklmnopqrst".split("").forEach((function(e){n[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},n)).join("")}catch(e){return!1}}()?Object.assign:function(e,o){for(var u,i,a=function(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),c=1;c<arguments.length;c++){for(var f in u=Object(arguments[c]))r.call(u,f)&&(a[f]=

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4020
Entropy (8bit):	7.929907559552797
Encrypted:	false
SSDEEP:	96:1X+Yg6Iet+ZpBmQKEuhA/4oJqNoCkQV+CX8h:Fg69t+YfPhEBPnC+t
MD5:	36AFB641BECFAD75FED5F4E6E8C39268
SHA1:	2495652F017B7A06D796AFE9C4A06ECD54F9CCFE
SHA-256:	5C2192A3932CB78B431A1AC0F3F3D73414A31C63D5CB279F2687E58C72694200
SHA-512:	08C27020CF80A181B941EE144090FFBDD12ED34BA8CBEC037ACECE63F850FF8A69BE6DDB0EC24F7141C46F27779ED59AF84A55FB367C1B6F8893B444F44C5AF5
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/footer_logo_grey_bg.png
Preview:	.PNG........IHDR...R...H.......}.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....IIDATx...r....[ZZ..V.'0......].......z....M..U.%........C.....}...s...mIV.O5...... ...U.Hq@b......Y..../)..hy.._S......KzK...O\5EQ...(....B.(......(J ...(.......B.(......(J ...(.......B.(..H..EQ.C...V...7.//...~...?.....h4:.@TH.E....}........k.v....L./.@TH...pGN.;.....'.(s...k.......4GTH...'O.~...g[..o.."....l..>.G...;..~...&.....d..u.^F.........M.h.....>.}>..........[......E.b..?.u..{.B........M._.iAh.>~.<S...=.@`e..e....R....._ViA.E....R.@...@..vm.'Ei.v..\>QD..e..R......;o.p{......./^d..TH;.,F>..6...1?..E.p.}..J.p...XD.........7.^b..../.w...........n0.+R.V).J.a..^.X.S..B(..W+++..W. ..e%"Z.[.{,....JQ.iG`....(5..e..`u.*.=.)J...........C.!.@..;$.i.F...W.[....#............k.(J.z....`.dB..)..-H...R.H..O.#V..%......W.4>.'..aJ9.2Q..+.R..id`.x..1.. .../.(J%..>2d.QJ..7.\|.S`..10>..}.M#.....4......<f}..OWO..m.;C[;u.\|P!......L...S.Egr.....3.k.......i.........O...

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.509183719779188
Encrypted:	false
SSDEEP:	3:/eOSaKSoyTu1VNK0yTu1UZYf:/DJn6fUT6Bf
MD5:	F4A0E619B855697F4DB1A1B22FE37E8C
SHA1:	3D1CA30185839E05C6D876C7E8477604BFAC6CDA
SHA-256:	CEC86F53B19C31BC124614007553A6EBC5434F9B1D2F03B1DB0393B22AB16EA2
SHA-512:	8FF46BF8D3B93DA72109C92A26D5FF4C8E16FD6CD98FBB0E6A9E7E31E55220E8B2D71B851219199DF9C6D2074137192F55F84B4B89AF9C4C4D1B9D6FDB94EFC5
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js
Preview:	$(()=>{if(window.loadAllPcfControlsOnPage){window.loadAllPcfControlsOnPage()}});

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 444227
Category:	downloaded
Size (bytes):	121212
Entropy (8bit):	7.9972852524966695
Encrypted:	true
SSDEEP:	1536:iD6XUiMe8qYwKDImT4zkhRc8JbmxMwGysvrO/Q0wjsFUUXbBHfy18nZIH9JxhmTK:wHHDZT33eAvrn0wjsm8Z0otE
MD5:	0868DA2DD5EFFED92904047439E49D48
SHA1:	D760173E5E6B25461B0D2A0B32D384FE659B2338
SHA-256:	8C41E973CB5EE0194EBF3BAA0716EEEB57EED53552F042E200190E3C37F08CFD
SHA-512:	9F430A42D5380D12C553255A324E347A37337E659D623F50314CF47FE52889FD4120F8DD2895DE3327ED97B65DE4E78C982DA966A3F5253286AB0DE0260817CB
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js
Preview:	...........m{.8....~.......%..J....Te;.3q..wS.<.D;..W..2.......e......X$H. .. .~.i....T........MexZ..\|v}\.....\.o.N...l.....O.?`..;v..U.....?t.x..N.....}'.L.hVI.Xe.G.27M...Ph..R..b.r...k..V.....O..J....~?..0J}.U.......VY...+....P...8J.IZ....'h$Y@z........2....Q...R.P3.....'..'.Q..:.G..\|...2Q....$...."..4..F..}..?.V.n......:@.[.i....O.b.T"..+D..q...9.$.ke.;!.\6...Lc.f,Lu .....?..".3..4..Y.cK.?...K6.T.L..Q.3.T....7...Y.Y.i:O....~.....h......I.u..:.}....r...8.W.1`P9.f....T....%.?..K....4?N.........."t...-..JX..+..O.._....o.;=.?....w...Q=`.4}8H..j...&w.p......F.....d...I.......W....:....[./..~@+5....."...V..wU..)TYe....?5......;........Vk..Jt.^.t.^6Z..:...!..I...j1K.qX..u.S......1.^.V.....Lk.Z..B.....,..z.;..G`..y..T`.tz...[5..q.*...E}K.[.b.&........Z...t..s..RO....m....s.IQ...+...Re....T...ag.0.F...T.}<].<Nt........ ..k..5..X....El_..w..\|..VC=...H$F..~r%..'U..!.k1=.e.)y!`)....Y.c%.....{.Kx.........s...dZ....^:3V..H..\|Sz.1%C..G..a2:v

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (9973)
Category:	downloaded
Size (bytes):	39139
Entropy (8bit):	5.39962687473837
Encrypted:	false
SSDEEP:	768:0zcvrJi/xDMBXrP6xY+D3D1vcJrhverp/xREirDJso6ak7KNAWT1htN1iiaxVs+l:0ArJi/NKP6xY+D3D1vcJrhver1eafjsR
MD5:	ABC003F3A93C3FF798D8CE448D8C4574
SHA1:	B12B6913842E269E6BB82D9EBF2B5370B528191D
SHA-256:	B1CF6BEA5F0D416155D4CC4BEEF4205DA60FFD6F7D60785DA7EB238E204748C7
SHA-512:	EF27CD9D5EF903F7654680B9274A76FEDB8DDDB4BC8AB353B4A734BDE864AC13F71B84F6435C13029A66F6EBC8D525B695D66DE232F6E8647DFB7762C3B8F527
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/741.64da153a30.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[741],{1961:(e,t,r)=>{r.r(t);var o,n,a,l,i=r(3593),d=r.n(i),c=r(6505),s=r.n(c),u=r(7657),g=r(1208),p=r(9017),m=r(5238),h=r(5692);!function(e){e.PORTAL_NATIVE_CONTROL="PORTAL_NATIVE_CONTROL",e.PORTAL_NATIVE_CONTROL_MANIFEST="PORTAL_NATIVE_CONTROL_MANIFEST",e.PORTAL_NATIVE_CONTROL_ERROR_BOUNDARY="PORTAL_NATIVE_CONTROL_ERROR_BOUNDARY",e.PORTAL_NATIVE_CONTROL_GRID_QUERY="PORTAL_NATIVE_CONTROL_GRID_QUERY",e.PORTAL_NATIVE_CONTROL_THEME="PORTAL_NATIVE_CONTROL_THEME"}(o\|\|(o={})),function(e){e.GRID_NATIVE_CONTROL="GRID_NATIVE_CONTROL",e.GRID_SORTING="GRID_SORTING",e.GRID_STRING_FILTERING="GRID_STRING_FILTERING",e.GRID_NUMBER_FILTERING="GRID_NUMBER_FILTERING",e.GRID_DATE_FILTERING="GRID_DATE_FILTERING",e.GRID_BOOLEAN_FILTERING="GRID_BOOLEAN_FILTERING",e.GRID_ENUM_FILTERING="GRID_ENUM_FILTERING",e.GRID_ENUM_SET_FILTERING="GRID_ENUM_SET_FILTERING",e.GRID_OBJECT_FILTERING="GRID_OBJECT_FI

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	7.197252382638843
Encrypted:	false
SSDEEP:	12:6v/7eM/H/HTOlHAbsnwpncDR1pxInjqrrgRRIEw6Jz:qHTO0Gwpnc7pOnjqngRR1nJz
MD5:	C651D60A08FF0F579E2EB9BE6043A3C6
SHA1:	E7BCBB896EEA20A4DC68EDD2EF5B336E92690A55
SHA-256:	7B4B6ADAA1DDA648143A18A52B51DFAAB54775BDB6284DFF5C869235CD385230
SHA-512:	017C29423F096A45AD5D1002B2F14E27A8298F144A962B78F46A96626A1027D5E4EC57468CD8F8C5B9E97461FA651452A1786CD9F5F76264652D03F55D516138
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/hip_reload.png
Preview:	.PNG........IHDR..............>.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<...GIDAT8O...@...;Wa.`.X....b....... A.F....K...a..t*{3.e...K.....C..0.....)~;.eYvP....L}.KAEQP.4..WYd....mV]..m....$M...`...C.$R.......`..dM.T....,RU..TU..`.'0.!...D[`p..W)D8,dv]Wt....\^v.$.s..`.i...!...D..e$......$.8../..8....;..\6,...f\|....n.....e..M...g.O.9....q..&........0.w...k...z....\.iZ..c.;.F...Uq7.'Y....X ....IEND.B`.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55037
Category:	downloaded
Size (bytes):	15776
Entropy (8bit):	7.985965830535592
Encrypted:	false
SSDEEP:	384:UwXl87i4naaFtPESJ2DWOq1IcQS0SL7EOONbPHG:UwXW7i4naTSOAszOGb/G
MD5:	098D00E9154C1A4848DA016205C19CE9
SHA1:	E25940FD37302594D14B1884D70F75261059F26D
SHA-256:	2BF70F1B03D3739907578441359DD07F2BE363C0AA052895C6C163D176F41393
SHA-512:	43536DD060C282950C183F582D2D734088B7D551B4B3E6BF1DE4A826D3EA442CAB271FC2041520397E01FCCC45FBDFA09259CE075AC7BFB09764823F23EB0D2A
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9...B.AwUeeeeeefee..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<..j..N.....0.......=..ox/+...9.sB..p.q.ai...?.....qw.D.X..b..?.bOD.x.B1..X..`.N..b..E...%JWg..x8.ys..:...I.....b1...q.......[..a..7q..N........._..4....&.. ........m&6.F.\.@.e.B..`.'.....0............]/.........`..iZ6......./f8..BCz_...i....MQ>..E,/x>v......{.........._.........Z.rP+......e..R.\.Z.u..3@./.oJ7.'.......%.;.WP.9.b..z._..b....0......X...Ro^k.lI..t..K7~.ep.`.)......'."".."....../..S....M..B5nEc2..g..m..\|f.{...pbi(.0.@[_Lc.Z.....U`./!..@.....p.-..kQ@T..8...-...0.....AX.D.?...".....5.NE..\...VQa.....,......?..M.0......_<......C..fOq..bz'..z/BF.;&.K......%.....g........f!..^.:Z...g...j...7.._........S.2/.2.n.....>.<P!!.Bv..J........e!d....B.Ra$.......N........> f.C.....^.D.-.e.c+...............!....$.9x...{.....p~._.0.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	405
Entropy (8bit):	6.927238031773719
Encrypted:	false
SSDEEP:	6:6v/lhPGtyR8R/Chm+jnDs9cCXz6fXIpvI+WOcy0f11VTaENo+7PfW3e37zt1afwp:6v/7SyG/HYfXJOvU1zTa8o+W8
MD5:	D4FFE61373F6AA32EEB8CA7CD41AB980
SHA1:	4925FAC4BC73EFB7C7BBC32B11C435ECF1D61674
SHA-256:	D5C54FFC6B8BD44D932BE8F37B1CD5B666205C7574F9D56EF68E56F83E08FFAD
SHA-512:	0F7EDE96F20BB3C053C246FFE1EF8CE739CEF7757FAAED031A365299B88664A046557C2C7FDB3BADED070BA4EBA1A14950D7E3A066B4976BF07142CEFA48BEEB
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/hip_speaker.png
Preview:	.PNG........IHDR.............8.......sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<....IDAT8O...0...nf..y.,X4.g.I.h4..H.`.b.bA..f.n....%.=.iS.?N....^....A.(...~.i..m[.Qyz..iB..(...8...<G.........y..$.8....EQ.u]..I..(R.l...a...=..?t...CUU.......-..7.!..@.u0\..y.@..[a...p@.J.......e..>.Y..i..>A...+.,[. X9..z....B.4..+)..`n/..Q..>...y....e<....IEND.B`.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	24038
Entropy (8bit):	5.992474931914016
Encrypted:	false
SSDEEP:	384:cLU4fKWVUvyZk56/1+fZfMj8hTb5nz0bnOWWWWWWWWWWWWWWWWWWWWWWWWWqvESs:cLxfKW6yZk8/iZfMjYxnzonm9MaKcuwW
MD5:	877784A5F5808CEFA2B61E73BFCF8EAE
SHA1:	6A0E7EDA2734D7BBBA3CE38D37B347DF001B1DBF
SHA-256:	BE7F0632337BC381D4962125545A5CC3C1E84E2D03DBDB97AB3D79AD78B91B6D
SHA-512:	DABFFC928F7ED2A2D05003DAEF643806BD1CEC6B98E705F7415A82AFE7034F4E1E8A70C5AE69B094A948EEDAB4E8B76DCF72DF881DA092FE4AB76DA0EEFB8C3C
Malicious:	false
Reputation:	low
Preview:	......@@.... .(@..F... .... .(...n@........ .(....P........ .(....Y..(...@......... ............................................................W.X..~S...W...X...X...X..X..V..p...}.............................................................kQ.W*..S$..wK..k..k..k..m..m..p..q..q..r..~......".........................................................................t..s'..^...\...^..._..._...`...a...b...e....M.................................................................fF.^...sB...m...v...w...x...x...y...{...{............%...#..."..."... ......................................................................v.._..xL...V...X...X...Y...Z...Z...\...`..}N...k#....................................................................rO4.Y+...T...k...q...q...p...q...q...u...}...."...$... .................................................................................j...S...T...X...Z...Y...Z...[...Z...]..._..{O...o?...........................................

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65300), with CRLF line terminators
Category:	downloaded
Size (bytes):	194905
Entropy (8bit):	5.014651527034942
Encrypted:	false
SSDEEP:	1536:1tGg9JfWFeQK5wlP72qgOfI3N9LsqkVkpz600I4l8:1tGg9JfWc9kVkpz600I4l8
MD5:	30EAFD8EF153814B788EB71DB3F1B99C
SHA1:	3C7BD538F6307CAE3DE00D64BD2B742B9E4AFE3B
SHA-256:	7FCFD614F45FE132CC914BEEAC10592711BF2760E3732D85DFAFEB4022A3C914
SHA-512:	82FE723645A952B3609BF3DBA38521D4CDA2B00E95EF7465257B01F3A0BD1EAA2A0D0EBCBB36E4C792296B6739CDDA4862380CCCD0DECBBC786F351E82ED1192
Malicious:	false
Reputation:	low
URL:	https://site-stlp3.powerappsportals.com/bootstrap.min.css
Preview:	@charset "UTF-8";/!.. Bootstrap v5.2.2 (https://getbootstrap.com/).. * Copyright 2011-2022 The Bootstrap Authors.. * Copyright 2011-2022 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-black:#000;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-gray-100:#f8f9fa;--bs-gray-200:#e9ecef;--bs-gray-300:#dee2e6;--bs-gray-400:#ced4da;--bs-gray-500:#adb5bd;--bs-gray-600:#6c757d;--bs-gray-700:#495057;--bs-gray-800:#343a40;--bs-gray-900:#212529;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-primary-rgb:13,110,253;--bs-secondary-rgb:108,117,125;--bs-success-rgb:25,135,84;--bs-info-rgb:13,202,240;--bs-warning-rgb:255,193,7;

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.2155894378827385
Encrypted:	false
SSDEEP:	3:uCdiczZ86BmFrQn:uCdiczZ86BmFrQn
MD5:	601927BDB80C8E2AD4A38EA15A10043C
SHA1:	CA1B52CE4E0FBCF09CD021118C99E2E2F9449EAE
SHA-256:	EC308B54FD75EB6A85EE5AE3EE9CE9921E92081479E2362EEC598C75119CEB24
SHA-512:	CD43D4B2F2817B04B879DD1C58DBD7E77FFC09112CAC719C4F6BCF7CFBEB9AAD3AFB9AFC80D4DE758D2D5372D4D088A3457713477343FCA86E5D6CF8216CDE94
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgkY9XPIZsagyxIFDdFbUVISBQ1Xevf9EgUNV3r3_Q==?alt=proto
Preview:	Ch8KCw3RW1FSGgQIVhgCCgcNV3r3/RoACgcNV3r3/RoA

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540), with no line terminators
Category:	downloaded
Size (bytes):	540
Entropy (8bit):	5.0135089870329255
Encrypted:	false
SSDEEP:	12:fNWjuwUKXgK0Xdww4nXgvwXJ5DgbXg0tSw7a:f6iKXgvXdanXgvIgbXg2S8a
MD5:	2739C60227F87D19F5C784BFFB5991F8
SHA1:	42DBAC51553D7778A176E710D3CE1009884DE167
SHA-256:	974FECBEBCF2F295348C3631FE069966EAB4B4B57CD4FCBE15FB70D0ACAB47C6
SHA-512:	42C81F41962FE4B5FA556EEDF1C9D9CB2F1D9D182D7BF29E2F8D69BE2CA5553E10D89893D4B8699D1E60FDAB19D1C5D9BC9C686C6C2DBC58DAB85070D43596CD
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css
Preview:	#offlineNotificationBar{padding-top:10px;padding-bottom:10px;background:#fff4ce}#message{position:relative;font-family:Segoe UI;font-style:normal;font-weight:600;font-size:12px;line-height:133%;color:#323130}html[dir=rtl] #message{right:36px;margin-left:64px}html[dir=ltr] #message{left:36px;margin-right:64px}#web{position:absolute;line-height:100%}html[dir=rtl] #web{right:12px}html[dir=ltr] #web{left:12px}#close{position:absolute;line-height:100%;display:flex;cursor:pointer}html[dir=rtl] #close{left:8px}html[dir=ltr] #close{right:8px}

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1498
Entropy (8bit):	4.81759827491068
Encrypted:	false
SSDEEP:	24:UhvVovixQcvUvED/frfnQYRKYKvZiANncisDmZu7SECywEZS9Y6f:U7ZM8vbA3smgm89CywYkV
MD5:	11FE4E6509513DB245F1F97E37C5D3AB
SHA1:	05322C35B6BFAE84CE8C626BD7B1F8C4A6F15A6D
SHA-256:	78D437B40A85299F96ED9D02E35F23FD3D3EF63D844D8D2523A15516F7E1D09C
SHA-512:	E8A7C3B06C54B671FF6772D6A360DD0B4A65888B4DBD32AE04D14E4971343A71E1B4EC1E58BD45898744A1B0DF4EDE24141FF47E2C0393E18AACFC97E6F10D76
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/css/ltrStyle.css?v=1342177280
Preview:	.paddingright { padding-right: 20px; }...paddingleft { padding-left: 20px; }...paddingright7 { padding-right: 7px; }...paddingleft7 { padding-left: 7px; }...paddingleft10 {padding-left: 10px; }...alignright { text-align: right; }...alignleft { text-align: left; }...leftalign {text-align: left; margin-left:0px;}.....borderRight {border-right: 1px solid black; padding: 0px;}.....userTypeRadioButtonMargin{margin-left: 10px; margin-top:50px;}...userVerificationInputLabel {text-align:left;padding-right: 10px;}...radioButtonMoreInformation { padding-left: 20px }.....header .logo{float:left; padding-left:30px;}.....HelpCallout td.PosRight{padding: 8px 0px 0px 0px; margin: 0px; vertical-align: top; font-size: 1px; border: none !important; background-color: transparent !important;}...HelpCallout td.PosRight > div{font-size: 1px; position: relative; left: 1px; border-bottom: none !important; border-right: none !important; border-left: none !important; width: 15px; background-color: transparent !

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48383)
Category:	downloaded
Size (bytes):	48432
Entropy (8bit):	5.28308385076584
Encrypted:	false
SSDEEP:	768:Ts+Ny2F17Pe4FBZIvEXnCrwCI5LI9TNfjH0I0K+OofofoLTmTpC20RxBD+tHoAuw:Ts+NdFhtl5LkRH0IpofofoKC2WxgtHou
MD5:	E75BC4AB53BEEF54A19EE46CFA750796
SHA1:	1510574F27B26C37F9B0DE509A69CF91DFD89171
SHA-256:	3D1D13039D3E75FBBEB280808E78D3577A7A19A5EF898F4A72B7B2058011D33A
SHA-512:	49F1CC4A5AC7CE2EFDE12A5E2DC5577D7B9EB28625403A848CCAC61237A03C52D0C2E1FB270F50F19278A64927D6C7A1A273CB773F068EE0FFB7FEE0CF4941D8
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/284.48b2b8c307.chunk.js
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[284],{7284:(t,e,r)=>{"use strict";function n(t){for(var e=arguments.length,r=Array(e>1?e-1:0),n=1;n<e;n++)r[n-1]=arguments[n];throw Error("[Immer] minified error nr: "+t+(r.length?" "+r.map((function(t){return"'"+t+"'"})).join(","):"")+". Find the full error at: https://bit.ly/3cXEKWf")}function o(t){return!!t&&!!t[V]}function i(t){var e;return!!t&&(function(t){if(!t\|\|"object"!=typeof t)return!1;var e=Object.getPrototypeOf(t);if(null===e)return!0;var r=Object.hasOwnProperty.call(e,"constructor")&&e.constructor;return r===Object\|\|"function"==typeof r&&Function.toString.call(r)===J}(t)\|\|Array.isArray(t)\|\|!!t[Y]\|\|!!(null===(e=t.constructor)\|\|void 0===e?void 0:e[Y])\|\|p(t)\|\|h(t))}function a(t,e,r){void 0===r&&(r=!1),0===u(t)?(r?Object.keys:Z)(t).forEach((function(n){r&&"symbol"==typeof n\|\|e(n,t[n],t)})):t.forEach((function(r,n){return e(n,r,t)}))}function u(t){var e=t[V];return e?e.i>3?e.i-4

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113657
Category:	downloaded
Size (bytes):	35807
Entropy (8bit):	7.994448207898337
Encrypted:	true
SSDEEP:	768:GeGIpaEdiOh6SlRpX1j6M+m6TRvY9YIiLcIA4WHioUx5vib:hGIp0ARDj686lg9OkHcxs
MD5:	FCF71472EFC9E614B10DFD499805F729
SHA1:	CF1FA991F9F08068F8F5F4D188D741BF5C2B7722
SHA-256:	23FF9B1A108B620EB12123003F37200042B120F3A554D3772B55F6366BDD4652
SHA-512:	B01F793C888C512F4BD1252EBA17A30C16BE3EC5E5A48BBBDD8F724EDCAEB2FD810439050A3097C27DAFDD1DE9235B39B7CF45D5341CC43A942F3F529891F379
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js
Preview:	...........{..8.(.........,.-.......gglu.. .m..I....~..oRv......i.(....P(......k............o.6>.\|..d..........O...V..}.G..4......9.l..F.mDI.f.4...o,..EA.1...F1g..,...E..Gy...,No6.@..l....n..;....P.fQ...ty...b#I.(d.A2!j1$..m....6n.Q8.x..Y...b#c!....\|.p..w#..F..i..s.Gc..b..9U.k......&@pJ..'40J......e.$.k.L(b...F.n.+..nO..6@n...A.&.,LVa......Y......V..o..% ....,......:..e.-XR. <FE.w..b..P......r.b.["~..!.....y.......V...4.;M..Y.X.{.......0].N..,.r`=...Mv....;...k....w.1p.q...(.u.3....;).. }...s....'....c...o.d....Ax.W..._...?.9...........3..MWI..3.p3..u.m$~Vo:n.'.8..!5h....y...6=7...hz.......f.-.).......Nc..:..u.g...~.8..4.....0P......$.=.a....#._..3.t..7Q...-....6..j.\|....5-...B...}.VQ.&/...e.XeI.C../.y...{...1...Y..g..`'..F..h.o.]SHW...,..Ac_%y...M..u.O..U..`.&...Y.}....Tu..z..iv.....5..M.q.. .Bz.,..oSS.%..y.....gS1s.(.........%,fE.m.@~.4.........7.x.$0mQ..o....J.J^....~......u!.~Z.iw.b...Q~).=..Tq.:.7HH.E.&6.D`.(..Cxmf.(o...^y_.v.{..K<Y.5.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with no line terminators
Category:	downloaded
Size (bytes):	361
Entropy (8bit):	4.6743574635866665
Encrypted:	false
SSDEEP:	6:1sEF4lLVOoPkhX9FHLt3CJH6LQu5KQXsnAuAuvqAZ7RnVl5+HNQcgET:/F4ffkhtdwaLZK7nJzRnVb+tQjk
MD5:	EDA4E638FDD1B8DE8F97EC781E8242D6
SHA1:	A8C0716A4BCCF2805899403AF14E7B9216B19573
SHA-256:	5423F185195F046D0F3893F674E072BE43E47C6124DD6CCBE214E896B1944D43
SHA-512:	6B0BBB532CA0F901059517960261C0C6E1577B31F4E207C3909ABA5FA0D64E03C18E5EEE10F8A6773A4870CDFC3F0D642F761C8D8E7B6643D023161C23554BF2
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js
Preview:	jQuery.timeago.settings.strings={prefixAgo:null,prefixFromNow:null,suffixAgo:"ago",suffixFromNow:"from now",seconds:"less than a minute",minute:"about a minute",minutes:"%d minutes",hour:"about an hour",hours:"about %d hours",day:"a day",days:"%d days",month:"about a month",months:"%d months",year:"about a year",years:"%d years",wordSeparator:" ",numbers:[]};

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	7.762338770217686
Encrypted:	false
SSDEEP:	48:c/CeK/fE+XoVldIkPdTWbuf173xX964boBdIhLE:ntcx/Iksbuf17f64borIK
MD5:	8DC34013E911C5F68FC2BCA0400CB06F
SHA1:	16BAFA91AF100D65C4945F04E0C6E1643B98CF00
SHA-256:	795029D360C3D16233FCE96F1BFF13C261535C0885FAE806CFF766F32D96BCEE
SHA-512:	83ACA42A30BFD629BC1E88D3ED154475E7949C1B154D19E6C9EF1DE825BA7967C0B6DA9EE79E7B420668242CCE5931DF344C97278A254F0A72C3D09EABED6051
Malicious:	false
Reputation:	low
URL:	https://client.ppe.repmap.microsoft.com/Images/hipaudioplay.png?vv=100
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....pHYs...........S.....tEXtCreation Time.05/06/16...o....tEXtSoftware.Adobe Fireworks CS6.....qIDATh..=l.E.....H..H*.\|... ...&.D..).@....&...N....)_.E ...(.p...p(H...Ht... ..0............i.}s.....{`ss....;.......:...u..."....Az.r.%.9.\|....wU.j...o....N4...~....g.u.=`.;..9.7.%....Ad#......9....~7.....&.a........`]x^D....&,"..kv.l..K.S+!....#{.xm.;..%.+F<.\..#...bN...2...\.".I..U]..#.dWy$."r.2;Z...w)oD..H..u..M.'.k70.<4aG..`'~......k31W.2!Ue.A"..j....X..C...dNUd.... .j.\|c."..../..P.MXD......C`>7Y.K...n.....U..#..^4....Uu...Q.);.`9q.53..n.@.......A6.E,6.-d; ........nl.>..."..N7..9\6.....p^a..4aG...3...gUu#..j...2............f.....^.)...Udo'&..G.C.Z...L).....".t...pCD..n..a.....E....F...o.k.Y+b...[...gT..... ...]....V..m.!\..SCwh8w..J^.3N........\.W.....3.....lP.Da........-..........@_...i......r..%..)E.Q...3..M..o.$...`...".......-/EHIDZ.q.MC.......D.Q..".. ..#...................1...p.x?dKP.=...{u\.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 223759
Category:	downloaded
Size (bytes):	54325
Entropy (8bit):	7.996017457525811
Encrypted:	true
SSDEEP:	768:MBOXdNQNgHZp9Ga0EqoitKVFF9dMVtakANyFeDpz3ZSgaDpk4JGUISrX+pk7RU/P:bDQNg5pFneONYu9ZpfUv7+m7aITS2Du
MD5:	799F880143F17E47C4EFDBB3FF35A54C
SHA1:	8CECC74EB422322F78EDE1111F175A28725CCA9F
SHA-256:	EA70CC2977F4DEB5236041A7A0628FA671FB8AD20A5E9E3FD6885A11359EF2FE
SHA-512:	46E811AA3D03023596B47DB39B6FABCC1A4B7388C7F0A187A4C23B024695593702A70227F5B770174A258A265A48D4F87EF01281210229E51022E9BC6948214B
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
Preview:	...........k{.F.0.}...gF.L."..eR..v.y.O....g...............~...@....f<...F./...u...;............x.y.C...y...sx.....^=}.....N.W.I.Y$.....".w....$..\|..a...+.7O.eg.gW..2...8..2)J..<^f.:.4..;....<}.....ZK.......5..,;iV&Q...9......;U:....$....DyVd....Q...N......N..".;.,//.8...X..ZP7......&shpA...a.I.C\U0i.&K..}m..1..9.N.u....^.'I/:......r...a^Ee.f..oq..e'..y..U..;...T(...<L..;X.."..8-}.^L.._w.....f.w..V.x.kK..K../.A..[....oE....G..ao0...\........Qv.7..eX..70.....\|.s.}.#...:..t...$.}=....s..g.}Q..........SO.....p.%..v..\|.Fo.. ..,e.......=;;..7....J#......{7o....;.........<..?.....G._..}..(..k?....2.......J.E.z.^.O.....}...XWe.....O...,C...+......O.r..he.............$Y.;..?).y....&.$..u..m.~.Z...2./..\|9..(.m....W.8.?QO}.....]....Y..z..=..2........>..8...87.&..ajn.m.E.,.<...n.t..`......\|..s7..v.w.z....d{...m.^..Y..AA...,C^...:0.~A.]....,...........6xR..8.p,./?..~v.+../c..Z...$.....Ysg....U....H....._q....o..acC...fpv.fb.....\|.?.-V

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	29150
Entropy (8bit):	5.087192787978826
Encrypted:	false
SSDEEP:	384:Sws4L3Ak+wcXSfQFGKcrkTl/wq2IJuNqP1qlZCjBcWeQz74IU9qsLqBEaSQ:Sws4L3Ak+wcXSfDKtH8Ytq7CjBpX92Hw
MD5:	06030917BD973B8581AE831ED724550E
SHA1:	3D0EFE2E5FB6C5DFEEC6B0B9BF396B50F503E60F
SHA-256:	2111056BD7ADB3FD49D97741D30B1B3F55DE63FA73B7D430EB491221EBDF5780
SHA-512:	D4C37F9FA863A568E1590FC88DABF1DDD6334E7C6F742120B389F93AABAA5A256E858839F71E49CFE4874AD6CDA34D39C41291FDC8D7CD21BAAA5B612A0D8A48
Malicious:	false
Reputation:	low
URL:	https://site-stlp3.powerappsportals.com/_portal/0dd2fae3-0067-48b3-afe9-e29aa089c24a/Resources/ResourceManager?lang=en-US
Preview:	....window.ResourceManager = {.. 'Cms_Sitemapchildren_Update_Label' : "Children", .. 'EntityGrid_Url_NotFound' : "A required service URL wasn\u0027t provided.",.. 'FileBrowser_Header_Label' : "Choose a file.",.. 'ADX_EventSchedule_AcceptableDays' : "Acceptable days",.. 'Confirm_DeleteMultiple_Entity' : "Are you sure you want to delete these records?",.. 'ADX_Blog_ShortName' : "blog",.. 'ADX_BlogPost_ShortName' : "blog post",.. 'Entity_Create_ADX_BlogPost_Label' : "Blog post",.. 'Entity_Create_ADX_Blog_Label' : "Child blog",.. 'Entity_Create_ADX_Event_Label' : "Child event",.. 'Entity_Create_ADX_CommunityForum_Label' : "Child forum",.. 'Editable_DeleteMultiple_Tooltip_Suffix_Singular' : "Child record?",.. 'Editable_DeleteMultiple_Tooltip_Suffix_Plural' : "Child records?",.. 'Entity_Create_ADX_Shortcut_Label' : "Child shortcut",.. 'ADX_BlogPostComment_ShortName' : "comment",.. 'ADX_PageComment_ShortName' : "comment",... 'Entity_Create_ADX_BlogPost_Tooltip' : "Create a new blog post",..

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 223759
Category:	downloaded
Size (bytes):	54318
Entropy (8bit):	7.995006031600911
Encrypted:	true
SSDEEP:	1536:GPYhFQ0hY97NgEQMoCG/D6oAPSZGh7Xifaz8TAiQzsr:Gn37ih787GA8Ei+sr
MD5:	3F98A175D5232F665BEFFC23352D7176
SHA1:	8413FCCF22CEBAAED144736F5415F09EFD45CE48
SHA-256:	C6D80B97A3828280862163C72A94F5902F10D927FA1F6BDEAB5479B94F04F5AC
SHA-512:	93D0C9BBB7B204AE18A2392F137DC02B71A9E5352EC24267C2CEBAE5C286EEB68BCABF73F3F4B6DA1DF1D49E3998F6190D843144CD1ACDD5B4AA707CDF7CC24D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js
Preview:	...........k{.F.0.}...gF.L."..eR..v.y.O....g...............~...@....f<...F./...u...;............x.y.C...y...sx.....^=}.....N.W.I.Y$.....".w....$..\|..a...+.7O.eg.gW..2...8..2)J..<^f.:.4..;....<}.....ZK.......5..,;iV&Q...9......;U:....$....DyVd....Q...N......N..".;.,//.8...X..ZP7......&shpA...a.I.C\U0i.&K..}m..1..9.N.u....^.'I/:......r...a^Ee.f..oq..e'..y..U..;...T(...<L..;X.."..8-}.^L.._w.....f.w..V.x.kK..K../.A..[....oE....G..ao0...\........Qv.7..eX..70.....\|.s.}.#...:..t...$.}=....s..g.}Q..........SO.....p.%..v..\|.Fo.. ..,e.......=;;..7....E.F8+7.K?.n.y'.rw.........x~...=?.?...z~.?....<...(H./.....V.....yx.?.O.>l...E..c]..n.?..>......%<.....?....w........../.2.^...d........1b...4~.)\W....k-.n.0..._..8....qZ..^...D=...~..w...^g.........*.r.......d.O............a....R.)O.[v...C......2.....s..y...o6...6...z}8d....e<+..y.cs....X...v.O...p.....3.v.~D..IAo.<.....,H..9.xx....h.....B\.f.a.&..V...no"MJ.R...6...Y.....F<...9....s`..Q...X

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	405
Entropy (8bit):	6.927238031773719
Encrypted:	false
SSDEEP:	6:6v/lhPGtyR8R/Chm+jnDs9cCXz6fXIpvI+WOcy0f11VTaENo+7PfW3e37zt1afwp:6v/7SyG/HYfXJOvU1zTa8o+W8
MD5:	D4FFE61373F6AA32EEB8CA7CD41AB980
SHA1:	4925FAC4BC73EFB7C7BBC32B11C435ECF1D61674
SHA-256:	D5C54FFC6B8BD44D932BE8F37B1CD5B666205C7574F9D56EF68E56F83E08FFAD
SHA-512:	0F7EDE96F20BB3C053C246FFE1EF8CE739CEF7757FAAED031A365299B88664A046557C2C7FDB3BADED070BA4EBA1A14950D7E3A066B4976BF07142CEFA48BEEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8.......sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<....IDAT8O...0...nf..y.,X4.g.I.h4..H.`.b.bA..f.n....%.=.iS.?N....^....A.(...~.i..m[.Qyz..iB..(...8...<G.........y..$.8....EQ.u]..I..(R.l...a...=..?t...CUU.......-..7.!..@.u0\..y.@..[a...p@.J.......e..>.Y..i..>A...+.,[. X9..z....B.4..+)..`n/..Q..>...y....e<....IEND.B`.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 10 x 10, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	237
Entropy (8bit):	6.43867499964275
Encrypted:	false
SSDEEP:	6:6v/lhPUg/6TsR/4x3zZeu9HsFImSAtIn4Y7FdLLZChrT8up:6v/7t/6Ts/qzMW5mtIn4wmRZ
MD5:	74710B068526106916E5A9AE5B70FA64
SHA1:	2E7344458A5EB6EFB65976EE144BBEDBA680B5AC
SHA-256:	55B9B171BB9BC15ACDD21C7A186E1268BC774B6A7C5A6FBC2F2BFEE564890325
SHA-512:	6D66F49A52C8A4E0EEB0C4F67DC85CAFEE5C2F8716E8E80EB5BE6C266F4E7CFC161EA5B0937A383BA13B1DD5B97742D70FA9630A502F87BE622FF0512BA63047
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/img/close.png
Preview:	.PNG........IHDR..............2.....pHYs.................sRGB.........gAMA......a.....IDATx...... ...(./K vd........v........!.`?p.......]'g.."...,6%..`gC..%`s.$"..<...=....e..4X.._kQ...e..h.-.}...3=.e/.D..C....ob41.x.....IEND.B`.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 444357
Category:	downloaded
Size (bytes):	121259
Entropy (8bit):	7.997406222796355
Encrypted:	true
SSDEEP:	1536:YfwluSACBAwNjnVCN2xrnCBjWmIYnJFFiNnybf8DkmN2jTl2Lx2OBQmBcy5wIorC:w/S7ht4ONJJ2jZqxdmy/GzYr
MD5:	5B2E3B2B1A706C0101B503B72F0A9B6F
SHA1:	4611FB4775572B46A5A14A6B12A52B558831A18D
SHA-256:	D40DCDEAA08322A4EB75A7C4B2CD80675D5A75D4542A98B4C3E4992A810E9778
SHA-512:	73A01455BC664165BEF6B89916FD9EA013C276DB8A5F0309D07E6BC8C4AAFCFB5F17177BA846676D04AACB18060FE9375C4C2FA13F9B0A704A2458E5C5ED74C5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js
Preview:	............{.8.......f.cw...Wl..Y.U..$..Iw.2.d.v.%.$.1..o?.$%J.SU.{w.}.S.H... .......O.....2..\.T..../g..+.............F..7.^\.x>....3....0.x..F.0...Wf.o..~e...J...(..9I\.8.Bc./.T...+;J.gW.:..6o..P...o..1..a.9.b.....G..."pYTyy.....Da.N.J...=C#....M..;b..%.I.%......!E.15.[...:..P.........8_...L..ou..ie..\|.IXy.....x.`Z...bj......I.a.,z...~%..B.....:.....L#;@...`..i......cTt.V.fs...L..8..s...R./^...*.?.0h...+.f...6:......d...>M..q1.;.......C.'.....G...?c^....\-...q8..@.u.b.,..+..!`_.....qry.?]..<>mM.......R........l..uO...q.G...c..;...~.sX.Y0M....g.w.>....'a.6g.G;.....9.b.;0.U[.j....w..........JM..Vc.;...V..wU...TYew...?5....va8...i...$.......\.l...j?EC.h.&U....E,YDA...Na!..T..$k..[..2..j./.1,D}LdY=..a.>\|k....NE/.A...}..&. ..7%#..o(a.S....e!P8..UK.#.n.{..@.I....uVva.....$z#...[..CX......l.}...Q.......\.n...........Z...LK.~.\|."...D;u{>......T$.C..^\|%..'U....k2=...)Y! )..+.Y.#%........C..?2.r_....%'>.....^.3V..H..zSF..%C..G..`

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64188)
Category:	downloaded
Size (bytes):	124379
Entropy (8bit):	5.267407433606125
Encrypted:	false
SSDEEP:	1536:VvNz1pz2PfkXiaEn0RVnBE6KSBuX6hz9uKz2xO4x:VV5tG3txfHX63h2x
MD5:	AE97B5CA1F7FBCD1C614EA79C20F51B8
SHA1:	5EDD02D19E761CB33D6320B1DA8E596E8A50C544
SHA-256:	CF8A74069F5BB5803D74A2692EE52207AC33236354F01F8A85C23CE22C3B38BA
SHA-512:	8A2670479F9B23DB1845AEB38E3077634AE138F63CB0EEE04D53A7A2CDDB9201B6DEEC1E196CEC10BA83A9DAB2272DB0F373DF0018BD6D4679320E07B24E0B33
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/997.dc24e4c793.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[997],{321:e=>{./.object-assign.(c) Sindre Sorhus.@license MIT./.var n=Object.getOwnPropertySymbols,t=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var n={},t=0;t<10;t++)n["_"+String.fromCharCode(t)]=t;if("0123456789"!==Object.getOwnPropertyNames(n).map((function(e){return n[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(e){return!1}}()?Object.assign:function(e,l){for(var a,o,u=function(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}(e),i=1;i<arguments.length;i++){for(var s in a=Object(arguments[i]))t.call(a,s)&&(u[s]=a[s]

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	downloaded
Size (bytes):	431
Entropy (8bit):	5.272650110738977
Encrypted:	false
SSDEEP:	12:+dmcXylmcXytfCqYYPXaPXA/y/NpK2QiT33Uxseo1k06SVV:imcClmcCtH1PXaPXA/y/3rT0xKk0jV
MD5:	F68105A7CA584E053DF10826A91E5A79
SHA1:	D2A16C1AFEAA5A410971DB9623BD5292990DE652
SHA-256:	F9725C7AB149B4FE9765439011492898A65BCC65735C01D52BAF74742EE22057
SHA-512:	7FB5940365B86441BA719A277A61A9CDFFF6EC7D7F29E17503CFCC28AFAC9B9FCF8540FCED3656FD17CCAC0A1612C7A64423BAF27787428CB8EB1E3F2253FF1E
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/73.fa3cf8a2fa.chunk.js
Preview:	"use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[73],{9073:(t,e,r)=>{function s(){return s=Object.assign?Object.assign.bind():function(t){for(var e=1;e<arguments.length;e++){var r=arguments[e];for(var s in r)Object.prototype.hasOwnProperty.call(r,s)&&(t[s]=r[s])}return t},s.apply(this,arguments)}r.d(e,{Z:()=>s})}}]);.//# sourceMappingURL=73.fa3cf8a2fa.chunk.js.map

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1525
Entropy (8bit):	4.80220321270831
Encrypted:	false
SSDEEP:	24:jQB6rLbbhhye8jDjpfj/MALSj0eajoq0MgV05SkuVTgEbwe/sT5wiMa3sr6sHr3H:j8eLrynvlwIeyoJMluVEE0B7srH
MD5:	ACA0F1B02DC406E76DDC5F2BDEBEC6CE
SHA1:	594C930BE86B8843377565E349D2A10F1755A13A
SHA-256:	0446C6FD9AEB7DCD7CC089FA25323B1AE9AFA77B4CF8D4449F7D2D1B2467393A
SHA-512:	06887860F73D38799FFF8BF5B2972160B68C303EC904813861190E9A8A6477E4D300882994D661FDFC118C408625C537D8B28287DC9941D50302BD91C88ED98F
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/js/Common.js
Preview:	.....function GetCookieValue(cookieName)..{.. if (document.cookie == undefined \|\| document.cookie == "").. return "";.... var name = cookieName + "=";.. var cookieArray = document.cookie.split(';');.. for (var i = 0; i < cookieArray.length; i++).. {.. var clientCookie = cookieArray[i].trim();.. if (clientCookie.indexOf(name) == 0).. {.. return clientCookie.substring(name.length, clientCookie.length);.. }.. }.. return "";..}....function DeleteCookie(name)..{.. if (GetCookieValue(name).length > 0).. {.. document.cookie = name + "=" + ";expires=Thu, 01 Jan 2000 00:00:01 GMT";.. }..}....function GetUserSessionData(key) {.. var sessionStorage = window.sessionStorage;.. if (sessionStorage[key] == null) {.. return "";.. }.. return sessionStorage.getItem(key);..}....function SetUserSessionData(key, value) {.. var sessionStorage = window.sessionStorage;.. sessionStorage.setItem(key, val

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64632), with CRLF line terminators
Category:	downloaded
Size (bytes):	112850
Entropy (8bit):	5.0485246151260705
Encrypted:	false
SSDEEP:	768:XD0MBzrYddpLUOGhCw+duCLKiXuIExcqWbMrwBEvQhzqhoi7EgWC295FNoBT6D4m:U6rwBEYhzqmHeBhc
MD5:	6E25944320659642291DC505AC6E6477
SHA1:	4EE949906C661D8AA757578CA7026557B0BE59A0
SHA-256:	06BD7EBB9BB138A744ED6108AA12A7D6B36B2B381C2EFF95C923601F2DE00EBC
SHA-512:	D6CB965053AAD04CAB08B01D9BCBF5CF615292A34F4DDFC9461F742853A22CC6E4F51E949B1A74F694D9FB922264CE0DF516721EBCBD2C959B3B9AEEFDEE9A38
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/preform.BootstrapV5.bundle-6e25944320.css
Preview:	.prettyprint{padding:8px;background-color:#f7f7f9;border:1px solid #e1e1e8}.prettyprint[class=linenums]{-webkit-box-shadow:inset 40px 0 0 #fbfbfc,inset 41px 0 0 #ececf0;-moz-box-shadow:inset 40px 0 0 #fbfbfc,inset 41px 0 0 #ececf0;box-shadow:inset 40px 0 0 #fbfbfc,inset 41px 0 0 #ececf0}.prettyprint .com{color:#93a1a1}.prettyprint .lit{color:#195f91}.prettyprint .clo,.prettyprint .opn,.prettyprint .pun{color:#93a1a1}.prettyprint .fun{color:#dc322f}.prettyprint .atv,.prettyprint .str{color:#d14}.prettyprint .kwd,.prettyprint .tag{color:#1e347b}.prettyprint .atn,.prettyprint .dec,.prettyprint .typ,.prettyprint .var{color:teal}.prettyprint .pln{color:#48484c}ol.linenums{margin:0 0 0 33px}ol.linenums li{padding-left:12px;color:#bebec5;line-height:18px;text-shadow:0 1px 0 #fff}/!.. * Datetimepicker for Bootstrap 3.. * version : 4.17.47.. * https://github.com/Eonasdan/bootstrap-datetimepicker/.. */.bootstrap-datetimepicker-widget{list-style:none}.bootstrap-datetimepicker-widget.dropdown-me

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	625
Entropy (8bit):	7.484713757728487
Encrypted:	false
SSDEEP:	12:6v/7m/6Ts/rQmK0CiAUo4yVKaqswCDW0WAwsg38up6f0M8o8yXOBwrFuXqam4:b/6vmEVx4yVvDW0is88eHozDrgXqF4
MD5:	1CCFEA34F655127024E56A9182D069B2
SHA1:	F01C37FC36D6F283021BFE2021F884756ACC0830
SHA-256:	DDEB1C61FE3FC1C4195D6AF3CA1514F8EB78DE09E6DE3DBFCC960DDFDA93EE54
SHA-512:	E54442CFC5247B8D7137EB2389CB1E9B66EA2CDF4DBD062BB680D51FB50323CBECB908A6764CA29CEAEBB057C1FEBEE0FB0D7A1E367030531B63CE92B0F9A0C6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx..R.q.@..=...e:..Dt.+.t.+@. #.'..A.{,U.]Ap.8..T.. .3B.......3.......o.i..n..L.........}..x............Am.p..asd.$..WL.'...I.g.G.-M...c....Q.-..?......^.C..%8.^...(.lW....M..r.....x...'..O..9a..H..L..-.MSD.v.!.1t.{w..S..a..?..1.....q..l.Z.>..fO.t.?...8......9uK..pTU;....f..@..w....6......Dx.....i.._.z..h..b.y.f.S......1...+.0......1....e...,.6%.s...A.@.Qo.#.z.ht.,.K..........X...wn..4t....V.D9}p.}+H.S."..M_.<.H....{Z.Xj....0...g.....Uv.{ng+PWxl....'jkfKB..&..h. ....x...Z@.z.\jq....N........u.W.....IEND.B`.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.625316929997096
Encrypted:	false
SSDEEP:	3:tpSf4Ck8efFlK5ly:tak8efFlyly
MD5:	D1690731F22021E1466FBCD0DB6326EF
SHA1:	78F95BA0B7F82BBB7067000242DE860594ABD9C3
SHA-256:	490216DF4F089BB5C249BCF4034D0671254CA4236EC3ECA935AAC4B17E0FC7F3
SHA-512:	10B3CE812684D28DC72B74BA220E9A0DEE38550D49D25BB40B9EEB8764EE386E5F530D28A5E7C8E159B5C672D85D8649B102F3F04BD96092F9787ACACA4DBDF1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAnYh4U85ulXExIFDURbFPwSBQ2L4FIoEgUNxK_d4xIFDW1rCkoSBQ2VKJT-?alt=proto
Preview:	CjEKCw1EWxT8GgQIZBgCCgcNi+BSKBoACgcNxK/d4xoACgcNbWsKShoACgcNlSiU/hoA

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	46376
Entropy (8bit):	4.760560792293901
Encrypted:	false
SSDEEP:	768:QgRN7ChZGd/5zEhQ49zXWV/eTSLtiMK7OQyOYZ:V1d/5edgVrlH
MD5:	DBFAC7887A157C9B73DC42927FC15B74
SHA1:	435FD188BF66F0207EEB298DD13228D17D36E4D1
SHA-256:	FC66E3943BC6EDC7B1F79D952D31DABCBA3BD576190DEEB9A7518CEE6B75C5A1
SHA-512:	C1918B35A03BD2110C2CB4EAD140BA342C54EE7BEE2C1E4B6582B56B86DA93AECDDA92DA626C7B15BDEBC067893ACD354919495551E71EE0C9D5993B43433958
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/js/Webtrends.js
Preview:	// WebTrends SmartSource Data Collector Tag..// Version: 8.6.2..// MS Version: 3.2.5..// Tag Builder Version: 3.0..// Created: 04/01/2011..function WebTrends() {.. var that = this;.. if (typeof (gDcsId) != "undefined" && gDcsId) this.dcsid = gDcsId;.. else this.dcsid = "not_a_valid_dcsid";.. if (typeof (gDomain) != "undefined" && gDomain) this.domain = gDomain;.. else this.domain = "m.webtrends.com";.. if (typeof (gTimeZone) != "undefined" && gTimeZone) this.timezone = gTimeZone;.. else this.timezone = -8;.. if (typeof (gFpcDom) != "undefined" && gFpcDom) this.fpcdom = gFpcDom;.. else {.. if (/microsoft.com$/.test(window.location.hostname)) {.. this.fpcdom = ".microsoft.com";.. } else {.. this.fpcdom = window.location.hostname;.. }.. }.. if (typeof (gOffsite) != "undefined" && gOffsite).. if (gOffsite == true \|\| gOffsite == "true") this.fpcdom = "";.. this.navigationtag = "div,table";.. if (typeof

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	7.072122642964318
Encrypted:	false
SSDEEP:	12:d44xCq3nQQ5Q36sd0Tc/ET4Io9yjPy00EjNF8:d40CqXQQ5E69qEkI4Wy0lNF8
MD5:	309B41EE7A44BD51E5D1B52CCC620E5B
SHA1:	B162CE55DE01BF7C005F8CE4D4D7C32E7AEACA08
SHA-256:	F213507641FD02EC43981535823474ECFDE973D1B33A6CD385F1F0827FD4B528
SHA-512:	9279138126F8FEDD3AEF32BA4BCD78D3D26BBD4E7DE6F3B21014B96C34D7E69BC4C6471CC94772346CB6C7F9020EB5FE1A3A96686A5B250F5CCDEE54A0936F4D
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/hip_text.gif
Preview:	GIF89a.....;....333..........ZZY.........fff.........ssr...........................................................................................MML.........@@@....................................!.....;.,.............p.+.....9.P'..D.`..........t..pB\C.k..n...[..x7hRt..x7-}.92....}%p5.+..8..9552...n2...#.3//...3../33..."..3+.../9..22....3....+./.9.2......9.........3.....}(.).....5..........7......`...........,"J....D>Dlh...F4D(..I..I..@...!..0]B..d%..w...;

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=FBXBLxKPcHVHvyZc190yZnPOxwG7T701xV2q4Qc0VUY4VIehA3ym4L2M_3PgX65SwCpAxaS32-mHoZGgV2tBDKXWEb2uMkin5UAfGdN8JJ34CT5Qv1DPq1-lPNlaQXK7j1W2514Vbh0bToulu39K5_I3U2qzflWMZML9EDPd-42P07ZVsAweU5sarU2biCUhCNPqzUgn-hXjFMfNDqduBQ2&t=ffffffffa8ad04d3
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	275900
Entropy (8bit):	5.168518547855712
Encrypted:	false
SSDEEP:	3072:O5uV+wk0VtPOcv6TVP41OHQsssXkjcTn6oVPIm5dcj6+3S3fKC0:QuV+wk541OvLXkszVwm5MLN
MD5:	7AA0129AD7E98D7D2207CC5526B07620
SHA1:	E8E07BBFCFAFF9457367664DA2352F2E908A7470
SHA-256:	85648E75BB056A7E1EDD3C79DB9DB1785274607D1519C1AA2947EEF5EDADAACA
SHA-512:	62F6DCAD2E8A18356C3E403F578A86A1133F8275756E5C6EB6D40C78706F83CB2C2D27DB7A811BD6983BA2026000CD5783EA2064C9C3C072AF356895388E9FC8
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/app.BootstrapV5.bundle-7aa0129ad7.js
Preview:	(function(w){function c(e){this._element=w(e);this._target=this._element.data("bsTarget")\|\|{};this._attachmentSettings=this._element.data("attachmentsettings");this._serviceUrlGet=this._element.attr("data-url-get");this._serviceUrlAdd=this._element.attr("data-url-add");this._serviceUrlEdit=this._element.attr("data-url-edit");this._serviceUrlDelete=this._element.attr("data-url-delete");this._serviceUrlGetAttachments=this._element.attr("data-url-get-attachments");this._serviceUrlGetAttachmentsCount=this._element.attr("data-url-get-attachments-count");this._hideFieldLabel=this._element.attr("data-hide-field-label");this._attachmentAcceptTypes=this._element.attr("data-add-accept-types");this._addEnabled=this._element.data("add-enabled");this._editEnabled=this._element.data("edit-enabled");this._deleteEnabled=this._element.data("delete-enabled");this._isRTEEnabled=this._element.data("rte-enabled");this._pageSize=this._element.attr("data-pagesize");this._orders=this._element.data("orders");t

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/header_microsoft.png
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65294), with CRLF line terminators
Category:	downloaded
Size (bytes):	92085
Entropy (8bit):	5.011925941956388
Encrypted:	false
SSDEEP:	1536:aN+LmIeHetKRe5YLbM/0o1u9YK9hwlS1FN8DVrryzoosZZwjb6jpmoXDIWPIvjXa:sIeK17ljFZZwjb6jpmoXDIWPgb+0Le
MD5:	BE8391E97DEA755C86C38DB4E43773D8
SHA1:	3E573E059A8C52A1B7063895562F6A23261F54A0
SHA-256:	BBB5F1A1DF8E94BE934B438B99E27173F2EC270005C7ABE07204BFE0DD64B134
SHA-512:	AB51CA9BDE0B02A96E34F1B1FEC7B8B5D3B688431C9ECF8EE26308E578A952EED1A067CFA8C09433645AD7FC287E72C09E2EF9B72724616F877B5915AD7D2056
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js
Preview:	/!.. Bootstrap v5.2.2 (https://getbootstrap.com/).. * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors).. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */..!function (t, e) { "object" == typeof exports && "undefined" != typeof module ? module.exports = e() : "function" == typeof define && define.amd ? define(e) : (t = "undefined" != typeof globalThis ? globalThis : t \|\| self).bootstrap = e() }(this, (function () { "use strict"; const t = "transitionend", e = t => { let e = t.getAttribute("data-bs-target"); if (!e \|\| "#" === e) { let i = t.getAttribute("href"); if (!i \|\| !i.includes("#") && !i.startsWith(".")) return null; i.includes("#") && !i.startsWith("#") && (i = `#${i.split("#")[1]}`), e = i && "#" !== i ? i.trim() : null } return e }, i = t => { const i = e(t); return i && document.querySelector(i) ? i : null }, n = t => { const i = e(t); return i ? document.querySelector(i) : null }, s = e => {

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54046)
Category:	downloaded
Size (bytes):	54095
Entropy (8bit):	5.09137383496386
Encrypted:	false
SSDEEP:	768:KgN/WydLs25udDqPzawfYp94aKafQuK2VZukDZz8gPDsoaYB:KgN/WydLs2bPzhYL4RafQyV38gPDsPYB
MD5:	6D4EE986C0201A17FFFB1BBFEDF66429
SHA1:	CC988D5B89F6DFED3FCD2AB1ADDB02875EDAA7D2
SHA-256:	35EF9EE74784CA244FDBE217E1ECC8688A0DFA2805B36AC8BAB7DA54BA9CC428
SHA-512:	E741666D726FA1E6DE8C79A044E2E538FD436392CC2B4282E331756DA630B2B8DA7279F34BEFCCA4C93A35736FD9AB80567897ACB9B4B0D1F3681694E5C99784
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/137.8295ee7e5a.chunk.js
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[137],{8569:(t,e,n)=>{"use strict";n.d(e,{j:()=>u});var r=n(250),i=n(4602),s=n(6816),u=new(function(t){function e(){var e;return(e=t.call(this)\|\|this).setup=function(t){var e;if(!s.sk&&(null==(e=window)?void 0:e.addEventListener)){var n=function(){return t()};return window.addEventListener("visibilitychange",n,!1),window.addEventListener("focus",n,!1),function(){window.removeEventListener("visibilitychange",n),window.removeEventListener("focus",n)}}},e}(0,r.Z)(e,t);var n=e.prototype;return n.onSubscribe=function(){this.cleanup\|\|this.setEventListener(this.setup)},n.onUnsubscribe=function(){var t;this.hasListeners()\|\|(null==(t=this.cleanup)\|\|t.call(this),this.cleanup=void 0)},n.setEventListener=function(t){var e,n=this;this.setup=t,null==(e=this.cleanup)\|\|e.call(this),this.cleanup=t((function(t){"boolean"==typeof t?n.setFocused(t):n.onFocus()}))},n.setFocused=function(t){this.focused=t,t&&

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11717), with no line terminators
Category:	downloaded
Size (bytes):	11717
Entropy (8bit):	4.90299059918596
Encrypted:	false
SSDEEP:	192:tCe7qnSnOvg0mkhAeuMRa+ySQJBBzGj6F3lYj6F39j6F3g/:keqnSnSA8ySQJBBzGj6F3lYj6F39j6FM
MD5:	0D8F841437F1C86AD54318AD353323E0
SHA1:	C9CA6C5393492DCDAEA9516F2399C143D7D486F0
SHA-256:	D691DB162ACDE81487D3A3F9D21391EBB2FD5D7B9F8C626356BE5A4D380419F4
SHA-512:	5E5A37AB1FA1BC0ACFD782250CF5CC4B3C39ADB74DA85CB6C5E3DE20EB73A10E10D5C1870B5DD5C97A68330CF09557C5CCD241746405B4AA257BA72A72707E5E
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf-style.bundle-0d8f841437.css
Preview:	.msos-open .msos-inner-container:not(.msos-fullscreen) .msos-selection-container{position:absolute!important;z-index:1000;top:28px!important}html[dir=rtl] .msos-open .msos-inner-container:not(.msos-fullscreen) .msos-selection-container{right:0!important}html[dir=ltr] .msos-open .msos-inner-container:not(.msos-fullscreen) .msos-selection-container{left:0!important}.msos-glyph:after{font-size:9px!important}.msos-label{margin-bottom:0}.msos-caret-button:focus{outline:0}.msos-selecteditems-container:focus{outline:0}.msos-container:not(.msos-disabled){border:1px solid #949494;box-shadow:inset 0 1px 1px rgb(0 0 0 /8%);transition:border-color ease-in-out .15s,box-shadow ease-in-out .15s}.msos-container:not(.msos-disabled).msos-active{border:1px solid #949494!important;box-shadow:inset 0 1px 1px rgb(0 0 0 /8%);transition:border-color ease-in-out .15s,box-shadow ease-in-out .15s}.msos-container:not(.msos-disabled).msos-focused{border-color:#69c!important;outline:0;box-shadow:inset 0 1px 1px rgb

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (352), with CRLF line terminators
Category:	downloaded
Size (bytes):	26242
Entropy (8bit):	5.1450438039877335
Encrypted:	false
SSDEEP:	192:CtFu68InWd0jadv9FOwsU8PSZFX0fYGTEOTERKPZ2aJTi6uGRxc+KVEWnBUWq0qv:56KAhSGm6uzEWn2FuRMj
MD5:	D93DFB0A9A3263031EFE14DE91079B3C
SHA1:	DB2A11DB31E869C2B12FCBFE3305BAB567132204
SHA-256:	01F1093C118775D4E4DC518C538100DA13BB16E8B6281B69F5C7004662261E31
SHA-512:	6285FBEA8510FD4EFC8E4120E3CB3FC31ED19AEF5F6204ABF748E9C6AA12FDA3062F85B0DC18A1B85EEF690AE0C239BFACC070AEEC0607ACF833D1A150A6437A
Malicious:	false
Reputation:	low
URL:	https://site-stlp3.powerappsportals.com/portalbasictheme.css
Preview:	/*.. Code generated by Microsoft. Changes to this file are not.. * supported. We recommend that you do not modify this file. Any.. * change to this file will get overwritten with a theme applied using.. * Site Styling panel from Power Apps Portals... */.. :root {.. --portalThemeColor1: #B6B4B2;.. --portalThemeColor2: #605E5C;.. --portalThemeColor3: #F3F2F1;.. --portalThemeColor4: #323130;.. --portalThemeColor5: #F8F8F8;.. --portalThemeColor6: #5C5A58;.. --portalThemeColor7: #FFFFFF;.. --portalThemeColor8: #000000;.. --portalThemeColor9: #191817;.. --portalThemeColor10: ;.. --portalThemeColor11: ;.. --portalThemeColor12: ;.. --portalThemeOnColor1: #000000;.. --portalThemeOnColor2: #FFFFFF;.. --portalThemeOnColor3: #000000;.. --portalThemeOnColor4: #FFFFFF;.. --portalThemeOnColor5: #000000;.. --portalThemeOnColor6: #FFFFFF;.. --portalThemeOnColor7: #000000;.. --portalThemeOnColor8: #FFFFFF;.. --portalThemeOnColor9: #FFFFFF;.. --portalThemeOnColor10: ;.. --portal

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3005
Entropy (8bit):	4.3348196756520005
Encrypted:	false
SSDEEP:	48:ITWNX9q7aVxyFGwvqNTTswh11KdA/IMUitKhyWirt+NG/BC0/PTfhyr1+18:IiNX9oFG4qTJb0a/IMNURkt6GJZ/7fU7
MD5:	A870B45AC5D6B0D4E18C4829C7B660B4
SHA1:	2D3CA0E1F19EFDEB9B2DD3DCFFB17F8ABA118AA0
SHA-256:	144524233F795D6A425B76F7AE5C0BB622B5F67E2E6AE73532AD526528CA07CF
SHA-512:	295A21307D452F4BF51C62770C6A6B43CDB8B5A6BFA3617E068C8550285252B88F8BBF93A81C39E4BD7F73645EE094EDE0E2733DAFA5094E3EBAE20033363270
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/WebResource.axd?d=GHM95i9wZWpluj8Ln0FPv9fpK68eX7eoXS-Uy2Ovs7ACZOCNluIPjqvRGwcoj9YpJpYLzmEF9gMKjvyOI3LibUGPMFE3ZcqQDwRTIfQCwey5TmpKxfRe2KkpJjr4E7W0x9lfCkhTRpe1LeybGxXHYg2&t=638478749639812753
Preview:	function WebForm_FindFirstFocusableChild(control) {.. if (!control \|\| !(control.tagName)) {.. return null;.. }.. var tagName = control.tagName.toLowerCase();.. if (tagName == "undefined") {.. return null;.. }.. var children = control.childNodes;.. if (children) {.. for (var i = 0; i < children.length; i++) {.. try {.. if (WebForm_CanFocus(children[i])) {.. return children[i];.. }.. else {.. var focused = WebForm_FindFirstFocusableChild(children[i]);.. if (WebForm_CanFocus(focused)) {.. return focused;.. }.. }.. } catch (e) {.. }.. }.. }.. return null;..}..function WebForm_AutoFocus(focusId) {.. var targetControl;.. if (__nonMSDOMBrowser) {.. targetControl = document.getElementById(focusId);.. }.. else {.. targetContro

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55071
Category:	downloaded
Size (bytes):	15799
Entropy (8bit):	7.985179973188672
Encrypted:	false
SSDEEP:	384:UwXl87i4naaFtPESJ2DWOq1IcQS0SL7EOONPk:UwXW7i4naTSOAszOG8
MD5:	978A6C1AA934E5B1C5320D515FD25662
SHA1:	64636EF3E1AD607F095DBA6CB01447AC133B483D
SHA-256:	D1963B1837F4087E988FD18BB4CF25B38D61D675C4B6A6FC01158BD39945F10A
SHA-512:	411A51CC19890DC5B27E4800E5BB4BFB4D0E3DC076010C6AB8B10396524F4C996D86420888AF3A1632D5FB281CEB4373C18B0EEFC9F8A84AA59D295450393DA7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9...B.AwUeeeeeefee..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<..j..N.....0.......=..ox/+...9.sB..p.q.ai...?.....qw.D.X..b..?.bOD.x.B1..X..`.N..b..E...%JWg..x8.ys..:...I.....b1...q.......[..a..7q..N........._..4....&.. ........m&6.F.\.@.e.B..`.'.....0............]/.........`..iZ6......./f8..BCz_...i....MQ>..E,/x>v......{.........._.........Z.rP+......e..R.\.Z.u..3@./.oJ7.'.......%.;.WP.9.b..z._..b....0......X...Ro^k.lI..t..K7~.ep.`.)......'."".."....../..S....M..B5nEc2..g..m..\|f.{...pbi(.0.@[_Lc.Z.....U`./!..@.....p.-..kQ@T..8...-...0.....AX.D.?...".....5.NE..\...VQa.....,......?..M.0......_<......C..fOq..bz'..z/BF.;&.K......%.....g........f!..^.:Z...g...j...7.._........S.2/.2.n.....>.<P!!.Bv..J........e!d....B.Ra$.......N........> f.C.....^.D.-.e.c+...............!....$.9x...{.....p~._.0.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	dropped
Size (bytes):	478
Entropy (8bit):	7.072122642964318
Encrypted:	false
SSDEEP:	12:d44xCq3nQQ5Q36sd0Tc/ET4Io9yjPy00EjNF8:d40CqXQQ5E69qEkI4Wy0lNF8
MD5:	309B41EE7A44BD51E5D1B52CCC620E5B
SHA1:	B162CE55DE01BF7C005F8CE4D4D7C32E7AEACA08
SHA-256:	F213507641FD02EC43981535823474ECFDE973D1B33A6CD385F1F0827FD4B528
SHA-512:	9279138126F8FEDD3AEF32BA4BCD78D3D26BBD4E7DE6F3B21014B96C34D7E69BC4C6471CC94772346CB6C7F9020EB5FE1A3A96686A5B250F5CCDEE54A0936F4D
Malicious:	false
Reputation:	low
Preview:	GIF89a.....;....333..........ZZY.........fff.........ssr...........................................................................................MML.........@@@....................................!.....;.,.............p.+.....9.P'..D.`..........t..pB\C.k..n...[..x7hRt..x7-}.92....}%p5.+..8..9552...n2...#.3//...3../33..."..3+.../9..22....3....+./.9.2......9.........3.....}(.).....5..........7......`...........,"J....D>Dlh...F4D(..I..I..@...!..0]B..d%..w...;

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2463
Entropy (8bit):	6.994052150121201
Encrypted:	false
SSDEEP:	48:H0itvnLUG0J3nL8VO2ocia6Dk4MAbpGW4YBE/2p:HfNmT2QDnMAbsWTp
MD5:	93DE6FB07C1382459E473381DA5D0E7E
SHA1:	4E1208D482A7ABA8C86FDCF8E0E92C90BB8C8C8A
SHA-256:	E97FA0CFE4B0A7BB22E9713A67D4667DA064E674A944D607E78F0D3BF48E57A5
SHA-512:	B415DE10B55639DD5DFDD038FD490B675059122373659DD86AA00EBC7F6735FD22360264226F8675741FB76F3B3A16E9AB7FA907F489B377EF16E9222AA26E3B
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/wait_animation.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:BCB95722648AE111A86BB806ED51E581" xmpMM:DocumentID="xmp.did:185F1A028B0511E19AA1A07B5BDC793D" xmpMM:InstanceID="xmp.iid:185F1A018B0511E19AA1A07B5BDC793D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D7EC7F987A8AE111A86BB806ED51E581" stRef:documentID="xmp.did:BCB95722648AE111A86BB806ED51E581"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......................................................................................................

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42814)
Category:	downloaded
Size (bytes):	42863
Entropy (8bit):	5.192086366569193
Encrypted:	false
SSDEEP:	768:GmfDwwCm8YNKllU7CBh+b7JdNHejXI6iBKYH3zvkGeqD7/Znj1N0fDho0IU:GKsQs6Jd/6GHDvGqDZ1NMo0IU
MD5:	A46C4633C5FC92C87DD88B8704D25C6E
SHA1:	1856D93A8BE09683DD37F48FAE1D6CCC1AC6FD70
SHA-256:	4730A55F5E9B7DBB44FC707AD60C8AADE724F9AC44C13CAFF9239FDFC7DC548F
SHA-512:	D02E20AE1A236962BF556429EAD93AD342841E7863F7226F293360DED8BE84009D80522796526C89304876D554CDF425CC88BB348B978F8A4539678489CDE8C9
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/controls/host/372.1490f8bbd1.chunk.js
Preview:	(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[372],{4372:(e,t,n)=>{"use strict";n.r(t),n.d(t,{ActionMethodsWithConfig:()=>Ce,Canvas:()=>Q,CoreEventHandlers:()=>ge,DefaultEventHandlers:()=>Ee,DerivedCoreEventHandlers:()=>me,Editor:()=>Te,Element:()=>U,Events:()=>we,Frame:()=>V,NodeElement:()=>z,NodeHelpers:()=>de,NodeProvider:()=>f,NodeSelectorType:()=>J,QueryMethods:()=>ye,ROOT_NODE:()=>r.QS,connectEditor:()=>K,connectNode:()=>ee,createTestNodes:()=>qe,createTestState:()=>_e,defaultElementProps:()=>B,deprecateCanvasComponent:()=>W,editorInitialState:()=>xe,elementPropToNodeData:()=>H,expectEditorState:()=>Re,serializeNode:()=>se,useEditor:()=>X,useEditorStore:()=>Se,useEventHandler:()=>P,useNode:()=>_});var r=n(7284),o=n(9585),a=n.n(o),i=n(3049),s=n(4815),d=n.n(s),c=n(3149),u=n.n(c);const l=a().createContext(null),f=({id:e,related:t=!1,children:n})=>a().createElement(l.Provider,{value:{id:e,related:t}},n);function p(e,t){var n=Obje

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25293)
Category:	downloaded
Size (bytes):	43107
Entropy (8bit):	5.26903329129244
Encrypted:	false
SSDEEP:	768:jYsYjb/IQVTJp8tisbmc4cTcgjOjwc+2eV5G5c5qG2zucf:07IQVeruV
MD5:	805A1661B77834F61B0C8E1175DC9F90
SHA1:	38E8EEB48DF5906F796E4C9A4549DFBF0327D656
SHA-256:	B37275F7C7F76430F05A20E7D0DDDAC3649467DBC0E7AF58CC3F04B1EE6DEA81
SHA-512:	45004F96FB51B09AC26A409CA1BE79E48568026B1DEE9F0C55B6E5BB2958820AB96B3F6B5649E1BC7289D8E5D64334EA3882D7248926FE532AC7C7F2A7595142
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js
Preview:	(function(e){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=e()}else if(typeof define==="function"&&define.amd){define([],e)}else{var t;if(typeof window!=="undefined"){t=window}else if(typeof global!=="undefined"){t=global}else if(typeof self!=="undefined"){t=self}else{t=this}t.PropTypes=e()}})(function(){var e,t,r;return function i(a,u,c){function f(r,e){if(!u[r]){if(!a[r]){var t=typeof require=="function"&&require;if(!e&&t)return t(r,!0);if(s)return s(r,!0);var n=new Error("Cannot find module '"+r+"'");throw n.code="MODULE_NOT_FOUND",n}var o=u[r]={exports:{}};a[r][0].call(o.exports,function(e){var t=a[r][1][e];return f(t?t:e)},o,o.exports,i,a,u,c)}return u[r].exports}var s=typeof require=="function"&&require;for(var e=0;e<c.length;e++)f(c[e]);return f}({1:[function(e,t,r){./*. Copyright (c) 2013-present, Facebook, Inc.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */."use

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61300)
Category:	downloaded
Size (bytes):	164727
Entropy (8bit):	5.527686835651098
Encrypted:	false
SSDEEP:	1536:8819/khfi8Wo6f6uaCovOzAJhMRnjGhfQLEaXDGxcj+F7LwuojNfsqbc0Vzmwb54:9iIujhaXDCAfdnOATEIVA
MD5:	11A5A914937B75288F59799624B22C41
SHA1:	FA1304A3AAE266ECEEA76FF1BED1D2894DAF19F2
SHA-256:	0D123D26B7574F73FADFC2B904E098C4977CAFFFBA55A94F547ED5B23EBC4169
SHA-512:	51D67B6EC53CADDA946FFFA3BC82F3D5355E15407FDFF9EE9F01ABFAC91987EE1144016DB1BB15E9A502C1BE45D00CE25202D426707A8BC118627D2C37E2D811
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js
Preview:	(function(e,a){var r=[];function n(t,r){var n=a.Deferred();(function e(){a.ajax(t).done(n.resolve).fail(function(){console.log("AjaxRetry attempt :".concat(r));r--;if(r>0){e()}else{n.rejectWith(this,arguments)}})})();return n.promise()}function t(){var e=a.Deferred();var t=a('#antiforgerytoken input[name="__RequestVerificationToken"]').val();if(!t){r.push(e);if(r.length===1){n({type:"GET",url:a("#antiforgerytoken").attr("data-url"),cache:false},3).done(function(e){a("#antiforgerytoken").empty().append(e);t=a('#antiforgerytoken input[name="__RequestVerificationToken"]').val();r.forEach(function(e){e.resolve(t)});r=[]}).fail(function(e){if(e&&e.responseText){var t="GetAntiForgeryToken failed".concat("Details: ",e.responseText);console.log(t);ClientLogWrapper.getLogger().traceError(t,"antiforgerytoken","","GetTokenDeferred")}r.forEach(function(e){e.reject()});r=[]})}}else{e.resolve(t)}return e.promise()}function i(){var e=a("#antiforgerytoken").attr("data-url");n({type:"GET",url:e,cache:f

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084
Category:	downloaded
Size (bytes):	20314
Entropy (8bit):	7.979540464295058
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:9CGEiL/w7R8DW9Z5B6AasTv37T9Q
MD5:	92A840DC3D177339DAE03FEDF22A22B5
SHA1:	C1C9A6E6442388D07A9D9D72C12DA25094D6920F
SHA-256:	4A986BA8875F22A0EABC356112A6790F90E114ADB72EAEC4632E03812EC1EDE4
SHA-512:	98C705395DD249501D8069A03E0068BC9CCF4F2D139BEC63A00564C69CD21C05CB25CF56BA7B40822963737989D5048AD310E20D6022E84346C982CFCEF79E11
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65393), with CRLF line terminators
Category:	downloaded
Size (bytes):	217004
Entropy (8bit):	5.4841948592210805
Encrypted:	false
SSDEEP:	3072:i2LKvN5l5g7MwLG4XblC85EViTuTNdO4+ZsCE2OhqZGEJEVdRG:BLKvDIAcOViST7O4kHE2mtk
MD5:	02A4A6C39373C1742EF0F247B421588E
SHA1:	E4533D4C1E5C8DBF6333CAA053F0EA7C4C3F0F18
SHA-256:	9FFB2AF31694B78B73DE24FA3EDC29BC9C4D19F601DBA1328999A183F0B5658E
SHA-512:	30C40F5D08E4DB77F80DD51FC6609D8EC92F0D8336894C9F184F990BB4DB77CC1FA7A61A33886605E84198AB5F98E274278E2906470503C8A4859C07718FEBA5
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/client-telemetry.bundle-02a4a6c393.js
Preview:	/!.. 1DS JS SDK Analytics Web, 3.2.8.. * Copyright (c) Microsoft and contributors. All rights reserved... * (Microsoft Internal Only).. */..var e=this,t=function(n){"use strict";var u="function",s="object",fe="undefined",f="prototype",l="hasOwnProperty",g=Object,v=g[f],y=g.assign,T=g.create,e=g.defineProperty,I=v[l],b=null;function C(e){e=!1===(e=void 0===e\|\|e)?null:b;return e\|\|((e=(e=(e=typeof globalThis!==fe?globalThis:e)\|\|typeof self===fe?e:self)\|\|typeof window===fe?e:window)\|\|typeof global===fe\|\|(e=global),b=e),e}function S(e){throw new TypeError(e)}function M(e){var t;return T?T(e):null==e?{}:((t=typeof e)!==s&&t!==u&&S("Object prototype may only be an Object:"+e),n[f]=e,new n);function n(){}}(C()\|\|{}).Symbol,(C()\|\|{}).Reflect;var N=y\|\|function(e){for(var t,n=1,i=arguments.length;n<i;n++)for(var r in t=arguments[n])v[l].call(t,r)&&(e[r]=t[r]);return e},w=function(e,t){return(w=g.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var n

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2463
Entropy (8bit):	6.994052150121201
Encrypted:	false
SSDEEP:	48:H0itvnLUG0J3nL8VO2ocia6Dk4MAbpGW4YBE/2p:HfNmT2QDnMAbsWTp
MD5:	93DE6FB07C1382459E473381DA5D0E7E
SHA1:	4E1208D482A7ABA8C86FDCF8E0E92C90BB8C8C8A
SHA-256:	E97FA0CFE4B0A7BB22E9713A67D4667DA064E674A944D607E78F0D3BF48E57A5
SHA-512:	B415DE10B55639DD5DFDD038FD490B675059122373659DD86AA00EBC7F6735FD22360264226F8675741FB76F3B3A16E9AB7FA907F489B377EF16E9222AA26E3B
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:BCB95722648AE111A86BB806ED51E581" xmpMM:DocumentID="xmp.did:185F1A028B0511E19AA1A07B5BDC793D" xmpMM:InstanceID="xmp.iid:185F1A018B0511E19AA1A07B5BDC793D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D7EC7F987A8AE111A86BB806ED51E581" stRef:documentID="xmp.did:BCB95722648AE111A86BB806ED51E581"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......................................................................................................

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113657
Category:	downloaded
Size (bytes):	35813
Entropy (8bit):	7.9933603091137355
Encrypted:	true
SSDEEP:	768:GuwXn8kBZAqgpsnCq63v9K6eodOamRz3YkdBSqwSsg84Yk5RFB6:Jc8kBBnChQodOamRz3YQFSLk3q
MD5:	57911010756C90D58754C91EF1EE2765
SHA1:	BAA48FEF4866D7DAFD9F59417745EE838F0E63CA
SHA-256:	87C5385BA17F84CC25FB7BBE1EDB4169BC702842BD74B758ACDC130986D55BC2
SHA-512:	FF5A7B638CD9117C89C277F6846506D41768D3A30F81B63768379294160AEE89F0D60E853F938D28A654226E18FE3389808ECCDA7D106F76EBE95A53A00DD560
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
Preview:	...........{..8.(.........,.-.......gglu.. .m..I....~..oRv......i.(....P(......k............o.6>.\|..d..........O...V..}.G..4......9.l..F.mDI.f.4...o,..EA.1...F1g..,...E..Gy...,No6.@..l....n..;....P.fQ...ty...b#I.(d.A2!j1$..m....6n.Q8.x..Y...b#c!....\|.p..w#..F..i..s.Gc..b..9U.k......&@pJ..'40J......e.$.k.L(b...F.n.+..nO..6@n...A.&.,LVa......Y......V..o..% ....,......:..e.-XR. <FE.w..b..P......r.b.["~..!.....y.......V...4.;M..Y.X.{.......0].N..,.r`=...Mv....;...k....w.1p.q...(.u.3....;).. }...s....'....c...o.d....Ax.W..._...?.9...........3..MWI..3.p3..u.m$~Vo:n.'.8..!5h....y...6=7...hz.......f.-.).......Nc..:...g...~.8..4.....0P......$.=.a....#._..3.t..7Q...-....6..j.\|....5-...B...}.VQ.&/...e.XeI.C../.y...{...1...Y..g..`'..F..h.o.]SHW...,..Ac_%y...M..u.O..U..`.&...Y.}....Tu..z..iv.....5..M.q.. .Bz.,..oSS.%..y.....gS1s.(.........%,fE.m.@~.4.........7.x.$0mQ..o....J.J^....~......u!.~Z.iw.b...Q~).=..Tq.:.7HH.E.&6.D`.(..Cxmf.(o...^y_.v.{..K<Y.5.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28287)
Category:	downloaded
Size (bytes):	854454
Entropy (8bit):	5.353490881670294
Encrypted:	false
SSDEEP:	6144:+jtNO79kt1AgQHKUgG3b3V/l7lqJsusf6CSb0F0d4eBjEXJcXB:+xzKHjV/lxq3tCY0F0dtjEX2
MD5:	D31FE485CE19C172853AE34E3214830F
SHA1:	C167AEBA404F40C01E929D238E5E1370B782733A
SHA-256:	1BB9ECD31B0234FFD4217988447272C8F2760ACCD328482F9F39073081A82A6F
SHA-512:	91EB54A610D25B1A3D92299ECBF2D7C879C6BF09B2B207AA8F7A5C24C517DA51CC9DC111BE0EB8A10655496A9F0AF55220A0E35B127BF4612DDAF9B4AEB8454A
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/dist/pcf.bundle-d31fe485ce.js
Preview:	!function(n){var r={};function o(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(t,e){if(1&e&&(t=o(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var r in t)o.d(n,r,function(e){return t[e]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=18)}({18:function(e,t,n){n(19).polyfill()},19:function(e,t,n){"use strict";function r(e,t){if

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/WebResource.axd?d=n9YJYQapnswuIKsxDS4ywsPVv_yEhxx3lIL4ME74VSwD8iVwQTdF1YC7V6V2lbrXD0cziMEH0BlCXD8NfkddP8PQ8kVsDRg-A67yh9Jrvy7iDRdyEBqO-i-xW8jYAmtvhLpGr2K4hSjizAvWCdt5YQ2&t=638478749639812753
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4020
Entropy (8bit):	7.929907559552797
Encrypted:	false
SSDEEP:	96:1X+Yg6Iet+ZpBmQKEuhA/4oJqNoCkQV+CX8h:Fg69t+YfPhEBPnC+t
MD5:	36AFB641BECFAD75FED5F4E6E8C39268
SHA1:	2495652F017B7A06D796AFE9C4A06ECD54F9CCFE
SHA-256:	5C2192A3932CB78B431A1AC0F3F3D73414A31C63D5CB279F2687E58C72694200
SHA-512:	08C27020CF80A181B941EE144090FFBDD12ED34BA8CBEC037ACECE63F850FF8A69BE6DDB0EC24F7141C46F27779ED59AF84A55FB367C1B6F8893B444F44C5AF5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...H.......}.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....IIDATx...r....[ZZ..V.'0......].......z....M..U.%........C.....}...s...mIV.O5...... ...U.Hq@b......Y..../)..hy.._S......KzK...O\5EQ...(....B.(......(J ...(.......B.(......(J ...(.......B.(..H..EQ.C...V...7.//...~...?.....h4:.@TH.E....}........k.v....L./.@TH...pGN.;.....'.(s...k.......4GTH...'O.~...g[..o.."....l..>.G...;..~...&.....d..u.^F.........M.h.....>.}>..........[......E.b..?.u..{.B........M._.iAh.>~.<S...=.@`e..e....R....._ViA.E....R.@...@..vm.'Ei.v..\>QD..e..R......;o.p{......./^d..TH;.,F>..6...1?..E.p.}..J.p...XD.........7.^b..../.w...........n0.+R.V).J.a..^.X.S..B(..W+++..W. ..e%"Z.[.{,....JQ.iG`....(5..e..`u.*.=.)J...........C.!.@..;$.i.F...W.[....#............k.(J.z....`.dB..)..-H...R.H..O.#V..%......W.4>.'..aJ9.2Q..+.R..id`.x..1.. .../.(J%..>2d.QJ..7.\|.S`..10>..}.M#.....4......<f}..OWO..m.;C[;u.\|P!......L...S.Egr.....3.k.......i.........O...

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	7.484713757728487
Encrypted:	false
SSDEEP:	12:6v/7m/6Ts/rQmK0CiAUo4yVKaqswCDW0WAwsg38up6f0M8o8yXOBwrFuXqam4:b/6vmEVx4yVvDW0is88eHozDrgXqF4
MD5:	1CCFEA34F655127024E56A9182D069B2
SHA1:	F01C37FC36D6F283021BFE2021F884756ACC0830
SHA-256:	DDEB1C61FE3FC1C4195D6AF3CA1514F8EB78DE09E6DE3DBFCC960DDFDA93EE54
SHA-512:	E54442CFC5247B8D7137EB2389CB1E9B66EA2CDF4DBD062BB680D51FB50323CBECB908A6764CA29CEAEBB057C1FEBEE0FB0D7A1E367030531B63CE92B0F9A0C6
Malicious:	false
Reputation:	low
URL:	https://content.powerapps.com/resource/powerappsportal/img/web.png
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx..R.q.@..=...e:..Dt.+.t.+@. #.'..A.{,U.]Ap.8..T.. .3B.......3.......o.i..n..L.........}..x............Am.p..asd.$..WL.'...I.g.G.-M...c....Q.-..?......^.C..%8.^...(.lW....M..r.....x...'..O..9a..H..L..-.MSD.v.!.1t.{w..S..a..?..1.....q..l.Z.>..fO.t.?...8......9uK..pTU;....f..@..w....6......Dx.....i.._.z..h..b.y.f.S......1...+.0......1....e...,.6%.s...A.@.Qo.#.z.ht.,.K..........X...wn..4t....V.D9}p.}+H.S."..M_.<.H....{Z.Xj....0...g.....Uv.{ng+PWxl....'jkfKB..&..h. ....x...Z@.z.\jq....N........u.W.....IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 02:02:05.942886114 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 26, 2024 02:02:07.270905018 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 02:02:18.913074970 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:18.913110018 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:18.913173914 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:18.914321899 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:18.914345026 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:19.010097027 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.010153055 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.010202885 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.010612011 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.010634899 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.010684013 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.011006117 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.011030912 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.011071920 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.011538029 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.011560917 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.011605978 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.012531996 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.012550116 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.012976885 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.012998104 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.013833046 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.013849974 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.014538050 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.014559031 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.304588079 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:19.305948973 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:19.305973053 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:19.306996107 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:19.307073116 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:19.310539961 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:19.310636044 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:19.350069046 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:19.350089073 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:19.394453049 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:19.399375916 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.399595022 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.399998903 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.400021076 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.400223017 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.400237083 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.401458979 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.401487112 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.401541948 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.401627064 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.401679993 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.401983976 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.401994944 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.403484106 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.403553009 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.404130936 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.410660982 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.410831928 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.411952972 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.411976099 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.412084103 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.412264109 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.416090965 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.416119099 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.416326046 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.416347980 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.417028904 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.417222023 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.417432070 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.417448997 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.417588949 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.417639971 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.418486118 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.418834925 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.418843031 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.420028925 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.457211971 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.457232952 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.457357883 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.460019112 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.460032940 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.501415014 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.700798988 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.700829029 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.700841904 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.700860023 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.700866938 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.700885057 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.700908899 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.700932026 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.700941086 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.700957060 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.700989962 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.705925941 CEST	49744	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.705948114 CEST	443	49744	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.831175089 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.831273079 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.831315041 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.842401028 CEST	49747	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.842428923 CEST	443	49747	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955327034 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955351114 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955398083 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955411911 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.955454111 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955492973 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955499887 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.955501080 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955528021 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955538988 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.955543041 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:19.955576897 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:19.955609083 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.012557983 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.012635946 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.012675047 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.012703896 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.012708902 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.012727022 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.012769938 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.012779951 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.012819052 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.012890100 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.013004065 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.013050079 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.013083935 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.013096094 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.013118029 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.013200998 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.080672026 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.080697060 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.080802917 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.080802917 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.080826998 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.081185102 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.082819939 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.082837105 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.082900047 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.082909107 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.083148003 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.084172964 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.084187984 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.084295988 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.084301949 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.085896969 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.140774965 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.140808105 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.140867949 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.140887976 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.140908957 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.140994072 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.144186974 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.144217968 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.144249916 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.144263029 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.144284964 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.144417048 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.146363020 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.146389008 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.146469116 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.146469116 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.146481991 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.146562099 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.204807997 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.204830885 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.205414057 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.205434084 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.205522060 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.205538034 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.205550909 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.205557108 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.205596924 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.205637932 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.205710888 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.205950975 CEST	49746	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.205969095 CEST	443	49746	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.263734102 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.263773918 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.263848066 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.263848066 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.263864040 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.264204025 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.264288902 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.264364004 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.264370918 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.264390945 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.264456987 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.265336990 CEST	49745	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.265355110 CEST	443	49745	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.312268019 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.312318087 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.312494993 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.314371109 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.314385891 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.503894091 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.503897905 CEST	49750	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.503936052 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.503938913 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.506628990 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.506629944 CEST	49750	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.507208109 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.507222891 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.507493973 CEST	49750	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.507508039 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.575026035 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.575576067 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.600498915 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.600537062 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.601180077 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.644403934 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.707261086 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.752125025 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.833049059 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.833123922 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.833249092 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.836390972 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.836391926 CEST	49748	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.836441994 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.836520910 CEST	443	49748	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.893312931 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.898087978 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.898119926 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.898682117 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.899295092 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.899295092 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.899316072 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.899854898 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.902118921 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.910594940 CEST	49750	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.910624981 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.911910057 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.942049980 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.949740887 CEST	49750	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.950098991 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.953810930 CEST	49750	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.979856968 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.979903936 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.979984045 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.981329918 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.981374025 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.981426001 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.981893063 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.981929064 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.982034922 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.982208014 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.982238054 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.982305050 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.982971907 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.982992887 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.983685970 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.983697891 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.984205008 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:20.984222889 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:20.984313965 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:20.984334946 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:20.996120930 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.197571993 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.197622061 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.197679043 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.199487925 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.199508905 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.296791077 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.296888113 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.296932936 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.299200058 CEST	49749	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.299226046 CEST	443	49749	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.325535059 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.325578928 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.325639963 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.326075077 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.326114893 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.326167107 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.326421022 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.326436043 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.326677084 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.326694012 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.367059946 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.367660046 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.367686033 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.368681908 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.369134903 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.369147062 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.369746923 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.369802952 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.370079994 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.370780945 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.370867014 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.371184111 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.371576071 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.371586084 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.371655941 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.371787071 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.382448912 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:21.382510900 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:21.386245012 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:21.386261940 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:21.389950991 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.390603065 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.390628099 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.393307924 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.393857956 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.394015074 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.394211054 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.394320965 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:21.401338100 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:21.412121058 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.425292969 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.440126896 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.444116116 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:21.474829912 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.474952936 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.475024939 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.476133108 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.476159096 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.500463009 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.500706911 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.500772953 CEST	49750	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.503191948 CEST	49750	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.503213882 CEST	443	49750	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.514173985 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.514225006 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.514288902 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.515181065 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.515202045 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.589593887 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.589982986 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.590004921 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.591021061 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.591078997 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.591614008 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.591676950 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.591785908 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.591794968 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.635778904 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:21.635858059 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:21.635905981 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:21.636718988 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:21.636744976 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:21.636759043 CEST	49751	443	192.168.2.4	184.26.118.82
Apr 26, 2024 02:02:21.636765003 CEST	443	49751	184.26.118.82	192.168.2.4
Apr 26, 2024 02:02:21.645742893 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.717706919 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.717947960 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.717969894 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.719049931 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.719100952 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.725028992 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.725284100 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.725302935 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.727058887 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.727122068 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.859762907 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.860080957 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.860110998 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.861545086 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.861598969 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.862040997 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.862103939 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.862183094 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.862189054 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.897294044 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.897568941 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.897598028 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.898552895 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.898607969 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.899084091 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.899132967 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.899281979 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.899291992 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.909575939 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.944830894 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.953903913 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.954135895 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.954719067 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.954941034 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.955777884 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.955812931 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:21.955931902 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:21.955948114 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.003556013 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.003556967 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.021982908 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.022015095 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.022022963 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.022053957 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.022063971 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.022085905 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.022088051 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.022114992 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.022154093 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.022171021 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.024797916 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.024820089 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.024854898 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.024863958 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.024892092 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.024912119 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.049531937 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.049555063 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.049573898 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.049633026 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.049659967 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.049695969 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.056072950 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.056097031 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.056144953 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.056164026 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.056176901 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.056202888 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.084567070 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.084594011 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.084645033 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.084669113 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.084686041 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.084721088 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.085479021 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.085546017 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.085623980 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.118940115 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.119088888 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.119158983 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.149491072 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.149516106 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.149564981 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.149590015 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.149602890 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.149604082 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.149630070 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.149630070 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.149638891 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.149667978 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.149713039 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.150124073 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.150142908 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.150206089 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.150211096 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.150228977 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.150248051 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.174602985 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.174627066 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.174698114 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.174721956 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.175192118 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.175292969 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.175306082 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.175354958 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.175359011 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.175395966 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.181134939 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.181154013 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.181209087 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.181222916 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.181269884 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.181518078 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.181718111 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.181767941 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.185261011 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.185302973 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.185309887 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.185327053 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.185334921 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.185354948 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.185365915 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.185395956 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.185419083 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.185441971 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.186337948 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.186352968 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.186427116 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.186439991 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.187258005 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.191703081 CEST	49757	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.191728115 CEST	443	49757	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.192698002 CEST	49756	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.192724943 CEST	443	49756	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.198679924 CEST	49758	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.198720932 CEST	443	49758	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.213623047 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.213675976 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.216191053 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.216228962 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.216228962 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.216278076 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.217056036 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.217072010 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.217467070 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.217482090 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.218533993 CEST	49759	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.218545914 CEST	443	49759	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.249922037 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.249946117 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.250014067 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.250072956 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.250103951 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.259124041 CEST	49753	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.259150028 CEST	443	49753	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.266144037 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.266206026 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.266325951 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.267437935 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.267452955 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.272362947 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.272392988 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.272473097 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.272502899 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.272519112 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.272555113 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.274799109 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.274817944 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.274882078 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.274893045 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.274935961 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.275458097 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.275470972 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.275518894 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.275526047 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.275558949 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.276467085 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.276483059 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.276524067 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.276535988 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.276571035 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.277465105 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.277478933 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.277549028 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.277555943 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.277590036 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.278754950 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.278768063 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.278814077 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.278821945 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.278873920 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.300570965 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.300606012 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.300703049 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.300728083 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.300837994 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.302736998 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.302755117 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.302822113 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.302828074 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.302953005 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.303358078 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.303373098 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.303431988 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.303436995 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.303591967 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.305711031 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.305732012 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.305779934 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.305787086 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.305816889 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.308892012 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.308912039 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.308947086 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.308954000 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.308984041 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.309000015 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.310636997 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.310655117 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.310739040 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.310749054 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.311383009 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.311570883 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.311630964 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.311659098 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.311660051 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.311697960 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.311698914 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.324418068 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.328484058 CEST	49755	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.328519106 CEST	443	49755	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.342526913 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.342590094 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.342700005 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.342922926 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.342932940 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397046089 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397074938 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397185087 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.397212029 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397249937 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.397517920 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397532940 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397571087 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397584915 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.397588968 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397630930 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.397635937 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397663116 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.397728920 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.399854898 CEST	49754	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.399872065 CEST	443	49754	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.425760031 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.425793886 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.425893068 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.425918102 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.426018000 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.426043034 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.426063061 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.426090956 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.426095963 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.426137924 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.426872969 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.426893950 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.426951885 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.426960945 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.427036047 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.428208113 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.428234100 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.428302050 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.428306103 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.428313971 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.428333998 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.428368092 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.428373098 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.428391933 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.428406954 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.429130077 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.429152012 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.429205894 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.429214001 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.429270029 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.431094885 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.431118011 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.431159973 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.431164026 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.431174040 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.431193113 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.431210041 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.431247950 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.431253910 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.431298971 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.434771061 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.434787035 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.434844017 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.434854984 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.435122013 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.436283112 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.436305046 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.436382055 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.436387062 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.436419964 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.437839985 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.437860012 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.437908888 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.437913895 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.437963963 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.439981937 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.440005064 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.440088034 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.440097094 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.440197945 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.440459967 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.440476894 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.440534115 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.440540075 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.440747023 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.520853996 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.522419930 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.522465944 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.522587061 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.522836924 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.522861004 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.522954941 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.523477077 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.523492098 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.524466038 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.524480104 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.540994883 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.541040897 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.541523933 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.542030096 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.542038918 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557573080 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557602882 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557652950 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.557662010 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557674885 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557692051 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.557707071 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557723045 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.557729959 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557739973 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557755947 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557758093 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.557784081 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.557790041 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.557816029 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.557828903 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.559129953 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.559148073 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.559221029 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.559228897 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.559259892 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.560409069 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.560424089 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.560477972 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.560484886 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.560523987 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.563487053 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.563517094 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.563559055 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.563575983 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.563600063 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.563616037 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.565220118 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.565243006 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.565284967 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.565299034 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.565324068 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.565347910 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.566258907 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.566299915 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.566350937 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.566360950 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.566415071 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.566415071 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.566663980 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.566695929 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.566724062 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.566732883 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.566757917 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.566770077 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.566781044 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.566904068 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.567028999 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.568048954 CEST	49752	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.568068027 CEST	443	49752	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.578728914 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.578788042 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.578999043 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.579227924 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.579243898 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.601227045 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.601517916 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.601543903 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.602746010 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.603254080 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.603334904 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.603429079 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.606702089 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.609649897 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.609710932 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.610447884 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.611247063 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.611350060 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.611567020 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.644126892 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.651498079 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.652118921 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.670388937 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.670422077 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.671685934 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.671767950 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.672209024 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.672290087 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.672496080 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.720124960 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.722691059 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.722723007 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.728900909 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.729156017 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.729177952 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.731676102 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.731790066 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.732472897 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.732567072 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.732649088 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.732657909 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.770412922 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.785100937 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.906126976 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.906440020 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.906461954 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.907493114 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.907541037 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.908055067 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.908202887 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.908209085 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.909195900 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.909389973 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.909401894 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.910893917 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.910979986 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.912043095 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.912148952 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.912389040 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.912395000 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.926800013 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.927098036 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.927107096 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.928304911 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.928580999 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.930865049 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.930962086 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.931329012 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:22.931334019 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.952128887 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.961484909 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.961508989 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:22.961708069 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:22.963273048 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:22.977081060 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.003115892 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.003149033 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.003722906 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:23.008506060 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.008618116 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.009654999 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.009855032 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.010368109 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.010380983 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.049823046 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.049942017 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.049993992 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.051537037 CEST	49762	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.051559925 CEST	443	49762	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.051959991 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.059400082 CEST	49769	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.059442043 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.059622049 CEST	49769	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.060281992 CEST	49769	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.060292006 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.100399017 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.100428104 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.100444078 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.100536108 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.100574970 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.100593090 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.100651979 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.110831976 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.110909939 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.110950947 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.110996962 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.111071110 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.111109972 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.111133099 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.111452103 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.111499071 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.111516953 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.111531973 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.111560106 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.111577034 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.158035994 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:23.158083916 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:23.158150911 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:23.158154011 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:23.158194065 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:23.158987045 CEST	49765	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:23.159008026 CEST	443	49765	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:23.160722971 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:23.160841942 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:23.160912037 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:23.161422968 CEST	49766	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:23.161439896 CEST	443	49766	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:23.225254059 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.225325108 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.225358009 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.225387096 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.225408077 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.225424051 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.225657940 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.225732088 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.225732088 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.225761890 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.225785017 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.225802898 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.226047039 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.226095915 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.226111889 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.226124048 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.226139069 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.226157904 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.236320972 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.236360073 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.236413002 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.236480951 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.236515999 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.236532927 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.236737967 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.236757994 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.236812115 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.236825943 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.236871004 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.237183094 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.237204075 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.237251043 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.237262011 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.237283945 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.237313986 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.313568115 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.313604116 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.313616991 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.313635111 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.313649893 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.313668966 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.313689947 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.313721895 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.313738108 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.313738108 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.313762903 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.314699888 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.314724922 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.314760923 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.314769983 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.314789057 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.314821959 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.350178003 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.350207090 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.350255013 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.350282907 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.350311995 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.350332022 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.350843906 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.350860119 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.350909948 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.350920916 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.351181030 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.351609945 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.351622105 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.351666927 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.351675034 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.351738930 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.352386951 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.352401972 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.352433920 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.352442980 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.352464914 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.352483034 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.353328943 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.353344917 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.353394032 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.353404045 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.353447914 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.364290953 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.364320993 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.364372969 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.364382982 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.364397049 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.364404917 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.364423037 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.364435911 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.364449024 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.364471912 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.364494085 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.365395069 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.365432978 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.365485907 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.365497112 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.365518093 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.365539074 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.367343903 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.367369890 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.367405891 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.367412090 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.367438078 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.367460012 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.368307114 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.368335009 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.368371964 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.368381977 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.368413925 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.368438959 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.370480061 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.370496035 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.370551109 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.370564938 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.370601892 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.440550089 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.440599918 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.440642118 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.440663099 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.440690994 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.440711975 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.444252014 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.444293022 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.444324970 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.444338083 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.444363117 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.444372892 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.444386005 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.444390059 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.444407940 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.444434881 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.444438934 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.444463968 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.444480896 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.445179939 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.445441008 CEST	49769	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.445452929 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.445781946 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.446084023 CEST	49769	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.446150064 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.446203947 CEST	49769	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.473414898 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.473442078 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.473493099 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.473530054 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.473548889 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.473599911 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.477477074 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.477493048 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.477540016 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.477551937 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.477593899 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.478455067 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.478470087 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.478527069 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.478535891 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.478674889 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.479955912 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.479971886 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.480006933 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.480014086 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.480042934 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.480052948 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.480492115 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.480508089 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.480570078 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.480577946 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.480618954 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.481559038 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.481590033 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.481614113 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.481626034 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.481651068 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.481666088 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.482557058 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.482573032 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.482631922 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.482641935 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.482748032 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.483870983 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.483887911 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.483930111 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.483937979 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.483966112 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.483973026 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.484786034 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.484802961 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.484859943 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.484874010 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.484918118 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.485846996 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.485862970 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.485917091 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.485925913 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.485974073 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.486784935 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.486799955 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.486828089 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.486835957 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.486860991 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.486877918 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.488178968 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.488195896 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.488246918 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.488260984 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.488374949 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.490916014 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.490943909 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.490986109 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.491012096 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.491034985 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.491092920 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.492114067 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.493062019 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.493086100 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.493118048 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.493134022 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.493159056 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.493170977 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.494005919 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.494026899 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.494079113 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.494091034 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.494149923 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.495266914 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.495285034 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.495352030 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.495362997 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.495400906 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.496833086 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.496850014 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.496901035 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.496915102 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.496952057 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.498224974 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.498240948 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.498287916 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.498298883 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.498336077 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.499085903 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.499102116 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.499149084 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.499159098 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.499205112 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.500405073 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.500421047 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.500474930 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.500487089 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.500524998 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.501544952 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.501559973 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.501621962 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.501635075 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.501676083 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.502744913 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.502763033 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.502811909 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.502821922 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.502846956 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.502862930 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.503784895 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.503808022 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.503855944 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.503875017 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.503922939 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.504527092 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.504550934 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.504618883 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.504627943 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.504672050 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.533555031 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.533586025 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.533632040 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.533655882 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.533674002 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.533718109 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.548722982 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.548758984 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.548791885 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.548804998 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.548815966 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.548823118 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.548841953 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.548861027 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.548892021 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.549930096 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.549948931 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.550008059 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.550015926 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.550270081 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.566302061 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.566344976 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.566381931 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.566397905 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.566426039 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.566436052 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.566615105 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.566905975 CEST	49763	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.566919088 CEST	443	49763	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.569267988 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.569309950 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.569380045 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.569626093 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.569634914 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.576714993 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.576741934 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.576749086 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.576775074 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.576797009 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.576805115 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.576817036 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.576822996 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.576839924 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.576864004 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.577749968 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.577765942 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.577825069 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.577833891 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.577869892 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.600425959 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.600452900 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.600498915 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.600528955 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.600550890 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.600569010 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.604825974 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.604847908 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.604938984 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.604959965 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.605060101 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.610821009 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.610843897 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.610887051 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.610903978 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.610924006 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.610939026 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.613466024 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.613483906 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.613531113 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.613553047 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.613590002 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.615632057 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.615648031 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.615710974 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.615724087 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.615763903 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.620587111 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.620613098 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.620650053 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.620661974 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.620687962 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.620702982 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.625130892 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.625155926 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.625210047 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.625224113 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.629425049 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.629446983 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.629504919 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.629519939 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.629533052 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.629563093 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.630805016 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.630831003 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.630878925 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.630889893 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.630906105 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.630948067 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.631773949 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.631787062 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.631849051 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.631860971 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.631942034 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.632822037 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.632837057 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.632883072 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.632891893 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.632914066 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.632929087 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.634984970 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635001898 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635068893 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635090113 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635099888 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.635112047 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635137081 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635150909 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635158062 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.635165930 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635195017 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.635380030 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635396004 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635425091 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.635432005 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635453939 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.635747910 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635761023 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635792017 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.635801077 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.635822058 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.636193991 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.636209965 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.636236906 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.636245012 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.636270046 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.636640072 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.636652946 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.636707067 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.636717081 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.636739969 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.637094021 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.637109995 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.637151003 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.637160063 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.637181997 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.637528896 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.637542009 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.637588024 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.637595892 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.637622118 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.637937069 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.637953043 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.637994051 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.638000011 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.638052940 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.638459921 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.638482094 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.638518095 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.638524055 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.638559103 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.639513016 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.639539003 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.639569998 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.639590025 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.639594078 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.639600992 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.639655113 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.639663935 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.639683962 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.639724016 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.639976978 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.639992952 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.640058994 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.640068054 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.640113115 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.640132904 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.640377045 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.640402079 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.640451908 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.640460014 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.640495062 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.640782118 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.640799046 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.640847921 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.640856981 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.640891075 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.641153097 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.641169071 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.641218901 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.641227007 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.641259909 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.641623974 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.641640902 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.641670942 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.641680956 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.641704082 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.641720057 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.642061949 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642077923 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642154932 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.642164946 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642205954 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.642481089 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642499924 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642563105 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.642571926 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642611980 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.642838001 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642853022 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642901897 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.642911911 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.642951012 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.643259048 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.643275023 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.643316031 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.643323898 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.643358946 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.643654108 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.643671036 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.643716097 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.643724918 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.643760920 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.644057035 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.644081116 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.644114017 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.644123077 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.644150972 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.644169092 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.644608021 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.644623995 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.644675970 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.644684076 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.644732952 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.645036936 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645051003 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645102978 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.645111084 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645147085 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.645417929 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645433903 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645497084 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.645504951 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645540953 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.645804882 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645821095 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645889997 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.645898104 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.645924091 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.645944118 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.646426916 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.646441936 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.646512985 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.646521091 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.646554947 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.646966934 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.646981955 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.647039890 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.647047043 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.647083998 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.647383928 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.647397995 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.647444010 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.647452116 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.647491932 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.647749901 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.647764921 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.647808075 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.647814989 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.647851944 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.648233891 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.648252964 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.648304939 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.648313999 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.648349047 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.668194056 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.674777031 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.674802065 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.674844980 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.674868107 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.674886942 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.674899101 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.674938917 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.674966097 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.674972057 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.674992085 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.675098896 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.675676107 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.675709963 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.675734997 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.675740957 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.675792933 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.675792933 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.702685118 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.702712059 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.702779055 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.702795029 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.702832937 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.703829050 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.703857899 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.703883886 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.703893900 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.703919888 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.703936100 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.705024958 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.705041885 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.705087900 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.705095053 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.705125093 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.724361897 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.724387884 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.724441051 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.724483967 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.724500895 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.724577904 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.725749016 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.725770950 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.725863934 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.725874901 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.725954056 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.728662968 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.728693008 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.728739977 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.728754044 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.728770971 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.728790998 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.731493950 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.731512070 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.731606960 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.731616974 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.731666088 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.733244896 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.733270884 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.733331919 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.733341932 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.733372927 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.733386993 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.736125946 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.736148119 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.736222982 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.736233950 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.736287117 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.736898899 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.736915112 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.736957073 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.736965895 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.736985922 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.736999989 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.737425089 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.737468004 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.737477064 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.737514019 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.737548113 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.738204956 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.738220930 CEST	443	49761	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.738230944 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.738352060 CEST	49761	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.774357080 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.774379969 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.774482012 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.774502993 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.774523020 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.774548054 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.774549961 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.774569035 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.774580002 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.774616003 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786251068 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786276102 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786320925 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786364079 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786377907 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786400080 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786421061 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786421061 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786438942 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786442995 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786464930 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786473989 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786497116 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786499023 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786528111 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786545992 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786552906 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786573887 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786576986 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786591053 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786624908 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786632061 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786643982 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786658049 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786663055 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786693096 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786699057 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786725044 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786726952 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786744118 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786776066 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786783934 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786803007 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786803961 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786823988 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786851883 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786858082 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786876917 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786879063 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786900997 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786931992 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786947012 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786962986 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.786967993 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.786988020 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787014008 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787020922 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787036896 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787036896 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787055969 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787084103 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787091017 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787103891 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787113905 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787127972 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787146091 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787153006 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787163973 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787178993 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787192106 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787214994 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787220955 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787241936 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787257910 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.787333965 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.787370920 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.801029921 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.801099062 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.801171064 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.801192999 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.801222086 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.801249027 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.805830002 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.805879116 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.805918932 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.805932999 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.805962086 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806021929 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806022882 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806062937 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806111097 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806137085 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806137085 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806145906 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806171894 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806200027 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806240082 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806279898 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806305885 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806312084 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806343079 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806360960 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806380033 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806420088 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806446075 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806452036 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806473970 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806484938 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806526899 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806567907 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.806574106 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.806690931 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.809086084 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.820802927 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.821373940 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.823885918 CEST	49767	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.823905945 CEST	443	49767	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.827699900 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.827721119 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.827764034 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.827778101 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.827807903 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.827830076 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.829405069 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.829426050 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.829494953 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.829505920 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.829540014 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.830631018 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.830651999 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.830738068 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.830746889 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.830785036 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.831528902 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.831547976 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.831600904 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.831609011 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.831641912 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.832597017 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.832616091 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.832685947 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.832695007 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.832731009 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.833741903 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.833764076 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.833801031 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.833808899 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.833841085 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.853461981 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.854259014 CEST	49760	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.854295015 CEST	443	49760	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.855104923 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.855216026 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.855257988 CEST	49769	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.928836107 CEST	49769	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.928872108 CEST	443	49769	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.953061104 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.953083992 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.953255892 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.953274012 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.953316927 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.954976082 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.955131054 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.955144882 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.955188990 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.955199957 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.955235958 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.955624104 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.955638885 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.955688000 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.955693960 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.955727100 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.956876040 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.956896067 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.956948042 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.956954956 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.957241058 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.957258940 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.957284927 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.957292080 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.957309008 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.957334995 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.957644939 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.957674980 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.957694054 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.957696915 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.957715034 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:23.957726955 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:23.957765102 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.001514912 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.275859118 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.275896072 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.276190996 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.276909113 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.281771898 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.281987906 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.299751997 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.340122938 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.375945091 CEST	49768	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.375988960 CEST	443	49768	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.839766979 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.839814901 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.839828968 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.839849949 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.839916945 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.839957952 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.839975119 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:24.839976072 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:24.840020895 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.656847954 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.656893015 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.670941114 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.671000957 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.671066999 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.672229052 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.672247887 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.683047056 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.683090925 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.683244944 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.684436083 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.684448957 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.685077906 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.685122013 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.685187101 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.685493946 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.685523987 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.685581923 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.685659885 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.685667038 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.685807943 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.685815096 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.686681032 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.686709881 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:27.686758995 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.687031984 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:27.687038898 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.052427053 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.053078890 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.053098917 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.053886890 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.054367065 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.054512024 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.054517984 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.054655075 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.069217920 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.069472075 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.069483042 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.070591927 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.070650101 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.070704937 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.071069956 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.071269989 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.071295023 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.071367025 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.071372986 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.071382999 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.071532011 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.071552038 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.073010921 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.073342085 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.073698997 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.073792934 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.074002981 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.074073076 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.074243069 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.074465036 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.074585915 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.074592113 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.075170994 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.111576080 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.111870050 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.111906052 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.113455057 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.113519907 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.114723921 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.114825964 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.114867926 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.156130075 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.165537119 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.165755033 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.165777922 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.260133028 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.260199070 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.265975952 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.284116030 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.284125090 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.284185886 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.284202099 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.439349890 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.439383030 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.439390898 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.439415932 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.439428091 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.439448118 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.439475060 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.439496994 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.439533949 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.440391064 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.440412998 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.446038008 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.446078062 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.446135998 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.446443081 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.446455956 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507165909 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507189989 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507196903 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507221937 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507232904 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507237911 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.507251978 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507261038 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507303953 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.507879019 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507888079 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507905960 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507914066 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507921934 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.507926941 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507936001 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.507960081 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.507986069 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.624701023 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.624725103 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.624739885 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.624783039 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.624800920 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.624826908 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.624850988 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.625099897 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.625114918 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.625190020 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.625200033 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.625241995 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.632296085 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632308960 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632354021 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632369995 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632374048 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.632388115 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632422924 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.632771969 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632778883 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632803917 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632828951 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.632829905 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632849932 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.632858992 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.633119106 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.633145094 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.633146048 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.633161068 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.633173943 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.633174896 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.633198977 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.633224964 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.649441004 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.649466038 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.649473906 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.649490118 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.649497986 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.649507999 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.649516106 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.649527073 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.649560928 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.649581909 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.649983883 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.649991035 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.650005102 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.650012016 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.650037050 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.650043964 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.650065899 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.650085926 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.750058889 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.750082970 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.750154018 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.750178099 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.750194073 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.750248909 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.750838995 CEST	49771	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.750852108 CEST	443	49771	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.756623983 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.756676912 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.756736040 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.757040024 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.757046938 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.757910967 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.757941961 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.757971048 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.757991076 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.758047104 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.758860111 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.758876085 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.758924007 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.758934021 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.758971930 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.760086060 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.760118961 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.760143995 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.760152102 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.760181904 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.760201931 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.760914087 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.760929108 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.760982037 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.760989904 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.761029005 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.762099028 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.762119055 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.762171030 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.762180090 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.762223959 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.763227940 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.763247967 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.763295889 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.763305902 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.763353109 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.776231050 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.776243925 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.776281118 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.776308060 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.776314974 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.776329994 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.776366949 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.776371956 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.776401997 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.777007103 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.777025938 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.781321049 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.781368017 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.781435966 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.781708002 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.781713963 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.813262939 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.813288927 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.813297033 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.813323021 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.813329935 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.813345909 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.813370943 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.813380957 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.813402891 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.813426971 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.814085007 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.814097881 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.814126015 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.814145088 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.814148903 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.814155102 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.814493895 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.831744909 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.832032919 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.832046032 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.832544088 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.832848072 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.832979918 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.833122969 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.876112938 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.882618904 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.882642031 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.882704020 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.882715940 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.882775068 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.883266926 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.883281946 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.883336067 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.883342981 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.883377075 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.883853912 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.883874893 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.883900881 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.883908987 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.883940935 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.884318113 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.884345055 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.884366035 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.884373903 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.884401083 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.884432077 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.884958982 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.884982109 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.885006905 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.885013103 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.885046959 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.885488987 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.885509014 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.885541916 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.885550022 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.885571003 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.885597944 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.886102915 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.886121035 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.886159897 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.886168957 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.886200905 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.886634111 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.886650085 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.886708975 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.886718035 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.886754036 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.887139082 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887154102 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887193918 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.887204885 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887226105 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.887243986 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.887557983 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887573957 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887605906 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.887614012 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887645006 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.887881994 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887898922 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887954950 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.887960911 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.887993097 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.888447046 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.888461113 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.888490915 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.888499022 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.888533115 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.888545990 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.888778925 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.888793945 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.888830900 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.888839006 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.888864040 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.888879061 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.938879013 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.938925982 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.938962936 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.938991070 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.939014912 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.939023018 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.939053059 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.939090014 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.939121008 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.939126968 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.939143896 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.939167976 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.939692020 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.939730883 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.939759016 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.939766884 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.939785957 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.939805984 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.961373091 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.961405039 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:28.961452961 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.961688995 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:28.961703062 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.012324095 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.012343884 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.012480021 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.012480021 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.012495995 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.012563944 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.012742043 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.012757063 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.012959003 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.012984991 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.013053894 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.013144016 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.013159037 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.013530016 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.013566017 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.013576031 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.013612986 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.013688087 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.013977051 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.013989925 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.014089108 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.014089108 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.014097929 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.014300108 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.014317036 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.014352083 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.014367104 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.014408112 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.014686108 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.014698029 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.014796972 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.014796972 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.014807940 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015085936 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015104055 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015264034 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.015269995 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015307903 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.015389919 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015403986 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015441895 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015461922 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.015461922 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.015475988 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015523911 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.015546083 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.015883923 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.016113043 CEST	49773	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.016130924 CEST	443	49773	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.064996958 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.065023899 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.065162897 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.065162897 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.065191031 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.065372944 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.066193104 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.066210032 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.066330910 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.066339016 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.066456079 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.066858053 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.066891909 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.066950083 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.066976070 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.067095995 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.070600033 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.070622921 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.114962101 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.115160942 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.117948055 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.117948055 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.147567987 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.148812056 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.148828030 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.149383068 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.152981997 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.153300047 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.153332949 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.165246010 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.168518066 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.168544054 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.169748068 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.170219898 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.170219898 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.170311928 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.170341015 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.200118065 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.212085009 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.212115049 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.218615055 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.262595892 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.285060883 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:29.285161972 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:29.285430908 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:29.350934982 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.351277113 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.351315975 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.352303028 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.352813959 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.352813959 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.352905989 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.427742958 CEST	49778	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.427772999 CEST	443	49778	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.467500925 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.591104984 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.591126919 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.591213942 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.591240883 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.591336012 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.591986895 CEST	49779	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.592011929 CEST	443	49779	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.694755077 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.694777012 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.694783926 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.694797039 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.694803953 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.694824934 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.694860935 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.694885015 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.694901943 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.694940090 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.695637941 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.695646048 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.695687056 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.695858002 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.695858002 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.695868969 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.699088097 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.804754019 CEST	49743	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:02:29.804810047 CEST	443	49743	192.178.50.36	192.168.2.4
Apr 26, 2024 02:02:29.820458889 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.820507050 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.820547104 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.820575953 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.820612907 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.821537971 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.821556091 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880192995 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880225897 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880234003 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880326986 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880373001 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880399942 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.880429983 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880446911 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880477905 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.880477905 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.880577087 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.880714893 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880728960 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880793095 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880829096 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.880844116 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880861998 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:29.880888939 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:29.881082058 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:30.004997015 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:30.005079985 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:30.005111933 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:30.005135059 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:30.005160093 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:30.005191088 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:30.005479097 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:30.005516052 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:30.005561113 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:30.005561113 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:39.079451084 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.079493046 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.079555988 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.079746962 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.079765081 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.460855961 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.461122990 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.461153984 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.462301970 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.462361097 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.463454962 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.463536978 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.463639021 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.504123926 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.504224062 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.504234076 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.553936005 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.710683107 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.711666107 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.711674929 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.711709976 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.711730957 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.711736917 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.711741924 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.711754084 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.711788893 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.711812019 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.712722063 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.712738037 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.712833881 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.712841988 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.756131887 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.835485935 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.835499048 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.835526943 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.835550070 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.835560083 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.835565090 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.835597038 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.836689949 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.836699009 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.836715937 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.836774111 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.836777925 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.836807013 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.838100910 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.838116884 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.838161945 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.838165998 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.838196993 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.877584934 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.877609968 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.877674103 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.877685070 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.877720118 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.962881088 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.962907076 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.962946892 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.962960005 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.962997913 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.964174986 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.964191914 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.964245081 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.964248896 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.964277029 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.964751005 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.964773893 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.964801073 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.964803934 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.964833021 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.964837074 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:39.964867115 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.964956045 CEST	49796	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:39.964972019 CEST	443	49796	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:40.012892962 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:40.012933016 CEST	443	49798	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:40.012983084 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:40.013350964 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:40.013364077 CEST	443	49798	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:40.392657042 CEST	443	49798	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:40.393001080 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:40.393030882 CEST	443	49798	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:40.394042015 CEST	443	49798	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:40.394108057 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:40.394443989 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:40.394500971 CEST	443	49798	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:40.442819118 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:40.442840099 CEST	443	49798	152.199.4.44	192.168.2.4
Apr 26, 2024 02:02:40.489018917 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:02:40.557176113 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.557203054 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.557564974 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.557873964 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.557885885 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.594192028 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.594228029 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.594288111 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.594558001 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.594584942 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.594667912 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.594872952 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.594885111 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.595010996 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.595020056 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.938788891 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.939084053 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.939095974 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.941451073 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.941504955 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.942260027 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.942332029 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.942617893 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.942626953 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.978091002 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.978554010 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.978568077 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.979501963 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.979701042 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.979705095 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.979947090 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.980038881 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.980041981 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.980057001 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.980132103 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.980142117 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.983077049 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.983134031 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.983426094 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.983568907 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:40.983573914 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.983972073 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:40.990914106 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.022443056 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.037796974 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.037827969 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.082530022 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.358896971 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.358922005 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.358930111 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.358963966 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.358983040 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.359014988 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.359014988 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.359026909 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.359070063 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.359884977 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.359905005 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.360080004 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.360090017 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.360136986 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.375056982 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.375122070 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.375128984 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.375160933 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.375185013 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.375190973 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.375202894 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.375226974 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.375246048 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.380314112 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.380371094 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.380382061 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.380434036 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.380470991 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.380716085 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.380731106 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.380738974 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.380773067 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.388294935 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388319969 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388325930 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388344049 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388353109 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388360977 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388371944 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.388384104 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388411999 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.388432980 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.388437033 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388484955 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.388698101 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.390480995 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.390496969 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.484812975 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.484833956 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.484977007 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.484994888 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.485058069 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.485919952 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.485934973 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.485984087 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.485996962 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.486031055 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.487272024 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.487287045 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.487350941 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.487358093 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.487397909 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.487397909 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.611059904 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.611094952 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.611191034 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.611191988 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.611202955 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.611315012 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.611778975 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.611799002 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.611872911 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.611880064 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.611967087 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.612013102 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.612013102 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.612018108 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.612051010 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.612051964 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.612097979 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.613333941 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.613353968 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.669389963 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.669461966 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.669559002 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.669786930 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.669806004 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.702253103 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.702320099 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:41.702383995 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.702697039 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:41.702716112 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.052375078 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.053251028 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.053282022 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.057413101 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.057492018 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.057871103 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.058005095 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.058016062 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.058067083 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.084470034 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.085238934 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.085261106 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.086606026 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.086668968 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.087168932 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.087241888 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.087460995 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.087471008 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.099467993 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.099497080 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.130628109 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.145430088 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.430264950 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430299044 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430305958 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430332899 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430352926 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430366039 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430366039 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.430382967 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430408001 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.430432081 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.430435896 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430454969 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.430493116 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.431499004 CEST	49805	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.431514025 CEST	443	49805	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.436522961 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:42.436572075 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:42.436696053 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:42.436929941 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:42.436944008 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:42.464893103 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.464936972 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.464945078 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.464958906 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.464984894 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.465003014 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.465024948 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.465044975 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.465075016 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.467603922 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.467622042 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.467681885 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.467696905 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.467771053 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.592778921 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.592811108 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.592855930 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.592880964 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.592905998 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.592921019 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.593113899 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.593193054 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.593199015 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.593231916 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.593269110 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.594207048 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.594223976 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.642332077 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.642385006 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.642443895 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.648155928 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.648183107 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.684931993 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.685039997 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.685126066 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.685406923 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.685458899 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.685503960 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.685725927 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.685746908 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.704452038 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:42.704505920 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:42.824342012 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:42.825578928 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:42.825645924 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:42.827291012 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:42.827821016 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:42.827948093 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:42.828042030 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:42.873784065 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.030128002 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.071528912 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.085020065 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.086174965 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.093308926 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.093378067 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.093413115 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.093447924 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.094573975 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.094645977 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.095187902 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.142339945 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.168159008 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.168184042 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.169378042 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.170442104 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.170809984 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.171011925 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.171216011 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.171309948 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.171545982 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.171591043 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.171626091 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.171639919 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.171649933 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.171813965 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.173719883 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.173743010 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.174633980 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.174846888 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.174861908 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.200645924 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.200716019 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.200737953 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.200778008 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.200782061 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.200809956 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.200826883 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.200833082 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.200859070 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.200889111 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.200992107 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.201036930 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.201046944 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.201231003 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.201283932 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.203232050 CEST	49807	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.203249931 CEST	443	49807	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.211771011 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.212451935 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.216116905 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.322890043 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.323832989 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.323957920 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.323971987 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.326673031 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.338202953 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.338310003 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.338442087 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.356625080 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.356681108 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.360481977 CEST	49809	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.360505104 CEST	443	49809	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.410144091 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.410190105 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.410286903 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.410531044 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.410536051 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.413297892 CEST	49814	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.413316011 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.413520098 CEST	49814	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.413907051 CEST	49814	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.413923979 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.427051067 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427081108 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427088022 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427099943 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427105904 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427112103 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427144051 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.427165985 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427202940 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.427232981 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.427329063 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427344084 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427391052 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.427397013 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427432060 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.427527905 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427575111 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.427578926 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427599907 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.427619934 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.427638054 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.438638926 CEST	49808	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.438669920 CEST	443	49808	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.561872005 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.562114954 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.562129021 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.564522028 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.564826965 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.564944983 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.564953089 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.566395044 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.621157885 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.793876886 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.794198990 CEST	49814	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.794225931 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.795073986 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.795537949 CEST	49814	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.795618057 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.795908928 CEST	49814	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.797632933 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.797887087 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.797907114 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.798764944 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.799300909 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.799479961 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.799593925 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.813872099 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.813956022 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.814050913 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.815630913 CEST	49812	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:43.815648079 CEST	443	49812	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:43.824043989 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.824083090 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.824225903 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.824481964 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:43.824491024 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.840118885 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:43.840159893 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.050167084 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.050263882 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.050400972 CEST	49814	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.050935030 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.050964117 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.051018953 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.051143885 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.051143885 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.064852953 CEST	49813	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.064882040 CEST	443	49813	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.065512896 CEST	49814	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.065540075 CEST	443	49814	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.205194950 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.205486059 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.205507994 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.205835104 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.206154108 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.206293106 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.207407951 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.254465103 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.460906029 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.460993052 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:44.461139917 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.462773085 CEST	49815	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:44.462793112 CEST	443	49815	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:47.869383097 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:47.869434118 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:47.869498968 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:47.870655060 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:47.870681047 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.253983021 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.254703045 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.254741907 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.255758047 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.258250952 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.258416891 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.296956062 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.297017097 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.297070980 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.298129082 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.298145056 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.298695087 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.684976101 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.685288906 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.685311079 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.687233925 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.687556982 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.688489914 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.733541012 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.791584015 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.791635036 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.791696072 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.791758060 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.792047024 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:48.792062998 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:48.836123943 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.063361883 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.063395023 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.063401937 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.063421011 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.063448906 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.063545942 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.063545942 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.063570976 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.063617945 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.065278053 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.065294027 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.065351963 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.065363884 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.065474987 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.173937082 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.187556982 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.187592983 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.188478947 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.188991070 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.189090014 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.189203024 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.189268112 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.189296961 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.189323902 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.189342976 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.189356089 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.189656019 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.190031052 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.190079927 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.190090895 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.190113068 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.190139055 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.190156937 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.190937042 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.190989017 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.191008091 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.191019058 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.191041946 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.191054106 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.232116938 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.314832926 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.314886093 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.314922094 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.314945936 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.314975977 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.314992905 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.315741062 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.315792084 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.315804958 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.315814972 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.315864086 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.316447973 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.316524029 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.316530943 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.316622972 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.316818953 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.322902918 CEST	49818	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.322926998 CEST	443	49818	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.552095890 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.552138090 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.552155018 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.552227974 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.552248001 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.552263975 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.552288055 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.552306890 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.559343100 CEST	49819	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.559370041 CEST	443	49819	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:49.774681091 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:49.816131115 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.028264999 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.028297901 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.028306007 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.028342009 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.028352976 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.028379917 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.028392076 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.028402090 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.028412104 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.028430939 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.029148102 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.029166937 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.029206038 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.029215097 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.029243946 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.029261112 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.158926964 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.158951998 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.159017086 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.159049988 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.159081936 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.159216881 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.159260035 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.159266949 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.159296036 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.159297943 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.159328938 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.159723043 CEST	49817	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.159734964 CEST	443	49817	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.966070890 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.966130972 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:50.966195107 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.966912031 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:50.966931105 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.348274946 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.354947090 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.354969025 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.356206894 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.356767893 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.356837988 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.357048035 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.404119968 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.734800100 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.734833002 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.734848976 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.734924078 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.734951973 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.734999895 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.735784054 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.735800028 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.735862970 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.735874891 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.735964060 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.766776085 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.766844988 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.766865969 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.766882896 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:51.766923904 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.807856083 CEST	49820	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:51.807887077 CEST	443	49820	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:55.733848095 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:55.733885050 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:55.734097004 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:55.734317064 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:55.734323978 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:55.734746933 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:55.734774113 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:55.734976053 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:55.735289097 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:55.735301018 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.118149042 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.118422031 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.118439913 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.118751049 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.119057894 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.119119883 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.119333029 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.121620893 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.121819973 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.121841908 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.123048067 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.123337984 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.123397112 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.123461962 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.160115957 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.168126106 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.373677015 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.373704910 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.373752117 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.373773098 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.373788118 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.373807907 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.373837948 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.374597073 CEST	49821	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.374614000 CEST	443	49821	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.378068924 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.378099918 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.378166914 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.378412962 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.378417969 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.458909988 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.458940983 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.458992004 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.459022045 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.459152937 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.459682941 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.459693909 CEST	443	49822	13.107.213.41	192.168.2.4
Apr 26, 2024 02:02:56.459707975 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.459731102 CEST	49822	443	192.168.2.4	13.107.213.41
Apr 26, 2024 02:02:56.462747097 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.462784052 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.462876081 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.463076115 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.463082075 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.759865046 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.760266066 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.760289907 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.764067888 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.764580011 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.764666080 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.764836073 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.808141947 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.844208002 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.844491959 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.844517946 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.845000029 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.845371962 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.845455885 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:56.845514059 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.888225079 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:56.888250113 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.012079000 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.012096882 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.012146950 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:57.012171984 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.012187958 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.012226105 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:57.013026953 CEST	49825	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:57.013042927 CEST	443	49825	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.097290039 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.097315073 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.097373009 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:57.097393990 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.097414017 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:02:57.097453117 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:57.098994970 CEST	49826	443	192.168.2.4	13.107.246.41
Apr 26, 2024 02:02:57.099014997 CEST	443	49826	13.107.246.41	192.168.2.4
Apr 26, 2024 02:03:18.773367882 CEST	49860	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:03:18.773442030 CEST	443	49860	192.178.50.36	192.168.2.4
Apr 26, 2024 02:03:18.773514032 CEST	49860	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:03:18.773906946 CEST	49860	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:03:18.773930073 CEST	443	49860	192.178.50.36	192.168.2.4
Apr 26, 2024 02:03:19.165119886 CEST	443	49860	192.178.50.36	192.168.2.4
Apr 26, 2024 02:03:19.165493011 CEST	49860	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:03:19.165519953 CEST	443	49860	192.178.50.36	192.168.2.4
Apr 26, 2024 02:03:19.166584015 CEST	443	49860	192.178.50.36	192.168.2.4
Apr 26, 2024 02:03:19.167500973 CEST	49860	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:03:19.167598009 CEST	443	49860	192.178.50.36	192.168.2.4
Apr 26, 2024 02:03:19.207324982 CEST	49860	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:03:24.879719973 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 26, 2024 02:03:24.880003929 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 26, 2024 02:03:25.004626036 CEST	80	49723	72.21.81.240	192.168.2.4
Apr 26, 2024 02:03:25.004679918 CEST	80	49724	72.21.81.240	192.168.2.4
Apr 26, 2024 02:03:25.004720926 CEST	49723	80	192.168.2.4	72.21.81.240
Apr 26, 2024 02:03:25.004750013 CEST	49724	80	192.168.2.4	72.21.81.240
Apr 26, 2024 02:03:25.457963943 CEST	49798	443	192.168.2.4	152.199.4.44
Apr 26, 2024 02:03:25.457993031 CEST	443	49798	152.199.4.44	192.168.2.4
Apr 26, 2024 02:03:29.166198015 CEST	443	49860	192.178.50.36	192.168.2.4
Apr 26, 2024 02:03:29.166273117 CEST	443	49860	192.178.50.36	192.168.2.4
Apr 26, 2024 02:03:29.166430950 CEST	49860	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:03:29.805120945 CEST	49860	443	192.168.2.4	192.178.50.36
Apr 26, 2024 02:03:29.805208921 CEST	443	49860	192.178.50.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 02:02:15.295826912 CEST	53	52648	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:15.545245886 CEST	53	64146	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:16.385019064 CEST	53	58054	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:16.587718010 CEST	50015	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:16.588013887 CEST	61485	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:16.924918890 CEST	53	61485	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:18.777914047 CEST	49543	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:18.785423040 CEST	56230	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:18.842783928 CEST	61395	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:18.843234062 CEST	50758	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:18.903991938 CEST	53	49543	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:18.910356045 CEST	53	56230	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:21.315597057 CEST	62762	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:21.315871000 CEST	53707	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:27.813849926 CEST	53	54543	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:33.841500044 CEST	53	64650	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:36.481348991 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 02:02:37.835294962 CEST	61854	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:37.835796118 CEST	49926	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:38.952470064 CEST	53639	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:38.952759981 CEST	49293	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:39.077753067 CEST	53	53639	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:39.078912020 CEST	53	49293	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:40.428143978 CEST	49912	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:40.428327084 CEST	54994	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:42.936445951 CEST	53	55735	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:52.935554028 CEST	53	49543	1.1.1.1	192.168.2.4
Apr 26, 2024 02:02:55.716425896 CEST	59152	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:55.716646910 CEST	64145	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:56.680311918 CEST	53767	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:56.680464983 CEST	50749	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:59.220835924 CEST	64523	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:02:59.220999956 CEST	61490	53	192.168.2.4	1.1.1.1
Apr 26, 2024 02:03:14.822786093 CEST	53	49858	1.1.1.1	192.168.2.4
Apr 26, 2024 02:03:15.804466963 CEST	53	58789	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 02:02:19.123475075 CEST	192.168.2.4	1.1.1.1	c2ee	(Port unreachable)	Destination Unreachable
Apr 26, 2024 02:02:21.570511103 CEST	192.168.2.4	1.1.1.1	c2ee	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 02:02:16.587718010 CEST	192.168.2.4	1.1.1.1	0x3c33	Standard query (0)	site-stlp3.powerappsportals.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:16.588013887 CEST	192.168.2.4	1.1.1.1	0xf75f	Standard query (0)	site-stlp3.powerappsportals.com	65	IN (0x0001)	false
Apr 26, 2024 02:02:18.777914047 CEST	192.168.2.4	1.1.1.1	0xe32a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:18.785423040 CEST	192.168.2.4	1.1.1.1	0x2b70	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 02:02:18.842783928 CEST	192.168.2.4	1.1.1.1	0x4e	Standard query (0)	content.powerapps.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:18.843234062 CEST	192.168.2.4	1.1.1.1	0x6757	Standard query (0)	content.powerapps.com	65	IN (0x0001)	false
Apr 26, 2024 02:02:21.315597057 CEST	192.168.2.4	1.1.1.1	0x3897	Standard query (0)	content.powerapps.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:21.315871000 CEST	192.168.2.4	1.1.1.1	0xffae	Standard query (0)	content.powerapps.com	65	IN (0x0001)	false
Apr 26, 2024 02:02:37.835294962 CEST	192.168.2.4	1.1.1.1	0xda0f	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:37.835796118 CEST	192.168.2.4	1.1.1.1	0x521c	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Apr 26, 2024 02:02:38.952470064 CEST	192.168.2.4	1.1.1.1	0x95f1	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:38.952759981 CEST	192.168.2.4	1.1.1.1	0xc690	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 26, 2024 02:02:40.428143978 CEST	192.168.2.4	1.1.1.1	0x967	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:40.428327084 CEST	192.168.2.4	1.1.1.1	0x58c	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Apr 26, 2024 02:02:55.716425896 CEST	192.168.2.4	1.1.1.1	0xd519	Standard query (0)	passwordreset.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:55.716646910 CEST	192.168.2.4	1.1.1.1	0x9b04	Standard query (0)	passwordreset.microsoftonline.com	65	IN (0x0001)	false
Apr 26, 2024 02:02:56.680311918 CEST	192.168.2.4	1.1.1.1	0x2cf4	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:56.680464983 CEST	192.168.2.4	1.1.1.1	0x2ec1	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Apr 26, 2024 02:02:59.220835924 CEST	192.168.2.4	1.1.1.1	0xd60b	Standard query (0)	passwordreset.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:59.220999956 CEST	192.168.2.4	1.1.1.1	0xed7c	Standard query (0)	passwordreset.microsoftonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 02:02:16.924688101 CEST	1.1.1.1	192.168.2.4	0x3c33	No error (0)	site-stlp3.powerappsportals.com	site-007c8fae-cc59-4813-baa9-62acb99be07f-eun.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:16.924688101 CEST	1.1.1.1	192.168.2.4	0x3c33	No error (0)	site-007c8fae-cc59-4813-baa9-62acb99be07f-eun.azurewebsites.net	waws-prod-db3-243.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:16.924688101 CEST	1.1.1.1	192.168.2.4	0x3c33	No error (0)	waws-prod-db3-243.sip.azurewebsites.windows.net	waws-prod-db3-243-be2d.northeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:16.924918890 CEST	1.1.1.1	192.168.2.4	0xf75f	No error (0)	site-stlp3.powerappsportals.com	site-007c8fae-cc59-4813-baa9-62acb99be07f-eun.azurewebsites.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:16.924918890 CEST	1.1.1.1	192.168.2.4	0xf75f	No error (0)	site-007c8fae-cc59-4813-baa9-62acb99be07f-eun.azurewebsites.net	waws-prod-db3-243.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:16.924918890 CEST	1.1.1.1	192.168.2.4	0xf75f	No error (0)	waws-prod-db3-243.sip.azurewebsites.windows.net	waws-prod-db3-243-be2d.northeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:18.903991938 CEST	1.1.1.1	192.168.2.4	0xe32a	No error (0)	www.google.com		192.178.50.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:18.910356045 CEST	1.1.1.1	192.168.2.4	0x2b70	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 02:02:18.970927954 CEST	1.1.1.1	192.168.2.4	0x4e	No error (0)	content.powerapps.com	pa-static.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:18.970927954 CEST	1.1.1.1	192.168.2.4	0x4e	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:18.970927954 CEST	1.1.1.1	192.168.2.4	0x4e	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:18.970927954 CEST	1.1.1.1	192.168.2.4	0x4e	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:19.123389006 CEST	1.1.1.1	192.168.2.4	0x6757	No error (0)	content.powerapps.com	pa-static.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:21.324852943 CEST	1.1.1.1	192.168.2.4	0x21d2	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:21.324852943 CEST	1.1.1.1	192.168.2.4	0x21d2	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:21.324852943 CEST	1.1.1.1	192.168.2.4	0x21d2	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:21.442496061 CEST	1.1.1.1	192.168.2.4	0x3897	No error (0)	content.powerapps.com	pa-static.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:21.442496061 CEST	1.1.1.1	192.168.2.4	0x3897	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:21.442496061 CEST	1.1.1.1	192.168.2.4	0x3897	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:21.442496061 CEST	1.1.1.1	192.168.2.4	0x3897	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:21.570446968 CEST	1.1.1.1	192.168.2.4	0xffae	No error (0)	content.powerapps.com	pa-static.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:22.475995064 CEST	1.1.1.1	192.168.2.4	0x1ebd	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:22.475995064 CEST	1.1.1.1	192.168.2.4	0x1ebd	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:22.475995064 CEST	1.1.1.1	192.168.2.4	0x1ebd	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:30.069648027 CEST	1.1.1.1	192.168.2.4	0xfe6c	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		162.222.107.23	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:30.069648027 CEST	1.1.1.1	192.168.2.4	0xfe6c	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		162.222.107.38	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:30.069648027 CEST	1.1.1.1	192.168.2.4	0xfe6c	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		162.222.107.24	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:30.069648027 CEST	1.1.1.1	192.168.2.4	0xfe6c	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		162.222.107.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:30.069648027 CEST	1.1.1.1	192.168.2.4	0xfe6c	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		162.222.107.20	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:30.069648027 CEST	1.1.1.1	192.168.2.4	0xfe6c	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		162.222.107.19	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:30.069648027 CEST	1.1.1.1	192.168.2.4	0xfe6c	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		162.222.107.22	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:30.490832090 CEST	1.1.1.1	192.168.2.4	0x2ff3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:30.490832090 CEST	1.1.1.1	192.168.2.4	0x2ff3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:37.962390900 CEST	1.1.1.1	192.168.2.4	0x521c	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:37.962413073 CEST	1.1.1.1	192.168.2.4	0xda0f	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:39.077753067 CEST	1.1.1.1	192.168.2.4	0x95f1	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:39.077753067 CEST	1.1.1.1	192.168.2.4	0x95f1	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:39.078912020 CEST	1.1.1.1	192.168.2.4	0xc690	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:40.553725958 CEST	1.1.1.1	192.168.2.4	0x5f83	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:40.553725958 CEST	1.1.1.1	192.168.2.4	0x5f83	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:40.553725958 CEST	1.1.1.1	192.168.2.4	0x5f83	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:40.553750992 CEST	1.1.1.1	192.168.2.4	0x58c	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:40.553919077 CEST	1.1.1.1	192.168.2.4	0x967	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:43.873766899 CEST	1.1.1.1	192.168.2.4	0xb083	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:43.873766899 CEST	1.1.1.1	192.168.2.4	0xb083	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:02:55.842109919 CEST	1.1.1.1	192.168.2.4	0xd519	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:55.844007015 CEST	1.1.1.1	192.168.2.4	0x9b04	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:56.805721045 CEST	1.1.1.1	192.168.2.4	0x2cf4	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:56.808355093 CEST	1.1.1.1	192.168.2.4	0x2ec1	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:59.347870111 CEST	1.1.1.1	192.168.2.4	0xd60b	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:02:59.384165049 CEST	1.1.1.1	192.168.2.4	0xed7c	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:03:08.023293018 CEST	1.1.1.1	192.168.2.4	0x15cc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:03:08.023293018 CEST	1.1.1.1	192.168.2.4	0x15cc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 02:03:28.322886944 CEST	1.1.1.1	192.168.2.4	0x1d14	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 02:03:28.322886944 CEST	1.1.1.1	192.168.2.4	0x1d14	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

content.powerapps.com

aadcdn.msauth.net

aadcdn.msftauth.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49745	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:19 UTC	626	OUT	GET /resource/powerappsportal/dist/font-awesome.BootstrapV5.bundle-2ce6efb497.css HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:20 UTC	887	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:19 GMT Content-Type: text/css Content-Length: 101839 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000DO x-ms-static-content: ZE000007S Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 876c3ed8-41cc-48c2-b48a-3e8c61fa38e1 x-ms-correlation-id: b6431fed-38a0-4938-a2de-9201da873cfb x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=52.4,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000219Z-1865489d5f4pfk67n80fmg1bbw0000000adg0000000075pn X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:20 UTC	15497	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 32 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0d 0a 20 2a 2f 0d 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2d Data Ascii: /! Font Awesome Free 6.2.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2022 Fonticons, Inc. */.fa{font-family:var(--fa-style-
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 22 7d 2e 66 61 2d 73 63 68 6f 6f 6c 2d 63 69 72 63 6c 65 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 36 63 22 7d 2e 66 61 2d 63 72 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 35 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 61 6e 67 6c 65 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 33 22 7d 2e 66 61 2d 75 73 65 72 73 2d 72 65 63 74 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 39 34 22 7d 2e 66 61 2d 70 65 6f 70 6c 65 2d 72 6f 6f 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 33 37 22 7d 2e 66 61 2d 70 65 6f 70 6c 65 2d 6c 69 6e 65 3a 62 65 Data Ascii: "}.fa-school-circle-exclamation:before{content:"\e56c"}.fa-crop:before{content:"\f125"}.fa-angle-double-down:before,.fa-angles-down:before{content:"\f103"}.fa-users-rectangle:before{content:"\e594"}.fa-people-roof:before{content:"\e537"}.fa-people-line:be
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 35 33 22 7d 2e 66 61 2d 6d 61 70 2d 6c 6f 63 61 74 69 6f 6e 2d 64 6f 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6d 61 70 2d 6d 61 72 6b 65 64 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 61 30 22 7d 2e 66 61 2d 6a 65 64 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 36 39 22 7d 2e 66 61 2d 70 6f 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 71 75 61 72 65 2d 70 6f 6c 6c 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 38 31 22 7d 2e 66 61 2d 6d 75 67 2d 68 6f 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 37 62 36 22 7d 2e 66 61 2d 62 61 74 74 65 72 79 2d 63 61 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 72 2d 62 Data Ascii: efore{content:"\f853"}.fa-map-location-dot:before,.fa-map-marked-alt:before{content:"\f5a0"}.fa-jedi:before{content:"\f669"}.fa-poll:before,.fa-square-poll-vertical:before{content:"\f681"}.fa-mug-hot:before{content:"\f7b6"}.fa-battery-car:before,.fa-car-b
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 35 61 22 7d 2e 66 61 2d 68 61 6e 64 2d 70 6f 69 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 61 22 7d 2e 66 61 2d 64 72 75 6d 2d 73 74 65 65 6c 70 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 36 61 22 7d 2e 66 61 2d 68 61 6e 64 2d 73 63 69 73 73 6f 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 37 22 7d 2e 66 61 2d 68 61 6e 64 73 2d 70 72 61 79 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 72 61 79 69 6e 67 2d 68 61 6e 64 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 38 34 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 72 69 67 68 74 2d 72 6f 74 61 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 61 72 72 6f 77 2d 72 6f 74 61 74 65 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 2c 2e Data Ascii: 5a"}.fa-hand-pointer:before{content:"\f25a"}.fa-drum-steelpan:before{content:"\f56a"}.fa-hand-scissors:before{content:"\f257"}.fa-hands-praying:before,.fa-praying-hands:before{content:"\f684"}.fa-arrow-right-rotate:before,.fa-arrow-rotate-forward:before,.
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 65 32 33 64 22 7d 2e 66 61 2d 6d 61 67 6e 69 66 79 69 6e 67 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 70 69 6e 67 2d 70 6f 6e 67 2d 70 61 64 64 6c 65 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 61 62 6c 65 2d 74 65 6e 6e 69 73 2d 70 61 64 64 6c 65 2d 62 61 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 61 62 6c 65 2d 74 65 6e 6e 69 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 35 64 22 7d 2e 66 61 2d 64 69 61 67 6e 6f 73 65 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 65 72 73 6f 6e 2d 64 6f 74 73 2d 66 72 6f 6d 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 30 22 7d 2e 66 61 2d 74 72 61 73 Data Ascii: e23d"}.fa-magnifying-glass:before,.fa-search:before{content:"\f002"}.fa-ping-pong-paddle-ball:before,.fa-table-tennis-paddle-ball:before,.fa-table-tennis:before{content:"\f45d"}.fa-diagnoses:before,.fa-person-dots-from-line:before{content:"\f470"}.fa-tras
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 66 66 32 22 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 66 61 2d 62 72 61 6e 64 73 2d 34 30 30 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 2e 66 61 2d 62 72 61 6e 64 73 2c 2e 66 61 62 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 66 61 2d 6d 6f 6e 65 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 30 22 7d 2e 66 61 2d 68 6f 6f 6c 69 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 37 22 7d 2e 66 61 2d 79 65 6c 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 65 39 22 7d 2e 66 61 2d 63 63 2d 76 69 73 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 30 22 7d 2e 66 61 2d 6c 61 73 74 66 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 32 Data Ascii: ff2"),url(../fonts/fa-brands-400.ttf) format("truetype")}.fa-brands,.fab{font-weight:400}.fa-monero:before{content:"\f3d0"}.fa-hooli:before{content:"\f427"}.fa-yelp:before{content:"\f1e9"}.fa-cc-visa:before{content:"\f1f0"}.fa-lastfm:before{content:"\f202
2024-04-26 00:02:20 UTC	4422	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 64 22 7d 2e 66 61 2d 73 74 75 6d 62 6c 65 75 70 6f 6e 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 61 33 22 7d 2e 66 61 2d 69 6e 74 65 72 6e 65 74 2d 65 78 70 6c 6f 72 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 36 62 22 7d 2e 66 61 2d 74 65 6c 65 67 72 61 6d 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 65 6c 65 67 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 36 22 7d 2e 66 61 2d 6f 6c 64 2d 72 65 70 75 62 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 31 30 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 77 68 61 74 73 61 70 70 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 77 68 61 74 73 61 70 70 2d Data Ascii: efore{content:"\f17d"}.fa-stumbleupon-circle:before{content:"\f1a3"}.fa-internet-explorer:before{content:"\f26b"}.fa-telegram-plane:before,.fa-telegram:before{content:"\f2c6"}.fa-old-republic:before{content:"\f510"}.fa-square-whatsapp:before,.fa-whatsapp-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:19 UTC	621	OUT	GET /resource/powerappsportal/dist/preform.BootstrapV5.bundle-6e25944320.css HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:19 UTC	887	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:19 GMT Content-Type: text/css Content-Length: 112850 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA0000012 x-ms-static-content: NR0000002 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 82bb3c15-f692-4ad6-9d21-1d89e02f01ab x-ms-correlation-id: cab2dbfd-7dd3-42b3-a470-1272267ad861 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=36.1,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff X-Cache: TCP_MISS X-Azure-Ref: 20240426T000219Z-17644f8887fmhhpjnhx5wkacd8000000071g0000000020k1 x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:19 UTC	15497	IN	Data Raw: 2e 70 72 65 74 74 79 70 72 69 6e 74 7b 70 61 64 64 69 6e 67 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 37 66 37 66 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 31 65 31 65 38 7d 2e 70 72 65 74 74 79 70 72 69 6e 74 5b 63 6c 61 73 73 2a 3d 6c 69 6e 65 6e 75 6d 73 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 34 30 70 78 20 30 20 30 20 23 66 62 66 62 66 63 2c 69 6e 73 65 74 20 34 31 70 78 20 30 20 30 20 23 65 63 65 63 66 30 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 34 30 70 78 20 30 20 30 20 23 66 62 66 62 66 63 2c 69 6e 73 65 74 20 34 31 70 78 20 30 20 30 20 23 65 63 65 63 66 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 34 30 70 78 20 30 Data Ascii: .prettyprint{padding:8px;background-color:#f7f7f9;border:1px solid #e1e1e8}.prettyprint[class*=linenums]{-webkit-box-shadow:inset 40px 0 0 #fbfbfc,inset 41px 0 0 #ececf0;-moz-box-shadow:inset 40px 0 0 #fbfbfc,inset 41px 0 0 #ececf0;box-shadow:inset 40px 0
2024-04-26 00:02:19 UTC	16384	IN	Data Raw: 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 28 30 20 30 20 30 20 2f 20 38 25 29 2c 30 20 30 20 38 70 78 20 72 67 62 28 31 30 32 20 31 37 35 20 32 33 33 20 2f 20 36 30 25 29 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 70 78 29 7b 2e 70 61 67 65 2d 68 65 61 64 65 72 3e 2e 66 6c 6f 61 74 2d 65 6e 64 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 32 30 70 78 20 30 21 69 6d 70 6f 72 74 61 6e 74 7d 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 70 61 67 65 2d 68 65 61 64 65 72 3e 2e 62 74 6e 2d 74 6f 6f 6c 62 61 72 3e 2e 62 74 6e 2c 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 70 61 67 65 2d 68 65 61 64 65 72 3e 2e 62 74 6e 2d 74 6f 6f 6c 62 61 72 3e 2e 62 74 6e 2d 67 Data Ascii: ow:inset 0 1px 1px rgb(0 0 0 / 8%),0 0 8px rgb(102 175 233 / 60%)}@media (max-width:767px){.page-header>.float-end{float:none!important;margin:0 0 20px 0!important}html[dir=rtl] .page-header>.btn-toolbar>.btn,html[dir=rtl] .page-header>.btn-toolbar>.btn-g
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 67 68 74 3a 36 30 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 7d 2e 70 6f 77 65 72 62 69 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 36 30 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 74 64 2e 66 75 6c 6c 50 61 67 65 45 64 69 74 6f 72 43 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 66 75 6c 6c 50 61 67 65 43 6f 6e 74 65 6e 74 45 64 69 74 6f 72 46 72 61 6d 65 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 40 2d 6d 6f 7a 2d 64 6f 63 75 6d 65 6e 74 20 75 72 6c 2d 70 72 65 66 69 78 28 29 7b 2e 65 64 69 74 6f 72 43 6f 6e 74 61 69 6e 65 72 20 74 61 62 6c 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f Data Ascii: ght:600px;border:none}}.powerbi{width:100%;height:600px;border:none}td.fullPageEditorContainer{height:100%}.fullPageContentEditorFrame{min-width:0!important}@-moz-document url-prefix(){.editorContainer table{overflow:hidden}}@media screen and (-ms-high-co
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 69 6f 6e 42 6c 6f 63 6b 4c 61 79 6f 75 74 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 73 6d 7b 6d 61 78 2d 77 69 64 74 68 3a 37 32 30 70 78 7d 23 65 6e 74 69 74 79 2d 6c 69 73 74 2d 6d 61 70 2d 6f 70 74 69 6f 6e 73 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 61 75 74 6f 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 72 6f 77 2e 73 65 63 74 69 6f 6e 42 6c 6f 63 6b 4c 61 79 6f 75 74 3e 2e 63 6f 6e 74 61 69 6e 65 72 2c 2e 72 6f 77 2e 73 65 63 74 69 6f 6e 42 6c 6f 63 6b 4c 61 79 6f 75 74 3e 2e 63 6f 6e 74 61 69 6e 65 72 2d 6c 67 2c 2e 72 6f 77 2e 73 Data Ascii: ionBlockLayout>.container-sm{max-width:720px}#entity-list-map-options.form-inline .form-control{display:inline-block;width:auto;vertical-align:middle}}@media (min-width:992px){.row.sectionBlockLayout>.container,.row.sectionBlockLayout>.container-lg,.row.s
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 61 74 3a 6c 65 66 74 7d 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 63 72 6d 45 6e 74 69 74 79 46 6f 72 6d 56 69 65 77 20 2e 63 65 6c 6c 2e 63 68 65 63 6b 62 6f 78 2d 63 65 6c 6c 20 64 69 76 2e 63 6f 6e 74 72 6f 6c 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 63 72 6d 45 6e 74 69 74 79 46 6f 72 6d 56 69 65 77 20 2e 63 65 6c 6c 2e 63 68 65 63 6b 62 6f 78 2d 63 65 6c 6c 20 64 69 76 2e 74 61 62 6c 65 2d 69 6e 66 6f 20 64 69 76 2e 76 61 6c 69 64 61 74 6f 72 73 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 68 74 6d 6c 5b 64 69 72 3d 6c 74 72 5d 20 2e 63 72 6d 45 6e 74 69 74 79 46 6f 72 6d 56 69 65 77 20 2e 63 65 6c 6c 2e 63 68 65 63 6b 62 6f 78 2d 63 65 6c 6c 20 64 69 76 2e 74 61 62 6c 65 2d 69 6e 66 6f 20 64 69 76 2e 76 61 6c 69 64 Data Ascii: at:left}html[dir=rtl] .crmEntityFormView .cell.checkbox-cell div.control{float:right}.crmEntityFormView .cell.checkbox-cell div.table-info div.validators{display:none;clear:none}html[dir=ltr] .crmEntityFormView .cell.checkbox-cell div.table-info div.valid
2024-04-26 00:02:20 UTC	16384	IN	Data Raw: 65 63 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 2e 63 72 6d 45 6e 74 69 74 79 46 6f 72 6d 56 69 65 77 20 73 65 6c 65 63 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 72 65 61 64 6f 6e 6c 79 3a 3a 2d 6d 73 2d 65 78 70 61 6e 64 2c 2e 66 6f 72 6d 2d 72 65 61 64 6f 6e 6c 79 20 73 65 6c 65 63 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 6d 73 2d 65 78 70 61 6e 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 72 6d 45 6e 74 69 74 79 46 6f 72 6d 56 69 65 77 20 73 65 6c 65 63 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2e 72 65 61 64 6f 6e 6c 79 20 6f 70 74 69 6f 6e 2c 2e 66 Data Ascii: ect.form-control{appearance:none;-webkit-appearance:none;-moz-appearance:none}.crmEntityFormView select.form-control.readonly::-ms-expand,.form-readonly select.form-control::-ms-expand{display:none}.crmEntityFormView select.form-control.readonly option,.f
2024-04-26 00:02:20 UTC	15433	IN	Data Raw: 3a 30 20 30 7d 2e 75 69 2d 74 6f 6f 6c 74 69 70 7b 70 61 64 64 69 6e 67 3a 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 35 70 78 20 23 61 61 61 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 35 70 78 20 23 61 61 61 7d 62 6f 64 79 20 2e 75 69 2d 74 6f 6f 6c 74 69 70 7b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 32 70 78 7d 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 20 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e Data Ascii: :0 0}.ui-tooltip{padding:8px;position:absolute;z-index:9999;max-width:300px;-webkit-box-shadow:0 0 5px #aaa;box-shadow:0 0 5px #aaa}body .ui-tooltip{border-width:2px}.ui-widget{font-family:Verdana,Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{fon

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49747	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:19 UTC	611	OUT	GET /resource/powerappsportal/dist/pwa-style.bundle-2739c60227.css HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:19 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:19 GMT Content-Type: text/css Content-Length: 540 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000EB x-ms-static-content: ZE000000B Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 5c0c0532-c11b-4574-8eec-ce630d95051e x-ms-correlation-id: 056a0734-343a-43c2-9515-88e8a8b3ab90 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=52.2,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000219Z-1865489d5f46s4qnhr87brpyc400000009gg000000002d8r X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:19 UTC	540	IN	Data Raw: 23 6f 66 66 6c 69 6e 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 42 61 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 34 63 65 7d 23 6d 65 73 73 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 65 67 6f 65 20 55 49 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 33 33 25 3b 63 6f 6c 6f 72 3a 23 33 32 33 31 33 30 7d 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 23 6d 65 73 73 61 67 65 7b 72 69 67 68 74 3a 33 36 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 Data Ascii: #offlineNotificationBar{padding-top:10px;padding-bottom:10px;background:#fff4ce}#message{position:relative;font-family:Segoe UI;font-style:normal;font-weight:600;font-size:12px;line-height:133%;color:#323130}html[dir=rtl] #message{right:36px;margin-left:6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:19 UTC	611	OUT	GET /resource/powerappsportal/dist/pcf-style.bundle-0d8f841437.css HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:19 UTC	906	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:19 GMT Content-Type: text/css Content-Length: 11717 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000006S x-ms-static-content: ze0000018 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 2c9abb35-30cb-4c1e-9700-63dd2333265b x-ms-correlation-id: 4a1bd3d3-032e-455e-bd62-9263a3062034 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=34.6,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000219Z-1865489d5f4b68hj4nmrur3p700000000afg00000000cgyr X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 67510084 X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:19 UTC	11717	IN	Data Raw: 2e 6d 73 6f 73 2d 6f 70 65 6e 20 2e 6d 73 6f 73 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 6d 73 6f 73 2d 66 75 6c 6c 73 63 72 65 65 6e 29 20 2e 6d 73 6f 73 2d 73 65 6c 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 74 6f 70 3a 32 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 68 74 6d 6c 5b 64 69 72 3d 72 74 6c 5d 20 2e 6d 73 6f 73 2d 6f 70 65 6e 20 2e 6d 73 6f 73 2d 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 6d 73 6f 73 2d 66 75 6c 6c 73 63 72 65 65 6e 29 20 2e 6d 73 6f 73 2d 73 65 6c 65 63 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 68 Data Ascii: .msos-open .msos-inner-container:not(.msos-fullscreen) .msos-selection-container{position:absolute!important;z-index:1000;top:28px!important}html[dir=rtl] .msos-open .msos-inner-container:not(.msos-fullscreen) .msos-selection-container{right:0!important}h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	184.26.118.82	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 00:02:20 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=111675 Date: Fri, 26 Apr 2024 00:02:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:20 UTC	632	OUT	GET /resource/powerappsportal/img/web.png HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:21 UTC	793	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:21 GMT Content-Type: image/png Content-Length: 625 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000005N x-ms-static-content: ZE000001O Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: bd5ac4c4-8780-485c-8870-756bb85d7d68 x-ms-correlation-id: 1f80c519-5f0e-41b8-909b-382c791f5b97 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=31.9,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000221Z-1865489d5f4pfk67n80fmg1bbw0000000acg000000009h7u X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:21 UTC	625	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 06 49 44 41 54 78 01 9d 52 d1 71 da 40 10 dd 3d 0b 0b f2 65 3a c0 15 44 74 80 2b 80 74 80 2b 40 9e 20 23 e7 27 e4 c3 41 18 7b 2c 55 80 5d 41 70 05 38 15 84 54 00 a9 20 fe 33 42 a0 cd db b3 95 c1 cc c4 33 f1 cd dc cc ed bb dd b7 bb 6f 97 69 e7 84 dd 6e 83 f7 4c 13 cf 16 91 d4 9e e1 19 e3 e6 9c 7d 89 a2 78 b1 ed cf c5 c3 f7 fd 83 8a bb ff 19 41 6d 98 70 e2 03 61 73 64 9d 24 9f 02 57 4c 09 27 83 e1 c5 49 11 67 8a 47 c5 2d 4d 85 f3 ea 63 9a 1d c2 b4 c1 51 14 2d f4 02 3f 06 e6 b9 e9 aa 2e b4 e1 b3 5e f0 43 Data Ascii: PNGIHDRapHYssRGBgAMAaIDATxRq@=e:Dt+t+@ #'A{,U]Ap8T 3B3oinL}xAmpasd$WL'IgG-McQ-?.^C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:20 UTC	634	OUT	GET /resource/powerappsportal/img/close.png HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:21 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:21 GMT Content-Type: image/png Content-Length: 237 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000006N x-ms-static-content: NR0000003 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: eba3fda1-995b-4d64-98ae-97e515cfbcf7 x-ms-correlation-id: b9099475-3525-4c87-8245-aca1d13f6111 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=43.0,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000221Z-17644f8887flqds7p15tz8p7n400000006qg00000000bp0k X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 67510084 X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:21 UTC	237	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 06 00 00 00 8d 32 cf bd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 82 49 44 41 54 78 01 8d 8f c1 0d 80 20 10 04 17 28 c2 8b 2f 4b 20 76 64 07 96 a0 1d d8 81 b5 d8 01 76 e0 93 a7 15 a0 ae 09 09 21 f7 60 3f 70 b7 c3 ed e1 c6 d1 ef 5d 27 67 8c f1 86 22 ef fd d0 8b 2c 36 25 ac c6 60 67 43 83 e8 25 60 73 9c 24 22 07 1b 3c f3 e4 0c 3d 0f a6 10 c2 65 ea d7 34 58 97 d0 5f 6b 51 bc 97 10 65 d1 a8 e6 68 a7 2d ae 7d d0 d4 90 b6 33 3d fb 65 2f 1a 44 b1 f7 43 c0 fc 02 da 6f 62 34 31 b0 78 b4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR2pHYssRGBgAMAaIDATx (/K vdv!`?p]'g",6%`gC%`s$"<=e4X_kQeh-}3=e/DCob41xIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49754	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	603	OUT	GET /resource/powerappsportal/dist/client-telemetry.bundle-02a4a6c393.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:22 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:21 GMT Content-Type: application/x-javascript Content-Length: 217004 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AI x-ms-static-content: ZE000007G Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 50df81b2-466d-4389-b049-89e2b5de6836 x-ms-correlation-id: 9d9df550-8344-4f68-90c9-ed5e3fd62dfc x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=20.1,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000221Z-1865489d5f469db67514m1tnm40000000aag00000000fb8d X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:22 UTC	15481	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 41 6e 61 6c 79 74 69 63 73 20 57 65 62 2c 20 33 2e 32 2e 38 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0d 0a 20 2a 2f 0d 0a 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 73 3d 22 6f 62 6a 65 63 74 22 2c 66 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 66 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 6c 3d 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: /! 1DS JS SDK Analytics Web, 3.2.8 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */var e=this,t=function(n){"use strict";var u="function",s="object",fe="undefined",f="prototype",l="hasOwnProperty
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 74 28 74 29 5d 3a 28 69 26 26 28 28 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 65 2e 69 64 5d 3b 69 66 28 21 6e 29 7b 6e 3d 7b 7d 3b 74 72 79 7b 51 69 28 74 29 26 26 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6a 69 29 74 72 79 7b 72 65 74 75 72 6e 20 6a 69 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 31 7d 63 61 74 63 68 28 69 29 7b 7d 7d 28 74 2c 65 2e 69 64 2c 6e 29 26 26 28 74 5b 65 2e 69 64 5d 3d 6e 29 7d 63 61 74 63 68 28 69 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 28 61 2c 65 29 29 5b 78 74 28 74 29 5d 3d 6e 29 2c 6e 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 26 26 65 5b 74 5d 29 Data Ascii: t(t)]:(i&&((r=function(e,t){var n=t[e.id];if(!n){n={};try{Qi(t)&&!function(e,t,n){if(ji)try{return ji(e,t,{value:n,enumerable:!1,configurable:!0}),1}catch(i){}}(t,e.id,n)&&(t[e.id]=n)}catch(i){}}return n}(a,e))[xt(t)]=n),n)},kill:function(e,t){if(e&&e[t])
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 6f 7c 7c 6d 72 28 79 2c 76 5b 71 5d 29 7d 2c 76 2e 73 65 74 43 6f 6f 6b 69 65 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 76 5b 63 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 69 7c 7c 61 7c 7c 24 74 28 79 2e 65 6e 61 62 6c 65 50 65 72 66 4d 67 72 29 26 26 6a 28 65 3d 24 74 28 79 5b 4a 65 5d 29 29 26 26 28 61 3d 65 28 76 2c 76 5b 42 5d 28 29 29 29 2c 69 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 76 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 3d 65 7d 2c 76 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 5b 78 5d 7d 2c 76 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: n(){return o=o\|\|mr(y,v[q])},v.setCookieMgr=function(e){o=e},v[ct]=function(){var e;return i\|\|a\|\|$t(y.enablePerfMgr)&&j(e=$t(y[Je]))&&(a=e(v,v[B]())),i\|\|a\|\|null},v.setPerfMgr=function(e){i=e},v.eventCnt=function(){return n[x]},v.releaseQueue=function(){var
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 73 63 28 65 2c 74 2c 6e 2c 69 29 7b 69 66 28 69 26 26 65 29 7b 76 61 72 20 72 3d 54 6f 28 69 2e 76 61 6c 75 65 2c 69 2e 6b 69 6e 64 2c 69 2e 70 72 6f 70 65 72 74 79 54 79 70 65 29 3b 69 66 28 2d 31 3c 72 29 7b 76 61 72 20 61 3d 65 5b 72 63 5d 2c 6f 3d 28 6f 3d 28 61 3d 61 7c 7c 28 65 5b 72 63 5d 3d 7b 66 3a 7b 7d 7d 29 29 5b 61 63 5d 29 7c 7c 28 61 5b 61 63 5d 3d 7b 7d 29 3b 69 66 28 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 74 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 76 61 72 20 75 3d 74 5b 63 5d 2c 6f 3d 28 6f 5b 75 5d 7c 7c 28 6f 5b 75 5d 3d 7b 66 3a 7b 7d 7d 29 2c 6f 5b 75 5d 5b 61 63 5d 7c 7c 28 6f 5b 75 5d 5b 61 63 5d 3d 7b 7d 29 29 3b 6f 3d 6f 5b 6e 5d 3d 7b 7d 2c 45 28 69 2e 76 61 6c 75 65 29 3f 6f 2e 61 3d 7b 74 3a 72 7d 3a 6f 2e Data Ascii: tion sc(e,t,n,i){if(i&&e){var r=To(i.value,i.kind,i.propertyType);if(-1<r){var a=e[rc],o=(o=(a=a\|\|(e[rc]={f:{}}))[ac])\|\|(a[ac]={});if(t)for(var c=0;c<t.length;c++)var u=t[c],o=(o[u]\|\|(o[u]={f:{}}),o[u][ac]\|\|(o[u][ac]={}));o=o[n]={},E(i.value)?o.a={t:r}:o.
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4e 6f 28 65 2c 6c 2e 69 64 65 6e 74 69 66 69 65 72 29 3b 76 61 72 20 6e 3d 28 74 3d 6c 2e 5f 67 65 74 54 65 6c 43 74 78 28 74 29 29 2e 67 65 74 45 78 74 43 66 67 28 6c 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 69 3d 21 21 77 2e 64 69 73 61 62 6c 65 54 65 6c 65 6d 65 74 72 79 3b 28 6e 3f 69 7c 7c 6e 2e 64 69 73 61 62 6c 65 54 65 6c 65 6d 65 74 72 79 3a 69 29 7c 7c 52 7c 7c 28 77 5b 41 63 5d 26 26 28 65 2e 69 4b 65 79 3d 77 5b 41 63 5d 29 2c 6e 26 26 6e 5b 41 63 5d 26 26 28 65 2e 69 4b 65 79 3d 6e 5b 41 63 5d 29 2c 72 28 65 2c 21 30 29 2c 51 3f 73 28 32 2c 32 29 3a 6f 28 29 29 2c 6c 2e 70 72 6f 63 65 73 73 4e 65 78 74 28 65 2c 74 29 7d 2c 6c 2e 5f 64 6f 54 65 61 72 64 6f 77 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 Data Ascii: nction(e,t){No(e,l.identifier);var n=(t=l._getTelCtx(t)).getExtCfg(l.identifier),i=!!w.disableTelemetry;(n?i\|\|n.disableTelemetry:i)\|\|R\|\|(w[Ac]&&(e.iKey=w[Ac]),n&&n[Ac]&&(e.iKey=n[Ac]),r(e,!0),Q?s(2,2):o()),l.processNext(e,t)},l._doTeardown=function(e,t){v
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 6f 63 43 6f 6e 74 65 78 74 28 65 29 2c 6f 2e 61 70 70 6c 79 53 65 73 73 69 6f 6e 43 6f 6e 74 65 78 74 28 65 29 2c 6f 2e 61 70 70 6c 79 44 65 76 69 63 65 43 6f 6e 74 65 78 74 28 65 29 2c 75 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 26 26 6f 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 28 65 29 2c 75 2e 65 6e 61 62 6c 65 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 69 6e 67 26 26 6f 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 28 65 29 2c 6f 2e 61 70 70 6c 79 43 6c 6f 75 64 43 6f 6e 74 65 78 74 28 65 29 29 2c 74 65 28 47 74 28 72 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3d 3d 3d 47 74 28 72 5b 65 5d 29 2e 6c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 Data Ascii: ocContext(e),o.applySessionContext(e),o.applyDeviceContext(e),u.enableApplicationInsightsTrace&&o.applyAITraceContext(e),u.enableDistributedTracing&&o.applyDistributedTraceContext(e),o.applyCloudContext(e)),te(Gt(r),function(e){0===Gt(r[e]).length&&delete
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 72 3d 30 3b 72 3c 65 5b 61 66 5d 3b 72 2b 2b 29 69 66 28 65 5b 72 5d 3c 30 7c 7c 54 66 3c 3d 65 5b 72 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 77 66 2e 5f 5f 69 65 44 79 6e 3d 31 3b 76 61 72 20 4e 66 3d 77 66 3b 66 75 6e 63 74 69 6f 6e 20 77 66 28 65 29 7b 76 61 72 20 63 3d 74 68 69 73 2c 75 3d 53 69 28 65 29 3b 69 65 28 77 66 2c 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 7a 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 73 56 61 6c 69 64 3d 21 31 3b 76 61 72 20 74 3d 28 74 3d 63 69 28 29 29 26 26 74 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 30 3c 74 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 61 66 5d 3f 63 Data Ascii: )return!1;for(r=0;r<e[af];r++)if(e[r]<0\|\|Tf<=e[r])return!1;return!0}wf.__ieDyn=1;var Nf=wf;function wf(e){var c=this,u=Si(e);ie(wf,this,function(e){e[zl]=function(e){e.isValid=!1;var t=(t=ci())&&t.getEntriesByType&&0<t.getEntriesByType("navigation")[af]?c
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 6c 6c 65 63 74 51 75 65 72 79 26 26 28 28 69 3d 6e 2e 73 65 61 72 63 68 29 7c 7c 2d 31 21 3d 28 61 3d 28 72 3d 6e 2e 68 61 73 68 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 29 26 26 28 69 3d 72 2e 73 6c 69 63 65 28 61 29 29 2c 74 2b 3d 69 29 2c 65 2e 75 72 6c 43 6f 6c 6c 65 63 74 48 61 73 68 26 26 28 74 2b 3d 6e 2e 68 61 73 68 7c 7c 22 22 29 2c 74 29 3a 6e 75 6c 6c 29 29 29 7d 2c 24 66 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 73 65 74 43 6f 6d 6d 6f 6e 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 74 68 69 73 3b 69 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 65 2c 6e 29 2c 69 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 65 2c 6e 29 2c 69 2e 5f 70 61 67 65 54 79 70 65 4d 65 74 61 54 Data Ascii: llectQuery&&((i=n.search)\|\|-1!=(a=(r=n.hash\|\|"").indexOf("?"))&&(i=r.slice(a)),t+=i),e.urlCollectHash&&(t+=n.hash\|\|""),t):null)))},$f.prototype._setCommonProperties=function(e,t,n){var i=this;i._setBasicProperties(e,n),i._setPageTags(e,n),i._pageTypeMetaT
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 6e 3d 28 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 69 73 53 68 6f 72 74 4e 61 6d 65 73 3f 62 64 3a 49 64 29 2e 70 61 72 65 6e 74 49 64 2c 69 3d 28 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 42 6c 6f 62 46 69 65 6c 64 4e 61 6d 65 73 2e 69 73 53 68 6f 72 74 4e 61 6d 65 73 3f 62 64 3a 49 64 29 2e 70 61 72 65 6e 74 4e 61 6d 65 2c 72 3d 74 5b 6e 5d 2c 74 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 72 7c 7c 74 7c 7c 21 65 3f 7b 7d 3a 74 68 69 73 2e 5f 70 6f 70 75 6c 61 74 65 50 61 72 65 6e 74 49 6e 66 6f 28 65 2c 6e 2c 69 29 7d 2c 45 64 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 69 73 54 72 61 63 6b 65 64 57 69 74 68 44 61 74 61 4d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 Data Ascii: n=(this._contentBlobFieldNames.isShortNames?bd:Id).parentId,i=(this._contentBlobFieldNames.isShortNames?bd:Id).parentName,r=t[n],t=t[i];return r\|\|t\|\|!e?{}:this._populateParentInfo(e,n,i)},Ed.prototype._isTrackedWithDataM=function(e){for(var t=e.attributes
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 61 67 65 2b 22 27 2c 20 6e 61 6d 65 3a 20 27 22 2b 65 5b 44 65 5d 2b 22 27 22 3a 63 6e 28 29 26 26 28 6e 3d 73 6e 28 29 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 2c 74 2b 6e 7d 76 61 72 20 6c 6e 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 66 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 27 22 27 2b 65 5b 51 65 5d 28 2f 5c 22 2f 67 2c 64 29 2b 27 22 27 3a 64 7d 66 75 6e 63 74 69 6f 6e 20 64 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 21 3d 3d 66 3f 63 6f 6e 73 6f 6c 65 3a 78 28 58 74 29 3b 72 26 26 28 6e 3d 22 6c 6f 67 22 2c 57 28 72 5b 6e 3d 72 5b 65 5d 3f 65 3a 6e 5d 29 29 26 26 72 5b 6e 5d 28 74 29 7d 67 6e 2e 64 61 74 61 54 79 70 65 3d 22 4d 65 73 73 61 67 65 44 61 74 61 22 3b 76 61 72 20 70 6e 3d 67 6e 3b 66 75 Data Ascii: age+"', name: '"+e[De]+"'":cn()&&(n=sn().stringify(e)),t+n}var ln=null;function fn(e){return e?'"'+e[Qe](/\"/g,d)+'"':d}function dn(e,t){var n,r=typeof console!==f?console:x(Xt);r&&(n="log",W(r[n=r[e]?e:n]))&&r[n](t)}gn.dataType="MessageData";var pn=gn;fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49753	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	611	OUT	GET /resource/powerappsportal/dist/client-telemetry-wrapper.bundle-633e70f51b.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:22 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:22 GMT Content-Type: application/x-javascript Content-Length: 4807 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AG x-ms-static-content: ZE0000005 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 754c8152-c8d5-4fa1-846c-05074976c7e5 x-ms-correlation-id: f255f763-caeb-4ac2-aa0d-7128e28d6c8b x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=26.8,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000221Z-17644f8887fcmd2k27nm0cheh40000000720000000001346 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:22 UTC	4807	IN	Data Raw: ef bb bf 2f 2f 2f 2f 20 57 72 61 70 70 65 72 20 63 6c 61 73 73 20 66 6f 72 20 63 6c 69 65 6e 74 20 6c 6f 67 67 65 72 20 66 6f 72 20 62 65 6c 6f 77 20 70 75 72 70 6f 73 65 73 0d 0a 2f 2f 2f 2f 20 31 2e 20 41 62 73 74 72 61 63 74 69 6e 67 20 43 53 54 20 66 72 61 6d 65 77 6f 72 6b 20 63 6f 64 65 20 66 72 6f 6d 20 6d 61 6e 75 61 6c 20 74 72 61 63 65 20 6c 6f 67 20 41 50 49 73 2e 20 0d 0a 2f 2f 2f 2f 20 32 2e 20 43 6f 6e 73 74 72 6f 6c 6c 69 6e 67 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 20 6f 66 20 43 53 54 20 66 72 61 6d 65 77 6f 72 6b 20 63 6f 64 65 20 69 6e 20 63 6c 69 65 6e 74 4c 6f 67 67 65 72 2e 6a 73 20 62 61 73 65 64 20 6f 6e 20 77 68 65 74 68 65 72 20 74 65 6c 65 6d 65 74 72 79 20 69 73 20 65 6e 61 62 6c 65 64 0d 0a 63 6c 61 73 73 20 43 6c 69 65 6e Data Ascii: //// Wrapper class for client logger for below purposes//// 1. Abstracting CST framework code from manual trace log APIs. //// 2. Constrolling instantiation of CST framework code in clientLogger.js based on whether telemetry is enabledclass Clien

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	620	OUT	GET /resource/powerappsportal/dist/preform.BootstrapV5.moment_2_29_4.bundle-6e937472b9.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:22 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:21 GMT Content-Type: application/x-javascript Content-Length: 540779 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000AF x-ms-static-content: ZE0000087 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: d1ed5c81-2c6e-4e1f-b95d-70fc9fa3c856 x-ms-correlation-id: 7d86c3ac-6a76-4f36-b155-f7a261dc4103 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=43.1,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000221Z-1865489d5f49lr4x8x178u34an000000081g00000001fm74 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:22 UTC	15481	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 20 22 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 22 2b 7a 2b 22 29 22 2b 65 2b 22 28 22 2b 7a 2b 22 7c 24 29 22 29 29 26 26 79 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 2c 73 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 65 2e 61 74 74 72 28 65 2c 69 Data Ascii: "];return t\|\|(t=new RegExp("(^\|"+z+")"+e+"("+z+"\|$)"))&&y(e,function(e){return t.test("string"==typeof e.className&&e.className\|\|"undefined"!=typeof e.getAttribute&&e.getAttribute("class")\|\|"")})},ATTR:function(i,n,s){return function(e){var t=ae.attr(e,i
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 69 6f 6e 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6b 2e 63 6f 6e 73 6f 6c 65 26 26 6b 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 65 26 26 4c 2e 74 65 73 74 28 65 2e 6e 61 6d 65 29 26 26 6b 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 65 2e 73 74 61 63 6b 2c 74 29 7d 2c 43 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6b 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 7d 29 7d 3b 76 61 72 20 57 3d 43 2e 44 65 66 65 72 72 65 64 28 29 3b 66 75 6e 63 74 69 6f 6e 20 59 28 29 7b 44 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 Data Ascii: ionHook=function(e,t){k.console&&k.console.warn&&e&&L.test(e.name)&&k.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},C.readyException=function(e){k.setTimeout(function(){throw e})};var W=C.Deferred();function Y(){D.removeEventListener("D
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 28 6e 2c 69 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 21 31 2c 69 2c 72 29 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 31 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 74 29 2c 74 7c 7c 72 29 29 7b 66 6f 72 28 61 3d 28 6f 3d 43 2e 6d 61 70 28 67 65 28 65 2c 22 73 63 72 69 70 74 22 29 2c 49 65 29 29 2e 6c 65 6e 67 74 68 3b 68 3c 63 3b 68 2b 2b 29 6c 3d 65 2c 68 21 3d 3d 64 26 26 28 6c 3d 43 2e 63 6c 6f 6e 65 28 6c 2c 21 30 2c 21 30 29 2c 61 26 26 43 2e 6d 65 72 67 65 28 6f 2c 67 65 28 6c 2c 22 73 63 72 69 70 74 22 29 29 29 2c 73 2e 63 61 6c 6c 28 69 5b 68 5d 2c 6c 2c 68 29 3b 69 66 28 61 29 66 6f 72 28 75 3d 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 43 2e 6d 61 70 28 6f 2c Data Ascii: (n,i[0].ownerDocument,!1,i,r)).firstChild,1===e.childNodes.length&&(e=t),t\|\|r)){for(a=(o=C.map(ge(e,"script"),Ie)).length;h<c;h++)l=e,h!==d&&(l=C.clone(l,!0,!0),a&&C.merge(o,ge(l,"script"))),s.call(i[h],l,h);if(a)for(u=o[o.length-1].ownerDocument,C.map(o,
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 73 3d 43 2e 66 6e 5b 6e 5d 3b 43 2e 66 6e 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 74 68 69 73 2e 61 6e 69 6d 61 74 65 28 75 74 28 6e 2c 21 30 29 2c 65 2c 74 2c 69 29 7d 7d 29 2c 43 2e 65 61 63 68 28 7b 73 6c 69 64 65 44 6f 77 6e 3a 75 74 28 22 73 68 6f 77 22 29 2c 73 6c 69 64 65 55 70 3a 75 74 28 22 68 69 64 65 22 29 2c 73 6c 69 64 65 54 6f 67 67 6c 65 3a 75 74 28 22 74 6f 67 67 6c 65 22 29 2c 66 61 64 65 49 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 7d 2c 66 61 64 65 4f 75 74 3a 7b 6f 70 Data Ascii: "],function(e,n){var s=C.fn[n];C.fn[n]=function(e,t,i){return null==e\|\|"boolean"==typeof e?s.apply(this,arguments):this.animate(ut(n,!0),e,t,i)}}),C.each({slideDown:ut("show"),slideUp:ut("hide"),slideToggle:ut("toggle"),fadeIn:{opacity:"show"},fadeOut:{op
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 63 6f 6e 74 65 6e 74 54 79 70 65 3d 65 2e 68 65 61 64 65 72 73 5b 74 5d 7c 7c 22 22 29 7d 29 2c 43 2e 5f 65 76 61 6c 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 43 2e 61 6a 61 78 28 7b 75 72 6c 3a 65 2c 74 79 70 65 3a 22 47 45 54 22 2c 64 61 74 61 54 79 70 65 3a 22 73 63 72 69 70 74 22 2c 63 61 63 68 65 3a 21 30 2c 61 73 79 6e 63 3a 21 31 2c 67 6c 6f 62 61 6c 3a 21 31 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 74 20 73 63 72 69 70 74 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 64 61 74 61 46 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 43 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 65 2c 74 2c 69 29 7d 7d 29 7d 2c 43 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 77 72 61 70 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: contentType=e.headers[t]\|\|"")}),C._evalUrl=function(e,t,i){return C.ajax({url:e,type:"GET",dataType:"script",cache:!0,async:!1,global:!1,converters:{"text script":function(){}},dataFilter:function(e){C.globalEval(e,t,i)}})},C.fn.extend({wrapAll:function(e
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 2c 6e 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 28 61 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 2e 66 6e 2e 63 73 73 2e 63 61 6c 6c 28 6e 2c 65 2c 74 29 7d 29 2c 74 68 69 73 29 3a 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 78 28 65 29 2c 69 3d 74 2c 43 2e 74 65 73 74 28 69 29 26 26 53 2e 74 65 73 74 28 69 5b 30 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 29 7c 7c 61 2e 63 73 73 4e 75 6d 62 65 72 5b 74 5d 7c 7c 6f 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 27 4e 75 6d 62 65 72 2d 74 79 70 65 64 20 76 61 6c Data Ascii: tion(e,t){var i,n=this;return e&&"object"==typeof e&&!Array.isArray(e)?(a.each(e,function(e,t){a.fn.css.call(n,e,t)}),this):("number"==typeof t&&(t=x(e),i=t,C.test(i)&&S.test(i[0].toUpperCase()+i.slice(1))\|\|a.cssNumber[t]\|\|o("css-number",'Number-typed val
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 7c 22 6f 62 6a 65 63 74 22 3d 3d 3d 73 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 29 26 26 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 69 2c 6e 2c 73 29 7b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 65 26 26 28 74 3d 74 2e 5f 77 72 61 70 70 65 64 29 3b 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 69 65 26 26 28 69 3d 69 2e 5f 77 72 61 70 70 65 64 29 3b 76 61 72 20 72 3d 70 2e 63 61 6c 6c 28 74 29 3b 69 66 28 72 21 3d 3d 70 2e 63 61 6c 6c 28 69 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6a 26 26 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 3d 3d 72 26 26 4c 28 74 29 29 7b 69 66 28 21 4c 28 69 29 29 72 65 74 75 72 6e 21 31 3b 72 3d 73 65 7d 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3a 63 61 73 65 Data Ascii: \|"object"===s\|\|"object"==typeof t)&&function e(t,i,n,s){t instanceof ie&&(t=t._wrapped);i instanceof ie&&(i=i._wrapped);var r=p.call(t);if(r!==p.call(i))return!1;if(j&&"[object Object]"==r&&L(t)){if(!L(i))return!1;r=se}switch(r){case"[object RegExp]":case
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 65 2e 6c 65 6e 67 74 68 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 69 2e 70 75 73 68 28 74 28 65 5b 73 5d 2c 73 29 29 3b 72 65 74 75 72 6e 20 69 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 64 28 74 2c 69 29 26 26 28 65 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 64 28 74 2c 22 74 6f 53 74 72 69 6e 67 22 29 26 26 28 65 2e 74 6f 53 74 72 69 6e 67 3d 74 2e 74 6f 53 74 72 69 6e 67 29 2c 64 28 74 2c 22 76 61 6c 75 65 4f 66 22 29 26 26 28 65 2e 76 61 6c 75 65 4f 66 3d 74 2e 76 61 6c 75 65 4f 66 29 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 2c 69 2c 6e 29 7b 72 65 74 Data Ascii: tring.call(e)}function f(e,t){for(var i=[],n=e.length,s=0;s<n;++s)i.push(t(e[s],s));return i}function m(e,t){for(var i in t)d(t,i)&&(e[i]=t[i]);return d(t,"toString")&&(e.toString=t.toString),d(t,"valueOf")&&(e.valueOf=t.valueOf),e}function g(e,t,i,n){ret
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 6c 7c 41 75 67 7c 53 65 70 7c 4f 63 74 7c 4e 6f 76 7c 44 65 63 29 5c 73 28 5c 64 7b 32 2c 34 7d 29 5c 73 28 5c 64 5c 64 29 3a 28 5c 64 5c 64 29 28 3f 3a 3a 28 5c 64 5c 64 29 29 3f 5c 73 28 3f 3a 28 55 54 7c 47 4d 54 7c 5b 45 43 4d 50 5d 5b 53 44 5d 54 29 7c 28 5b 5a 7a 5d 29 7c 28 5b 2b 2d 5d 5c 64 7b 34 7d 29 29 24 2f 2c 62 74 3d 7b 55 54 3a 30 2c 47 4d 54 3a 30 2c 45 44 54 3a 2d 32 34 30 2c 45 53 54 3a 2d 33 30 30 2c 43 44 54 3a 2d 33 30 30 2c 43 53 54 3a 2d 33 36 30 2c 4d 44 54 3a 2d 33 36 30 2c 4d 53 54 3a 2d 34 32 30 2c 50 44 54 3a 2d 34 32 30 2c 50 53 54 3a 2d 34 38 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 29 7b 76 61 72 20 74 2c 69 2c 6e 2c 73 2c 72 2c 6f 2c 61 3d 65 2e 5f 69 2c 6c 3d 70 74 2e 65 78 65 63 28 61 29 7c 7c 66 74 2e 65 78 65 63 Data Ascii: l\|Aug\|Sep\|Oct\|Nov\|Dec)\s(\d{2,4})\s(\d\d):(\d\d)(?::(\d\d))?\s(?:(UT\|GMT\|[ECMP][SD]T)\|([Zz])\|([+-]\d{4}))$/,bt={UT:0,GMT:0,EDT:-240,EST:-300,CDT:-300,CST:-360,MDT:-360,MST:-420,PDT:-420,PST:-480};function wt(e){var t,i,n,s,r,o,a=e._i,l=pt.exec(a)\|\|ft.exec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	184.26.118.82	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 00:02:21 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=111689 Date: Fri, 26 Apr 2024 00:02:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 00:02:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	601	OUT	GET /resource/powerappsportal/dist/pcf-dependency.bundle-805a1661b7.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:22 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:21 GMT Content-Type: application/x-javascript Content-Length: 43107 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000E8 x-ms-static-content: ZE000001T Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 2cc88d1b-c2f7-4a6c-959c-7f473060214a x-ms-correlation-id: 3eea8e28-1c0f-40f2-8409-7f83c2002037 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=35.8,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000221Z-1865489d5f46s4qnhr87brpyc4000000099g00000000vtrd X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:22 UTC	15482	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 5d 2c 65 29 7d 65 6c 73 65 7b 76 61 72 20 74 3b 69 66 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 3d 77 69 6e 64 6f 77 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 3d 67 6c 6f 62 61 6c 7d 65 6c 73 65 20 Data Ascii: (function(e){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=e()}else if(typeof define==="function"&&define.amd){define([],e)}else{var t;if(typeof window!=="undefined"){t=window}else if(typeof global!=="undefined"){t=global}else
2024-04-26 00:02:22 UTC	16384	IN	Data Raw: 6f 66 3d 3d 3d 64 29 7d 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 7b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 41 72 72 61 79 28 74 3e 31 3f 74 2d 31 3a 30 29 2c 6e 3d 31 3b 6e 3c 74 3b 6e 2b 2b 29 7b 72 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 7d 76 61 72 20 6f 3d 30 3b 76 61 72 20 69 3d 22 57 61 72 6e 69 6e 67 3a 20 22 2b 65 2e 72 65 70 6c 61 63 65 28 2f 25 73 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6f 2b 2b 5d 7d 29 3b 69 66 28 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 69 29 7d 74 72 79 7b 74 68 72 6f 77 20 6e 65 Data Ascii: of===d)}var r=function(){};{var h=function(e){for(var t=arguments.length,r=Array(t>1?t-1:0),n=1;n<t;n++){r[n-1]=arguments[n]}var o=0;var i="Warning: "+e.replace(/%s/g,function(){return r[o++]});if(typeof console!=="undefined"){console.warn(i)}try{throw ne
2024-04-26 00:02:22 UTC	11241	IN	Data Raw: 74 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 6f 29 26 26 28 65 5b 6f 5d 3d 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 5f 5f 73 70 72 65 61 64 41 72 72 61 79 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 72 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 21 6e 26 26 6f 20 69 6e 20 74 7c 7c 28 28 6e 3d 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: t=arguments[r])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e}).apply(this,arguments)},__spreadArray=this&&this.__spreadArray\|\|function(e,t,r){if(r\|\|2===arguments.length)for(var n,o=0,i=t.length;o<i;o++)!n&&o in t\|\|((n=n\|\|Array.prototype.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49758	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	381	OUT	GET /resource/powerappsportal/img/web.png HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:22 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:22 GMT Content-Type: image/png Content-Length: 625 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000005N x-ms-static-content: ZE000001O Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: bd5ac4c4-8780-485c-8870-756bb85d7d68 x-ms-correlation-id: 1f80c519-5f0e-41b8-909b-382c791f5b97 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=31.9,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000222Z-1865489d5f47spgmg1tk1770cg0000000ah000000000parc X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 67510084 X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:22 UTC	625	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 06 49 44 41 54 78 01 9d 52 d1 71 da 40 10 dd 3d 0b 0b f2 65 3a c0 15 44 74 80 2b 80 74 80 2b 40 9e 20 23 e7 27 e4 c3 41 18 7b 2c 55 80 5d 41 70 05 38 15 84 54 00 a9 20 fe 33 42 a0 cd db b3 95 c1 cc c4 33 f1 cd dc cc ed bb dd b7 bb 6f 97 69 e7 84 dd 6e 83 f7 4c 13 cf 16 91 d4 9e e1 19 e3 e6 9c 7d 89 a2 78 b1 ed cf c5 c3 f7 fd 83 8a bb ff 19 41 6d 98 70 e2 03 61 73 64 9d 24 9f 02 57 4c 09 27 83 e1 c5 49 11 67 8a 47 c5 2d 4d 85 f3 ea 63 9a 1d c2 b4 c1 51 14 2d f4 02 3f 06 e6 b9 e9 aa 2e b4 e1 b3 5e f0 43 Data Ascii: PNGIHDRapHYssRGBgAMAaIDATxRq@=e:Dt+t+@ #'A{,U]Ap8T 3B3oinL}xAmpasd$WL'IgG-McQ-?.^C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	383	OUT	GET /resource/powerappsportal/img/close.png HTTP/1.1 Host: content.powerapps.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:22 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:22 GMT Content-Type: image/png Content-Length: 237 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000006N x-ms-static-content: NR0000003 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: eba3fda1-995b-4d64-98ae-97e515cfbcf7 x-ms-correlation-id: b9099475-3525-4c87-8245-aca1d13f6111 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=43.0,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000222Z-1865489d5f4qw9rny7embdm5aw0000000acg00000000xc8v X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 67510084 X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:22 UTC	237	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 0a 08 06 00 00 00 8d 32 cf bd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 82 49 44 41 54 78 01 8d 8f c1 0d 80 20 10 04 17 28 c2 8b 2f 4b 20 76 64 07 96 a0 1d d8 81 b5 d8 01 76 e0 93 a7 15 a0 ae 09 09 21 f7 60 3f 70 b7 c3 ed e1 c6 d1 ef 5d 27 67 8c f1 86 22 ef fd d0 8b 2c 36 25 ac c6 60 67 43 83 e8 25 60 73 9c 24 22 07 1b 3c f3 e4 0c 3d 0f a6 10 c2 65 ea d7 34 58 97 d0 5f 6b 51 bc 97 10 65 d1 a8 e6 68 a7 2d ae 7d d0 d4 90 b6 33 3d fb 65 2f 1a 44 b1 f7 43 c0 fc 02 da 6f 62 34 31 b0 78 b4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR2pHYssRGBgAMAaIDATx (/K vdv!`?p]'g",6%`gC%`s$"<=e4X_kQeh-}3=e/DCob41xIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	669	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:22 UTC	800	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:22 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: 844330ec-b01e-0065-305f-9720b6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000222Z-1865489d5f4qw9rny7embdm5aw0000000a9g00000001bc9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:22 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49756	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:21 UTC	669	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:22 UTC	799	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:22 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 90123c21-901e-000f-1a38-976c81000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000222Z-1865489d5f47spgmg1tk1770cg0000000afg00000000vxrs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:22 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:22 UTC	590	OUT	GET /resource/powerappsportal/dist/pcf.bundle-d31fe485ce.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	923	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:22 GMT Content-Type: application/x-javascript Content-Length: 854454 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000DO x-ms-static-content: ZE000007G Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: e0240a09-7a9f-40e7-84c0-457dd4ef3bd3 x-ms-correlation-id: af571160-fca1-4dcb-835d-6c093df3144c x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=63.0,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff X-Cache: TCP_HIT X-Azure-Ref: 20240426T000222Z-17644f8887fxsmp62x2nasg16g00000001f0000000006cg0 x-fd-int-roxy-purgeid: 67510084 X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	15461	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 69 66 28 72 5b 65 5d 29 72 65 74 75 72 6e 20 72 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 72 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 6e 2c 6f 2e 63 3d 72 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(n){var r={};function o(e){if(r[e])return r[e].exports;var t=r[e]={i:e,l:!1,exports:{}};return n[e].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.m=n,o.c=r,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=fun
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 2c 74 29 2c 75 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 2c 72 26 26 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 65 6c 61 2d 73 75 70 70 6f 72 74 22 2c 22 74 72 75 65 22 29 2c 6e 26 26 28 75 2e 6d 65 64 69 61 3d 6e 29 2c 73 29 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6f 2c 73 5b 6f 5d 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 24 28 77 69 6e 64 6f 77 29 29 26 26 77 69 6e 64 6f 77 2e 46 65 6c 61 43 6f 6e 66 69 67 29 66 6f 72 28 76 61 72 20 63 20 69 6e 20 77 69 6e 64 6f 77 2e 46 65 6c 61 43 6f 6e 66 69 67 2e 73 74 79 6c 65 4e 6f 64 65 41 74 74 72 69 62 75 74 65 73 29 75 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: ,t),u.type="text/css",r&&u.setAttribute("data-fela-support","true"),n&&(u.media=n),s)u.setAttribute(o,s[o]);if(void 0!==("undefined"==typeof window?"undefined":$(window))&&window.FelaConfig)for(var c in window.FelaConfig.styleNodeAttributes)u.setAttribute
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 67 74 68 29 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 28 75 29 29 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 75 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 70 28 75 29 29 29 7b 74 5b 73 5d 3d 65 28 7b 7d 2c 63 2c 75 29 3b 63 6f 6e 74 69 6e 75 65 7d 7d 74 5b 73 5d 3d 75 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c Data Ascii: gth);t<e.length;t++)n[t]=e[t];return n}return Array.from(e)}(u)));continue}if("object"===(void 0===u?"undefined":p(u))){t[s]=e({},c,u);continue}}t[s]=u}}return t},e.exports=t.default},,function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{val
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 22 22 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 22 29 2c 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 7b 7d 29 2c 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 22 22 29 3b 66 6f 72 28 76 61 72 20 69 3d 6e 65 77 20 52 65 67 45 78 70 28 22 22 2e 63 6f 6e 63 61 74 28 6f 2e 72 65 70 6c 61 63 65 28 2f 5b 2e 2a 2b 5c 2d 3f 5e 24 7b 7d 28 29 7c 5b 5c 5d 5c 5c 5d 2f 67 2c 22 5c 5c 24 26 22 29 2c 22 5b 2e 5d 28 5b 30 2d 39 61 2d 7a 5f 2d 5d 2b 29 28 5b 5e 7b 5d 2b 29 3f 7b 28 5b 5e 3a 5d 2b 29 3a 28 5b 5e 7d 5d 2b 29 7d 22 29 2c 22 67 69 22 29 3b 75 3d 69 2e 65 78 65 63 28 65 29 3b 29 7b 75 5b 30 5d 3b 76 61 72 20 61 3d 75 5b 31 5d 2c 73 3d 75 5b 32 5d 2c 6c 3d 75 5b 33 5d 2c 75 3d 75 5b 34 5d 3b 72 5b 66 Data Ascii: {void 0===t&&(t=""),void 0===n&&(n=""),void 0===r&&(r={}),void 0===o&&(o="");for(var i=new RegExp("".concat(o.replace(/[.*+\-?^${}()\|[\]\\]/g,"\\$&"),"[.]([0-9a-z_-]+)([^{]+)?{([^:]+):([^}]+)}"),"gi");u=i.exec(e);){u[0];var a=u[1],s=u[2],l=u[3],u=u[4];r[f
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 29 7d 29 3b 76 61 72 20 51 3d 2f 5b 5c 2d 3a 5d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 22 61 63 63 65 6e 74 2d 68 65 69 67 68 74 20 61 6c 69 67 6e 6d 65 6e 74 2d 62 61 73 65 6c 69 6e 65 20 61 72 61 62 69 63 2d 66 6f 72 6d 20 62 61 73 65 6c 69 6e 65 2d 73 68 69 66 74 20 63 61 70 2d 68 65 69 67 68 74 20 63 6c 69 70 2d 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 20 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 20 63 6f 6c 6f 72 2d 72 65 6e 64 65 72 69 6e 67 Data Ascii: oLowerCase(),null,!1)});var Q=/[\-:]([a-z])/g;function $(e){return e[1].toUpperCase()}"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 6e 67 74 68 26 26 6e 75 6c 6c 3d 3d 3d 28 6e 3d 77 74 5b 30 5d 29 2e 62 6c 6f 63 6b 65 64 4f 6e 3b 29 46 74 28 6e 29 2c 6e 75 6c 6c 3d 3d 3d 6e 2e 62 6c 6f 63 6b 65 64 4f 6e 26 26 77 74 2e 73 68 69 66 74 28 29 7d 76 61 72 20 4e 74 3d 7b 7d 2c 42 74 3d 6e 65 77 20 4d 61 70 2c 55 74 3d 6e 65 77 20 4d 61 70 2c 56 74 3d 5b 22 61 62 6f 72 74 22 2c 22 61 62 6f 72 74 22 2c 4b 65 2c 22 61 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 71 65 2c 22 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 22 2c 51 65 2c 22 61 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 22 2c 22 63 61 6e 70 6c 61 79 22 2c 22 63 61 6e 50 6c 61 79 22 2c 22 63 61 6e 70 6c 61 79 74 68 72 6f 75 67 68 22 2c 22 63 61 6e 50 6c 61 79 54 68 72 6f 75 67 68 22 2c 22 64 75 72 61 74 69 6f 6e 63 68 61 6e 67 65 22 Data Ascii: ngth&&null===(n=wt[0]).blockedOn;)Ft(n),null===n.blockedOn&&wt.shift()}var Nt={},Bt=new Map,Ut=new Map,Vt=["abort","abort",Ke,"animationEnd",qe,"animationIteration",Qe,"animationStart","canplay","canPlay","canplaythrough","canPlayThrough","durationchange"
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 69 65 73 3a 5b 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 5d 7d 7d 2c 4c 72 3d 7b 65 76 65 6e 74 54 79 70 65 73 3a 52 72 2c 65 78 74 72 61 63 74 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 6f 29 7b 76 61 72 20 69 3d 22 6d 6f 75 73 65 6f 76 65 72 22 3d 3d 3d 65 7c 7c 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3d 3d 3d 65 2c 61 3d 22 6d 6f 75 73 65 6f 75 74 22 3d 3d 3d 65 7c 7c 22 70 6f 69 6e 74 65 72 6f 75 74 22 3d 3d 3d 65 3b 69 66 28 69 26 26 30 3d 3d 28 33 32 26 6f 29 26 26 28 6e 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7c 7c 6e 2e 66 72 6f 6d 45 6c 65 6d 65 6e 74 29 7c 7c 21 61 26 26 21 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 28 69 3d 72 2e 77 69 6e 64 6f 77 3d 3d 3d 72 3f 72 3a 28 69 3d 72 Data Ascii: ies:["pointerout","pointerover"]}},Lr={eventTypes:Rr,extractEvents:function(e,t,n,r,o){var i="mouseover"===e\|\|"pointerover"===e,a="mouseout"===e\|\|"pointerout"===e;if(i&&0==(32&o)&&(n.relatedTarget\|\|n.fromElement)\|\|!a&&!i)return null;(i=r.window===r?r:(i=r
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 3d 74 3f 74 2e 6b 65 79 3a 6e 75 6c 6c 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 6f 3f 6e 75 6c 6c 3a 69 28 65 2c 74 2c 22 22 2b 6e 2c 72 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 29 7b 73 77 69 74 63 68 28 6e 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 65 65 3a 72 65 74 75 72 6e 20 6e 2e 6b 65 79 3d 3d 3d 6f 3f 6e 2e 74 79 70 65 3d 3d 3d 6e 65 3f 63 28 65 2c 74 2c 6e 2e 70 72 6f 70 73 2e 63 68 69 6c 64 72 65 6e 2c 72 2c 6f 29 3a 6c 28 65 2c 74 2c 6e 2c 72 29 3a 6e 75 6c 6c 3b 63 61 73 65 20 74 65 3a 72 65 74 75 72 6e 20 6e 2e 6b 65 79 3d 3d 3d 6f 3f 75 28 65 2c 74 2c Data Ascii: =t?t.key:null;if("string"==typeof n\|\|"number"==typeof n)return null!==o?null:i(e,t,""+n,r);if("object"==typeof n&&null!==n){switch(n.$$typeof){case ee:return n.key===o?n.type===ne?c(e,t,n.props.children,r,o):l(e,t,n,r):null;case te:return n.key===o?u(e,t,
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 61 70 73 68 6f 74 42 65 66 6f 72 65 55 70 64 61 74 65 7c 7c 73 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 26 26 6c 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 7c 7c 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 32 35 36 29 2c 72 3d 21 31 29 3b 72 65 74 75 72 6e 20 42 61 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 29 7b 52 61 28 65 2c 74 29 3b 76 61 72 20 61 3d 30 21 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 3b 69 66 28 21 72 26 26 21 61 29 72 65 74 75 72 6e 20 6f 26 26 5f 6f 28 74 2c 6e 2c 21 31 29 2c 51 61 28 65 2c 74 2c 69 29 3b 72 3d 74 2e 73 74 61 74 65 4e 6f 64 65 2c 6b 61 2e 63 75 72 72 65 6e 74 3d 74 3b 76 61 72 20 73 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e Data Ascii: apshotBeforeUpdate\|\|s===e.memoizedProps&&l===e.memoizedState\|\|(t.effectTag\|=256),r=!1);return Ba(e,t,n,r,i,o)}function Ba(e,t,n,r,o,i){Ra(e,t);var a=0!=(64&t.effectTag);if(!r&&!a)return o&&_o(t,n,!1),Qa(e,t,i);r=t.stateNode,ka.current=t;var s=a&&"function
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 65 4e 6f 64 65 2e 69 6e 73 74 61 6e 63 65 2c 6e 3f 72 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 2c 6e 29 3a 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 3b 65 6c 73 65 20 69 66 28 34 21 3d 3d 6f 26 26 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 63 68 69 6c 64 29 29 66 6f 72 28 65 28 74 2c 6e 2c 72 29 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 3b 6e 75 6c 6c 21 3d 3d 74 3b 29 65 28 74 2c 6e 2c 72 29 2c 74 3d 74 2e 73 69 62 6c 69 6e 67 7d 28 65 2c 6e 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 2c 61 3d 21 31 3b 3b 29 7b 69 66 28 21 61 29 7b 61 3d 69 2e 72 65 74 75 72 6e 3b 65 3a 66 6f 72 28 3b 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 77 28 31 36 30 29 29 3b Data Ascii: eNode.instance,n?r.insertBefore(t,n):r.appendChild(t);else if(4!==o&&null!==(t=t.child))for(e(t,n,r),t=t.sibling;null!==t;)e(t,n,r),t=t.sibling}(e,n,t)}function cs(e,t,n){for(var r,o,i=t,a=!1;;){if(!a){a=i.return;e:for(;;){if(null===a)throw Error(w(160));

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:22 UTC	599	OUT	GET /resource/powerappsportal/dist/pcf-extended.bundle-e303d53553.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	923	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:22 GMT Content-Type: application/x-javascript Content-Length: 977847 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000EB x-ms-static-content: ZE0000094 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: d99d208a-21a4-4f41-94dd-79bb6ad4ae21 x-ms-correlation-id: 4f0c2574-cf25-4761-a14a-39444ed3e3ec x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=38.9,x-ms-igw-req-overhead;dur=0.5 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000222Z-17644f8887fz6gvmkwy10mc16n00000006s0000000006hte X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 67510084 X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	15461	IN	Data Raw: 76 61 72 20 5f 5f 61 73 73 69 67 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 5f 5f 61 73 73 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 6f 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 21 66 75 6e 63 74 69 6f 6e Data Ascii: var __assign=this&&this.__assign\|\|function(){return(__assign=Object.assign\|\|function(e){for(var t,n=1,o=arguments.length;n<o;n++)for(var r in t=arguments[n])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};!function
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 7b 76 61 72 20 6e 3d 74 2e 73 65 6c 65 63 74 6f 72 2c 6f 3d 74 2e 64 65 63 6c 61 72 61 74 69 6f 6e 2c 72 3d 74 2e 73 75 70 70 6f 72 74 2c 74 3d 74 2e 6d 65 64 69 61 2c 6f 3d 59 28 6e 2c 6f 29 3b 72 3f 74 3f 28 65 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 7c 7c 28 65 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 3d 7b 7d 29 2c 65 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 5b 72 5d 7c 7c 28 65 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 5b 72 5d 3d 22 22 29 2c 65 2e 73 75 70 70 6f 72 74 4d 65 64 69 61 52 75 6c 65 73 5b 74 5d 5b 72 5d 2b 3d 6f 29 3a 28 65 2e 73 75 70 70 6f 72 74 52 75 6c 65 73 5b 72 5d 7c 7c 28 65 2e 73 75 70 70 6f 72 74 52 75 6c 65 73 5b 72 5d 3d 22 22 29 2c 65 2e Data Ascii: {var n=t.selector,o=t.declaration,r=t.support,t=t.media,o=Y(n,o);r?t?(e.supportMediaRules[t]\|\|(e.supportMediaRules[t]={}),e.supportMediaRules[t][r]\|\|(e.supportMediaRules[t][r]=""),e.supportMediaRules[t][r]+=o):(e.supportRules[r]\|\|(e.supportRules[r]=""),e.
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 61 7d 2c 46 6f 6e 74 43 6c 61 73 73 4e 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 74 7d 2c 46 6f 6e 74 49 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 69 7d 2c 46 6f 6e 74 53 69 7a 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 65 7d 2c 46 6f 6e 74 57 65 69 67 68 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 65 7d 2c 47 6c 6f 62 61 6c 53 65 74 74 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 74 7d 2c 47 72 6f 75 70 46 6f 6f 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 62 7d 2c 47 72 6f 75 70 48 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ents:function(){return ra},FontClassNames:function(){return gt},FontIcon:function(){return ti},FontSizes:function(){return Ke},FontWeights:function(){return Ue},GlobalSettings:function(){return yt},GroupFooter:function(){return Cb},GroupHeader:function(){
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 65 74 75 72 6e 20 72 73 7d 2c 70 6f 73 69 74 69 6f 6e 43 61 6c 6c 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 6c 7d 2c 70 6f 73 69 74 69 6f 6e 43 61 72 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6c 7d 2c 70 6f 73 69 74 69 6f 6e 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6c 7d 2c 70 72 65 63 69 73 69 6f 6e 52 6f 75 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 53 7d 2c 70 72 65 73 65 6e 63 65 42 6f 6f 6c 65 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 69 7d 2c 72 61 69 73 65 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 61 7d 2c 72 65 67 69 73 74 65 72 44 65 66 61 75 6c 74 46 6f 6e 74 46 61 63 65 73 3a 66 Data Ascii: eturn rs},positionCallout:function(){return Nl},positionCard:function(){return Bl},positionElement:function(){return Ml},precisionRound:function(){return US},presenceBoolean:function(){return li},raiseClick:function(){return Ga},registerDefaultFontFaces:f
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 69 65 3d 41 65 28 2d 34 30 29 2c 61 65 3d 41 65 28 2d 34 30 30 29 2c 73 65 3d 41 65 28 31 30 29 2c 6c 65 3d 41 65 28 32 30 29 2c 63 65 3d 41 65 28 34 30 29 2c 75 65 3d 41 65 28 34 30 30 29 2c 64 65 3d 4c 65 28 31 30 29 2c 70 65 3d 4c 65 28 32 30 29 2c 68 65 3d 4c 65 28 2d 31 30 29 2c 6d 65 3d 4c 65 28 2d 32 30 29 2c 66 65 3d 4f 65 28 31 30 29 2c 67 65 3d 4f 65 28 32 30 29 2c 76 65 3d 4f 65 28 34 30 29 2c 62 65 3d 4f 65 28 34 30 30 29 2c 79 65 3d 4f 65 28 2d 31 30 29 2c 43 65 3d 4f 65 28 2d 32 30 29 2c 5f 65 3d 4f 65 28 2d 34 30 29 2c 53 65 3d 4f 65 28 2d 34 30 30 29 2c 78 65 3d 48 65 28 2d 31 30 29 2c 6b 65 3d 48 65 28 2d 32 30 29 2c 77 65 3d 48 65 28 31 30 29 2c 49 65 3d 48 65 28 32 30 29 2c 44 65 3d 59 28 7b 66 72 6f 6d 3a 7b 74 72 61 6e 73 66 6f 72 6d Data Ascii: ie=Ae(-40),ae=Ae(-400),se=Ae(10),le=Ae(20),ce=Ae(40),ue=Ae(400),de=Le(10),pe=Le(20),he=Le(-10),me=Le(-20),fe=Oe(10),ge=Oe(20),ve=Oe(40),be=Oe(400),ye=Oe(-10),Ce=Oe(-20),_e=Oe(-40),Se=Oe(-400),xe=He(-10),ke=He(-20),we=He(10),Ie=He(20),De=Y({from:{transform
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 67 72 6f 75 6e 64 43 68 65 63 6b 65 64 48 6f 76 65 72 65 64 3d 75 2c 69 2e 69 6e 70 75 74 49 63 6f 6e 48 6f 76 65 72 65 64 3d 75 29 2c 64 26 26 28 69 2e 6c 69 6e 6b 48 6f 76 65 72 65 64 3d 64 29 2c 70 26 26 28 69 2e 70 72 69 6d 61 72 79 42 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 48 6f 76 65 72 65 64 3d 70 29 2c 68 26 26 28 69 2e 69 6e 70 75 74 50 6c 61 63 65 68 6f 6c 64 65 72 42 61 63 6b 67 72 6f 75 6e 64 43 68 65 63 6b 65 64 3d 68 29 2c 6d 26 26 28 69 2e 62 6f 64 79 42 61 63 6b 67 72 6f 75 6e 64 43 68 65 63 6b 65 64 3d 6d 2c 69 2e 62 6f 64 79 46 72 61 6d 65 44 69 76 69 64 65 72 3d 6d 2c 69 2e 62 6f 64 79 44 69 76 69 64 65 72 3d 6d 2c 69 2e 76 61 72 69 61 6e 74 42 6f 72 64 65 72 3d 6d 2c 69 2e 62 75 74 74 6f 6e 42 61 63 6b 67 72 6f 75 6e 64 43 68 65 Data Ascii: groundCheckedHovered=u,i.inputIconHovered=u),d&&(i.linkHovered=d),p&&(i.primaryButtonBackgroundHovered=p),h&&(i.inputPlaceholderBackgroundChecked=h),m&&(i.bodyBackgroundChecked=m,i.bodyFrameDivider=m,i.bodyDivider=m,i.variantBorder=m,i.buttonBackgroundChe
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 6f 6e 61 43 6f 6e 74 61 69 6e 65 72 3a 7b 64 69 73 70 6c 61 79 3a 22 66 6c 65 78 22 2c 66 6c 65 78 57 72 61 70 3a 22 77 72 61 70 22 2c 6d 69 6e 57 69 64 74 68 3a 4d 6f 2c 77 69 64 74 68 3a 4d 6f 2c 68 65 69 67 68 74 3a 4d 6f 7d 2c 69 73 43 6f 6d 70 61 63 74 50 65 72 73 6f 6e 61 43 6f 6e 74 61 69 6e 65 72 3a 7b 64 69 73 70 6c 61 79 3a 22 69 6e 6c 69 6e 65 2d 66 6c 65 78 22 2c 66 6c 65 78 57 72 61 70 3a 22 6e 6f 77 72 61 70 22 2c 66 6c 65 78 42 61 73 69 73 3a 22 61 75 74 6f 22 2c 68 65 69 67 68 74 3a 4e 6f 2c 77 69 64 74 68 3a 22 61 75 74 6f 22 2c 6d 69 6e 57 69 64 74 68 3a 22 30 22 2c 70 61 64 64 69 6e 67 52 69 67 68 74 3a 22 36 70 78 22 7d 2c 61 63 74 69 76 69 74 79 54 79 70 65 49 63 6f 6e 3a 7b 68 65 69 67 68 74 3a 4d 6f 2c 66 6f 6e 74 53 69 7a 65 3a 42 Data Ascii: onaContainer:{display:"flex",flexWrap:"wrap",minWidth:Mo,width:Mo,height:Mo},isCompactPersonaContainer:{display:"inline-flex",flexWrap:"nowrap",flexBasis:"auto",height:No,width:"auto",minWidth:"0",paddingRight:"6px"},activityTypeIcon:{height:Mo,fontSize:B
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 63 6f 70 65 3a 22 49 63 6f 6e 22 7d 2c 21 30 29 3b 69 69 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 49 63 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 74 69 6e 79 3d 30 5d 3d 22 74 69 6e 79 22 2c 65 5b 65 2e 65 78 74 72 61 45 78 74 72 61 53 6d 61 6c 6c 3d 31 5d 3d 22 65 78 74 72 61 45 78 74 72 61 53 6d 61 6c 6c 22 2c 65 5b 65 2e 65 78 74 72 61 53 6d 61 6c 6c 3d 32 5d 3d 22 65 78 74 72 61 53 6d 61 6c 6c 22 2c 65 5b 65 2e 73 6d 61 6c 6c 3d 33 5d 3d 22 73 6d 61 6c 6c 22 2c 65 5b 65 2e 72 65 67 75 6c 61 72 3d 34 5d 3d 22 72 65 67 75 6c 61 72 22 2c 65 5b 65 2e 6c 61 72 67 65 3d 35 5d 3d 22 6c 61 72 67 65 22 2c 65 5b 65 2e 65 78 74 72 61 4c 61 72 67 65 3d 36 5d 3d 22 65 78 74 72 61 4c 61 72 67 65 22 2c 65 5b 65 2e 73 69 7a 65 38 3d 31 37 5d 3d 22 Data Ascii: cope:"Icon"},!0);ii.displayName="Icon",function(e){e[e.tiny=0]="tiny",e[e.extraExtraSmall=1]="extraExtraSmall",e[e.extraSmall=2]="extraSmall",e[e.small=3]="small",e[e.regular=4]="regular",e[e.large=5]="large",e[e.extraLarge=6]="extraLarge",e[e.size8=17]="
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 72 6e 20 74 3c 61 7d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 2e 70 75 73 68 28 75 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 48 69 2c 6c 74 28 7b 7d 2c 65 2c 7b 6b 65 79 3a 65 2e 6b 65 79 7c 7c 74 2c 63 6c 61 73 73 4e 61 6d 65 3a 6e 2e 61 63 74 69 76 69 74 79 50 65 72 73 6f 6e 61 2c 73 69 7a 65 3a 69 3f 59 72 2e 73 69 7a 65 31 36 3a 59 72 2e 73 69 7a 65 33 32 2c 73 74 79 6c 65 3a 73 7d 29 29 29 7d 29 2c 74 3d 75 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 6e 2e 70 65 72 73 6f 6e 61 43 6f 6e 74 61 69 6e 65 72 7d 2c 72 29 7d 72 65 74 75 72 6e 20 74 7d 2c 6c 7d 72 65 74 75 72 6e 20 75 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 3d 66 75 Data Ascii: rn t<a}).forEach(function(e,t){r.push(ut.createElement(Hi,lt({},e,{key:e.key\|\|t,className:n.activityPersona,size:i?Yr.size16:Yr.size32,style:s})))}),t=ut.createElement("div",{className:n.personaContainer},r)}return t},l}return u(e,t),e.prototype.render=fu
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 73 2d 66 6f 63 75 73 61 62 6c 65 22 29 3a 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 21 3d 3d 6f 26 26 6e 3e 3d 30 2c 61 3d 21 21 65 26 26 22 66 61 6c 73 65 22 21 3d 3d 72 26 26 28 22 41 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 42 55 54 54 4f 4e 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 49 4e 50 55 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 54 45 58 54 41 52 45 41 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 53 45 4c 45 43 54 22 3d 3d 3d 65 2e 74 61 67 4e 61 6d 65 7c 7c 22 74 72 75 65 22 3d 3d 3d 72 7c 7c 69 29 3b 72 65 74 75 72 6e 20 74 3f 2d 31 21 3d 3d 6e 26 26 61 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 65 2e 67 65 74 41 Data Ascii: ?e.getAttribute("data-is-focusable"):null,i=null!==o&&n>=0,a=!!e&&"false"!==r&&("A"===e.tagName\|\|"BUTTON"===e.tagName\|\|"INPUT"===e.tagName\|\|"TEXTAREA"===e.tagName\|\|"SELECT"===e.tagName\|\|"true"===r\|\|i);return t?-1!==n&&a:a}function Ma(e){return!!(e&&e.getA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:22 UTC	597	OUT	GET /resource/powerappsportal/dist/pcf-loader.bundle-f4a0e619b8.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	807	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:22 GMT Content-Type: application/x-javascript Content-Length: 80 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA0000013 x-ms-static-content: NR000000Y Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 9621aaef-c52a-47b9-addd-a7d8de798666 x-ms-correlation-id: 441315b2-4f8d-417d-bb03-f8005c025376 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=16.7,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000222Z-1865489d5f4qw9rny7embdm5aw0000000ac000000000z19r X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	80	IN	Data Raw: 24 28 28 29 3d 3e 7b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 61 64 41 6c 6c 50 63 66 43 6f 6e 74 72 6f 6c 73 4f 6e 50 61 67 65 29 7b 77 69 6e 64 6f 77 2e 6c 6f 61 64 41 6c 6c 50 63 66 43 6f 6e 74 72 6f 6c 73 4f 6e 50 61 67 65 28 29 7d 7d 29 3b Data Ascii: $(()=>{if(window.loadAllPcfControlsOnPage){window.loadAllPcfControlsOnPage()}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49763	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:22 UTC	608	OUT	GET /resource/powerappsportal/dist/bootstrap.BootstrapV5.bundle-be8391e97d.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:23 GMT Content-Type: application/x-javascript Content-Length: 92085 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000001Q x-ms-static-content: ZE000001A Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: da9399c0-f61d-48d8-8d12-814ef35f8ca6 x-ms-correlation-id: 6162193f-52fc-4218-8878-9f95765954f8 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=42.4,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000222Z-17644f8887fmhhpjnhx5wkacd8000000072g000000000f5c X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	15482	IN	Data Raw: 2f 2a 21 0d 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 32 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0d 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 20 28 74 2c Data Ascii: /! Bootstrap v5.2.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function (t,
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 69 73 2e 5f 63 6f 6e 66 69 67 2e 72 69 64 65 20 26 26 20 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 20 3f 20 50 2e 6f 6e 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 20 65 74 2c 20 28 28 29 20 3d 3e 20 74 68 69 73 2e 63 79 63 6c 65 28 29 29 29 20 3a 20 74 68 69 73 2e 63 79 63 6c 65 28 29 29 20 7d 20 74 6f 28 74 29 20 7b 20 63 6f 6e 73 74 20 65 20 3d 20 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 73 28 29 3b 20 69 66 20 28 74 20 3e 20 65 2e 6c 65 6e 67 74 68 20 2d 20 31 20 7c 7c 20 74 20 3c 20 30 29 20 72 65 74 75 72 6e 3b 20 69 66 20 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 20 72 65 74 75 72 6e 20 76 6f 69 64 20 50 2e 6f 6e 65 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 20 65 74 2c 20 28 28 29 20 3d 3e 20 74 68 69 73 2e 74 6f 28 74 29 29 29 Data Ascii: is._config.ride && (this._isSliding ? P.one(this._element, et, (() => this.cycle())) : this.cycle()) } to(t) { const e = this._getItems(); if (t > e.length - 1 \|\| t < 0) return; if (this._isSliding) return void P.one(this._element, et, (() => this.to(t)))
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 70 70 65 72 2c 20 67 70 75 41 63 63 65 6c 65 72 61 74 69 6f 6e 3a 20 73 2c 20 69 73 46 69 78 65 64 3a 20 22 66 69 78 65 64 22 20 3d 3d 3d 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 61 74 65 67 79 20 7d 3b 20 6e 75 6c 6c 20 21 3d 20 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 20 26 26 20 28 65 2e 73 74 79 6c 65 73 2e 70 6f 70 70 65 72 20 3d 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 20 65 2e 73 74 79 6c 65 73 2e 70 6f 70 70 65 72 2c 20 66 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 20 63 2c 20 7b 20 6f 66 66 73 65 74 73 3a 20 65 2e 6d 6f 64 69 66 69 65 72 73 44 61 74 61 2e 70 6f 70 70 65 72 4f 66 66 73 65 74 73 2c 20 70 6f 73 69 74 69 6f 6e 3a 20 65 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 61 74 Data Ascii: pper, gpuAcceleration: s, isFixed: "fixed" === e.options.strategy }; null != e.modifiersData.popperOffsets && (e.styles.popper = Object.assign({}, e.styles.popper, fe(Object.assign({}, c, { offsets: e.modifiersData.popperOffsets, position: e.options.strat
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 6d 65 6e 74 73 3a 20 79 74 2c 20 73 74 61 72 74 3a 20 77 74 2c 20 65 6e 64 3a 20 41 74 2c 20 63 6c 69 70 70 69 6e 67 50 61 72 65 6e 74 73 3a 20 45 74 2c 20 76 69 65 77 70 6f 72 74 3a 20 54 74 2c 20 70 6f 70 70 65 72 3a 20 43 74 2c 20 72 65 66 65 72 65 6e 63 65 3a 20 4f 74 2c 20 76 61 72 69 61 74 69 6f 6e 50 6c 61 63 65 6d 65 6e 74 73 3a 20 78 74 2c 20 70 6c 61 63 65 6d 65 6e 74 73 3a 20 6b 74 2c 20 62 65 66 6f 72 65 52 65 61 64 3a 20 4c 74 2c 20 72 65 61 64 3a 20 44 74 2c 20 61 66 74 65 72 52 65 61 64 3a 20 53 74 2c 20 62 65 66 6f 72 65 4d 61 69 6e 3a 20 49 74 2c 20 6d 61 69 6e 3a 20 4e 74 2c 20 61 66 74 65 72 4d 61 69 6e 3a 20 50 74 2c 20 62 65 66 6f 72 65 57 72 69 74 65 3a 20 6a 74 2c 20 77 72 69 74 65 3a 20 4d 74 2c 20 61 66 74 65 72 57 72 69 74 65 3a Data Ascii: ments: yt, start: wt, end: At, clippingParents: Et, viewport: Tt, popper: Ct, reference: Ot, variationPlacements: xt, placements: kt, beforeRead: Lt, read: Dt, afterRead: St, beforeMain: It, main: Nt, afterMain: Pt, beforeWrite: jt, write: Mt, afterWrite:
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 64 3a 20 22 62 6f 6f 6c 65 61 6e 22 2c 20 73 63 72 6f 6c 6c 3a 20 22 62 6f 6f 6c 65 61 6e 22 20 7d 3b 20 63 6c 61 73 73 20 7a 69 20 65 78 74 65 6e 64 73 20 7a 20 7b 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 2c 20 65 29 20 7b 20 73 75 70 65 72 28 74 2c 20 65 29 2c 20 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 20 3d 20 21 31 2c 20 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 20 3d 20 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 42 61 63 6b 44 72 6f 70 28 29 2c 20 74 68 69 73 2e 5f 66 6f 63 75 73 74 72 61 70 20 3d 20 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 46 6f 63 75 73 54 72 61 70 28 29 2c 20 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 20 7d 20 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 20 7b 20 72 65 74 Data Ascii: d: "boolean", scroll: "boolean" }; class zi extends z { constructor(t, e) { super(t, e), this._isShown = !1, this._backdrop = this._initializeBackDrop(), this._focustrap = this._initializeFocusTrap(), this._addEventListeners() } static get Default() { ret
2024-04-26 00:02:23 UTC	11067	IN	Data Raw: 20 7b 20 72 65 74 75 72 6e 20 68 6e 20 7d 20 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 20 7b 20 72 65 74 75 72 6e 20 64 6e 20 7d 20 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 20 7b 20 72 65 74 75 72 6e 20 22 70 6f 70 6f 76 65 72 22 20 7d 20 5f 69 73 57 69 74 68 43 6f 6e 74 65 6e 74 28 29 20 7b 20 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 67 65 74 54 69 74 6c 65 28 29 20 7c 7c 20 74 68 69 73 2e 5f 67 65 74 43 6f 6e 74 65 6e 74 28 29 20 7d 20 5f 67 65 74 43 6f 6e 74 65 6e 74 46 6f 72 54 65 6d 70 6c 61 74 65 28 29 20 7b 20 72 65 74 75 72 6e 20 7b 20 22 2e 70 6f 70 6f 76 65 72 2d 68 65 61 64 65 72 22 3a 20 74 68 69 73 2e 5f 67 65 74 54 69 74 6c 65 28 29 2c 20 22 2e 70 6f 70 6f 76 65 72 2d 62 6f 64 79 22 3a 20 74 68 69 73 2e Data Ascii: { return hn } static get DefaultType() { return dn } static get NAME() { return "popover" } _isWithContent() { return this._getTitle() \|\| this._getContent() } _getContentForTemplate() { return { ".popover-header": this._getTitle(), ".popover-body": this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49765	13.107.246.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:22 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	806	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:23 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:38 GMT ETag: 0x8D79B8373CB2849 x-ms-request-id: 9f435fe4-501e-003f-725f-974d90000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000223Z-17644f8887fxrxvpft9g6hhez0000000048g00000000c45c x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49766	13.107.246.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:22 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:23 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 6019aff2-601e-005c-175a-9772b4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000223Z-17644f8887f7k86db1w1n5k72c00000006q000000000d30x x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49767	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:22 UTC	610	OUT	GET /resource/powerappsportal/dist/postpreform.BootstrapV5.bundle-11a5a91493.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:23 GMT Content-Type: application/x-javascript Content-Length: 164727 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000006Q x-ms-static-content: ZE0000005 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: d5dbb513-3240-49a1-80c2-96cfb65aedb8 x-ms-correlation-id: 8e1507eb-f961-4355-a9fb-77e2507d926c x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=35.8,x-ms-igw-req-overhead;dur=0.4 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000223Z-1865489d5f4s82vtkbvg5gx1hw0000000afg000000011dqq X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	15481	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 72 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 72 29 7b 76 61 72 20 6e 3d 61 2e 44 65 66 65 72 72 65 64 28 29 3b 28 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 61 2e 61 6a 61 78 28 74 29 2e 64 6f 6e 65 28 6e 2e 72 65 73 6f 6c 76 65 29 2e 66 61 69 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 41 6a 61 78 52 65 74 72 79 20 61 74 74 65 6d 70 74 20 3a 22 2e 63 6f 6e 63 61 74 28 72 29 29 3b 72 2d 2d 3b 69 66 28 72 3e 30 29 7b 65 28 29 7d 65 6c 73 65 7b 6e 2e 72 65 6a 65 63 74 57 69 74 68 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 6e 2e 70 72 6f 6d 69 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d Data Ascii: (function(e,a){var r=[];function n(t,r){var n=a.Deferred();(function e(){a.ajax(t).done(n.resolve).fail(function(){console.log("AjaxRetry attempt :".concat(r));r--;if(r>0){e()}else{n.rejectWith(this,arguments)}})})();return n.promise()}function t(){var e=
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 26 74 2e 64 61 74 61 2e 6c 65 76 65 6c 21 3d 6e 75 6c 6c 29 7b 6e 3d 74 2e 64 61 74 61 2e 6c 65 76 65 6c 7d 65 5b 30 5d 3d 6e 3b 69 2e 6c 6f 67 2e 61 70 70 6c 79 28 69 2c 65 29 7d 29 7d 3b 65 2e 65 78 70 6f 72 74 73 3d 74 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 74 72 75 65 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 72 65 67 69 73 74 65 72 48 65 6c 70 65 72 28 22 6c 6f 6f 6b 75 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 21 65 29 7b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 72 2e 6c 6f 6f 6b 75 70 50 72 6f 70 65 72 74 79 28 65 2c 74 29 7d 29 7d 3b 65 2e 65 78 70 6f 72 74 Data Ascii: &t.data.level!=null){n=t.data.level}e[0]=n;i.log.apply(i,e)})};e.exports=t["default"]},function(e,t){"use strict";t.__esModule=true;t["default"]=function(e){e.registerHelper("lookup",function(e,t,r){if(!e){return e}return r.lookupProperty(e,t)})};e.export
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 6e 61 6c 3a 73 5b 75 5d 3d 3d 3d 22 74 72 75 65 22 2c 6c 6f 63 3a 69 2e 6c 6f 63 49 6e 66 6f 28 74 68 69 73 2e 5f 24 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 38 3a 74 68 69 73 2e 24 3d 7b 74 79 70 65 3a 22 55 6e 64 65 66 69 6e 65 64 4c 69 74 65 72 61 6c 22 2c 6f 72 69 67 69 6e 61 6c 3a 75 6e 64 65 66 69 6e 65 64 2c 76 61 6c 75 65 3a 75 6e 64 65 66 69 6e 65 64 2c 6c 6f 63 3a 69 2e 6c 6f 63 49 6e 66 6f 28 74 68 69 73 2e 5f 24 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 68 69 73 2e 24 3d 7b 74 79 70 65 3a 22 4e 75 6c 6c 4c 69 74 65 72 61 6c 22 2c 6f 72 69 67 69 6e 61 6c 3a 6e 75 6c 6c 2c 76 61 6c 75 65 3a 6e 75 6c 6c 2c 6c 6f 63 3a 69 2e 6c 6f 63 49 6e 66 6f 28 74 68 69 73 2e 5f 24 29 7d 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 30 3a 74 68 69 73 Data Ascii: nal:s[u]==="true",loc:i.locInfo(this._$)};break;case 38:this.$={type:"UndefinedLiteral",original:undefined,value:undefined,loc:i.locInfo(this._$)};break;case 39:this.$={type:"NullLiteral",original:null,value:null,loc:i.locInfo(this._$)};break;case 40:this
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 67 65 73 29 7b 74 68 69 73 2e 79 79 6c 6c 6f 63 2e 72 61 6e 67 65 3d 5b 61 5b 30 5d 2c 61 5b 30 5d 2b 74 68 69 73 2e 79 79 6c 65 6e 67 2d 72 5d 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6d 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 5f 6d 6f 72 65 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6c 65 73 73 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 74 68 69 73 2e 75 6e 70 75 74 28 74 68 69 73 2e 6d 61 74 63 68 2e 73 6c 69 63 65 28 74 29 29 7d 2c 70 61 73 74 49 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6d 61 74 63 68 65 64 2e 73 75 62 73 74 72 28 30 2c 74 68 69 73 2e 6d 61 74 63 68 65 64 2e 6c 65 6e 67 74 68 2d 74 68 69 73 2e 6d 61 74 63 68 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 Data Ascii: ges){this.yylloc.range=[a[0],a[0]+this.yyleng-r]}return this},more:function e(){this._more=true;return this},less:function e(t){this.unput(this.match.slice(t))},pastInput:function e(){var t=this.matched.substr(0,this.matched.length-this.match.length);retu
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 68 69 73 2e 61 63 63 65 70 74 28 61 29 3b 74 68 69 73 2e 6f 70 63 6f 64 65 28 22 69 6e 76 6f 6b 65 48 65 6c 70 65 72 22 2c 69 2e 6c 65 6e 67 74 68 2c 61 2e 6f 72 69 67 69 6e 61 6c 2c 63 5b 22 64 65 66 61 75 6c 74 22 5d 2e 68 65 6c 70 65 72 73 2e 73 69 6d 70 6c 65 49 64 28 61 29 29 7d 7d 2c 50 61 74 68 45 78 70 72 65 73 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 74 68 69 73 2e 61 64 64 44 65 70 74 68 28 74 2e 64 65 70 74 68 29 3b 74 68 69 73 2e 6f 70 63 6f 64 65 28 22 67 65 74 43 6f 6e 74 65 78 74 22 2c 74 2e 64 65 70 74 68 29 3b 76 61 72 20 72 3d 74 2e 70 61 72 74 73 5b 30 5d 2c 6e 3d 63 5b 22 64 65 66 61 75 6c 74 22 5d 2e 68 65 6c 70 65 72 73 2e 73 63 6f 70 65 64 49 64 28 74 29 2c 69 3d 21 74 2e 64 65 70 74 68 26 26 21 6e 26 26 74 68 69 73 Data Ascii: his.accept(a);this.opcode("invokeHelper",i.length,a.original,c["default"].helpers.simpleId(a))}},PathExpression:function e(t){this.addDepth(t.depth);this.opcode("getContext",t.depth);var r=t.parts[0],n=c["default"].helpers.scopedId(t),i=!t.depth&&!n&&this
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 69 73 2e 74 6f 70 53 74 61 63 6b 28 29 7d 76 61 72 20 75 3d 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 3b 69 66 28 21 61 29 7b 74 68 69 73 2e 70 6f 70 53 74 61 63 6b 28 29 7d 69 66 28 69 29 7b 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 2d 2d 7d 74 68 69 73 2e 70 75 73 68 28 72 2e 63 6f 6e 63 61 74 28 75 2c 22 29 22 29 29 7d 2c 69 6e 63 72 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 2b 2b 3b 69 66 28 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 3e 74 68 69 73 2e 73 74 61 63 6b 56 61 72 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 73 74 61 63 6b 56 61 72 73 2e 70 75 73 68 28 22 73 74 61 63 6b 22 2b 74 68 69 73 2e 73 74 61 63 6b 53 6c 6f 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 70 53 74 61 63 6b 4e Data Ascii: is.topStack()}var u=t.call(this,n);if(!a){this.popStack()}if(i){this.stackSlot--}this.push(r.concat(u,")"))},incrStack:function e(){this.stackSlot++;if(this.stackSlot>this.stackVars.length){this.stackVars.push("stack"+this.stackSlot)}return this.topStackN
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 32 3b 63 61 73 65 22 48 48 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 68 28 29 29 3b 63 61 73 65 22 48 22 3a 72 65 74 75 72 6e 20 74 2e 68 28 29 3b 63 61 73 65 22 6d 6d 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 29 3b 63 61 73 65 22 6d 22 3a 72 65 74 75 72 6e 20 74 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 3b 63 61 73 65 22 73 73 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 29 3b 63 61 73 65 22 73 22 3a 72 65 74 75 72 6e 20 74 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 3b 63 61 73 65 22 79 79 79 79 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 34 29 3b 63 61 73 65 22 79 79 22 3a 72 65 74 75 72 6e 20 69 28 74 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 29 3b 63 61 73 65 22 Data Ascii: 2;case"HH":return i(t.h());case"H":return t.h();case"mm":return i(t.getMinutes());case"m":return t.getMinutes();case"ss":return i(t.getSeconds());case"s":return t.getSeconds();case"yyyy":return i(t.getFullYear(),4);case"yy":return i(t.getFullYear());case"
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 72 65 74 75 72 6e 20 6f 2e 69 67 6e 6f 72 65 28 6f 2e 73 74 6f 6b 65 6e 28 65 29 29 7d 29 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 70 72 6f 63 65 73 73 28 6f 2e 65 61 63 68 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 65 29 2c 74 2e 66 69 6e 69 73 68 45 78 61 63 74 29 7d 29 3b 76 61 72 20 69 3d 7b 7d 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 5b 65 5d 3d 69 5b 65 5d 7c 7c 72 2e 66 6f 72 6d 61 74 28 65 29 5b 30 5d 7d 3b 72 2e 66 6f 72 6d 61 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 76 61 72 20 74 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 74 2e 70 75 73 68 28 61 28 65 5b 72 Data Ascii: return o.ignore(o.stoken(e))}))),function(e){return o.process(o.each.apply(null,e),t.finishExact)});var i={};var a=function(e){return i[e]=i[e]\|\|r.format(e)[0]};r.formats=function(e){if(e instanceof Array){var t=[];for(var r=0;r<e.length;r++){t.push(a(e[r
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 2c 69 3a 72 2c 68 3a 6e 7d 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 7d 3b 77 69 6e 64 6f 77 2e 70 72 65 74 74 79 50 72 69 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 50 52 5f 53 48 4f 55 4c 44 5f 55 53 45 5f 43 4f 4e 54 49 4e 55 41 54 49 4f 4e 3f 68 2e 6e 6f 77 28 29 2b 32 35 30 3a 49 6e 66 69 6e 69 74 79 3b 66 3c 63 2e 6c 65 6e 67 74 68 26 26 68 2e 6e 6f 77 28 29 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 74 3d 63 5b 66 5d 2c 72 3d 74 2e 63 6c 61 73 73 4e 61 6d 65 3b 69 66 28 72 2e 69 6e 64 65 78 4f 66 28 22 70 72 65 74 74 79 70 72 69 6e 74 22 29 3e 3d 30 29 7b 76 61 72 20 72 3d 72 2e 6d 61 74 63 68 28 64 29 2c 6e 2c 69 3b 69 66 28 69 3d 21 72 29 7b 69 Data Ascii: ,i:r,h:n});return n.innerHTML};window.prettyPrint=function(u){function l(){for(var e=window.PR_SHOULD_USE_CONTINUATION?h.now()+250:Infinity;f<c.length&&h.now()<e;f++){var t=c[f],r=t.className;if(r.indexOf("prettyprint")>=0){var r=r.match(d),n,i;if(i=!r){i
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 2e 6f 6e 55 6e 62 6c 6f 63 6b 22 29 3b 6e 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 62 6c 6f 63 6b 55 49 2e 6f 6e 55 6e 62 6c 6f 63 6b 22 29 7d 76 61 72 20 73 3b 69 66 28 72 29 73 3d 5f 28 22 62 6f 64 79 22 29 2e 63 68 69 6c 64 72 65 6e 28 29 2e 66 69 6c 74 65 72 28 22 2e 62 6c 6f 63 6b 55 49 22 29 2e 61 64 64 28 22 62 6f 64 79 20 3e 20 2e 62 6c 6f 63 6b 55 49 22 29 3b 65 6c 73 65 20 73 3d 6e 2e 66 69 6e 64 28 22 3e 2e 62 6c 6f 63 6b 55 49 22 29 3b 69 66 28 74 2e 63 75 72 73 6f 72 52 65 73 65 74 29 7b 69 66 28 73 2e 6c 65 6e 67 74 68 3e 31 29 73 5b 31 5d 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 74 2e 63 75 72 73 6f 72 52 65 73 65 74 3b 69 66 28 73 2e 6c 65 6e 67 74 68 3e 32 29 73 5b 32 5d 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 3d 74 2e 63 75 72 73 6f 72 52 Data Ascii: .onUnblock");n.removeData("blockUI.onUnblock")}var s;if(r)s=_("body").children().filter(".blockUI").add("body > .blockUI");else s=n.find(">.blockUI");if(t.cursorReset){if(s.length>1)s[1].style.cursor=t.cursorReset;if(s.length>2)s[2].style.cursor=t.cursorR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49768	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:23 UTC	602	OUT	GET /resource/powerappsportal/dist/app.BootstrapV5.bundle-7aa0129ad7.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:23 GMT Content-Type: application/x-javascript Content-Length: 275900 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000DO x-ms-static-content: ZE0000007 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 84d69244-0fcd-49d6-88b2-543725148de6 x-ms-correlation-id: e319915a-cc1d-4bdb-9b27-d212a69f4671 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=33.7,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000223Z-1865489d5f4gxx8nx10tqpg6dw0000000aq000000000mqxe X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	15481	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 77 28 65 29 3b 74 68 69 73 2e 5f 74 61 72 67 65 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 22 62 73 54 61 72 67 65 74 22 29 7c 7c 7b 7d 3b 74 68 69 73 2e 5f 61 74 74 61 63 68 6d 65 6e 74 53 65 74 74 69 6e 67 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 64 61 74 61 28 22 61 74 74 61 63 68 6d 65 6e 74 73 65 74 74 69 6e 67 73 22 29 3b 74 68 69 73 2e 5f 73 65 72 76 69 63 65 55 72 6c 47 65 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 64 61 74 61 2d 75 72 6c 2d 67 65 74 22 29 3b 74 68 69 73 2e 5f 73 65 72 76 69 63 65 55 72 6c 41 64 64 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 61 74 74 72 28 22 Data Ascii: (function(w){function c(e){this._element=w(e);this._target=this._element.data("bsTarget")\|\|{};this._attachmentSettings=this._element.data("attachmentsettings");this._serviceUrlGet=this._element.attr("data-url-get");this._serviceUrlAdd=this._element.attr("
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 72 65 70 6c 61 63 65 28 22 7b 30 7d 22 2c 66 2e 74 65 78 74 28 29 29 7d 3b 67 28 75 2c 6e 29 7d 72 65 74 75 72 6e 7d 76 61 72 20 70 3d 6e 2e 66 69 6e 64 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 27 63 68 65 63 6b 62 6f 78 27 5d 22 29 3b 69 66 28 70 2e 6c 65 6e 67 74 68 3e 30 29 7b 6c 3d 70 2e 70 72 6f 70 28 22 63 68 65 63 6b 65 64 22 29 7d 76 61 72 20 76 3d 6e 2e 66 69 6e 64 28 22 69 6e 70 75 74 5b 74 79 70 65 3d 27 66 69 6c 65 27 5d 22 29 3b 69 2e 61 74 74 72 28 22 64 69 73 61 62 6c 65 64 22 2c 22 64 69 73 61 62 6c 65 64 22 29 2e 70 72 65 70 65 6e 64 28 22 3c 73 70 61 6e 20 63 6c 61 73 73 3d 27 66 61 20 66 61 2d 73 70 69 6e 6e 65 72 20 66 61 2d 73 70 69 6e 27 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 27 74 72 75 65 27 3e 3c 2f 73 70 61 6e 3e 22 29 3b 76 61 72 Data Ascii: replace("{0}",f.text())};g(u,n)}return}var p=n.find("input[type='checkbox']");if(p.length>0){l=p.prop("checked")}var v=n.find("input[type='file']");i.attr("disabled","disabled").prepend("<span class='fa fa-spinner fa-spin' aria-hidden='true'></span>");var
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 28 74 68 69 73 29 2e 64 61 74 61 28 22 75 72 6c 22 29 3b 76 61 72 20 6e 3d 7b 7d 3b 6e 2e 63 72 65 61 74 65 41 63 63 6f 75 6e 74 3d 74 72 75 65 3b 6e 2e 63 72 65 61 74 65 43 6f 6e 74 61 63 74 3d 74 72 75 65 3b 6e 2e 63 72 65 61 74 65 4f 70 70 6f 72 74 75 6e 69 74 79 3d 74 72 75 65 3b 76 61 72 20 69 3d 7b 7d 3b 69 2e 4c 6f 67 69 63 61 6c 4e 61 6d 65 3d 6c 2e 45 6e 74 69 74 79 4e 61 6d 65 3b 69 2e 49 64 3d 74 3b 6e 2e 65 6e 74 69 74 79 52 65 66 65 72 65 6e 63 65 3d 69 3b 76 61 72 20 72 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 3b 73 68 65 6c 6c 2e 61 6a 61 78 53 61 66 65 50 6f 73 74 28 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 75 72 6c 3a 61 2c 64 61 74 61 Data Ascii: (this).data("url");var n={};n.createAccount=true;n.createContact=true;n.createOpportunity=true;var i={};i.LogicalName=l.EntityName;i.Id=t;n.entityReference=i;var r=JSON.stringify(n);shell.ajaxSafePost({type:"POST",contentType:"application/json",url:a,data
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 76 61 72 20 61 3d 67 28 74 68 69 73 29 2e 64 61 74 61 28 22 75 72 6c 22 29 3b 76 61 72 20 6e 3d 7b 7d 3b 76 61 72 20 69 3d 7b 7d 3b 69 2e 4c 6f 67 69 63 61 6c 4e 61 6d 65 3d 6c 2e 45 6e 74 69 74 79 4e 61 6d 65 3b 69 2e 49 64 3d 74 3b 6e 2e 65 6e 74 69 74 79 52 65 66 65 72 65 6e 63 65 3d 69 3b 76 61 72 20 72 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 3b 73 68 65 6c 6c 2e 61 6a 61 78 53 61 66 65 50 6f 73 74 28 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 75 72 6c 3a 61 2c 64 61 74 61 3a 72 7d 29 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 79 28 6c 2e 41 63 74 69 76 61 74 65 41 63 74 69 6f 6e 4c 69 6e 6b 2e 53 75 63 63 65 73 73 4d 65 73 73 61 67 65 29 3b Data Ascii: var a=g(this).data("url");var n={};var i={};i.LogicalName=l.EntityName;i.Id=t;n.entityReference=i;var r=JSON.stringify(n);shell.ajaxSafePost({type:"POST",contentType:"application/json",url:a,data:r}).done(function(){y(l.ActivateActionLink.SuccessMessage);
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 74 79 46 6f 72 6d 43 6f 6e 74 72 6f 6c 22 29 2e 68 69 64 65 28 29 3b 74 2e 6f 6e 28 22 68 69 64 65 2e 62 73 2e 6d 6f 64 61 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 74 68 69 73 29 2e 61 74 74 72 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 22 74 72 75 65 22 29 7d 29 3b 74 2e 6d 6f 64 61 6c 28 22 73 68 6f 77 22 29 7d 29 7d 65 6c 73 65 7b 66 2e 66 69 6e 64 28 22 2e 63 72 65 61 74 65 2d 72 65 6c 61 74 65 64 2d 72 65 63 6f 72 64 2d 6c 69 6e 6b 5b 64 61 74 61 2d 66 69 6c 74 65 72 63 72 69 74 65 72 69 61 69 64 20 3d 20 27 22 2b 63 2e 46 69 6c 74 65 72 43 72 69 74 65 72 69 61 49 64 2b 22 27 5d 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 74 3d 70 2e 66 Data Ascii: tyFormControl").hide();t.on("hide.bs.modal",function(e){g(this).attr("aria-hidden","true")});t.modal("show")})}else{f.find(".create-related-record-link[data-filtercriteriaid = '"+c.FilterCriteriaId+"']").on("click",function(e){e.preventDefault();var t=p.f
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 2e 76 69 65 77 4e 61 6d 65 3d 79 2e 56 69 65 77 4e 61 6d 65 3b 69 2e 63 6f 6c 75 6d 6e 73 3d 79 2e 43 6f 6c 75 6d 6e 73 3b 69 2e 62 61 73 65 36 34 53 65 63 75 72 65 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 79 2e 42 61 73 65 36 34 53 65 63 75 72 65 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3b 69 2e 73 6f 72 74 45 78 70 72 65 73 73 69 6f 6e 3d 67 2e 66 69 6e 64 28 22 2e 76 69 65 77 2d 67 72 69 64 20 3e 20 74 61 62 6c 65 22 29 2e 64 61 74 61 28 22 73 6f 72 74 2d 65 78 70 72 65 73 73 69 6f 6e 22 29 7c 7c 79 2e 53 6f 72 74 45 78 70 72 65 73 73 69 6f 6e 3b 69 2e 73 65 61 72 63 68 3d 44 3f 44 2e 76 61 6c 28 29 3a 6e 75 6c 6c 3b 69 2e 66 69 6c 74 65 72 3d 68 2e 67 65 74 43 75 72 72 65 6e 74 46 69 6c 74 65 72 28 29 3b 69 2e 6d 65 74 61 46 69 6c 74 65 72 3d 68 2e 5f Data Ascii: .viewName=y.ViewName;i.columns=y.Columns;i.base64SecureConfiguration=y.Base64SecureConfiguration;i.sortExpression=g.find(".view-grid > table").data("sort-expression")\|\|y.SortExpression;i.search=D?D.val():null;i.filter=h.getCurrentFilter();i.metaFilter=h._
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 2e 61 72 69 61 2d 65 78 70 22 29 2e 61 74 74 72 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 74 72 75 65 22 29 3b 76 61 72 20 65 3d 73 65 28 74 68 69 73 29 2e 67 65 74 28 30 29 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 76 61 72 20 74 3d 73 65 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 3a 66 69 72 73 74 22 29 3b 76 61 72 20 61 3d 73 65 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 3b 76 61 72 20 6e 3d 73 65 28 22 68 74 6d 6c 22 29 2e 61 74 74 72 28 22 64 69 72 22 29 3b 69 66 28 6e 3d 3d 22 72 74 6c 22 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 2b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d Data Ascii: .aria-exp").attr("aria-expanded","true");var e=se(this).get(0).getBoundingClientRect();var t=se(this).find(".dropdown-menu:first");var a=se(window).width();var n=se("html").attr("dir");if(n=="rtl"){var i=document.documentElement.clientWidth+document.docum
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 6e 64 65 78 22 2c 22 30 22 29 3b 75 2e 69 73 48 74 6d 6c 3d 74 72 75 65 7d 7d 65 6c 73 65 7b 75 2e 76 61 6c 75 65 3d 65 2e 44 69 73 70 6c 61 79 56 61 6c 75 65 3b 75 2e 69 73 48 74 6d 6c 3d 66 61 6c 73 65 7d 62 72 65 61 6b 3b 63 61 73 65 22 49 6d 61 67 65 54 79 70 65 22 3a 76 61 72 20 41 3d 22 2f 49 6d 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2e 61 73 70 78 3f 65 6e 74 69 74 79 3d 22 2b 6e 2e 45 6e 74 69 74 79 4e 61 6d 65 2b 22 26 61 74 74 72 69 62 75 74 65 3d 22 2b 65 2e 4e 61 6d 65 2b 22 26 49 44 3d 22 2b 6e 2e 49 64 3b 75 2e 76 61 6c 75 65 3d 73 65 28 22 3c 69 6d 67 3e 3c 2f 69 6d 67 3e 22 29 2e 61 74 74 72 28 22 73 72 63 22 2c 41 29 2e 61 74 74 72 28 22 61 6c 74 22 2c 22 69 6d 61 67 65 22 29 3b 75 2e 69 73 48 74 6d 6c 3d 74 72 75 65 3b 62 72 65 61 6b 3b 63 Data Ascii: ndex","0");u.isHtml=true}}else{u.value=e.DisplayValue;u.isHtml=false}break;case"ImageType":var A="/Image/download.aspx?entity="+n.EntityName+"&attribute="+e.Name+"&ID="+n.Id;u.value=se("<img></img>").attr("src",A).attr("alt","image");u.isHtml=true;break;c
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 20 64 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 3b 73 68 65 6c 6c 2e 61 6a 61 78 53 61 66 65 50 6f 73 74 28 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 75 72 6c 3a 66 2c 64 61 74 61 3a 64 7d 29 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 28 63 2e 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 43 6c 6f 73 65 49 6e 63 69 64 65 6e 74 41 63 74 69 6f 6e 4c 69 6e 6b 2e 53 75 63 63 65 73 73 4d 65 73 73 61 67 65 2c 73 2c 74 72 75 65 29 3b 5f 28 73 2c 63 2e 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 43 6c 6f 73 65 49 6e 63 69 64 65 6e 74 41 63 74 69 6f 6e 4c 69 6e 6b 29 7d 29 2e 66 61 69 6c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6d 65 28 4c 28 65 29 2c 73 29 7d Data Ascii: d=JSON.stringify(i);shell.ajaxSafePost({type:"POST",contentType:"application/json",url:f,data:d}).done(function(){w(c.Configuration.CloseIncidentActionLink.SuccessMessage,s,true);_(s,c.Configuration.CloseIncidentActionLink)}).fail(function(e){me(L(e),s)}
2024-04-26 00:02:23 UTC	16384	IN	Data Raw: 76 61 72 20 61 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 3b 73 68 65 6c 6c 2e 61 6a 61 78 53 61 66 65 50 6f 73 74 28 7b 74 79 70 65 3a 22 50 4f 53 54 22 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 75 72 6c 3a 64 2c 64 61 74 61 3a 61 7d 29 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 6d 6f 64 61 6c 28 22 68 69 64 65 22 29 3b 77 28 6c 2e 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 41 63 74 69 76 61 74 65 51 75 6f 74 65 41 63 74 69 6f 6e 4c 69 6e 6b 2e 53 75 63 63 65 73 73 4d 65 73 73 61 67 65 2c 6f 2c 74 72 75 65 29 3b 5f 28 6f 2c 6c 2e 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 2e 41 63 74 69 76 61 74 65 51 75 6f 74 65 41 63 74 69 6f 6e 4c 69 6e 29 7d 29 2e 66 61 69 6c 28 66 75 6e 63 74 Data Ascii: var a=JSON.stringify(t);shell.ajaxSafePost({type:"POST",contentType:"application/json",url:d,data:a}).done(function(){i.modal("hide");w(l.Configuration.ActivateQuoteActionLink.SuccessMessage,o,true);_(o,l.Configuration.ActivateQuoteActionLin)}).fail(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49769	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:23 UTC	613	OUT	GET /resource/powerappsportal/dist/default-1033.moment_2_29_4.bundle-eda4e638fd.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:23 UTC	808	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:23 GMT Content-Type: application/x-javascript Content-Length: 361 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000K2 x-ms-static-content: ZE000001E Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 84233c91-7fc2-46f7-ba36-43f07dbb39c3 x-ms-correlation-id: 435dc61d-8cac-40ce-8e58-23cbbb43d686 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=34.1,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000223Z-1865489d5f4b68hj4nmrur3p700000000aeg00000000gtyd X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:23 UTC	361	IN	Data Raw: 6a 51 75 65 72 79 2e 74 69 6d 65 61 67 6f 2e 73 65 74 74 69 6e 67 73 2e 73 74 72 69 6e 67 73 3d 7b 70 72 65 66 69 78 41 67 6f 3a 6e 75 6c 6c 2c 70 72 65 66 69 78 46 72 6f 6d 4e 6f 77 3a 6e 75 6c 6c 2c 73 75 66 66 69 78 41 67 6f 3a 22 61 67 6f 22 2c 73 75 66 66 69 78 46 72 6f 6d 4e 6f 77 3a 22 66 72 6f 6d 20 6e 6f 77 22 2c 73 65 63 6f 6e 64 73 3a 22 6c 65 73 73 20 74 68 61 6e 20 61 20 6d 69 6e 75 74 65 22 2c 6d 69 6e 75 74 65 3a 22 61 62 6f 75 74 20 61 20 6d 69 6e 75 74 65 22 2c 6d 69 6e 75 74 65 73 3a 22 25 64 20 6d 69 6e 75 74 65 73 22 2c 68 6f 75 72 3a 22 61 62 6f 75 74 20 61 6e 20 68 6f 75 72 22 2c 68 6f 75 72 73 3a 22 61 62 6f 75 74 20 25 64 20 68 6f 75 72 73 22 2c 64 61 79 3a 22 61 20 64 61 79 22 2c 64 61 79 73 3a 22 25 64 20 64 61 79 73 22 2c 6d 6f Data Ascii: jQuery.timeago.settings.strings={prefixAgo:null,prefixFromNow:null,suffixAgo:"ago",suffixFromNow:"from now",seconds:"less than a minute",minute:"about a minute",minutes:"%d minutes",hour:"about an hour",hours:"about %d hours",day:"a day",days:"%d days",mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:24 UTC	599	OUT	GET /resource/powerappsportal/controls/host/main.4ee557b783.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:24 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:24 GMT Content-Type: application/x-javascript Content-Length: 8249 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000000X x-ms-static-content: NR000000R Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: a8261ae3-7c1e-4140-959c-5c66d1898be6 x-ms-correlation-id: 9e79a140-6cb1-44f0-8daa-c3a016358312 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=25.5,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000224Z-17644f8887fxrxvpft9g6hhez0000000047g00000000dcyu X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:24 UTC	8249	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 6f 2c 6e 2c 61 2c 66 2c 69 2c 6c 2c 75 2c 63 2c 73 2c 64 2c 70 2c 68 2c 76 2c 6d 2c 67 2c 62 2c 79 2c 77 3d 7b 36 37 34 34 3a 28 65 2c 72 2c 74 29 3d 3e 7b 0a 2f 2a 21 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 2f 0a 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 74 2e 65 28 32 38 34 29 2c 74 2e 65 28 37 30 36 29 2c 74 2e 65 28 35 30 35 29 2c 74 2e 65 28 35 38 35 29 2c 74 2e 65 28 38 32 39 29 2c 74 2e 65 28 35 39 33 29 2c 74 2e 65 28 37 34 31 29 5d 29 2e 74 68 65 6e 28 74 2e 62 69 6e 64 28 74 2c 31 39 36 31 29 29 7d 7d 2c 6a 3d 7b Data Ascii: (()=>{"use strict";var e,r,t,o,n,a,f,i,l,u,c,s,d,p,h,v,m,g,b,y,w={6744:(e,r,t)=>{/! Copyright (C) Microsoft Corporation. All rights reserved. */Promise.all([t.e(284),t.e(706),t.e(505),t.e(585),t.e(829),t.e(593),t.e(741)]).then(t.bind(t,1961))}},j={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49771	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:28 UTC	598	OUT	GET /resource/powerappsportal/controls/host/284.48b2b8c307.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:28 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:28 GMT Content-Type: application/x-javascript Content-Length: 48432 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000006R x-ms-static-content: nr000001I Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: f0391e5e-fd94-49a8-950e-d3dff0f88133 x-ms-correlation-id: 786a6df2-fd10-4863-ac8c-4f841181c2a5 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=38.2,x-ms-igw-req-overhead;dur=0.5 X-Content-Type-Options: nosniff X-Cache: TCP_MISS X-Azure-Ref: 20240426T000228Z-17644f8887fsg8v2quf4wxbet000000006w000000000fh08 x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:28 UTC	15482	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 34 5d 2c 7b 37 32 38 34 3a 28 74 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 72 3d 41 72 72 61 79 28 65 3e 31 3f 65 2d 31 3a 30 29 2c 6e 3d 31 3b 6e 3c 65 3b 6e 2b 2b 29 72 5b 6e 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 5b 49 6d 6d 65 72 5d 20 6d 69 6e 69 66 69 65 Data Ascii: (self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[284],{7284:(t,e,r)=>{"use strict";function n(t){for(var e=arguments.length,r=Array(e>1?e-1:0),n=1;n<e;n++)r[n-1]=arguments[n];throw Error("[Immer] minifie
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 6c 61 62 6c 65 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 69 6e 20 72 65 73 6f 6c 76 65 72 3a 20 25 61 76 61 69 6c 61 62 6c 65 43 6f 6d 70 6f 6e 65 6e 74 73 25 5c 6e 5c 6e 4d 6f 72 65 20 69 6e 66 6f 3a 20 68 74 74 70 73 3a 2f 2f 63 72 61 66 74 2e 6a 73 2e 6f 72 67 2f 72 2f 64 6f 63 73 2f 61 70 69 2f 65 64 69 74 6f 72 23 70 72 6f 70 73 22 2c 7a 74 3d 22 59 6f 75 20 63 61 6e 20 6f 6e 6c 79 20 75 73 65 20 75 73 65 45 64 69 74 6f 72 20 69 6e 20 74 68 65 20 63 6f 6e 74 65 78 74 20 6f 66 20 3c 45 64 69 74 6f 72 20 2f 3e 2e 20 5c 6e 5c 6e 50 6c 65 61 73 65 20 6f 6e 6c 79 20 75 73 65 20 75 73 65 45 64 69 74 6f 72 20 69 6e 20 63 6f 6d 70 6f 6e 65 6e 74 73 20 74 68 61 74 20 61 72 65 20 63 68 69 6c 64 72 65 6e 20 6f 66 20 74 68 65 20 3c 45 64 69 74 6f 72 20 2f 3e 20 63 6f Data Ascii: lable components in resolver: %availableComponents%\n\nMore info: https://craft.js.org/r/docs/api/editor#props",zt="You can only use useEditor in the context of <Editor />. \n\nPlease only use useEditor in components that are children of the <Editor /> co
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 72 6e 7d 7d 29 29 2c 72 7d 72 65 74 75 72 6e 20 42 74 28 6f 2c 5b 7b 6b 65 79 3a 22 69 6e 68 65 72 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 72 65 61 74 65 50 72 6f 78 79 48 61 6e 64 6c 65 72 73 28 74 68 69 73 2e 64 65 72 69 76 65 64 2c 74 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6c 65 61 6e 75 70 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 59 74 28 71 74 28 6f 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 63 6c 65 61 6e 75 70 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 50 61 72 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 65 6e 65 72 28 29 7d 7d 5d 29 2c 6f 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 28 74 2c 65 29 7b 65 26 26 28 22 66 Data Ascii: rn}})),r}return Bt(o,[{key:"inherit",value:function(t){return this.createProxyHandlers(this.derived,t)}},{key:"cleanup",value:function(){Yt(qt(o.prototype),"cleanup",this).call(this),this.unsubscribeParentHandlerListener()}}]),o}();function de(t,e){e&&("f
2024-04-26 00:02:28 UTC	182	IN	Data Raw: 6f 6e 20 69 28 74 2c 65 29 7b 69 66 28 21 74 29 7b 69 66 28 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 6f 29 3b 76 61 72 20 72 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 28 29 3a 65 2c 69 3d 72 3f 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 3a 20 22 29 2e 63 6f 6e 63 61 74 28 72 29 3a 6f 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 69 29 7d 7d 7d 7d 5d 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 32 38 34 2e 34 38 62 32 62 38 63 33 30 37 2e 63 68 75 6e 6b 2e 6a 73 2e 6d 61 70 Data Ascii: on i(t,e){if(!t){if(n)throw new Error(o);var r="function"==typeof e?e():e,i=r?"".concat(o,": ").concat(r):o;throw new Error(i)}}}}]);//# sourceMappingURL=284.48b2b8c307.chunk.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49773	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:28 UTC	598	OUT	GET /resource/powerappsportal/controls/host/706.48a99f6c78.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:28 UTC	923	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:28 GMT Content-Type: application/x-javascript Content-Length: 540928 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA00000CB x-ms-static-content: ZE0000094 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: c00a510f-0fa5-4ef5-99f2-ca27db5d82e9 x-ms-correlation-id: e82f66dd-fb4b-4d76-8232-852d7c965b21 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=78.7,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff X-Cache: TCP_HIT X-Azure-Ref: 20240426T000228Z-1865489d5f47spgmg1tk1770cg0000000ae000000001108t x-fd-int-roxy-purgeid: 67510084 X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:28 UTC	15461	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 36 2c 37 33 5d 2c 7b 33 31 33 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 74 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 72 3d 6e 28 38 31 36 39 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 30 29 3b 76 61 72 20 6f 3d 21 31 3b 69 66 28 65 26 26 74 29 69 66 28 6e 29 69 66 28 65 3d 3d 3d 74 29 6f 3d 21 30 3b 65 6c 73 65 20 66 6f 72 28 6f 3d 21 31 Data Ascii: (self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[706,73],{3132:(e,t,n)=>{"use strict";n.d(t,{t:()=>o});var r=n(8169);function o(e,t,n){void 0===n&&(n=!0);var o=!1;if(e&&t)if(n)if(e===t)o=!0;else for(o=!1
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 22 ee b6 95 22 2c 41 64 64 50 68 6f 6e 65 3a 22 ee b6 96 22 2c 55 6e 6b 6e 6f 77 6e 43 61 6c 6c 3a 22 ee b6 97 22 2c 4e 6f 74 65 52 65 70 6c 79 3a 22 ee b6 98 22 2c 4e 6f 74 65 46 6f 72 77 61 72 64 3a 22 ee b6 99 22 2c 4e 6f 74 65 50 69 6e 6e 65 64 3a 22 ee b6 9a 22 2c 52 65 6d 6f 76 65 4f 63 63 75 72 72 65 6e 63 65 3a 22 ee b6 9b 22 2c 54 69 6d 65 6c 69 6e 65 3a 22 ee b6 9c 22 2c 45 64 69 74 4e 6f 74 65 3a 22 ee b6 9d 22 2c 43 69 72 63 6c 65 48 61 6c 66 46 75 6c 6c 3a 22 ee b6 9e 22 2c 52 6f 6f 6d 3a 22 ee b6 9f 22 2c 55 6e 73 75 62 73 63 72 69 62 65 3a 22 ee b6 a0 22 2c 53 75 62 73 63 72 69 62 65 3a 22 ee b6 a1 22 2c 48 61 72 64 44 72 69 76 65 3a 22 ee b6 a2 22 2c 52 65 63 75 72 72 69 6e 67 54 61 73 6b 3a 22 ee b6 b2 22 2c 54 61 73 6b 4d 61 6e 61 67 65 Data Ascii: "",AddPhone:"",UnknownCall:"",NoteReply:"",NoteForward:"",NotePinned:"",RemoveOccurrence:"",Timeline:"",EditNote:"",CircleHalfFull:"",Room:"",Unsubscribe:"",Subscribe:"",HardDrive:"",RecurringTask:"",TaskManage
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 74 65 72 6e 61 6c 54 46 56 43 3a 22 ef 91 86 22 2c 45 78 74 65 72 6e 61 6c 58 41 4d 4c 3a 22 ef 91 87 22 2c 49 73 73 75 65 53 6f 6c 69 64 3a 22 ef 91 88 22 2c 44 65 66 65 63 74 53 6f 6c 69 64 3a 22 ef 91 89 22 2c 4c 61 64 79 62 75 67 53 6f 6c 69 64 3a 22 ef 91 8a 22 2c 4e 75 67 65 74 4c 6f 67 6f 3a 22 ef 91 8c 22 2c 54 46 56 43 4c 6f 67 6f 3a 22 ef 91 8d 22 2c 50 72 6f 6a 65 63 74 4c 6f 67 6f 33 32 3a 22 ef 91 be 22 2c 50 72 6f 6a 65 63 74 4c 6f 67 6f 46 69 6c 6c 33 32 3a 22 ef 91 bf 22 2c 50 72 6f 6a 65 63 74 4c 6f 67 6f 31 36 3a 22 ef 92 80 22 2c 50 72 6f 6a 65 63 74 4c 6f 67 6f 46 69 6c 6c 31 36 3a 22 ef 92 81 22 2c 53 77 61 79 4c 6f 67 6f 33 32 3a 22 ef 92 82 22 2c 53 77 61 79 4c 6f 67 6f 46 69 6c 6c 33 32 3a 22 ef 92 83 22 2c 53 77 61 79 4c 6f 67 6f Data Ascii: ternalTFVC:"",ExternalXAML:"",IssueSolid:"",DefectSolid:"",LadybugSolid:"",NugetLogo:"",TFVCLogo:"",ProjectLogo32:"",ProjectLogoFill32:"",ProjectLogo16:"",ProjectLogoFill16:"",SwayLogo32:"",SwayLogoFill32:"",SwayLogo
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 28 37 38 30 39 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 6f 2e 59 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 2c 6e 3d 28 30 2c 69 2e 64 48 29 28 28 30 2c 72 2e 45 6f 29 28 29 2c 65 29 3b 69 66 28 21 74 2e 63 6c 61 73 73 4e 61 6d 65 46 72 6f 6d 4b 65 79 28 6e 29 29 7b 76 61 72 20 61 3d 74 2e 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 3b 74 2e 69 6e 73 65 72 74 52 75 6c 65 28 22 40 66 6f 6e 74 2d 66 61 63 65 7b 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 7d 22 29 2c 21 30 29 2c 74 2e 63 61 63 68 65 43 6c 61 73 73 4e 61 6d 65 28 61 2c 6e 2c 5b 5d 2c 5b 22 66 6f 6e 74 2d 66 61 63 65 22 2c 6e 5d 29 7d 7d 7d 2c 32 32 35 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 49 3a 28 29 3d 3e 75 2c 5a 3a 28 Data Ascii: (7809);function a(e){var t=o.Y.getInstance(),n=(0,i.dH)((0,r.Eo)(),e);if(!t.classNameFromKey(n)){var a=t.getClassName();t.insertRule("@font-face{".concat(n,"}"),!0),t.cacheClassName(a,n,[],["font-face",n])}}},2250:(e,t,n)=>{"use strict";n.d(t,{I:()=>u,Z:(
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 74 2e 74 61 72 67 65 74 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 72 2e 75 73 65 45 66 66 65 63 74 28 28 28 29 3d 3e 7b 69 66 28 28 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 63 75 72 72 65 6e 74 29 72 65 74 75 72 6e 20 42 28 6e 2e 63 75 72 72 65 6e 74 2c 69 2e 64 65 66 61 75 6c 74 56 69 65 77 29 7d 29 2c 5b 6e 2c 69 5d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 29 7b 63 6f 6e 73 74 7b 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 6e 2c 65 6c 65 6d 65 6e 74 54 79 70 65 3a 61 7d 3d 74 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 7c Data Ascii: void 0!==o?o:t.targetDocument;return r.useEffect((()=>{if((null==i?void 0:i.defaultView)&&n.current)return B(n.current,i.defaultView)}),[n,i]),n}function P(e,t){const{defaultProps:n,elementType:a}=t,s=function(e){if("string"==typeof e\|\|"number"==typeof e\|
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 65 64 2c 61 3d 65 2e 73 68 6f 75 6c 64 46 61 64 65 49 6e 2c 73 3d 65 2e 73 68 6f 75 6c 64 53 74 61 72 74 56 69 73 69 62 6c 65 2c 75 3d 65 2e 69 73 4c 61 6e 64 73 63 61 70 65 2c 6c 3d 65 2e 69 73 43 65 6e 74 65 72 2c 63 3d 65 2e 69 73 43 6f 6e 74 61 69 6e 2c 64 3d 65 2e 69 73 43 6f 76 65 72 2c 66 3d 65 2e 69 73 43 65 6e 74 65 72 43 6f 6e 74 61 69 6e 2c 70 3d 65 2e 69 73 43 65 6e 74 65 72 43 6f 76 65 72 2c 68 3d 65 2e 69 73 4e 6f 6e 65 2c 6d 3d 65 2e 69 73 45 72 72 6f 72 2c 67 3d 65 2e 69 73 4e 6f 74 49 6d 61 67 65 46 69 74 2c 76 3d 65 2e 74 68 65 6d 65 2c 79 3d 28 30 2c 50 2e 43 6e 29 28 4d 2c 76 29 2c 62 3d 7b 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6c 65 66 74 3a 22 35 30 25 20 2f 2a 20 40 6e 6f 66 6c 69 70 20 2a 2f 22 2c 74 6f 70 3a Data Ascii: ed,a=e.shouldFadeIn,s=e.shouldStartVisible,u=e.isLandscape,l=e.isCenter,c=e.isContain,d=e.isCover,f=e.isCenterContain,p=e.isCenterCover,h=e.isNone,m=e.isError,g=e.isNotImageFit,v=e.theme,y=(0,P.Cn)(M,v),b={position:"absolute",left:"50% /* @noflip */",top:
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 65 3d 74 68 69 73 2c 74 3d 2d 31 2c 6e 3d 74 68 69 73 2e 5f 66 6f 63 75 73 41 6c 69 67 6e 6d 65 6e 74 2e 6c 65 66 74 7c 7c 74 68 69 73 2e 5f 66 6f 63 75 73 41 6c 69 67 6e 6d 65 6e 74 2e 78 7c 7c 30 3b 72 65 74 75 72 6e 21 21 74 68 69 73 2e 5f 6d 6f 76 65 46 6f 63 75 73 28 21 30 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 76 61 72 20 69 3d 2d 31 2c 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6f 2e 74 6f 70 29 2c 73 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2e 62 6f 74 74 6f 6d 29 3b 72 65 74 75 72 6e 20 61 3c 73 3f 65 2e 5f 73 68 6f 75 6c 64 57 72 61 70 46 6f 63 75 73 28 65 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2c 75 65 29 3f 63 65 3a 64 65 3a 28 28 2d 31 3d 3d 3d 74 26 26 61 3e 3d 73 7c 7c 61 3d 3d 3d 74 29 26 26 28 74 3d 61 2c 69 3d 6e 3e 3d 6f 2e 6c Data Ascii: e=this,t=-1,n=this._focusAlignment.left\|\|this._focusAlignment.x\|\|0;return!!this._moveFocus(!0,(function(r,o){var i=-1,a=Math.floor(o.top),s=Math.floor(r.bottom);return a<s?e._shouldWrapFocus(e._activeElement,ue)?ce:de:((-1===t&&a>=s\|\|a===t)&&(t=a,i=n>=o.l
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 62 6d 65 6e 75 54 61 72 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 5f 61 6e 63 68 6f 72 2e 63 75 72 72 65 6e 74 3f 74 2e 5f 61 6e 63 68 6f 72 2e 63 75 72 72 65 6e 74 3a 76 6f 69 64 20 30 7d 2c 74 2e 5f 6f 6e 49 74 65 6d 43 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 2e 70 72 6f 70 73 2c 72 3d 6e 2e 69 74 65 6d 2c 6f 3d 6e 2e 6f 6e 49 74 65 6d 43 6c 69 63 6b 3b 6f 26 26 6f 28 72 2c 65 29 7d 2c 74 2e 5f 72 65 6e 64 65 72 41 72 69 61 44 65 73 63 72 69 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 69 64 3a 74 2e 5f 61 72 69 61 44 65 73 63 72 69 70 74 69 6f 6e 49 64 2c 63 6c 61 73 73 4e 61 6d Data Ascii: bmenuTarget=function(){return t._anchor.current?t._anchor.current:void 0},t._onItemClick=function(e){var n=t.props,r=n.item,o=n.onItemClick;o&&o(r,e)},t._renderAriaDescription=function(e,n){return e?o.createElement("span",{id:t._ariaDescriptionId,classNam
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 72 3d 21 31 3b 74 2e 6f 6e 43 6c 69 63 6b 3f 72 3d 21 21 74 2e 6f 6e 43 6c 69 63 6b 28 6e 2c 74 29 3a 65 2e 6f 6e 49 74 65 6d 43 6c 69 63 6b 26 26 28 72 3d 21 21 65 2e 6f 6e 49 74 65 6d 43 6c 69 63 6b 28 6e 2c 74 29 29 2c 21 72 26 26 6e 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7c 7c 66 28 6e 2c 21 30 29 7d 7d 3b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 63 75 72 72 65 6e 74 26 26 28 69 2e 63 75 72 72 65 6e 74 3d 21 30 29 2c 68 28 29 7c 7c 6d 28 65 2c 74 2c 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 73 29 7b 76 61 72 20 75 3d 61 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 6f 2e 63 75 72 72 65 6e 74 26 26 28 69 2e 63 75 72 72 65 6e 74 3d 21 30 2c 74 2e 63 75 72 72 65 6e 74 26 26 76 6f 69 64 20 30 3d 3d 3d Data Ascii: r=!1;t.onClick?r=!!t.onClick(n,t):e.onItemClick&&(r=!!e.onItemClick(n,t)),!r&&n.defaultPrevented\|\|f(n,!0)}};return[function(e,t,n){o.current&&(i.current=!0),h()\|\|m(e,t,n)},function(e,a,s){var u=a.currentTarget;o.current&&(i.current=!0,t.current&&void 0===
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 21 64 2c 54 3d 42 3f 22 61 22 3a 22 62 75 74 74 6f 6e 22 2c 49 3d 28 30 2c 76 2e 70 71 29 28 28 30 2c 79 2e 66 30 29 28 42 3f 7b 7d 3a 7b 74 79 70 65 3a 22 62 75 74 74 6f 6e 22 7d 2c 74 68 69 73 2e 70 72 6f 70 73 2e 72 6f 6f 74 50 72 6f 70 73 2c 74 68 69 73 2e 70 72 6f 70 73 29 2c 42 3f 76 2e 68 32 3a 76 2e 59 71 2c 5b 22 64 69 73 61 62 6c 65 64 22 5d 29 2c 50 3d 72 7c 7c 49 5b 22 61 72 69 61 2d 6c 61 62 65 6c 22 5d 2c 4c 3d 76 6f 69 64 20 30 3b 6e 3f 4c 3d 6b 3a 63 26 26 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 52 65 6e 64 65 72 44 65 73 63 72 69 70 74 69 6f 6e 21 3d 3d 62 2e 53 3f 4c 3d 78 3a 49 5b 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 5d 26 26 28 4c 3d 49 5b 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 5d 29 3b 76 61 72 20 4d 3d Data Ascii: !d,T=B?"a":"button",I=(0,v.pq)((0,y.f0)(B?{}:{type:"button"},this.props.rootProps,this.props),B?v.h2:v.Yq,["disabled"]),P=r\|\|I["aria-label"],L=void 0;n?L=k:c&&this.props.onRenderDescription!==b.S?L=x:I["aria-describedby"]&&(L=I["aria-describedby"]);var M=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49772	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:28 UTC	598	OUT	GET /resource/powerappsportal/controls/host/997.dc24e4c793.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:28 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:28 GMT Content-Type: application/x-javascript Content-Length: 124379 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000005I x-ms-static-content: ZE0000009 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: f04d8861-a0f7-4822-b2e3-53e3810401c4 x-ms-correlation-id: dd32387d-73e2-47fa-b675-a882773054df x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=9.7,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000228Z-17644f8887fwppmb28exh3xa5c00000006xg00000000cmm2 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:28 UTC	15482	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 39 37 5d 2c 7b 33 32 31 3a 65 3d 3e 7b 0a 2f 2a 0a 6f 62 6a 65 63 74 2d 61 73 73 69 67 6e 0a 28 63 29 20 53 69 6e 64 72 65 20 53 6f 72 68 75 73 0a 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2f 0a 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 72 3d 4f 62 6a 65 Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[997],{321:e=>{/object-assign(c) Sindre Sorhus@license MIT/var n=Object.getOwnPropertySymbols,t=Object.prototype.hasOwnProperty,r=Obje
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 5b 65 5d 26 26 28 6e 75 6c 6c 21 3d 6e 2e 63 68 69 6c 64 72 65 6e 7c 7c 6e 75 6c 6c 21 3d 6e 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 31 33 37 2c 65 29 29 3b 69 66 28 6e 75 6c 6c 21 3d 6e 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 7b 69 66 28 6e 75 6c 6c 21 3d 6e 2e 63 68 69 6c 64 72 65 6e 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 36 30 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 7c 7c 21 28 22 5f 5f 68 74 6d 6c 22 69 6e 20 6e 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6f 28 Data Ascii: [e]&&(null!=n.children\|\|null!=n.dangerouslySetInnerHTML))throw Error(o(137,e));if(null!=n.dangerouslySetInnerHTML){if(null!=n.children)throw Error(o(60));if("object"!=typeof n.dangerouslySetInnerHTML\|\|!("__html"in n.dangerouslySetInnerHTML))throw Error(o(
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 66 72 28 65 2c 6e 29 7b 69 66 28 73 72 28 65 2c 6e 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 6e 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6e 29 3b 69 66 28 74 2e 6c 65 6e 67 74 68 21 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 69 66 28 21 63 72 2e 63 61 6c 6c 28 6e 2c 74 5b 72 5d 29 7c 7c 21 73 72 28 65 5b 74 5b Data Ascii: prototype.hasOwnProperty;function fr(e,n){if(sr(e,n))return!0;if("object"!=typeof e\|\|null===e\|\|"object"!=typeof n\|\|null===n)return!1;var t=Object.keys(e),r=Object.keys(n);if(t.length!==r.length)return!1;for(r=0;r<t.length;r++)if(!cr.call(n,t[r])\|\|!sr(e[t[
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 6e 65 78 74 3d 6e 7d 65 6c 73 65 20 6c 3d 61 3d 6e 3b 72 65 74 75 72 6e 20 74 3d 7b 62 61 73 65 53 74 61 74 65 3a 72 2e 62 61 73 65 53 74 61 74 65 2c 66 69 72 73 74 42 61 73 65 55 70 64 61 74 65 3a 6c 2c 6c 61 73 74 42 61 73 65 55 70 64 61 74 65 3a 61 2c 73 68 61 72 65 64 3a 72 2e 73 68 61 72 65 64 2c 65 66 66 65 63 74 73 3a 72 2e 65 66 66 65 63 74 73 7d 2c 76 6f 69 64 28 65 2e 75 70 64 61 74 65 51 75 65 75 65 3d 74 29 7d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 6c 61 73 74 42 61 73 65 55 70 64 61 74 65 29 3f 74 2e 66 69 72 73 74 42 61 73 65 55 70 64 61 74 65 3d 6e 3a 65 2e 6e 65 78 74 3d 6e 2c 74 2e 6c 61 73 74 42 61 73 65 55 70 64 61 74 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 65 2c 6e 2c 74 2c 72 29 7b 76 61 72 20 61 3d 65 2e 75 70 64 61 74 65 51 75 Data Ascii: next=n}else l=a=n;return t={baseState:r.baseState,firstBaseUpdate:l,lastBaseUpdate:a,shared:r.shared,effects:r.effects},void(e.updateQueue=t)}null===(e=t.lastBaseUpdate)?t.firstBaseUpdate=n:e.next=n,t.lastBaseUpdate=n}function da(e,n,t,r){var a=e.updateQu
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 53 6f 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 77 6f 28 34 2c 32 2c 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 78 6f 28 65 2c 6e 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 65 3d 65 28 29 2c 6e 28 65 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 6e 75 6c 6c 29 7d 29 3a 6e 75 6c 6c 21 3d 6e 3f 28 65 3d 65 28 29 2c 6e 2e 63 75 72 72 65 6e 74 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 7d 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 43 6f 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 6e 75 6c 6c 21 3d 74 3f 74 2e 63 6f 6e 63 61 74 28 5b 65 5d 29 3a 6e 75 6c 6c 2c 77 6f 28 34 2c 32 2c 78 6f 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2c 65 29 2c 74 Data Ascii: unction So(e,n){return wo(4,2,e,n)}function xo(e,n){return"function"==typeof n?(e=e(),n(e),function(){n(null)}):null!=n?(e=e(),n.current=e,function(){n.current=null}):void 0}function Co(e,n,t){return t=null!=t?t.concat([e]):null,wo(4,2,xo.bind(null,n,e),t
2024-04-26 00:02:29 UTC	16384	IN	Data Raw: 21 3d 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 75 6e 73 74 61 62 6c 65 5f 61 76 6f 69 64 54 68 69 73 46 61 6c 6c 62 61 63 6b 7c 7c 30 21 3d 28 31 26 46 61 2e 63 75 72 72 65 6e 74 29 3f 30 3d 3d 3d 55 75 26 26 28 55 75 3d 33 29 3a 28 30 21 3d 3d 55 75 26 26 33 21 3d 3d 55 75 7c 7c 28 55 75 3d 34 29 2c 6e 75 6c 6c 3d 3d 3d 4d 75 7c 7c 30 3d 3d 28 31 33 34 32 31 37 37 32 37 26 6a 75 29 26 26 30 3d 3d 28 31 33 34 32 31 37 37 32 37 26 42 75 29 7c 7c 79 69 28 4d 75 2c 44 75 29 29 29 2c 28 72 7c 7c 74 29 26 26 28 6e 2e 66 6c 61 67 73 7c 3d 34 29 2c 6e 75 6c 6c 29 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 4d 61 28 29 2c 4b 6f 28 6e 29 2c 6e 75 6c 6c 3d 3d 3d 65 26 26 4c 72 28 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f Data Ascii: !==n.memoizedProps.unstable_avoidThisFallback\|\|0!=(1&Fa.current)?0===Uu&&(Uu=3):(0!==Uu&&3!==Uu\|\|(Uu=4),null===Mu\|\|0==(134217727&ju)&&0==(134217727&Bu)\|\|yi(Mu,Du))),(r\|\|t)&&(n.flags\|=4),null);case 4:return Ma(),Ko(n),null===e&&Lr(n.stateNode.containerInfo
2024-04-26 00:02:29 UTC	16384	IN	Data Raw: 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 4d 61 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 33 3a 63 61 73 65 20 31 39 3a 73 6c 28 46 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 3a 74 61 28 72 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 33 3a 63 61 73 65 20 32 34 3a 53 69 28 29 7d 74 3d 74 2e 72 65 74 75 72 6e 7d 4d 75 3d 65 2c 52 75 3d 24 69 28 65 2e 63 75 72 72 65 6e 74 2c 6e 75 6c 6c 29 2c 44 75 3d 46 75 3d 56 75 3d 6e 2c 55 75 3d 30 2c 41 75 3d 6e 75 6c 6c 2c 57 75 3d 42 75 3d 6a 75 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 43 69 28 65 2c 6e 29 7b 66 6f 72 28 3b 3b 29 7b 76 61 72 20 74 3d 52 75 3b 74 72 79 7b 69 66 28 6e 61 28 29 2c 59 61 2e 63 75 72 72 65 6e 74 3d 4c 6f 2c 6e 6f 29 7b 66 6f 72 28 76 61 72 20 72 3d 5a 61 2e 6d 65 6d 6f 69 7a 65 Data Ascii: (r);break;case 4:Ma();break;case 13:case 19:sl(Fa);break;case 10:ta(r);break;case 23:case 24:Si()}t=t.return}Mu=e,Ru=$i(e.current,null),Du=Fu=Vu=n,Uu=0,Au=null,Wu=Bu=ju=0}function Ci(e,n){for(;;){var t=Ru;try{if(na(),Ya.current=Lo,no){for(var r=Za.memoize
2024-04-26 00:02:29 UTC	10593	IN	Data Raw: 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 3f 6c 2e 65 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 2c 69 61 28 65 2c 6e 29 2c 64 61 28 6e 2c 72 2c 6e 75 6c 6c 2c 74 29 2c 28 72 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2e 65 6c 65 6d 65 6e 74 29 3d 3d 3d 6c 29 24 61 28 29 2c 6e 3d 61 75 28 65 2c 6e 2c 74 29 3b 65 6c 73 65 7b 69 66 28 28 61 3d 28 6c 3d 6e 2e 73 74 61 74 65 4e 6f 64 65 29 2e 68 79 64 72 61 74 65 29 26 26 28 41 61 3d 71 72 28 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 2e 66 69 72 73 74 43 68 69 6c 64 29 2c 55 61 3d 6e 2c 61 3d 56 61 3d 21 30 29 2c 61 29 7b 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 6c 2e 6d 75 74 61 62 6c 65 53 6f 75 72 63 65 45 61 67 65 72 48 79 64 72 61 74 69 6f 6e 44 61 74 61 29 29 66 6f 72 28 6c 3d 30 3b Data Ascii: emoizedState)?l.element:null,ia(e,n),da(n,r,null,t),(r=n.memoizedState.element)===l)$a(),n=au(e,n,t);else{if((a=(l=n.stateNode).hydrate)&&(Aa=qr(n.stateNode.containerInfo.firstChild),Ua=n,a=Va=!0),a){if(null!=(e=l.mutableSourceEagerHydrationData))for(l=0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49774	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:28 UTC	598	OUT	GET /resource/powerappsportal/controls/host/919.9b534cdc48.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:28 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:28 GMT Content-Type: application/x-javascript Content-Length: 7358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000005J x-ms-static-content: ZE0000009 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 261710d0-2477-4299-8ab3-ce6c14561409 x-ms-correlation-id: 303c1744-5f35-4c42-a14a-a42bbca6ca82 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=19.5,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000228Z-17644f8887fwppmb28exh3xa5c000000072g000000000n1k X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:28 UTC	7358	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 31 39 2c 31 34 30 5d 2c 7b 33 32 31 3a 65 3d 3e 7b 0a 2f 2a 0a 6f 62 6a 65 63 74 2d 61 73 73 69 67 6e 0a 28 63 29 20 53 69 6e 64 72 65 20 53 6f 72 68 75 73 0a 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2f 0a 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6e 3d Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[919,140],{321:e=>{/object-assign(c) Sindre Sorhus@license MIT/var t=Object.getOwnPropertySymbols,r=Object.prototype.hasOwnProperty,n=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49775	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:28 UTC	598	OUT	GET /resource/powerappsportal/controls/host/137.8295ee7e5a.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:28 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:28 GMT Content-Type: application/x-javascript Content-Length: 54095 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000006T x-ms-static-content: NR0000015 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: c5e78029-eba0-4eab-ae19-8073469881b4 x-ms-correlation-id: 46ef3fb9-b999-4d2d-8207-c44ec00915a2 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=34.0,x-ms-igw-req-overhead;dur=0.3 X-Content-Type-Options: nosniff X-Cache: TCP_MISS X-Azure-Ref: 20240426T000228Z-17644f8887fqm2jbpnyr5t7srg0000000720000000000xev x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:28 UTC	15482	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 37 5d 2c 7b 38 35 36 39 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 6a 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 72 3d 6e 28 32 35 30 29 2c 69 3d 6e 28 34 36 30 32 29 2c 73 3d 6e 28 36 38 31 36 29 2c 75 3d 6e 65 77 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 28 65 3d 74 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 29 2e 73 65 74 75 Data Ascii: (self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[137],{8569:(t,e,n)=>{"use strict";n.d(e,{j:()=>u});var r=n(250),i=n(4602),s=n(6816),u=new(function(t){function e(){var e;return(e=t.call(this)\|\|this).setu
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 31 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 6c 69 6e 65 22 2c 6e 29 2c 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 66 66 6c 69 6e 65 22 2c 6e 29 7d 7d 7d 2c 65 7d 28 30 2c 72 2e 5a 29 28 65 2c 74 29 3b 76 61 72 20 6e 3d 65 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6e 2e 6f 6e 53 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6c 65 61 6e 75 70 7c 7c 74 68 69 73 2e 73 65 74 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 73 65 74 75 70 29 7d 2c 6e 2e 6f 6e 55 6e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 68 61 73 4c 69 73 74 Data Ascii: 1),function(){window.removeEventListener("online",n),window.removeEventListener("offline",n)}}},e}(0,r.Z)(e,t);var n=e.prototype;return n.onSubscribe=function(){this.cleanup\|\|this.setEventListener(this.setup)},n.onUnsubscribe=function(){var t;this.hasList
2024-04-26 00:02:28 UTC	16384	IN	Data Raw: 65 3d 74 68 69 73 2e 6d 75 74 61 74 69 6f 6e 44 65 66 61 75 6c 74 73 2e 66 69 6e 64 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 74 6f 29 28 74 2c 65 2e 6d 75 74 61 74 69 6f 6e 4b 65 79 29 7d 29 29 29 3f 76 6f 69 64 20 30 3a 65 2e 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 3a 76 6f 69 64 20 30 7d 2c 65 2e 64 65 66 61 75 6c 74 51 75 65 72 79 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 5f 64 65 66 61 75 6c 74 65 64 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 65 3d 28 30 2c 72 2e 5a 29 28 7b 7d 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 4f 70 74 69 6f 6e 73 2e 71 75 65 72 69 65 73 2c 74 68 69 73 2e 67 65 74 51 75 65 72 79 44 65 66 61 75 6c 74 73 28 6e 75 6c 6c Data Ascii: e=this.mutationDefaults.find((function(e){return(0,i.to)(t,e.mutationKey)})))?void 0:e.defaultOptions:void 0},e.defaultQueryOptions=function(t){if(null==t?void 0:t._defaulted)return t;var e=(0,r.Z)({},this.defaultOptions.queries,this.getQueryDefaults(null
2024-04-26 00:02:28 UTC	5845	IN	Data Raw: 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 65 7d 2c 73 29 29 7d 7d 2c 38 34 39 30 3a 28 74 2c 65 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 65 2c 7b 5f 3a 28 29 3d 3e 6f 2c 6b 3a 28 29 3d 3e 61 7d 29 3b 76 61 72 20 72 3d 6e 28 34 31 30 32 29 2c 69 3d 6e 2e 6e 28 72 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 76 61 72 20 74 3d 21 31 3b 72 65 74 75 72 6e 7b 63 6c 65 61 72 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 31 7d 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 7d 2c 69 73 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 7d 7d 76 61 72 20 75 3d 69 28 29 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 73 28 29 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: Provider,{value:e},s))}},8490:(t,e,n)=>{"use strict";n.d(e,{_:()=>o,k:()=>a});var r=n(4102),i=n.n(r);function s(){var t=!1;return{clearReset:function(){t=!1},reset:function(){t=!0},isReset:function(){return t}}}var u=i().createContext(s()),o=function(){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49778	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:28 UTC	597	OUT	GET /resource/powerappsportal/controls/host/73.fa3cf8a2fa.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:29 UTC	828	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:29 GMT Content-Type: application/x-javascript Content-Length: 431 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000006L x-ms-static-content: NR0000018 Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 61162d80-05eb-470e-8644-8e3456d79c25 x-ms-correlation-id: 89d33ff2-f264-4b30-a0e8-810e575d6c0f x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=45.3,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000229Z-1865489d5f47spgmg1tk1770cg0000000af000000000wsu8 X-Cache: TCP_HIT x-fd-int-roxy-purgeid: 67510084 X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:29 UTC	431	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 33 5d 2c 7b 39 30 37 33 3a 28 74 2c 65 2c 72 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 72 65 74 75 72 6e 20 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[73],{9073:(t,e,r)=>{function s(){return s=Object.assign?Object.assign.bind():function(t){for(var e=1;e<arguments.length;e++){var r=arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49779	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:29 UTC	598	OUT	GET /resource/powerappsportal/controls/host/980.de82a8d903.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:29 UTC	901	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:29 GMT Content-Type: application/x-javascript Content-Length: 1887 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=31536000 Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000EE x-ms-static-content: ZE000009H Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: d5b48f92-f20f-4ca7-bd24-225334ea220d x-ms-correlation-id: 00610ff8-4ead-4b99-aa7f-6107237e53b9 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=49.6,x-ms-igw-req-overhead;dur=0.5 X-Content-Type-Options: nosniff X-Cache: TCP_MISS X-Azure-Ref: 20240426T000229Z-1865489d5f4pfk67n80fmg1bbw0000000acg000000009k18 x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:29 UTC	1887	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 38 30 2c 37 34 30 5d 2c 7b 33 39 38 30 3a 28 65 2c 74 2c 6f 29 3d 3e 7b 6f 2e 72 28 74 29 2c 6f 2e 64 28 74 2c 7b 41 6e 6e 6f 75 6e 63 65 50 72 6f 76 69 64 65 72 3a 28 29 3d 3e 4d 2c 41 6e 6e 6f 75 6e 63 65 50 72 6f 76 69 64 65 72 5f 75 6e 73 74 61 62 6c 65 3a 28 29 3d 3e 4d 2c 42 61 63 6b 67 72 6f 75 6e 64 41 70 70 65 61 72 61 6e 63 65 50 72 6f 76 69 64 65 72 3a 28 29 3d 3e 67 2c 43 75 73 74 6f 6d 53 74 79 6c 65 48 Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[980,740],{3980:(e,t,o)=>{o.r(t),o.d(t,{AnnounceProvider:()=>M,AnnounceProvider_unstable:()=>M,BackgroundAppearanceProvider:()=>g,CustomStyleH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49780	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:29 UTC	598	OUT	GET /resource/powerappsportal/controls/host/372.1490f8bbd1.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:29 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:29 GMT Content-Type: application/x-javascript Content-Length: 42863 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: GA000005F x-ms-static-content: ZE000001O Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: 287cfdd8-318f-4d7d-a5c4-5155fdaddc9f x-ms-correlation-id: b0c6debe-b2c6-45a7-9cb7-ce506401a7d0 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=23.2,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000229Z-1865489d5f4vxtqf9836nc5azn00000003e00000000131hf X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:29 UTC	15482	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 37 32 5d 2c 7b 34 33 37 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 41 63 74 69 6f 6e 4d 65 74 68 6f 64 73 57 69 74 68 43 6f 6e 66 69 67 3a 28 29 3d 3e 43 65 2c 43 61 6e 76 61 73 3a 28 29 3d 3e 51 2c 43 6f 72 65 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3a 28 29 3d 3e 67 65 2c 44 65 66 61 75 6c 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3a 28 29 3d 3e 45 65 2c 44 65 72 69 76 65 64 43 6f Data Ascii: (self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[372],{4372:(e,t,n)=>{"use strict";n.r(t),n.d(t,{ActionMethodsWithConfig:()=>Ce,Canvas:()=>Q,CoreEventHandlers:()=>ge,DefaultEventHandlers:()=>Ee,DerivedCo
2024-04-26 00:02:29 UTC	16384	IN	Data Raw: 3d 51 26 26 28 6f 2e 64 61 74 61 2e 69 73 43 61 6e 76 61 73 3d 21 30 2c 57 28 29 29 7d 74 26 26 74 28 6f 29 3b 76 61 72 20 73 3d 6e 2e 63 72 61 66 74 3b 69 66 28 73 26 26 28 6f 2e 64 61 74 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 73 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 73 2e 6e 61 6d 65 7c 7c 6f 2e 64 61 74 61 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 6f 2e 64 61 74 61 2e 70 72 6f 70 73 3d 76 28 76 28 7b 7d 2c 73 2e 70 72 6f 70 73 7c 7c 73 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 7c 7c 7b 7d 29 2c 6f 2e 64 61 74 61 2e 70 72 6f 70 73 29 2c 6f 2e 64 61 74 61 2e 63 75 73 74 6f 6d 3d 76 28 76 28 7b 7d 2c 73 2e 63 75 73 74 6f 6d 7c 7c 7b 7d 29 2c 6f 2e 64 61 74 61 2e 63 75 73 74 6f 6d 29 2c 6e 75 6c 6c 21 3d 73 2e 69 73 43 61 6e 76 61 73 26 26 28 6f 2e 64 61 Data Ascii: =Q&&(o.data.isCanvas=!0,W())}t&&t(o);var s=n.craft;if(s&&(o.data.displayName=s.displayName\|\|s.name\|\|o.data.displayName,o.data.props=v(v({},s.props\|\|s.defaultProps\|\|{}),o.data.props),o.data.custom=v(v({},s.custom\|\|{}),o.data.custom),null!=s.isCanvas&&(o.da
2024-04-26 00:02:29 UTC	10997	IN	Data Raw: 28 65 29 7b 6e 28 7b 6e 6f 64 65 73 3a 62 28 7b 7d 2c 65 2e 69 64 2c 65 29 2c 72 6f 6f 74 4e 6f 64 65 49 64 3a 65 2e 69 64 7d 2c 74 2c 7b 74 79 70 65 3a 22 63 68 69 6c 64 22 2c 69 6e 64 65 78 3a 6f 7d 29 7d 29 29 7d 2c 61 64 64 4e 6f 64 65 54 72 65 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 28 65 2c 74 2c 7b 74 79 70 65 3a 22 63 68 69 6c 64 22 2c 69 6e 64 65 78 3a 72 7d 29 7d 2c 64 65 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 65 28 65 2e 6e 6f 64 65 73 2c 6e 2c 7b 65 78 69 73 74 4f 6e 6c 79 3a 21 30 2c 69 64 4f 6e 6c 79 3a 21 30 7d 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6e 6f 64 65 3b 28 30 2c 69 2e 5a 29 28 21 74 2e 6e 6f 64 65 28 6e 2e 69 64 29 2e 69 73 54 6f 70 4c 65 76 65 Data Ascii: (e){n({nodes:b({},e.id,e),rootNodeId:e.id},t,{type:"child",index:o})}))},addNodeTree:function(e,t,r){n(e,t,{type:"child",index:r})},delete:function(n){ne(e.nodes,n,{existOnly:!0,idOnly:!0}).forEach((function(e){var n=e.node;(0,i.Z)(!t.node(n.id).isTopLeve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49782	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:29 UTC	598	OUT	GET /resource/powerappsportal/controls/host/741.64da153a30.chunk.js HTTP/1.1 Host: content.powerapps.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://site-stlp3.powerappsportals.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:29 UTC	902	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:29 GMT Content-Type: application/x-javascript Content-Length: 39139 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Strict-Transport-Security: max-age=31536000; includeSubDomains x-ms-islandgateway: ga00000E9 x-ms-static-content: NR000000A Timing-Allow-Origin: * X-ServiceFabric: NoRetry x-ms-service-request-id: fcf329c1-8db3-4a6b-8b0a-6ef610848e34 x-ms-correlation-id: afe83b42-8230-4142-a737-bd87f5234164 x-ms-activity-vector: 00.01.00 Server-Timing: x-ms-igw-upstream-headers;dur=30.1,x-ms-igw-req-overhead;dur=0.2 X-Content-Type-Options: nosniff x-azure-ref: 20240426T000229Z-17644f8887fgllqlquems3k2kw00000006qg000000008y74 X-Cache: TCP_MISS x-fd-int-roxy-purgeid: 67510084 Accept-Ranges: bytes
2024-04-26 00:02:29 UTC	15482	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 69 63 72 6f 73 6f 66 74 5f 70 6f 77 65 72 70 61 67 65 73 5f 68 6f 73 74 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 34 31 5d 2c 7b 31 39 36 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 72 28 74 29 3b 76 61 72 20 6f 2c 6e 2c 61 2c 6c 2c 69 3d 72 28 33 35 39 33 29 2c 64 3d 72 2e 6e 28 69 29 2c 63 3d 72 28 36 35 30 35 29 2c 73 3d 72 2e 6e 28 63 29 2c 75 3d 72 28 37 36 35 37 29 2c 67 3d 72 28 31 32 30 38 29 2c 70 3d 72 28 39 30 31 37 29 2c 6d 3d 72 28 35 32 33 38 29 2c 68 3d 72 28 35 36 39 32 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: "use strict";(self.webpackChunk_microsoft_powerpages_host=self.webpackChunk_microsoft_powerpages_host\|\|[]).push([[741],{1961:(e,t,r)=>{r.r(t);var o,n,a,l,i=r(3593),d=r.n(i),c=r(6505),s=r.n(c),u=r(7657),g=r(1208),p=r(9017),m=r(5238),h=r(5692);!function(e){
2024-04-26 00:02:29 UTC	16384	IN	Data Raw: 65 3d 3e 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 61 74 74 72 69 62 75 74 65 73 29 2e 73 6f 6d 65 28 28 65 3d 3e 65 2e 6e 61 6d 65 3d 3d 3d 53 65 29 29 29 29 2e 6d 61 70 28 28 65 3d 3e 28 7b 5b 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 5b 5d 29 2e 66 69 6e 64 28 28 65 3d 3e 65 2e 6e 61 6d 65 3d 3d 3d 53 65 29 29 3f 2e 76 61 6c 75 65 7c 7c 22 22 5d 3a 28 30 2c 76 65 2e 77 6d 29 28 29 7d 29 29 29 3b 6c 65 74 20 70 2c 6d 3b 74 72 79 7b 70 3d 79 65 28 29 2e 70 61 72 73 65 28 60 7b 24 7b 41 72 72 61 79 2e 66 72 6f 6d 28 65 3f 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 5b 5d 29 2e 6d 61 70 28 28 65 3d 3e 60 22 24 7b 65 2e 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2d 22 29 2e 6d 61 70 28 28 28 65 2c 74 29 3d 3e 28 30 21 3d 3d 74 3f 65 2e 63 Data Ascii: e=>Array.from(e.attributes).some((e=>e.name===Se)))).map((e=>({[Array.from(e.attributes\|\|[]).find((e=>e.name===Se))?.value\|\|""]:(0,ve.wm)()})));let p,m;try{p=ye().parse(`{${Array.from(e?.attributes\|\|[]).map((e=>`"${e.name.split("-").map(((e,t)=>(0!==t?e.c
2024-04-26 00:02:30 UTC	7273	IN	Data Raw: 68 61 6e 67 65 3a 70 2c 6f 6e 52 65 6e 64 65 72 3a 6d 2c 65 6e 61 62 6c 65 64 3a 65 2e 65 64 69 74 69 6e 67 45 6e 61 62 6c 65 64 7d 2c 64 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 65 2e 6d 2c 7b 72 65 6e 64 65 72 65 72 3a 66 7d 2c 64 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 65 2e 66 2c 7b 74 68 65 6d 65 3a 6f 7d 2c 64 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 45 65 2e 72 2c 7b 74 68 65 6d 65 3a 71 28 6f 29 7d 2c 64 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 65 65 7d 2c 64 28 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 68 65 2e 46 72 61 6d 65 2c 65 2e 63 6f 6e 66 69 67 3f 7b 64 61 74 61 3a 73 7d 3a 7b 7d 2c 6e 75 6c 6c 21 3d 6e 26 26 6e 2e 53 65 63 74 69 6f 6e Data Ascii: hange:p,onRender:m,enabled:e.editingEnabled},d().createElement(be.m,{renderer:f},d().createElement(fe.f,{theme:o},d().createElement(Ee.r,{theme:q(o)},d().createElement("div",{className:ee},d().createElement(he.Frame,e.config?{data:s}:{},null!=n&&n.Section

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49796	152.199.4.44	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:39 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:39 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1947381 Cache-Control: public, max-age=31536000 Content-MD5: OdlDOzXlgXZa124Z7O0jlA== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 00:02:39 GMT Etag: 0x8DC52767B578035 Last-Modified: Mon, 01 Apr 2024 18:06:40 GMT Server: ECAcc (mic/9ADE) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e5082fce-001e-0067-63b6-85c90a000000 x-ms-version: 2009-09-19 Content-Length: 141305 Connection: close
2024-04-26 00:02:39 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-26 00:02:39 UTC	16383	IN	Data Raw: 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 5f 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 64 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 29 7b 65 2e 61 64 Data Ascii: utedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){_.isHistorySupported()&&d.history.pushState(e,n)},replaceState:function(e,n){_.isHistorySupported()&&d.history.replaceState(e,n)}},addEventListener:function(e,n,t,r){e.ad
2024-04-26 00:02:39 UTC	2	IN	Data Raw: 5f 53 Data Ascii: _S
2024-04-26 00:02:39 UTC	16383	IN	Data Raw: 4d 53 3a 22 38 30 30 34 33 34 45 31 22 2c 50 50 5f 45 5f 49 4e 4c 49 4e 45 4c 4f 47 49 4e 5f 49 4e 56 41 4c 49 44 5f 41 4c 54 3a 22 38 30 30 34 33 34 45 32 22 2c 50 50 5f 45 5f 50 52 45 56 49 4f 55 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 31 30 31 33 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 57 52 4f 4e 47 3a 22 38 30 30 34 35 35 30 35 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 46 41 54 41 4c 3a 22 38 30 30 34 35 35 33 37 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f 54 48 45 52 3a 22 38 Data Ascii: MS:"800434E1",PP_E_INLINELOGIN_INVALID_ALT:"800434E2",PP_E_PREVIOUS_PASSWORD:"80041013",PP_E_HIP_VALIDATION_WRONG:"80045505",PP_E_HIP_VALIDATION_ERROR_FATAL:"80045537",PP_E_HIP_VALIDATION_ERROR_UNAUTHENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_OTHER:"8
2024-04-26 00:02:39 UTC	16383	IN	Data Raw: 6f 2b 2b 29 72 2e 70 75 73 68 28 6e 2e 63 61 6c 6c 28 74 2c 65 5b 6f 5d 2c 6f 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6a 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 6e 2e 63 61 6c 6c 28 74 2c 65 5b 6f 5d 2c 6f 29 26 26 72 2e 70 75 73 68 28 65 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 4e 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 65 2e 70 75 73 68 2e 61 70 70 6c 79 28 65 2c 6e 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 74 3d 30 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 2b 29 65 2e 70 75 73 68 28 6e 5b 74 5d 29 3b 72 65 74 75 72 Data Ascii: o++)r.push(n.call(t,e[o],o));return r},jb:function(e,n,t){var r=[];if(e)for(var o=0,i=e.length;o<i;o++)n.call(t,e[o],o)&&r.push(e[o]);return r},Nb:function(e,n){if(n instanceof Array)e.push.apply(e,n);else for(var t=0,r=n.length;t<r;t++)e.push(n[t]);retur
2024-04-26 00:02:39 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 5b 54 5d 3d 3d 3d 50 5b 54 5d 7c 7c 65 5b 54 5d 3d 3d 3d 53 2e 6f 2e 66 6e 5b 54 5d 26 26 65 2e 4e 63 29 7d 2c 53 2e 62 28 22 6f 62 73 65 72 76 61 62 6c 65 22 2c 53 2e 74 61 29 2c 53 2e 62 28 22 69 73 4f 62 73 65 72 76 61 62 6c 65 22 2c 53 2e 4f 29 2c 53 2e 62 28 22 69 73 57 72 69 74 65 61 62 6c 65 4f 62 73 65 72 76 61 62 6c 65 22 2c 53 2e 5a 61 29 2c 53 2e 62 28 22 69 73 57 72 69 74 61 62 6c 65 4f 62 73 65 72 76 61 62 6c 65 22 2c 53 2e 5a 61 29 2c 53 2e 62 28 22 6f 62 73 65 72 76 61 62 6c 65 2e 66 6e 22 2c 50 29 2c 53 2e 4c 28 50 2c 22 70 65 65 6b 22 2c 50 2e 76 29 2c 53 2e 4c 28 50 2c 22 76 61 6c 75 65 48 61 73 4d 75 74 61 74 65 64 22 2c 50 2e 78 61 29 2c 53 2e 4c 28 50 2c 22 76 61 6c Data Ascii: function"==typeof e&&(e[T]===P[T]\|\|e[T]===S.o.fn[T]&&e.Nc)},S.b("observable",S.ta),S.b("isObservable",S.O),S.b("isWriteableObservable",S.Za),S.b("isWritableObservable",S.Za),S.b("observable.fn",P),S.L(P,"peek",P.v),S.L(P,"valueHasMutated",P.xa),S.L(P,"val
2024-04-26 00:02:39 UTC	16383	IN	Data Raw: 29 2c 74 26 26 21 62 5b 53 2e 61 2e 52 28 6e 29 5d 26 26 64 28 74 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 53 2e 61 2e 67 2e 55 62 28 65 2c 45 2c 7b 7d 29 2c 73 3d 69 2e 68 64 3b 69 66 28 21 6e 29 7b 69 66 28 73 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 59 6f 75 20 63 61 6e 6e 6f 74 20 61 70 70 6c 79 20 62 69 6e 64 69 6e 67 73 20 6d 75 6c 74 69 70 6c 65 20 74 69 6d 65 73 20 74 6f 20 74 68 65 20 73 61 6d 65 20 65 6c 65 6d 65 6e 74 2e 22 29 3b 69 2e 68 64 3d 21 30 7d 69 66 28 73 7c 7c 28 69 2e 63 6f 6e 74 65 78 74 3d 74 29 2c 69 2e 5a 62 7c 7c 28 69 2e 5a 62 3d 7b 7d 29 2c 6e 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6e 29 6f 3d 6e 3b 65 6c 73 65 7b 76 61 72 20 75 3d 53 2e 67 61 2e 69 6e Data Ascii: ),t&&!b[S.a.R(n)]&&d(t,n)}function p(e,n,t){var o,i=S.a.g.Ub(e,E,{}),s=i.hd;if(!n){if(s)throw Error("You cannot apply bindings multiple times to the same element.");i.hd=!0}if(s\|\|(i.context=t),i.Zb\|\|(i.Zb={}),n&&"function"!=typeof n)o=n;else{var u=S.ga.in
2024-04-26 00:02:39 UTC	4	IN	Data Raw: 2e 6d 61 28 Data Ascii: .ma(
2024-04-26 00:02:39 UTC	16383	IN	Data Raw: 65 2c 53 2e 69 2e 48 29 2c 53 2e 61 2e 77 64 28 65 29 2c 75 26 26 32 30 3c 4d 61 74 68 2e 61 62 73 28 75 2d 65 2e 73 63 72 6f 6c 6c 54 6f 70 29 26 26 28 65 2e 73 63 72 6f 6c 6c 54 6f 70 3d 75 29 7d 7d 2c 53 2e 63 2e 6f 70 74 69 6f 6e 73 2e 24 62 3d 53 2e 61 2e 67 2e 5a 28 29 2c 53 2e 63 2e 73 65 6c 65 63 74 65 64 4f 70 74 69 6f 6e 73 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 76 61 72 20 72 3d 6e 28 29 2c 6f 3d 5b 5d 3b 53 2e 61 2e 44 28 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 6f 70 74 69 6f 6e 22 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 65 6c 65 63 74 65 64 26 26 6f 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 29 29 7d 29 29 2c 53 2e 6d 2e 65 62 28 72 Data Ascii: e,S.i.H),S.a.wd(e),u&&20<Math.abs(u-e.scrollTop)&&(e.scrollTop=u)}},S.c.options.$b=S.a.g.Z(),S.c.selectedOptions={init:function(e,n,t){function r(){var r=n(),o=[];S.a.D(e.getElementsByTagName("option"),(function(e){e.selected&&o.push(S.w.M(e))})),S.m.eb(r
2024-04-26 00:02:39 UTC	16383	IN	Data Raw: 65 66 61 75 6c 74 3f 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3a 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 21 31 7d 6e 2e 61 70 70 6c 79 45 78 74 65 6e 73 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 3d 31 2c 6f 3d 7b 7d 3b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 6c 6f 61 64 65 72 73 2e 75 6e 73 68 69 66 74 28 7b 6c 6f 61 64 43 6f 6d 70 6f 6e 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2e 64 65 66 61 75 6c 74 4c 6f 61 64 65 72 2e 6c 6f 61 64 43 6f 6d 70 6f 6e 65 6e 74 28 6e 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 69 3b 74 2e 65 6e 61 62 6c 65 45 78 74 65 6e 73 69 6f 6e 73 26 26 28 69 3d 6e 2e 63 72 65 61 74 65 56 69 65 77 4d 6f 64 65 6c 2c 6e 2e Data Ascii: efault?e.preventDefault():e.returnValue=!1}n.applyExtensions=function(e){var n,t=1,o={};e.components.loaders.unshift({loadComponent:function(n,t,r){e.components.defaultLoader.loadComponent(n,t,(function(n){var i;t.enableExtensions&&(i=n.createViewModel,n.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49800	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:40 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:41 UTC	796	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:41 GMT Content-Type: text/css Content-Length: 20314 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 27 Dec 2023 18:18:12 GMT ETag: 0x8DC07082FBB8D2B x-ms-request-id: d2ede606-801e-0006-2061-971f92000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000241Z-1865489d5f47qbmbt8czrx60cn0000000ar000000000f8f6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:41 UTC	15588	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-04-26 00:02:41 UTC	4726	IN	Data Raw: 22 20 d6 45 09 41 36 3d ae 63 fa 4f 4b 7f 86 e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e Data Ascii: " EA6=cOKa}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49802	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:40 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:41 UTC	792	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:41 GMT Content-Type: application/x-javascript Content-Length: 121212 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 27 Mar 2024 20:03:18 GMT ETag: 0x8DC4E98F25B224F x-ms-request-id: 43eeecf5-801e-002a-4867-967ab8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000241Z-1865489d5f4vxtqf9836nc5azn00000003kg00000000203z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:41 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 7b e3 38 8e 00 f8 fd 7e 85 a3 99 cb d8 1d c5 25 f9 dd 4a ab b3 ae bc 54 65 3b 89 33 71 aa bb 77 53 99 3c b2 44 3b ea c8 92 57 92 f3 32 8e f7 b7 1f 00 92 12 65 cb a9 aa d9 bd bb e7 9e eb 9d ad 58 24 48 82 20 08 82 20 08 7e f8 69 e7 ff a8 fc 54 d9 ff fe ff 2a a3 9b c1 f5 4d 65 78 5a b9 f9 7c 76 7d 5c b9 82 af ff a8 5c 0e 6f ce 8e 4e be bf 1e 6c 14 ff ff e6 c1 4f 2a 13 3f 60 15 f8 3b 76 12 e6 55 a2 b0 12 c5 15 3f 74 a3 78 1e c5 4e ca 92 ca 0c fe 8d 7d 27 a8 4c e2 68 56 49 1f 58 65 1e 47 7f 32 37 4d 2a 81 9f a4 50 68 cc 82 e8 b9 52 85 ea 62 af 72 e5 c4 e9 6b e5 ec aa 56 87 fa 19 d4 e6 4f fd 10 4a bb d1 fc 15 7e 3f a4 95 30 4a 7d 97 55 9c d0 a3 da 02 f8 08 13 56 59 84 1e 8b 2b cf 0f be fb 50 b9 f0 dd 38 4a a2 49 5a 89 99 Data Ascii: m{8~%JTe;3qwS<D;W2eX$H ~iTMexZ\|v}\\oNlO?`;vU?txN}'LhVIXeG27M*PhRbrkVOJ~?0J}UVY+P8JIZ
2024-04-26 00:02:41 UTC	16384	IN	Data Raw: e9 cb 27 9f 3d a3 6d 30 b0 96 7c 26 fd 96 25 94 cd 6e 7f 53 66 e2 3e 4f 84 75 40 c2 24 a5 97 0f f8 d6 24 84 7c 74 3a 5e e5 77 0c 50 d0 e0 48 a7 e4 a8 89 96 43 e0 35 59 9f 95 56 9b 2d 34 b0 bd 86 78 37 2c c4 37 73 77 22 75 f3 e1 5f 38 2f 74 af 05 16 86 5f 43 fe 3c 3d 39 b2 67 1c 9f bc bd 49 de aa 97 df 9b a9 fe 68 8d 30 ef 14 1b 60 52 e4 74 98 9b 75 8a ef 91 f0 a7 31 48 37 d3 fe f2 df 7f b9 60 a8 33 a1 2e 75 7f 3e 82 6f 1e 4f 8c 79 f6 52 04 b2 e2 af 08 43 ce 9c 3f 54 ca 0f 32 10 12 63 4c 89 fd 03 e6 67 01 0a f2 87 0f 44 95 f2 8d d3 22 98 48 5c 6b 9a 42 5e 70 61 84 28 5c 46 29 86 d1 a3 bd 16 05 99 a2 9f 57 bf 1f 5b 26 de 65 7f c0 58 1c f8 ec 2e 8f 58 26 6d 0a 32 b0 08 46 e5 c8 43 8b 90 d6 78 01 6b ee 20 f0 9d 84 82 72 cd c6 e8 57 cf 9f 5b 90 0f ec 96 26 8b Data Ascii: '=m0\|&%nSf>Ou@$$\|t:^wPHC5YV-4x7,7sw"u_8/t_C<=9gIh0`Rtu1H7`3.u>oOyRC?T2cLgD"H\kB^pa(\F)W[&eX.X&m2FCxk rW[&
2024-04-26 00:02:41 UTC	16384	IN	Data Raw: 62 00 67 7f 3b 0e f0 ad 2d 3e 8d 03 4c e7 25 87 ea 49 53 05 7d 91 d4 77 88 1c 5b f5 7b 53 3c f7 93 52 d4 97 70 ed 39 16 a9 0f f6 14 9e ad 6e f9 ab 6b cf b7 ce a1 08 89 38 c2 07 32 dd 4e a2 51 e0 a8 5f 6f 98 2b 47 5e 43 39 3c 36 3c 3e 00 d7 be 8c 05 0a 76 15 8f 21 70 9e 2a e1 3c 42 bc af 55 85 42 84 da 64 d2 d5 39 7a 3e df d8 20 df e7 12 c9 41 d5 10 64 fb e1 44 01 fd a8 86 aa 1e 57 90 19 62 73 47 65 d4 24 b5 91 9c 7e c8 5e 41 a1 84 24 bb 94 97 d7 01 23 26 9f 51 70 06 ff e4 57 80 e6 50 90 22 e9 15 56 47 25 ff c0 82 3b 40 7a 52 f2 44 2c ef 09 85 9d 40 3c 3c 43 d9 95 76 bf 03 08 0f 24 a1 c2 43 cc 8e 5f 7b dc 2a 20 38 f0 57 7b 5d 2f 26 76 45 97 04 b9 6d 28 10 45 41 67 52 3f 62 77 69 51 86 02 01 72 64 32 d7 64 5b 5f d4 74 32 50 b3 a0 41 b9 bd 66 61 6f 2c 17 f3 Data Ascii: bg;->L%IS}w[{S<Rp9nk82NQ_o+G^C9<6<>v!p<BUBd9z> AdDWbsGe$~^A$#&QpWP"VG%;@zRD,@<<Cv$C_{ 8W{]/&vEm(EAgR?bwiQrd2d[_t2PAfao,
2024-04-26 00:02:41 UTC	16384	IN	Data Raw: e4 f7 00 90 14 f2 82 3d 01 00 46 7d 9c b9 cf 35 2a 47 52 fc 3e 8d 46 71 7e bf c3 da ab b0 8f d1 e8 2e ba cf 1c 34 d6 c4 43 09 38 08 73 c8 77 c2 07 ad 32 15 b4 fd 5e 9a 22 35 0a bf f8 c8 c0 0f 46 07 83 36 d9 35 52 80 79 5a 78 ba 59 27 74 b3 e2 7e c5 1c 91 e4 bf 83 28 94 86 98 a3 be 72 87 73 d3 0f 73 fe b5 47 47 8c 7e 0e 7b 6c e3 f9 63 8f 81 d6 71 73 9f 15 4a 1d e9 1d d7 e1 72 99 57 cd c2 33 88 2f ef 5e c6 b2 8c 81 2c 3b 22 62 20 ee 9b bc 7f 13 b4 ca 31 28 43 d2 61 8f 11 21 e4 6d b8 72 30 6a 70 5e 31 e0 96 9a 85 f2 de 03 73 54 33 d4 f3 93 53 51 53 93 a0 ad 34 98 91 c5 e6 56 75 84 a9 60 69 ad 4d c6 d6 eb f8 db a3 d6 4e cc d9 10 4f 92 07 ee df 79 fe 5d f3 77 fe 90 72 90 bb f0 e1 77 1b 88 8b e6 69 f8 20 ed df ce ce 31 bc 78 d6 0f db 73 3f 53 87 6f 81 32 2c 49 Data Ascii: =F}5*GR>Fq~.4C8sw2^"5F65RyZxY't~(rssGG~{lcqsJrW3/^,;"b 1(Ca!mr0jp^1sT3SQS4Vu`iMNOy]wrwi 1xs?So2,I
2024-04-26 00:02:41 UTC	16384	IN	Data Raw: 5b fb 6e 83 b4 3b 96 d2 db 35 84 0e 7c 7d 7f 2e ec 22 48 f2 75 1f d6 18 85 c9 a1 b2 1f 7f a3 8a 39 6c 2d 74 7a 4e 14 50 e5 31 6a 69 9a 2d 97 43 d5 70 c6 6c 11 21 17 76 e4 96 7a ff 42 e3 58 37 18 24 e6 cf 14 ba 51 1b ef 5d c3 1a 65 90 14 40 cd 2a 32 6f a4 54 88 c0 49 10 06 eb 03 46 9c 4e 5e 96 92 86 37 3e 0d cf dc c1 da 5a 28 89 fc 60 1a 28 48 88 cd ce e8 5e 06 98 c5 5c 19 5d 03 12 69 44 6f 7f 9f f7 71 28 41 c6 e1 c3 95 38 6c b9 ce d5 75 aa 00 2b 68 a1 6c 60 d1 a0 52 e6 e5 17 c9 1a 92 16 89 ab c6 e8 71 1b 86 d9 b1 22 fe 30 10 14 7b d4 5f 13 a1 9c ab 9f e1 17 e2 25 68 4f 4c 4c b4 0f 9d c7 ba cf de 75 70 f1 7c f2 f0 b0 e1 d1 a7 d6 2e d6 36 06 ba 87 d9 cb 60 c2 66 0f dc 88 82 c2 9b 89 50 0b 20 61 80 73 4c 1d 12 a9 d7 ae c1 07 ce 9d 75 2f 7b be 41 67 d0 cb 60 Data Ascii: [n;5\|}."Hu9l-tzNP1ji-Cpl!vzBX7$Q]e@*2oTIFN^7>Z(`(H^\]iDoq(A8lu+hl`Rq"0{_%hOLLup\|.6`fP asLu/{Ag`
2024-04-26 00:02:41 UTC	16384	IN	Data Raw: 7e e0 d9 16 67 96 07 dd 24 06 a6 67 2e 3a 13 22 4e b9 73 c3 7d 82 d5 6e 0c ea d9 91 1f 4a 28 29 42 84 10 bd 29 34 59 91 49 cb 71 33 c8 8f cc 8f f8 6e 3a 4b 3c 1b aa 5e ec 0a 88 73 a8 c7 2e 70 1b 4c 50 30 61 b9 01 0b 63 77 37 eb 64 34 23 cb 0f 33 61 45 71 04 25 c5 b1 53 c9 5c 11 3b 99 6b 5b 8e c3 3d 58 06 bb e9 2c b1 21 16 dc 14 aa 44 c8 05 38 b8 25 18 83 25 e0 07 a4 b2 40 4f be d9 36 cb 6a 37 46 33 8a 63 d8 a3 2e 4c 98 48 78 31 73 1d c1 63 c9 a5 6b 65 41 40 42 72 37 f4 e4 25 16 68 34 62 69 e6 63 4d 2c 1f 82 c9 e1 2c f6 3c d2 9e 03 08 f6 dd 4c 9d d1 8c 52 1f e4 93 49 2f b2 c0 c6 dd d0 b2 bd c8 66 98 4d b0 58 61 59 ce 4e 38 b9 e3 27 8e 23 20 f3 32 32 0b 6d 2b 86 24 77 98 b0 3d 3b 82 7c 8f bc 30 0e 77 d2 8d d1 8c 62 e1 87 91 6d 05 ae 13 79 96 45 03 b3 52 cb Data Ascii: ~g$g.:"Ns}nJ()B)4YIq3n:K<^s.pLP0acw7d4#3aEq%S\;k[=X,!D8%%@O6j7F3c.LHx1sckeA@Br7%h4bicM,,<LRI/fMXaYN8'# 22m+$w=;\|0wbmyER
2024-04-26 00:02:41 UTC	16384	IN	Data Raw: 3b 5e 4f df 33 30 3a ba 6c ef 2b 3a 09 a6 ef 19 71 32 ea e5 2b 63 f2 57 d2 2a 7f b7 60 96 9b 2d 2a c8 61 5b 2e 04 2d e7 db e7 41 5b 04 47 33 d3 7e 65 e5 34 a3 a2 f1 6d 39 81 97 d9 3d 37 d1 47 77 c7 cf ae ac a3 7e b9 fe 73 95 9a 79 cd 32 ea 2c f1 d5 f7 5f 84 2c df 2e 8a b3 a3 b2 78 fc 41 f2 f3 c5 8a 57 68 fd f3 97 db d1 19 9b 37 35 a3 bf 7e 25 fe ff 55 a8 db 34 7e 33 ba 36 60 7f 6d 8a fe a6 f0 b3 59 b6 ba f3 64 63 5b d5 f7 3f 22 46 1c 9d 49 29 d2 f3 d3 b3 9d 8b f3 16 e6 94 a6 9b 6f 50 9e ff e1 f1 6e 87 12 f2 3f 5e ab 2d 0e d9 fc 01 6c d8 df 20 f2 e7 9b 30 53 5e e6 53 59 5e 47 da 2d a8 c2 37 e6 26 ff ed dc 97 3b 54 32 4b 9a fa 6a 5d ab 55 6e 9f 44 a2 bc 68 8d 32 0f e9 00 50 ef 6f 3d eb 4b 1c e9 3a 79 71 fe 9a b6 39 21 77 9d e0 b2 46 7e 54 90 2d 09 4e 07 af Data Ascii: ;^O30:l+:q2+cW`-a[.-A[G3~e4m9=7Gw~sy2,_,.xAWh75~%U4~36`mYdc[?"FI)oPn?^-l 0S^SY^G-7&;T2Kj]UnDh2Po=K:yq9!wF~T-N
2024-04-26 00:02:41 UTC	7316	IN	Data Raw: c3 63 98 d0 fe fd 26 b7 b8 5e e2 81 fb 3e 31 42 65 52 c6 b5 42 41 83 fd 4b 62 cc fd 28 d8 9f 11 23 a5 e4 6b ff 86 18 3e a7 51 fb 1f a1 7e 99 70 ed bf 03 f0 97 a9 d6 fe 29 d4 bf a6 3b f1 d0 9d cf d1 74 b5 1f 1b 21 13 9e f2 27 d9 dd 53 1c fb 65 27 ea f6 30 8e 31 9f 72 87 4d 36 ee 76 7b c0 00 e3 4e 16 1b 6e dc bd cb 57 3c 93 27 8f f3 04 ec d9 f9 0d 56 87 a0 f0 0c fb 60 81 44 01 57 00 16 8c 4c 2b 4f 31 d3 d5 57 3e ba fd 1d d3 40 89 80 66 59 20 bd f7 fc 2b 30 6a a4 3d fc e9 8b fc c7 ed 2d e9 71 60 bd 02 66 7d bd f8 91 dc dc 15 23 73 63 ee 41 c1 47 45 07 85 e3 a2 c1 6f bb e9 e7 28 f3 2f 3b fc 67 0f 6f f0 75 bf fa 6e 4a 5a 1f 7b 07 b0 0c 5c b8 dc 8f a9 90 82 e4 16 49 90 97 7c e1 15 60 83 bf 49 e2 e7 f3 c4 ff 88 31 b4 f1 59 e7 97 de e1 bb d9 e9 2f 2f a4 e8 a6 39 Data Ascii: c&^>1BeRBAKb(#k>Q~p);t!'Se'01rM6v{NnW<'V`DWL+O1W>@fY +0j=-q`f}#scAGEo(/;gounJZ{\I\|`I1Y//9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49801	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:40 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:41 UTC	812	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:41 GMT Content-Type: application/x-javascript Content-Length: 15799 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 28 Mar 2024 02:23:53 GMT ETag: 0x8DC4ECE1D0444D4 x-ms-request-id: 95f3c37e-f01e-0009-70dd-96968d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000241Z-1865489d5f4vxtqf9836nc5azn00000003d0000000016dtg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:41 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 Data Ascii: }Ms#GuhO=>4pO$PIF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sB
2024-04-26 00:02:41 UTC	227	IN	Data Raw: 57 07 1b 0a ae c4 62 0a fb 14 83 a4 1d 47 7a 4c d9 50 88 3d 11 31 a3 82 91 44 92 9b ac 27 fa 55 71 d0 e8 52 b2 83 36 27 fc b6 dc 23 94 e3 1e 80 37 6e 69 ad 92 7b 01 76 8e 29 d0 a4 f3 81 4e a5 61 fe e9 d7 44 09 47 be c4 aa 78 02 e5 da 24 f0 cf 03 17 6f 15 81 0e 9b 57 59 59 50 76 65 74 81 91 0e 08 e2 ca 8f 9f d0 09 e6 cc 63 f5 01 0c 1d b1 ff ac b6 da 7e a0 7c 70 78 3f 7a 67 ef 29 ac ad fb a8 08 00 af bb ab 0b 46 ef 41 74 8a 4c fb 39 f7 de 8d 28 4c 4b db fa 95 7d d4 f5 b7 b4 b4 70 4f 6e 04 ef ef ec d2 6a c8 b3 29 ad 7d 6c 5b d9 81 ae 31 dc 64 9c fb e5 ea ce 71 1a 0d 53 9d 56 9f d3 e9 b7 17 a3 2e 37 aa 7e fa f4 f3 9e c3 b9 43 4b 93 49 e3 0f e5 d7 ff 0f de d8 74 96 1f d7 00 00 Data Ascii: WbGzLP=1D'UqR6'#7ni{v)NaDGx$oWYYPvetc~\|px?zg)FAtL9(LK}pOnj)}l[1dqSV.7~CKIt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49805	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:42 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:42 UTC	744	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:42 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: a9d9b5a6-401e-000a-2c1a-93eb8b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000242Z-1865489d5f469db67514m1tnm40000000aa000000000gk01 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:42 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-26 00:02:42 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49806	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:42 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:42 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:42 GMT Content-Type: application/x-javascript Content-Length: 54325 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:15 GMT ETag: 0x8DC2E5A2998EB1D x-ms-request-id: 1a060112-701e-0055-55c0-9601a7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000242Z-1865489d5f4qw9rny7embdm5aw0000000ae000000000qusz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:42 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 7b db 46 92 30 fa 7d 7f 05 85 67 46 06 4c 90 22 a9 8b 65 52 10 c7 76 92 79 bd 4f 12 fb d8 ce bc 67 8f cc c9 03 81 a0 84 98 02 b8 b8 d8 d6 88 dc df 7e aa aa ef 40 83 92 af c9 66 3c bb b1 88 46 a3 2f d5 dd d5 75 af bd fb 3b ff d1 b9 df e9 dd fd 7f 9d 97 af 1e bd 78 d5 79 f6 43 e7 d5 ff 79 fa e2 bb ce 73 78 fa af ce cf cf 5e 3d 7d f2 fd dd db c1 4e f1 bf 57 97 49 d1 59 24 cb b8 03 7f cf c3 22 9e 77 b2 b4 93 e5 9d 24 8d b2 7c 95 e5 61 19 17 9d 2b f8 37 4f c2 65 67 91 67 57 9d f2 32 ee ac f2 ec b7 38 2a 8b ce 32 29 4a f8 e8 3c 5e 66 ef 3a 2e 34 97 cf 3b cf c3 bc bc ee 3c 7d ee f5 a1 fd 18 5a 4b 2e 92 14 be 8e b2 d5 35 fc be 2c 3b 69 56 26 51 dc 09 d3 39 b5 b6 84 87 b4 88 3b 55 3a 8f f3 ce bb cb 24 ba ec fc 94 44 79 56 64 Data Ascii: k{F0}gFL"eRvyOg~@f<F/u;xyCysx^=}NWIY$"w$\|a+7OeggW28*2)J<^f:.4;<}ZK.5,;iV&Q9;U:$DyVd
2024-04-26 00:02:42 UTC	16384	IN	Data Raw: af 0f f1 58 23 9c 57 4f 85 29 04 a2 a6 af 99 30 b3 14 9a 61 1d 83 94 a6 41 a5 e1 ba 40 8e 69 4d 84 c0 0c 7a ee 60 3d 99 b6 58 4f 32 bb c9 b1 51 33 f7 d0 cc 59 d4 64 3d a8 ea f4 ac 64 83 78 6e c2 77 d6 2c 2b 64 ba 9c e8 88 be 66 c5 8c df 66 99 b1 37 5b 0c 65 ed c6 b0 84 1d b8 27 9d b1 78 9f d1 85 0e f7 b3 61 34 de 22 6c a6 2f 35 ab 02 8b c7 89 b8 f8 6d be 19 44 1a 30 db e7 98 94 60 dc 01 03 75 61 53 a0 c6 87 a8 0e 1b 7a e3 5c 73 c0 60 ee 51 be 50 27 6e f4 b1 3e be 6e 52 fc db 7d 60 b6 9b e9 5b 3d 60 f2 fa ac ed ce 08 79 ab 13 40 ae a4 cc 80 81 49 2c 6b 50 9f d5 16 d2 7d b4 9d 74 bf 2b 55 8b fe 30 c4 64 10 31 bb 9d c9 e0 96 d3 e6 5e 6f 10 6f 75 1b 48 73 4a c9 96 29 ed 37 a6 64 1c 6a 49 ac e4 0d 41 ab af c5 fa 1e 4e 52 0c de 9d f6 7a ba 5f fb c4 e9 e3 7e ca Data Ascii: X#WO)0aA@iMz`=XO2Q3Yd=dxnw,+dff7[e'xa4"l/5mD0`uaSz\s`QP'n>nR}`[=`y@I,kP}t+U0d1^oouHsJ)7djIANRz_~
2024-04-26 00:02:42 UTC	16384	IN	Data Raw: 66 f1 6a 1b d6 a5 51 f4 e0 d1 11 ad 3c 3a ae a2 1c fd f7 9b 24 c3 f6 61 2e 2f 03 95 db 1a db 11 47 1c 6c 89 73 db 4d aa 52 da b0 57 db 32 bf 29 5f 14 77 2f 6b 5d 29 40 84 dd b9 1c e4 35 e5 58 be 7e cb 47 b9 bb 2a af 2e 8c 24 e3 da 82 16 69 69 c9 e0 a5 e4 f7 2e 25 75 e6 0a b6 d4 ed 8d c5 7c aa 50 dc 9c bf f5 32 fa f9 9a a1 fb 5b 8c 97 74 e1 59 21 ca 81 0c 11 73 4a 13 f3 55 f6 45 f9 3a bc a4 72 e9 69 3b 21 8d ae e3 f7 5e 42 e7 ce 71 21 e7 6f 59 7c ee e8 9b 5f a1 85 a7 01 59 7a 29 5e da 20 4b 2f c5 13 5d da b4 de 7b e9 8b e3 e6 74 04 65 da 5b 0f ca e4 1a c9 19 bf b1 7f 1f 64 ff df c5 f6 ba 6e 26 a0 b8 dd de 5a 6b db e4 cb ad 6d bf c0 ce 96 da d2 60 6a ab 5a e3 58 dc 52 e6 5f 6e 74 eb f6 74 f9 a7 8d fa af 6c a3 8e ae 2b bf a6 8d 7a b4 de 46 bd 68 b4 51 8f be Data Ascii: fjQ<:$a./GlsMRW2)_w/k])@5X~G*.$ii.%u\|P2[tY!sJUE:ri;!^Bq!oY\|_Yz)^ K/]{te[dn&Zkm`jZXR_nttl+zFhQ
2024-04-26 00:02:42 UTC	5964	IN	Data Raw: 0e 7e 63 40 3c 29 b8 d4 80 14 aa 30 32 c0 a4 8e 42 d4 35 3d 5f 18 b8 a3 11 36 4f 9a 57 c3 d9 74 ef a4 b8 f7 97 0d 0d bb 85 3e 8b 58 ca db be e7 c3 1b 78 bd b3 c3 96 68 64 69 85 5f 70 17 50 83 d8 fd 33 ab 3f bf a4 b3 1d 87 c9 32 e6 91 0b 6c 50 5a 4a f6 5c 2d 1d b3 22 79 95 55 3b 8d 66 e7 4b 13 fe f9 05 af ed 06 6b ab 90 17 34 34 0c 28 2d 2a bd f3 be c0 75 de d3 f6 02 7a 2f e0 69 a9 24 cb 5c ef 0f ef 5e 3c cd 2e 67 59 4a b6 fe 6a 52 34 68 93 b4 86 af 7e e1 84 3e d1 43 fe ac 88 cb 70 5e 4e 3a fd c3 de 59 54 c4 07 f7 85 be 29 16 8b 95 25 ab 59 35 e6 6f a8 db f0 2e 3e 7f fe 69 46 a2 81 57 38 17 aa 49 22 ed a7 b4 13 d1 92 8d eb 69 f9 16 09 1b 5c 25 e9 38 bb da 86 23 f6 4c d9 de 66 66 42 57 34 c8 1b fc 24 86 6d 5f d0 4a a9 01 18 3a 11 3d 65 48 07 38 30 36 28 08 Data Ascii: ~c@<)02B5=_6OWt>Xxhdi_pP3?2lPZJ\-"yU;fKk44(-*uz/i$\^<.gYJjR4h~>Cp^N:YT)%Y5o.>iFW8I"i\%8#LffBW4$m_J:=eH806(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49807	13.107.246.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:42 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:43 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:43 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: cc8b1d3f-901e-004b-7ab6-931398000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000243Z-1865489d5f4b68hj4nmrur3p700000000aag000000012s81 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:43 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-26 00:02:43 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49810	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:43 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:43 UTC	778	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:43 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: 8c1dbe2a-b01e-0021-4127-975faf000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000243Z-1865489d5f44crzvr9btg9hunn0000000ang00000000ckse x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:43 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49808	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:43 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:43 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:43 GMT Content-Type: application/x-javascript Content-Length: 35813 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:16 GMT ETag: 0x8DC2E5A29EDB0A1 x-ms-request-id: ada1bc73-e01e-0000-7a9f-94e59e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000243Z-17644f8887fhxv4mpnn600zp3000000006s0000000002zar x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:43 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 7f db 38 92 28 fa ff f9 14 b6 a6 c7 11 db b4 2c ea 2d db 8c c7 f1 a3 93 99 a4 93 cd a3 67 67 6c 75 86 a2 20 89 6d 8a 94 49 ca 8f c4 de cf 7e ab 0a 6f 52 76 92 d9 b3 e7 dc df bd 99 69 9a 28 14 0a 85 02 50 28 14 0a d4 ee cf 9b ff 6b e3 e7 8d 9d ef ff b7 f1 e1 e3 d1 fb 8f 1b 6f cf 36 3e be 7c f5 fe 64 e3 1d a4 fe b1 f1 eb db 8f af 8e 4f bf 9f 0e 56 8a ff 7d 9c 47 f9 c6 34 8a d9 06 fc 1d 07 39 9b 6c a4 c9 46 9a 6d 44 49 98 66 cb 34 0b 0a 96 6f 2c e0 99 45 41 bc 31 cd d2 c5 46 31 67 1b cb 2c fd 83 85 45 be 11 47 79 01 85 c6 2c 4e 6f 36 ea 40 2e 9b 6c bc 0b b2 e2 6e e3 d5 3b a7 01 f4 19 50 8b 66 51 02 a5 c3 74 79 07 ef f3 62 23 49 8b 28 64 1b 41 32 21 6a 31 24 92 9c 6d ac 92 09 cb 36 6e e6 51 38 df 78 13 85 59 9a a7 d3 62 Data Ascii: {8(,-gglu mI~oRvi(P(ko6>\|dOV}G49lFmDIf4o,EA1F1g,EGy,No6@.ln;PfQtyb#I(dA2!j1$m6nQ8xYb
2024-04-26 00:02:43 UTC	16384	IN	Data Raw: fb f4 8a 9f 60 92 f4 a9 99 cc fa b2 bd d7 13 b0 c4 06 dc ca 65 96 2c ec 0f e5 1d 27 21 95 80 e4 d4 cb 2b 1f 51 c4 8b 15 a2 2b 7a 64 54 7d 78 69 fe fa 15 f1 34 37 7f ff 6a 48 38 1a 63 c0 31 54 3e 0d 4a 3c 74 5e fb 49 76 ca 59 7b 5d bb 7c 7a dd 96 b0 75 ce 53 22 b3 de f0 a1 2c fb db ee 74 13 31 9f 8b df f9 c1 01 f8 21 9a a9 2f 3e 92 7d 93 1b 80 50 01 a6 12 d2 92 90 6b 1b a2 4f df 78 d2 08 c8 0e 38 44 1d a9 b7 45 fa aa 04 50 9f a1 66 22 2d 27 02 ed 08 cd ef cc 4d 44 5a 5d b0 9c 72 80 0a b5 a6 e3 0f 00 98 4b 42 87 83 cc 2f c2 11 eb e5 cf 3f d0 77 57 f9 cf 71 c9 a1 46 3d 8b e0 b5 83 72 11 e4 73 39 87 69 73 9b 2f ec 2f 29 53 cd e5 0e 5d 44 92 7e 5b 00 d4 47 1c 02 9e 54 2e b0 50 a4 55 20 57 a8 6e ee 7c 78 7b f6 51 8f 40 42 4c a7 85 1e 83 1c 12 1b de fe a9 80 48 Data Ascii: `e,'!+Q+zdT}xi47jH8c1T>J<t^IvY{]\|zuS",t1!/>}PkOx8DEPf"-'MDZ]rKB/?wWqF=rs9is//)S]D~[GT.PU Wn\|x{Q@BLH
2024-04-26 00:02:43 UTC	3863	IN	Data Raw: ac c2 18 06 70 37 5a 66 93 fc 61 14 40 f7 bf 8e fc cd dd a4 86 91 90 19 d3 45 f3 72 8f 21 d5 e4 0c 79 9a 4f 10 48 66 a8 4e a4 db e3 4b c1 87 72 bb 6d 34 d5 3e d9 cc 55 c8 ee 9c a4 a6 95 b9 d5 17 33 33 2c e8 70 fb 44 11 ed bb 2c 48 eb 8c 92 a6 b8 a8 8a e5 0a 9f 59 31 be e5 8c 34 65 74 1e 1c 19 75 de 81 31 86 b5 fe 29 4d 81 0b 7b 6d e1 fe 15 2e 1f 3e ef ec 93 cf 31 d1 93 93 0c 4e 1f 1b ff a4 f6 da 09 9c d7 b5 ee c9 6b 67 87 b8 3c 9d ce 19 2e 03 e2 e2 f1 42 df df f1 2b 2b 86 2b a8 9a 25 10 da a6 5a 4e ee 79 00 b9 f3 53 d2 6d 63 74 4b d1 35 fc e2 22 6c e8 e9 c0 6c bf f5 8e a0 23 c0 d8 95 3b 3d eb 13 df e7 53 29 ef 2b 5b 5d c9 12 0c 9e 8a 33 00 52 25 5a b7 87 89 f1 16 cb 67 4f 25 77 f7 16 52 dc ae f6 b1 c2 c6 4b c1 41 51 e7 9d 50 3f d3 0e 55 45 ba 19 14 a8 a5 Data Ascii: p7Zfa@Er!yOHfNKrm4>U33,pD,HY14etu1)M{m.>1Nkg<.B+++%ZNySmctK5"ll#;=S)+[]3R%ZgO%wRKAQP?UE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49809	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:43 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:43 UTC	779	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:43 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: e2aba146-b01e-001d-1ad6-968aa7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000243Z-1865489d5f42v7z23dxn2r65v40000000ap0000000008tb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:43 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49812	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:43 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:43 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:43 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 6d23ac16-e01e-0054-03c3-962aa5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000243Z-1865489d5f46s4qnhr87brpyc400000009h0000000000u12 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:43 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49814	13.107.246.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:43 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:44 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:43 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: b29f4e54-001e-000e-410b-944783000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000243Z-17644f8887f7k86db1w1n5k72c00000006t0000000007mpa x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:44 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49813	13.107.246.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:43 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:44 UTC	800	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:43 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: e2aba146-b01e-001d-1ad6-968aa7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000243Z-1865489d5f44crzvr9btg9hunn0000000agg00000001dgr2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:44 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49815	13.107.246.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:44 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:44 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:44 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: cbd3cb34-d01e-004f-1f18-93bf90000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000244Z-17644f8887f7r799568526vsd400000006v000000000072w x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:44 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49818	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:48 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:49 UTC	813	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:48 GMT Content-Type: application/x-javascript Content-Length: 121259 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 05 Apr 2024 02:22:39 GMT ETag: 0x8DC55174443A770 x-ms-request-id: 46296b34-e01e-0010-3422-9755bc000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000248Z-1865489d5f44crzvr9btg9hunn0000000ap000000000b1z4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:49 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd fb 7b e3 38 8e 00 f8 fb fd 15 8e 66 2e 63 77 14 97 e5 57 6c a5 d5 59 e7 55 95 ed 24 ce c4 49 77 ef a6 32 f9 64 89 76 d4 91 25 af 24 e7 31 8e f7 6f 3f 00 24 25 4a 96 53 55 b3 7b 77 df 7d d7 bb 53 b1 48 f0 05 82 20 00 82 e0 a7 9f b6 fe 8f ca 4f 95 dd ef ff af 32 ba 19 5c df 54 86 a7 95 9b 2f 67 d7 c7 95 2b f8 fa 8f ca e5 f0 e6 ec e8 e4 fb eb c1 46 f1 7f 37 8f 5e 5c 99 78 3e ab c0 df b1 1d 33 b7 12 06 95 30 aa 78 81 13 46 f3 30 b2 13 16 57 66 f0 6f e4 d9 7e 65 12 85 b3 4a f2 c8 2a f3 28 fc 93 39 49 5c f1 bd 38 81 42 63 e6 87 2f 95 2a 54 17 b9 95 2b 3b 4a de 2a 67 57 b5 3a d4 cf a0 36 6f ea 05 50 da 09 e7 6f f0 fb 31 a9 04 61 e2 39 ac 62 07 2e d5 e6 c3 47 10 b3 ca 22 70 59 54 79 79 f4 9c c7 ca 85 e7 44 61 1c 4e 92 4a c4 1c Data Ascii: {8f.cwWlYU$Iw2dv%$1o?$%JSU{w}SH O2\T/g+F7^\x>30xF0Wfo~eJ(9I\8Bc/T+;J*gW:6oPo1a9b.G"pYTyyDaNJ
2024-04-26 00:02:49 UTC	16384	IN	Data Raw: 04 02 06 06 dc f5 70 00 bb 0e 56 15 fa 9a be 7c f6 d8 0b da 06 7d 73 c9 57 d2 6f 69 42 d9 ea f6 d6 79 26 ea 79 22 68 03 22 26 2e bd 7c c0 55 93 00 f2 d1 e9 78 95 dd 31 40 46 83 33 9d 90 a3 26 5a 0e 81 d6 64 7d 66 52 6d b5 fb 35 1d 3d d3 1f a3 30 c0 17 71 b7 42 55 f9 f0 2e ec 57 ba d7 02 1b c3 af 01 7f 7c 9e 1c d9 53 8a 8f df df 25 6d d5 cb ef cd 54 7f b4 46 58 77 8a 0d 30 ce 53 3a ac cd 3a 45 ef 88 f9 c3 17 24 9b 69 7f f9 ef bf 5c 30 94 99 50 96 7a 38 1f c1 37 8f 16 c6 5c 6b 29 c2 54 f1 37 82 21 67 ce 9f 21 e5 07 19 08 89 11 a4 84 fe 80 f9 69 f8 81 ec 59 03 51 a5 7c c1 34 0f 26 12 0b 4d 53 40 0b ce 8c b0 0b 97 61 82 41 f2 48 d7 a2 10 52 f4 f3 ea f7 63 d3 c0 bb ec 8f 18 69 03 1f d5 e5 f1 c8 a4 4d 41 86 0d c1 98 1b 59 e0 10 92 1a 2f 60 cf 1d f8 9e 1d 53 c8 Data Ascii: pV\|}sWoiBy&y"h"&.\|Ux1@F3&Zd}fRm5=0qBU.W\|S%mTFXw0S::E$i\0Pz87\k)T7!g!iYQ\|4&MS@aAHRciMAY/`S
2024-04-26 00:02:49 UTC	16384	IN	Data Raw: 5e 7b b9 59 8a 01 9c fd ed 38 c0 b7 b6 f8 3c 0e 30 9d 95 1c aa 27 81 0a fa 22 a9 ef 10 39 b6 ea f7 ba 78 e9 27 a5 a8 2f e1 ca 4b 2c 52 1f ec 29 3c 5b de f0 97 57 5e 6e 9c 43 11 12 71 84 0f 64 ba 9d 44 a3 b6 a3 7e ed 32 57 8e bc 86 72 78 6c 78 7c 00 ae 7d 19 0b 14 ec 2a 1e 43 db 79 ae 84 f3 04 f1 be 52 15 0a 11 6a 93 49 57 e7 e8 f9 7c 6d 6d 0d 7d 9f 4b 24 07 55 43 90 ed 87 13 05 f4 a3 1a aa 7a 5c 41 66 88 cd 1d 95 51 93 d4 46 72 fa 21 7b 05 85 12 92 ec 52 5e 5e 07 8c 98 7c 46 c1 19 fc 93 5f 01 9a 43 41 8a a4 57 58 1d 95 fc 03 0b ee 00 e9 49 c9 13 b1 bc 27 14 76 02 f1 f0 0c 65 57 da fd 0e 20 3c 90 84 0a 0f 31 3b 7e ed 71 ab 80 e0 c0 5f ed 75 bd 98 d8 15 5d 12 e4 b6 a1 40 14 05 9d 49 fd 88 dd 85 79 19 0a 04 c8 91 c9 5c 93 6d 7d 51 d3 c9 40 cd 82 06 e5 f6 82 Data Ascii: ^{Y8<0'"9x'/K,R)<[W^nCqdD~2Wrxlx\|}*CyRjIW\|mm}K$UCz\AfQFr!{R^^\|F_CAWXI'veW <1;~q_u]@Iy\m}Q@
2024-04-26 00:02:49 UTC	16384	IN	Data Raw: 8f 01 05 23 f7 77 93 0c 1e 65 80 76 93 fc 1e 00 92 42 5e b0 27 00 c0 a8 8f 33 f3 b9 46 e5 48 8a df a7 d1 28 ce ef b7 59 7b 15 f6 31 1a dd 45 f7 99 83 c6 9a 78 28 01 07 61 0e f9 76 f8 a0 55 a6 da 2d bf 97 a6 48 8d c2 2f 3e 32 f0 83 d1 c1 76 8b ec 1a 29 c0 3c 2d 3c dd ac 13 ba 59 71 bf 62 8e 48 f2 df 41 14 4a 43 cc 51 5f b9 c3 b9 e9 87 39 ff da a3 23 46 3f 87 3d b6 f1 fc b1 c7 40 eb 38 d8 67 85 52 47 7a c7 75 b8 5c e6 55 b3 f0 0c e2 cb bb 97 b1 2c 63 20 cb 8e 88 18 88 fb 26 ef df 04 ad 72 0c ca 90 74 d8 63 44 08 79 1b ae 1c 8c 1a 9c 57 0c b8 a9 66 a1 bc f7 c0 1c d5 0c f5 fc e4 54 d4 d4 24 68 2b 0d 66 64 b1 b9 55 1d 61 2a 58 5a 6b 93 b1 f5 3a fe f6 a8 b5 13 73 36 c4 93 e4 81 fb 77 9e 7f 17 fc ce 1f 52 0e 72 17 3e fc 6e 03 71 11 9c 86 0f d2 fe ed ec 1c c3 8b Data Ascii: #wevB^'3FH(Y{1Ex(avU-H/>2v)<-<YqbHAJCQ_9#F?=@8gRGzu\U,c &rtcDyWfT$h+fdUa*XZk:s6wRr>nq
2024-04-26 00:02:49 UTC	16384	IN	Data Raw: c9 28 ab a1 80 7d e5 be 1d 49 5a b6 b5 ef 36 48 bb 63 29 bd 5d 43 e8 c0 d7 f7 e7 c2 2e 82 24 5f f7 61 8d 51 98 1c 2a fb f1 37 aa 98 c3 d6 42 a7 e7 44 01 55 1e a3 96 a6 d9 72 39 54 0d 67 cc 16 11 72 61 47 6e a9 f7 2f 34 8e 75 83 41 62 fe 4c a1 1b b5 f1 de 35 ac 51 06 49 01 d4 ac 22 f3 46 4a 85 08 9c 04 61 b0 3e 60 c4 e9 e4 65 29 69 78 e3 d3 f0 cc 1d ac ad 85 92 c8 0f a6 81 82 84 d8 ec 8c ee 65 80 59 cc 95 d1 35 20 91 46 f4 f6 f7 79 1f 87 12 64 1c 3e 5c 89 c3 96 eb 5c 5d a7 0a b0 82 16 ca 06 16 0d 2a 65 5e 7e 91 ac 21 69 91 b8 6a 8c 1e b7 61 98 1d 2b e2 0f 03 41 b1 47 fd 35 11 ca b9 fa 19 7e 21 5e 82 f6 c4 c4 44 fb d0 79 ac fb ec 5d 07 17 cf 27 0f 0f 1b 1e 7d 6a ed 62 6d 63 a0 7b 98 bd 0c 26 6c f6 c0 8d 28 28 bc 99 08 b5 00 12 06 38 c7 d4 21 91 7a ed 1a 7c Data Ascii: (}IZ6Hc)]C.$_aQ7BDUr9TgraGn/4uAbL5QI"FJa>`e)ixeY5 Fyd>\\]e^~!ija+AG5~!^Dy]'}jbmc{&l((8!z\|
2024-04-26 00:02:49 UTC	16384	IN	Data Raw: d2 89 ec 14 c6 71 90 c5 2c 10 b6 c5 64 0c a1 b5 17 51 e8 d8 49 1a c5 7e e0 d9 16 67 96 07 dd 24 06 a6 67 2e 3a 13 22 4e b9 73 cb 7d 82 d5 6e 0c ea d9 91 1f 4a 28 29 42 84 10 bd 29 34 59 91 49 cb 71 33 c8 8f cc 8f f8 7e 3a 4b 3c 1b aa 5e ec 0a 88 73 a8 c7 2e 70 1b 4c 50 30 61 b9 01 0b 63 77 3f eb 64 34 23 cb 0f 33 61 45 71 04 25 c5 b1 53 c9 5c 11 3b 99 6b 5b 8e c3 3d 58 06 fb e9 2c b1 21 16 dc 14 aa 44 c8 05 38 b8 25 18 83 25 e0 07 a4 b2 40 4f be dd 36 cb 6a 37 46 33 8a 63 d8 a3 2e 4c 98 48 78 31 73 1d c1 63 c9 a5 6b 65 41 40 42 72 3f f4 e4 25 16 68 34 62 69 e6 63 4d 2c 1f 82 c9 e1 2c f6 3c d2 9e 03 08 f6 fd 4c 9d d1 8c 52 1f e4 93 49 2f b2 c0 c6 dd d0 b2 bd c8 66 98 4d b0 58 61 59 ce 5e 38 b9 e3 27 8e 23 20 f3 32 32 0b 6d 2b 86 24 77 98 b0 3d 3b 82 7c 8f Data Ascii: q,dQI~g$g.:"Ns}nJ()B)4YIq3~:K<^s.pLP0acw?d4#3aEq%S\;k[=X,!D8%%@O6j7F3c.LHx1sckeA@Br?%h4bicM,,<LRI/fMXaY^8'# 22m+$w=;\|
2024-04-26 00:02:49 UTC	16384	IN	Data Raw: 18 6c 2c f6 9b ef 1f 7c 0d 88 f3 e2 8c 6e 09 ca 4b 76 9e e6 a7 97 6d 74 b9 be 6d 45 8d 1c 88 56 2b 7f 92 3d 82 69 c1 d7 75 71 f3 72 a3 b1 f4 1b c5 24 ff 7b ee 78 7d f7 9e 81 d1 d1 65 7b 5f d0 49 30 7d cf 88 93 51 2f 5f 18 93 bf 90 56 f9 bb 05 b3 dc 6e 51 41 0e bb 72 21 68 39 5f 3f 0f da 21 38 9a 99 f6 2b 2b a7 19 15 8d 6f cb 09 dc 66 f7 dc 46 1f dd 1f 3f bb b6 8e fa f9 fa 2f 54 6a e6 35 cb a8 b3 c4 17 df 7f 11 b2 7c bb 28 2e 4e ca e2 e9 af 92 5f 2e 56 bc 42 eb 9f 3f df 8e ce d8 bc a9 19 fd f5 0b f1 ff 2f 42 dd a6 f1 db d1 b5 01 fb 4b 53 f4 57 85 9f cd b2 d5 9d 27 1b db aa be ff 11 31 e2 e4 42 4a 91 5e 9e 5f ec 5d 9c b7 30 a7 34 dd 7c 85 f2 fc 0f 8f 77 7b 94 90 ff f1 5a ed 70 c8 e6 0f 60 c3 fe 06 91 3f 5f 85 99 f2 2a 9f ca f2 26 d2 6e 41 15 be 32 37 f9 6f Data Ascii: l,\|nKvmtmEV+=iuqr${x}e{_I0}Q/_VnQAr!h9_?!8++ofF?/Tj5\|(.N_.VB?/BKSW'1BJ^_]04\|w{Zp`?_*&nA27o
2024-04-26 00:02:49 UTC	7384	IN	Data Raw: fc 2d 85 d6 bf 02 d1 ef ff 5d a3 67 31 c7 c1 fe e1 e0 88 7d 4b 51 0e 9b 95 b7 d0 3b 2d 42 59 54 73 07 dc 89 88 c3 c1 d3 14 f5 f1 f0 18 06 b4 7f bf c1 2d ae 97 78 e0 be 4f b4 b0 34 28 ed ba c4 41 83 fd 4b a2 cd fd 28 d8 9f 11 2d a5 ec 6b ff 86 68 3e e7 51 fb 1f a1 7e 95 71 ed bf 03 f4 57 b9 d6 fe 29 d4 bf a6 2b f1 d0 9d cf d1 74 b5 1f 6b 21 13 9e f2 27 d9 dd 53 84 fd b2 17 f5 07 18 c7 98 0f b9 c7 06 1b f7 fb 03 d8 00 e3 5e 16 6b 6e dc bf cb 67 3c 93 07 8f e3 04 ea d9 f9 0d 66 87 a0 f0 0c eb 60 81 4c 01 67 00 26 8c 4c 6b 4f 31 d3 d5 57 0e dd fe 8e ae a1 44 40 b3 2c 90 c1 7b fe 15 36 6a e4 3d fc e9 8b fc c7 ed 2d 19 70 64 bd 82 cd fa 7a f1 77 72 73 57 40 e6 c6 dc 83 82 43 45 81 42 b8 68 f0 db 7e fa 39 ca fc cb 1e ff 39 c0 1b 7c fd af be 9b 92 ce c7 c1 01 4c Data Ascii: -]g1}KQ;-BYTs-xO4(AK(-kh>Q~qW)+tk!'S^kng<f`Lg&LkO1WD@,{6j=-pdzwrsW@CEBh~99\|L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49819	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:49 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:49 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:49 GMT Content-Type: application/x-javascript Content-Length: 15776 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 02 Apr 2024 21:29:16 GMT ETag: 0x8DC535BF32A6F5D x-ms-request-id: d3cdd1d7-701e-0045-2ecf-96b185000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000249Z-1865489d5f4r69rrg7uwqa73hg0000000aq000000000nred x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:49 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 Data Ascii: }Ms#GuhO=>4pO$PIF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sB
2024-04-26 00:02:49 UTC	210	IN	Data Raw: cd 80 d8 13 11 b3 21 98 40 24 97 c9 36 a2 5f 15 07 4d 2a 25 19 68 eb c1 2f c7 3d 42 39 4a 78 bc 4f 4b 2b 91 9c 07 b0 2f 4c 81 26 9d 0f 74 e6 0c f3 4f bf 26 4a f4 f1 15 55 c5 13 28 b5 26 81 7f 1e b8 78 67 08 34 d4 bc ca ca 3e b2 2b a3 83 8b 34 3c 10 46 7e fc 84 4e 30 23 1e 2b 07 60 c6 88 fd 67 b5 d5 d6 01 65 7b c3 db cf 3b 7b 4f 61 6d dd 36 45 00 78 99 5d 5d 1f 7a 0f 82 51 64 da cf b9 f7 6e 44 41 58 da 92 af ec a3 26 bf a5 a5 85 7b 72 df 77 7f 67 97 56 43 9e 4d 69 cb 63 db ca 0e 74 8d e1 26 e3 dc 2f 57 77 8e d3 68 98 ea b4 fa 9c 4e bf bd 18 75 b9 51 f5 d3 a7 9f f7 1c ce 0c 5a 9a 4c 1a 7f 28 bf fe 7f 60 2d 23 9e fd d6 00 00 Data Ascii: !@$6_M*%h/=B9JxOK+/L&tO&JU(&xg4>+4<F~N0#+`ge{;{Oam6Ex]]zQdnDAX&{rwgVCMict&/WwhNuQZL(`-#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49817	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:49 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:50 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:49 GMT Content-Type: application/x-javascript Content-Length: 54318 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 28 Mar 2024 21:22:21 GMT ETag: 0x8DC4F6D2782F92A x-ms-request-id: 7fa2760b-a01e-0004-5b22-974996000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000249Z-1865489d5f4b68hj4nmrur3p700000000aa00000000142kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:50 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 7b db 46 92 30 fa 7d 7f 05 85 67 46 06 4c 90 22 a9 8b 65 52 10 c7 76 92 79 bd 4f 12 fb d8 ce bc 67 8f cc c9 03 81 a0 84 98 02 b8 b8 d8 d6 88 dc df 7e aa aa ef 40 83 92 af c9 66 3c bb b1 88 46 a3 2f d5 dd d5 75 af bd fb 3b ff d1 b9 df e9 dd fd 7f 9d 97 af 1e bd 78 d5 79 f6 43 e7 d5 ff 79 fa e2 bb ce 73 78 fa af ce cf cf 5e 3d 7d f2 fd dd db c1 4e f1 bf 57 97 49 d1 59 24 cb b8 03 7f cf c3 22 9e 77 b2 b4 93 e5 9d 24 8d b2 7c 95 e5 61 19 17 9d 2b f8 37 4f c2 65 67 91 67 57 9d f2 32 ee ac f2 ec b7 38 2a 8b ce 32 29 4a f8 e8 3c 5e 66 ef 3a 2e 34 97 cf 3b cf c3 bc bc ee 3c 7d ee f5 a1 fd 18 5a 4b 2e 92 14 be 8e b2 d5 35 fc be 2c 3b 69 56 26 51 dc 09 d3 39 b5 b6 84 87 b4 88 3b 55 3a 8f f3 ce bb cb 24 ba ec fc 94 44 79 56 64 Data Ascii: k{F0}gFL"eRvyOg~@f<F/u;xyCysx^=}NWIY$"w$\|a+7OeggW28*2)J<^f:.4;<}ZK.5,;iV&Q9;U:$DyVd
2024-04-26 00:02:50 UTC	16384	IN	Data Raw: 21 1e 6b 84 f3 ea a9 30 85 40 d4 f4 35 13 66 96 42 33 ac 63 90 d2 34 a8 34 5c 17 c8 31 ad 89 10 98 41 cf 1d ac 27 d3 16 eb 49 66 37 39 36 6a e6 1e 9a 39 8b 9a ac 07 55 9d 9e 95 6c 10 cf 4d f8 ce 9a 65 85 4c 97 13 1d d1 d7 ac 98 f1 db 2c 33 f6 66 8b a1 ac dd 18 96 b0 03 f7 a4 33 16 ef 33 ba d0 e1 7e 36 8c c6 5b 84 cd f4 a5 66 55 60 f1 38 11 17 bf cd 37 83 48 03 66 fb 1c 93 12 8c 3b 60 a0 2e 6c 0a d4 f8 10 d5 61 43 6f 9c 6b 0e 18 cc 3d ca 17 ea c4 8d 3e d6 c7 d7 4d 8a 7f bb 0f cc 76 33 7d ab 07 4c 5e 9f b5 dd 19 21 6f 75 02 c8 95 94 19 30 30 89 65 0d ea b3 da 42 ba ef 6f 27 dd ef 4a d5 a2 3f 0c 31 19 44 cc 6e 67 32 b8 e5 b4 b9 d7 1b c4 5b dd 06 d2 9c 52 b2 65 4a 07 8d 29 19 87 5a 12 2b 79 43 d0 ea 6b b1 be 87 93 14 83 77 a7 bd 9e ee d7 3e 71 fa b8 9f 32 38 Data Ascii: !k0@5fB3c44\1A'If796j9UlMeL,3f33~6[fU`87Hf;`.laCok=>Mv3}L^!ou00eBo'J?1Dng2[ReJ)Z+yCkw>q28
2024-04-26 00:02:50 UTC	16384	IN	Data Raw: c5 ab 6d 58 97 46 d1 83 47 47 b4 f2 e8 b8 8e 72 f4 df 6f 92 0c db 87 b9 bc 0c 54 6e 6b 6c 47 1c 71 b0 25 2e 6c 37 a9 4a 69 c3 5e 6d cb fc a6 7c 51 dc bf ac 75 a5 00 11 76 ef 72 90 d7 94 63 f9 fa 1d 1f e5 ee aa bc ba 30 92 8c 6b 0b 5a a4 a5 25 83 97 92 df fb 94 d4 99 2b d8 52 77 37 16 f3 a9 42 71 73 fe d6 ab e8 e7 1b 86 ee 6f 31 5e d2 a5 67 85 28 07 32 44 cc 29 4d cc 57 d9 17 e5 eb f0 92 ca a5 a7 ed 84 34 ba 8e df 7b 05 9d bb c0 85 9c bf 63 f1 b9 a3 6f 7e 8d 16 9e 06 64 e9 95 78 65 83 2c bd 12 4f 75 69 d3 7a ef 95 2f 4e 9a d3 11 94 69 7f 3d 28 93 6b 24 67 fc c6 fe 7d 90 fd 7f 17 db eb ba 99 80 e2 76 7b 6b ad 6d 93 2f b7 b6 fd 02 3b 5b 6a 4b 83 a9 ad 6a 8d 63 71 4b 99 7f b9 d1 ad db d3 e5 9f 36 ea bf b2 8d 3a ba ae fc 9a 36 ea d1 7a 1b f5 a2 d1 46 3d fa 32 Data Ascii: mXFGGroTnklGq%.l7Ji^m\|Quvrc0kZ%+Rw7Bqso1^g(2D)MW4{co~dxe,Ouiz/Ni=(k$g}v{km/;[jKjcqK6:6zF=2
2024-04-26 00:02:50 UTC	5957	IN	Data Raw: 70 a9 01 29 54 61 64 80 49 1d 85 a8 6b 7a be 30 70 47 23 6c 9e 34 af 86 b3 e9 c1 69 f1 e0 2f 1b 1a 76 0b 7d 16 b1 94 b7 fd c0 87 37 f0 7a 67 87 2d d1 c8 d2 0a bf e0 2e a0 06 b1 fb 67 56 7f 71 45 67 3b 0e 93 65 cc 23 17 d8 a0 b4 94 ec b9 5a 3a 66 45 f2 2a ab 76 1a cd ce 97 26 fc f3 4b 5e db 0d d6 56 21 2f 68 68 18 50 5a 54 7a e7 a7 02 d7 79 4f db 0b e8 bd 80 a7 a5 92 2c 73 bd 3f bc 7f f9 2c bb 9a 65 29 d9 fa ab 49 d1 a0 4d d2 1a be fa 85 53 fa 44 0f f9 b3 22 2e c3 79 39 e9 f4 8f 7a e7 51 11 1f 1e 08 7d 53 2c 16 2b 4b 56 b3 6a cc df 50 b7 e1 7d 7c f1 e2 d3 8c 44 03 af 71 2e 54 93 44 da 4f 69 27 a2 25 1b d7 d3 f2 2d 12 36 b8 4e d2 71 76 bd 0d 47 ec b9 b2 bd cd cc 84 ae 68 90 37 f8 a7 18 b6 7d 41 2b a5 06 60 e8 44 f4 94 21 1d e0 c0 d8 a0 20 e0 f0 55 0a ee a9 Data Ascii: p)TadIkz0pG#l4i/v}7zg-.gVqEg;e#Z:fE*v&K^V!/hhPZTzyO,s?,e)IMSD".y9zQ}S,+KVjP}\|Dq.TDOi'%-6NqvGh7}A+`D! U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49820	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:51 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:51 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:51 GMT Content-Type: application/x-javascript Content-Length: 35807 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 28 Mar 2024 21:22:22 GMT ETag: 0x8DC4F6D2855897D x-ms-request-id: 3b9d45d3-401e-0036-4bfc-953e83000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000251Z-17644f8887fbbqvj2qbtfkv5a800000006zg00000000as0g x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 00:02:51 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 7f db 38 92 28 fa ff f9 14 b6 a6 c7 11 db b4 2c ea 2d db 8c c7 f1 a3 93 99 a4 93 cd a3 67 67 6c 75 86 a2 20 89 6d 8a 94 49 ca 8f c4 de cf 7e ab 0a 6f 52 76 92 d9 b3 e7 dc df bd 99 69 9a 28 14 0a 85 02 50 28 14 0a d4 ee cf 9b ff 6b e3 e7 8d 9d ef ff b7 f1 e1 e3 d1 fb 8f 1b 6f cf 36 3e be 7c f5 fe 64 e3 1d a4 fe b1 f1 eb db 8f af 8e 4f bf 9f 0e 56 8a ff 7d 9c 47 f9 c6 34 8a d9 06 fc 1d 07 39 9b 6c a4 c9 46 9a 6d 44 49 98 66 cb 34 0b 0a 96 6f 2c e0 99 45 41 bc 31 cd d2 c5 46 31 67 1b cb 2c fd 83 85 45 be 11 47 79 01 85 c6 2c 4e 6f 36 ea 40 2e 9b 6c bc 0b b2 e2 6e e3 d5 3b a7 01 f4 19 50 8b 66 51 02 a5 c3 74 79 07 ef f3 62 23 49 8b 28 64 1b 41 32 21 6a 31 24 92 9c 6d ac 92 09 cb 36 6e e6 51 38 df 78 13 85 59 9a a7 d3 62 Data Ascii: {8(,-gglu mI~oRvi(P(ko6>\|dOV}G49lFmDIf4o,EA1F1g,EGy,No6@.ln;PfQtyb#I(dA2!j1$m6nQ8xYb
2024-04-26 00:02:51 UTC	16384	IN	Data Raw: 4f af f8 09 26 49 9f 9a c9 ac 2f db 7b 3d 01 4b 6c c0 ad 5c 66 c9 c2 fe 50 de 71 12 52 09 48 4e bd bc f2 11 45 bc 58 21 ba a2 47 46 d5 87 97 e6 af 5f 11 4f 73 f3 f7 af 86 84 a3 31 06 1c 43 e5 d3 a0 c4 43 e7 b5 9f 64 a7 9c b5 d7 b5 cb a7 d7 6d 09 5b e7 3c 25 32 eb 0d 1f ca b2 bf ed 4e 37 11 f3 b9 f8 9d 1f 1c 80 1f a2 99 fa e2 23 d9 37 b9 01 08 15 60 2a 21 2d 09 b9 b6 21 fa f4 8d 27 8d 80 ec 80 43 d4 91 7a 5b a4 af 4a 00 f5 19 6a 26 d2 72 22 d0 8e d0 fc ce dc 44 a4 d5 05 cb 29 07 a8 50 6b 3a fe 00 80 b9 24 74 38 c8 fc 22 1c b1 5e fe fc 03 7d 77 95 ff 1c 97 1c 6a d4 b3 08 5e 3b 28 17 41 3e 97 73 98 36 b7 f9 c2 fe 92 32 d5 5c ee d0 45 24 e9 b7 05 40 7d c4 21 e0 49 e5 02 0b 45 5a 05 72 85 ea e6 ce 87 b7 67 1f f5 08 24 c4 74 5a e8 31 c8 21 b1 e1 ed 9f 0a 88 d4 Data Ascii: O&I/{=Kl\fPqRHNEX!GF_Os1CCdm[<%2N7#7`*!-!'Cz[Jj&r"D)Pk:$t8"^}wj^;(A>s62\E$@}!IEZrg$tZ1!
2024-04-26 00:02:51 UTC	3857	IN	Data Raw: dd 70 91 8d f3 87 61 00 dd ff 3a f4 d7 77 e3 1a 46 42 66 4c 17 cd cb 3d 86 54 93 33 e4 69 3e 41 20 99 a1 3a 91 6e 8f 2f 05 1f ca 6d 37 d1 44 fb 64 33 57 21 db 53 92 9a 56 e6 56 5f cc cc b0 a0 c3 cd 13 45 b4 ef b2 20 ad 33 4a 9a e0 a2 2a 96 2b 7c 66 c5 f8 96 33 d4 94 d1 79 70 64 d4 79 07 c6 18 d6 fa a7 34 05 2e ec 8d 85 fb 57 b8 78 f8 bc b5 8f 3e c7 44 4f 8e 32 38 7d ac fd a3 da 1b 27 70 de d4 3a 47 6f 9c 2d e2 f2 64 32 63 b8 0c 88 8b c7 0b 7d 7f c7 af ac 18 ae a0 6a 96 40 68 9b 6a 39 b9 e7 01 e4 ce 8f 49 b7 8d d1 2d 45 d7 f0 8b 8b b0 a1 a7 3d b3 fd d6 3b 82 8e 00 63 57 ee f4 ac 4f 7c 9f 4f a5 bc af 6c 75 25 4b 30 78 2a ce 00 48 95 68 dd 1e 24 c6 5b 2c 9f 3d 95 dc d9 59 48 71 3b da c7 0a 1b 2f 05 07 45 9d b7 42 fd 4c 3b 54 15 e9 66 50 a0 96 7a 7f dc db 24 Data Ascii: pa:wFBfL=T3i>A :n/m7Dd3W!SVV_E 3J+\|f3ypdy4.Wx>DO28}'p:Go-d2c}j@hj9I-E=;cWO\|Olu%K0xHh$[,=YHq;/EBL;TfPz$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49822	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:56 UTC	668	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:56 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:56 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 7584239a-501e-0047-0673-95e781000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000256Z-17644f8887fxrxvpft9g6hhez000000004ag000000003my9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:56 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49821	13.107.213.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:56 UTC	662	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:56 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:56 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: f4bb3645-001e-004a-38c4-95389a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000256Z-1865489d5f4s82vtkbvg5gx1hw0000000ad000000001dq9r x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:56 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49825	13.107.246.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:56 UTC	417	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:57 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:56 GMT Content-Type: image/gif Content-Length: 3620 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4904824B x-ms-request-id: 4a393715-f01e-0025-65ce-96f3a7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000256Z-1865489d5f49lr4x8x178u34an000000085g00000000wpq5 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:57 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49826	13.107.246.41	443	1608	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 00:02:56 UTC	423	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 00:02:57 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 00:02:57 GMT Content-Type: image/gif Content-Length: 2672 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 May 2023 10:11:47 GMT ETag: 0x8DB5C3F48EC4154 x-ms-request-id: 19b21390-c01e-007a-441c-96198b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T000257Z-1865489d5f4r69rrg7uwqa73hg0000000ap000000000s9qn x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 00:02:57 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1072, Parent PID: 6048

General

Target ID:	0
Start time:	02:02:10
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1608, Parent PID: 1072

General

Target ID:	2
Start time:	02:02:12
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1976,i,9534878376555673015,4045820380616337241,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6372, Parent PID: 6048

General

Target ID:	3
Start time:	02:02:15
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://site-stlp3.powerappsportals.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://site-stlp3.powerappsportals.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Windows Analysis Report
https://site-stlp3.powerappsportals.com/