Edit tour

Windows Analysis Report
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc

Overview

General Information

Sample URL:	https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc
Analysis ID:	1432192
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2224,i,15247115325435003209,870430601353658888,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2f508449d3-d632-429b-97ce-f8ad22b3a7e7%2freprocess%3fctx%3drQQIARAAnVFNa9RQAEyabeyurV2KoBdBQk-t2X0vecnLW-ghmw9av2oXFesHy0vy1k27m2yTbO0HBfHkoYde_QDRg0I9KJ6kp-KxINRrf4FU0OLFerOLF4_FOQzDHIZhZkyAJVgZBX-hyj2WQaMBZZ_11D9IRgrFl9IX7dcB9_AF94w7_bn0fJPXmlnWSSvlMktplLH7cXexlDZpwjpxGGUlP26X6404aaflgDVot5WVaNpZ-sjzuzz_lec3-xaq0FUQcTCBxLQcUjVtRcfQtS3HxQYmqgVs10LIIKZKHMXGsq27KjpyHMuxQFWHOsSaVtUdy0Q6AlUL6CYkqmtrroaJBk0MbU2BqgswMh0dWHt9w9NmN2sqPYqTcIX97Mv3OtY7cZo9FXLTNniwKRxrlA_CqAYMhEigyoGuKjJSiCcT7DO5YdBAUTyVYoZ3BDHusCgMdnP8fm4QCJWBgUKRO8ud5w5z_Kv-o2nPrS9bb-Mz7jswd_fN72lup788F2be1djLWGZ2HYSJQS8hOJka5sxluxYnN2_PTjWntJmLdmJMKBW4IfIborgl5geEIicJ1jV4IPKPT3Bb-f87afckvzcIC3k_9hIaBWEwMgqhFxjAUGUDMyAj6Gmy52FDBp6PVN-gBjPo3iAqiH6Lhu10ZGxVCoN6Fs-zSKqsSkvttO77PbVIW12WSpU70lFN6d7a2tqjoWOlbw9xh6def_vxaX37yffJ_eELk2ltfCkN0ZXOcnCLRE2dZrWV6xTd8Fut2RkLRVptvLpw01_w5yfeF7k_0&mkt=en-US	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2f508449d3-d632-429b-97ce-f8ad22b3a7e7%2freprocess%3fctx%3drQQIARAAnVFNa9RQAEyabeyurV2KoBdBQk-t2X0vecnLW-ghmw9av2oXFesHy0vy1k27m2yTbO0HBfHkoYde_QDRg0I9KJ6kp-KxINRrf4FU0OLFerOLF4_FOQzDHIZhZkyAJVgZBX-hyj2WQaMBZZ_11D9IRgrFl9IX7dcB9_AF94w7_bn0fJPXmlnWSSvlMktplLH7cXexlDZpwjpxGGUlP26X6404aaflgDVot5WVaNpZ-sjzuzz_lec3-xaq0FUQcTCBxLQcUjVtRcfQtS3HxQYmqgVs10LIIKZKHMXGsq27KjpyHMuxQFWHOsSaVtUdy0Q6AlUL6CYkqmtrroaJBk0MbU2BqgswMh0dWHt9w9NmN2sqPYqTcIX97Mv3OtY7cZo9FXLTNniwKRxrlA_CqAYMhEigyoGuKjJSiCcT7DO5YdBAUTyVYoZ3BDHusCgMdnP8fm4QCJWBgUKRO8ud5w5z_Kv-o2nPrS9bb-Mz7jswd_fN72lup788F2be1djLWGZ2HYSJQS8hOJka5sxluxYnN2_PTjWntJmLdmJMKBW4IfIborgl5geEIicJ1jV4IPKPT3Bb-f87afckvzcIC3k_9hIaBWEwMgqhFxjAUGUDMyAj6Gmy52FDBp6PVN-gBjPo3iAqiH6Lhu10ZGxVCoN6Fs-zSKqsSkvttO77PbVIW12WSpU70lFN6d7a2tqjoWOlbw9xh6def_vxaX37yffJ_eELk2ltfCkN0ZXOcnCLRE2dZrWV6xTd8Fut2RkLRVptvLpw01_w5yfeF7k_0&mkt=en-US	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2f508449d3-d632-429b-97ce-f8ad22b3a7e7%2freprocess%3fctx%3drQQIARAAnVFNa9RQAEyabeyurV2KoBdBQk-t2X0vecnLW-ghmw9av2oXFesHy0vy1k27m2yTbO0HBfHkoYde_QDRg0I9KJ6kp-KxINRrf4FU0OLFerOLF4_FOQzDHIZhZkyAJVgZBX-hyj2WQaMBZZ_11D9IRgrFl9IX7dcB9_AF94w7_bn0fJPXmlnWSSvlMktplLH7cXexlDZpwjpxGGUlP26X6404aaflgDVot5WVaNpZ-sjzuzz_lec3-xaq0FUQcTCBxLQcUjVtRcfQtS3HxQYmqgVs10LIIKZKHMXGsq27KjpyHMuxQFWHOsSaVtUdy0Q6AlUL6CYkqmtrroaJBk0MbU2BqgswMh0dWHt9w9NmN2sqPYqTcIX97Mv3OtY7cZo9FXLTNniwKRxrlA_CqAYMhEigyoGuKjJSiCcT7DO5YdBAUTyVYoZ3BDHusCgMdnP8fm4QCJWBgUKRO8ud5w5z_Kv-o2nPrS9bb-Mz7jswd_fN72lup788F2be1djLWGZ2HYSJQS8hOJka5sxluxYnN2_PTjWntJmLdmJMKBW4IfIborgl5geEIicJ1jV4IPKPT3Bb-f87afckvzcIC3k_9hIaBWEwMgqhFxjAUGUDMyAj6Gmy52FDBp6PVN-gBjPo3iAqiH6Lhu10ZGxVCoN6Fs-zSKqsSkvttO77PbVIW12WSpU70lFN6d7a2tqjoWOlbw9xh6def_vxaX37yffJ_eELk2ltfCkN0ZXOcnCLRE2dZrWV6xTd8Fut2RkLRVptvLpw01_w5yfeF7k_0&mkt=en-US	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49724 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49765 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49724 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91

Source: global traffic	HTTP traffic detected: GET /sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc HTTP/1.1Host: esantegouv.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sites/GED-Calypso/espace-projets/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FGED%2DCalypso%2Fespace%2Dprojets%3Fe%3D1%253A89e0ab13bf664a7a934564dea0253fdc HTTP/1.1Host: esantegouv.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fsites%2fGED-Calypso%2fespace-projets%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FGED%252DCalypso%252Fespace%252Dprojets%253Fe%253D1%25253A89e0ab13bf664a7a934564dea0253fdc&Source=cookie HTTP/1.1Host: esantegouv.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RpsContextCookie=U291cmNlPSUyRnNpdGVzJTJGR0VEJTJEQ2FseXBzbyUyRmVzcGFjZSUyRHByb2pldHMlM0ZlJTNEMSUyNTNBODllMGFiMTNiZjY2NGE3YTkzNDU2NGRlYTAyNTNmZGM=
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+YGPeomb2VsMfUU&MD=SOTdARar HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/illustration?ts=637787140288729782 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/bannerlogo?ts=637719609708651854 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/bannerlogo?ts=637719609708651854 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/illustration?ts=637787140288729782 HTTP/1.1Host: aadcdn.msftauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_f7fbb7540d7be2ae771b.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/js/reset-password-signinname_en_G9nzWSnqBfHRIaMd4FEm5g2.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://account.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+YGPeomb2VsMfUU&MD=SOTdARar HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: logincdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://account.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: esantegouv.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauthimages.net
Source: global traffic	DNS traffic detected: DNS query: account.live.com
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: acctcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714143234053&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_99.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_100.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_100.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_100.2.dr, chromecache_116.2.dr, chromecache_107.2.dr, chromecache_99.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_86.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_86.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.5:49765 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@18/67@26/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2224,i,15247115325435003209,870430601353658888,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2224,i,15247115325435003209,870430601353658888,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	0%	URL Reputation	safe
https://acctcdn.msftauth.net/images/favicon.ico?v=2	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_f7fbb7540d7be2ae771b.js	0%	Avira URL Cloud	safe
https://esantegouv.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fsites%2fGED-Calypso%2fespace-projets%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FGED%252DCalypso%252Fespace%252Dprojets%253Fe%253D1%25253A89e0ab13bf664a7a934564dea0253fdc&Source=cookie	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/shared/5/js/reset-password-signinname_en_G9nzWSnqBfHRIaMd4FEm5g2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauthimages.net/c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/bannerlogo?ts=637719609708651854	0%	Avira URL Cloud	safe
https://aadcdn.msftauthimages.net/c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/illustration?ts=637787140288729782	0%	Avira URL Cloud	safe
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FGED%2DCalypso%2Fespace%2Dprojets%3Fe%3D1%253A89e0ab13bf664a7a934564dea0253fdc	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js	0%	Virustotal		Browse
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	0%	Avira URL Cloud	safe
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
www.google.com	142.250.64.164	true	false	high
cs1227.wpc.alphacdn.net	192.229.211.199	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
logincdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	high
account.live.com	unknown	unknown	false	high
acctcdn.msftauth.net	unknown	unknown	false	unknown
esantegouv.sharepoint.com	unknown	unknown	false	unknown
aadcdn.msftauthimages.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_f7fbb7540d7be2ae771b.js	false	Avira URL Cloud: safe	unknown
https://logincdn.msftauth.net/shared/5/js/reset-password-signinname_en_G9nzWSnqBfHRIaMd4FEm5g2.js	false	Avira URL Cloud: safe	unknown
https://esantegouv.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fsites%2fGED-Calypso%2fespace-projets%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FGED%252DCalypso%252Fespace%252Dprojets%253Fe%253D1%25253A89e0ab13bf664a7a934564dea0253fdc&Source=cookie	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauthimages.net/c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/illustration?ts=637787140288729782	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauthimages.net/c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/bannerlogo?ts=637719609708651854	false	Avira URL Cloud: safe	unknown
https://acctcdn.msftauth.net/images/favicon.ico?v=2	false	URL Reputation: safe	unknown
https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2f508449d3-d632-429b-97ce-f8ad22b3a7e7%2freprocess%3fctx%3drQQIARAAnVFNa9RQAEyabeyurV2KoBdBQk-t2X0vecnLW-ghmw9av2oXFesHy0vy1k27m2yTbO0HBfHkoYde_QDRg0I9KJ6kp-KxINRrf4FU0OLFerOLF4_FOQzDHIZhZkyAJVgZBX-hyj2WQaMBZZ_11D9IRgrFl9IX7dcB9_AF94w7_bn0fJPXmlnWSSvlMktplLH7cXexlDZpwjpxGGUlP26X6404aaflgDVot5WVaNpZ-sjzuzz_lec3-xaq0FUQcTCBxLQcUjVtRcfQtS3HxQYmqgVs10LIIKZKHMXGsq27KjpyHMuxQFWHOsSaVtUdy0Q6AlUL6CYkqmtrroaJBk0MbU2BqgswMh0dWHt9w9NmN2sqPYqTcIX97Mv3OtY7cZo9FXLTNniwKRxrlA_CqAYMhEigyoGuKjJSiCcT7DO5YdBAUTyVYoZ3BDHusCgMdnP8fm4QCJWBgUKRO8ud5w5z_Kv-o2nPrS9bb-Mz7jswd_fN72lup788F2be1djLWGZ2HYSJQS8hOJka5sxluxYnN2_PTjWntJmLdmJMKBW4IfIborgl5geEIicJ1jV4IPKPT3Bb-f87afckvzcIC3k_9hIaBWEwMgqhFxjAUGUDMyAj6Gmy52FDBp6PVN-gBjPo3iAqiH6Lhu10ZGxVCoN6Fs-zSKqsSkvttO77PbVIW12WSpU70lFN6d7a2tqjoWOlbw9xh6def_vxaX37yffJ_eELk2ltfCkN0ZXOcnCLRE2dZrWV6xTd8Fut2RkLRVptvLpw01_w5yfeF7k_0&mkt=en-US	false		high
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js	false	Avira URL Cloud: safe	unknown
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FGED%2DCalypso%2Fespace%2Dprojets%3Fe%3D1%253A89e0ab13bf664a7a934564dea0253fdc	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	URL Reputation: safe	unknown
https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c	false		high
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	URL Reputation: safe	unknown
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	false	URL Reputation: safe	unknown
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_100.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_100.2.dr, chromecache_116.2.dr, chromecache_107.2.dr, chromecache_99.2.dr	false	high
https://login.windows-ppe.net	chromecache_86.2.dr	false	high
https://login.microsoftonline.com	chromecache_86.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_100.2.dr	false	high
http://feross.org	chromecache_99.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
192.229.211.199	cs1227.wpc.alphacdn.net	United States	15133	EDGECASTUS	false
142.250.64.164	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.107.213.41	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432192
Start date and time:	2024-04-26 16:53:20 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@18/67@26/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.165.195, 74.125.139.84, 142.250.217.174, 34.104.35.123, 40.126.29.8, 40.126.29.10, 40.126.29.14, 40.126.29.15, 40.126.29.9, 40.126.29.12, 40.126.29.7, 40.126.29.5, 23.45.182.85, 192.229.211.108, 20.3.187.198, 23.193.106.22, 23.193.106.9, 23.193.106.8, 23.193.106.20, 23.193.106.46, 23.193.106.17, 20.190.157.11, 40.126.29.6, 40.126.29.13, 192.178.50.42, 142.251.35.234, 172.217.165.202, 142.250.64.202, 142.250.64.170, 142.250.64.138, 142.250.217.170, 142.250.217.234, 142.250.189.138, 142.250.217.202, 192.178.50.74, 172.217.15.202, 172.217.2.202, 20.242.39.171, 20.50.80.214, 13.107.42.22, 142.250.64.234, 172.217.3.74, 52.168.117.171, 51.105.71.137, 142.250.189.131, 23.45.182.97
Excluded domains from analysis (whitelisted): lgincdnmsftuswe2.azureedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, onedscolprduks03.uksouth.cloudapp.azure.com, clients2.google.com, ocsp.digicert.com, login.live.com, update.googleapis.com, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, aadcdn-msft.azureedge.net, lgincdnvzeuno.ec.azureedge.net, aadcdn-msft.afd.azureedge.net, aadcdn.msauth.net, eu.events.data.trafficmanager.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, aadcdnoriginwus2.afd.azureedge.net, account.msa.msidentity.com, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net, eu-mobile.events.data.microsoft.com, logincdn.msauth.net, a1894.dscb.akamai.net, acctcdn.trafficmanager.net, onedscolprdeus16.eastus.cloudapp.azure.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, login.mso.msidentity.com, on
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9879166166248794
Encrypted:	false
SSDEEP:	48:8Fd1TdR1+H3idAKZdA19ehwiZUklqehBy+3:8dTY2y
MD5:	90D6608543AA67F21F468534A672BC8D
SHA1:	13A54CF687AF6ECCED12785BDA70854F26BEB559
SHA-256:	0953BBB044F8CA44B06EF3EC78C90AA38894D7D2760AF84B751E3999F1688576
SHA-512:	0B45172E88A1DA6809B4C43A35EE2232C950802231658C49756A78673CDF87367268346CF5CD9B87E0626555C7EE5447F2ED0B8ECF344B2B0DBF110E9CB69FD2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......q....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.v....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.v....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.v..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.v...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.001183709054137
Encrypted:	false
SSDEEP:	48:8Od1TdR1+H3idAKZdA1weh/iZUkAQkqehmy+2:8wTy9QLy
MD5:	413B10953288D7D6F9E6283E90EA8142
SHA1:	5718E4FB61813AD8AABC3B2151C0F058F598EAD7
SHA-256:	21EE3EADBD59398624AFDBBF0C7DA121DE13554135CD46AB336FB556655B37E2
SHA-512:	BFDC20E5F79875657300372E6145A654EA536B9418B0F04C984B1CBAEB39181389FDA79B2D308363EB8948DB28E04CAF6DAF5A4BBD8B07BD9DC988D0BBF3BF67
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......c....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.v....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.v....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.v..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.v...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008443189561322
Encrypted:	false
SSDEEP:	48:8xSd1TdRsH3idAKZdA14tseh7sFiZUkmgqeh7s4y+BX:8xsT6nyy
MD5:	928353C93B4D318B8036F2C5015875E0
SHA1:	7DFA96C95EEA8560D2D107375BE636F0745E3FEC
SHA-256:	859A293CBB19BF6BFE21F09EC3A38D9E09C37224E9C1553D9A6DC6F5A5EC236E
SHA-512:	F0770909FF6DF8C609B6D11CF31CC56A606D2C8245D45F62915F644081069C7D3E6F941F4822167973EA797A0338136DFDC44C5DF1C7B940B00E1B2D8E3853B8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.v....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.v....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.v..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000239541451529
Encrypted:	false
SSDEEP:	48:8Hd1TdR1+H3idAKZdA1vehDiZUkwqehKy+R:8jTZQy
MD5:	AD0A6F021396B320A438D2729483DD3A
SHA1:	5F96330848D4E60F3C73FEBEDFA9C21FF7DEF48A
SHA-256:	49D0398A13EB8649413961BFCCE586FBC35425904007ABFC1C95D6B63E7E2A0B
SHA-512:	925107DCE023B13377DBF05E294971970FBA29E8A0A12DBF1820B387BCC9E5869C5DBC2C4360EEAAB31A79DD695B0CA7D5D45E728F89BD239C26273E99F28DFA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......\....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.v....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.v....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.v..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.v...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9892485498186288
Encrypted:	false
SSDEEP:	48:8H2d1TdR1+H3idAKZdA1hehBiZUk1W1qehEy+C:8HoTp9ky
MD5:	CF20EE45B51B282A0787094C1EBA172C
SHA1:	89D1058142E164770C132B168D484F46ACD4C878
SHA-256:	03C8821646889661774CEBF8CFE364E03B23E83291EFEF14C56C6145E52A2EC7
SHA-512:	38228B604C7D1FECF5C9EAE01926EB0D7C6F1677D6BFAF0F896F45372B76176000A7AB3C12F1B4F0347CCB4E7BB7F52A069857EE45C27E83903963113046EEF1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....k....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.v....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.v....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.v..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.v...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9999318236176156
Encrypted:	false
SSDEEP:	48:83d1TdR1+H3idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbyy+yT+:8zT1T/TbxWOvTbyy7T
MD5:	BFA47D7DC65C011EC8F068B6D3F97D1F
SHA1:	FDE3C94736CADF9D21BA4AA803D838AFEAC78EB2
SHA-256:	9DF6792B38C92CDBAD4BE1C156DB1F864AA3956527E85EC6E7B7E02E100A9FE6
SHA-512:	FC262F0DEE3C73C3478A02C601D1F25D2EB32B7E752CA6D4E0856731C2341529F17A99DD8997B490FBCE7654D51BF45E677468231C05A7BD0E79A093DCB18BD6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....oS....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.v....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.v....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.v....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.v..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.v...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	444357
Entropy (8bit):	5.450067409045864
Encrypted:	false
SSDEEP:	6144:P15tWmerSpl6PqNfFsQpVc1s9dKmY0O9OXd4NDE0HfNX44S:P1GOFsQpGq9km74Nop
MD5:	E1A045E1C764CBEF88DC2A5C87B2683F
SHA1:	84EF9C034E98D0295AF6039028304C9EDDB638CA
SHA-256:	FA449B79237B05BC9CDBEDBB7879082EE80F1AF5FB423C5E18408B0167A67505
SHA-512:	8A9E2B7D61AEE1E2EAB3CBCDFBB6FD9562AA7F3FC9B0EA0DDF8F45185652F0734341A3839CFA42A3E0A931AB8C3B29162B9E35D19273A39C069F4190DBACBED7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	56995
Entropy (8bit):	7.423501116876145
Encrypted:	false
SSDEEP:	1536:GYwqXxKzHHlbyzC/qd/Yp+SRovC8okje3FS:3uFb3+xvLiU
MD5:	5FB3137E735878A6DE49F9EC57958B3A
SHA1:	A5E79DDBC57B554F22B3582853A8C68AB5CCE749
SHA-256:	696B479178E098D33AA32052A0B28922961E7EA5844FF2B435FC292E6A4EBF30
SHA-512:	3002401F007C8902CDF9D78AB5DE1343282886C23277149D6FF554495EDB7BE15AA3A636CB7F76B5299627BB263104F1A713A2D6F5C041D96BD1C55678916EBB
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/illustration?ts=637787140288729782
Preview:	.PNG........IHDR.......8........C....pHYs................UIDATx...gsdg..y^.s.k8....dR.....w..jk.f.g.j?...oP.b_...m...Nw.tOWuuiAf.Lj.V. ..k.s.g_8..L.........f.............._.............4..z..y]==......7.Le..C..Iu......~C...#U....:..a............!b...%..v...Z[I.N.!..V..E..cy..A............3....w....V6.YG..........j.Z...s..................+.ZY#.Y.....:I.0D..3.#z...I)....0............R...7....>...&.0....U.yeJ^R...3...............,...nu...K;.w2N.a39.....U-....[....0...........c.8..5.....Z..u$...r...U...JS.u.c...............q......\|U...a........,..M..~n............n....v.]}\|{K.W.....3(.C.viR.f...9.............N...5J..N....5m.Y.........f..B+cD...(...........yI...$N.....m..4.X..F.;.O...q..Q.R.?..`.........\|w.+..Yku}iG...T..d..C..~tmFqd.$..8C...............X#y....6..R...L..uaaD.1J..~............x..H.Q.....z].....B...NM.U.Jy~.3.`.........<?#..@.{m...c.l4.N.!3V...+..+....wE............f...........Z.mg..C......M...IRy.....`............Z.{....ugyO..S.xz.8.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	612341
Entropy (8bit):	5.4402271073825315
Encrypted:	false
SSDEEP:	6144:qZMB/ls+biBh/Y0KcKNjY8WMEsJUj+vHbGqe8Uk/wG8frl7kuPMr:OY0qEs2SvHFe8wp57kb
MD5:	1BD9F35929EA05F1D121A31DE05126E6
SHA1:	B79777B9D4E02290AB13CF998D28D5086C2CD665
SHA-256:	337AB3867F27F04F36A3121BB7C5322D6FCFE734B28899FDF1833C866974BFA4
SHA-512:	A8A22B1CCF4120E85D055584E67172DB7D8829DB13B3B5EAAF5B83B502EF6E448FECE16C5939E465BEFFD64259A304403E589AAFE41A5DDB523C2B3A4D849B20
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/js/reset-password-signinname_en_G9nzWSnqBfHRIaMd4FEm5g2.js
Preview:	/! For license information please see reset-password-signinname_en.js.LICENSE.txt /.!function(){var e,t,n,r,o={97206:function(e,t,n){"use strict";var r=n(9384),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},i={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},a={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function c(e){return r.isMemo(e)?a:l[e.$$typeof]\|\|o}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=a;var u=Object.defineProperty,s=Object.getOwnPropertyNames,f=Object.getOwnPropertySymbols,p=Object.getOwnPropertyDescriptor,d=Object.getPrototypeOf,g=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(g){var o=d(n);o&&o!==g&&e(t,o,r)}var a=s(n);f&&(a=a.concat(f(n)));for(var l=c(t),h=c(n),m=0;m<a.length;++m){var b=a[m

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65436)
Category:	downloaded
Size (bytes):	90690
Entropy (8bit):	5.331029016047939
Encrypted:	false
SSDEEP:	768:BVEDx3ySKZOP00d5TjMSYzSRRM1d0YjSRpUKHHacTItx7vtn1yC0JalF1rmq6LlE:b+0Z9yFrGi8SRGfyC0JalFx3gKak
MD5:	D390AA6A6D257834D807D8E7DDC90968
SHA1:	6A6EFD105DBBEB099D25998A38875808D83AF5C8
SHA-256:	D755D7CE744425DEE51A3BD8CBA9B2A789D96C584C9958082B557FEB70F226D9
SHA-512:	9629ED6071CFED4EFF34C163F36482336F0D402FD95951FC792A5F125C1BE1CA3C6918E61A4A79815B15AB5CDD6BCEF30D4FE0090C283C02590B62879D960818
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js
Preview:	/! For license information please see oneds-analytics-js_54b1724af1b05e2ba3db_en.js.LICENSE.txt /."use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[251],{41696:function(n,e,t){t.r(e),t.d(e,{AppInsightsCore:function(){return qo},ApplicationInsights:function(){return ja},BE_PROFILE:function(){return Vo},BaseTelemetryPlugin:function(){return di},Cloud:function(){return Vi},CoreUtils:function(){return Hr},Device:function(){return Xi},DiagnosticLogger:function(){return et},EventLatency:function(){return Ga},EventPersistence:function(){return Qa},EventsDiscardedReason:function(){return Ho},InternalAppInsightsCore:function(){return Ko},Loc:function(){return $i},LoggingSeverity:function(){return Wa},MinChannelPriorty:function(){return $a},NRT_PROFILE:function(){return Wo},NotificationManager:function(){return Uo},PostChannel:function(){return qa},PropertiesPlugin:function(){return Po},RT_PROFILE:function(){return jo},Session:function(){retu

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3757)
Category:	downloaded
Size (bytes):	4730
Entropy (8bit):	5.122007329309551
Encrypted:	false
SSDEEP:	96:jPjDXOMS1WfyPlZ6fWRW8a1RwCEL3Aa1Rj1LjpVSzC:jP7slZPA2LtjLNVSzC
MD5:	3631AA6B55B811946DE4FC289031778B
SHA1:	8CD792280A0594585289DBA2748D51FE81904AC7
SHA-256:	3957106AD7B920D6D8E73EF7B9DE532CAE05E78DF5DB847777F73193AA4086A8
SHA-512:	A67060060D97C0F1AC9B99592AEB23886CEA70962EFEC3DD7C793E91EEB3F965D495D2741BA6EB003E4E6243C2A6CF857491332E14C2822A9FA3D6BF2747FD3E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_f7fbb7540d7be2ae771b.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[36],{499:function(t,e,i

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	56995
Entropy (8bit):	7.423501116876145
Encrypted:	false
SSDEEP:	1536:GYwqXxKzHHlbyzC/qd/Yp+SRovC8okje3FS:3uFb3+xvLiU
MD5:	5FB3137E735878A6DE49F9EC57958B3A
SHA1:	A5E79DDBC57B554F22B3582853A8C68AB5CCE749
SHA-256:	696B479178E098D33AA32052A0B28922961E7EA5844FF2B435FC292E6A4EBF30
SHA-512:	3002401F007C8902CDF9D78AB5DE1343282886C23277149D6FF554495EDB7BE15AA3A636CB7F76B5299627BB263104F1A713A2D6F5C041D96BD1C55678916EBB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8........C....pHYs................UIDATx...gsdg..y^.s.k8....dR.....w..jk.f.g.j?...oP.b_...m...Nw.tOWuuiAf.Lj.V. ..k.s.g_8..L.........f.............._.............4..z..y]==......7.Le..C..Iu......~C...#U....:..a............!b...%..v...Z[I.N.!..V..E..cy..A............3....w....V6.YG..........j.Z...s..................+.ZY#.Y.....:I.0D..3.#z...I)....0............R...7....>...&.0....U.yeJ^R...3...............,...nu...K;.w2N.a39.....U-....[....0...........c.8..5.....Z..u$...r...U...JS.u.c...............q......\|U...a........,..M..~n............n....v.]}\|{K.W.....3(.C.viR.f...9.............N...5J..N....5m.Y.........f..B+cD...(...........yI...$N.....m..4.X..F.;.O...q..Q.R.?..`.........\|w.+..Yku}iG...T..d..C..~tmFqd.$..8C...............X#y....6..R...L..uaaD.1J..~............x..H.Q.....z].....B...NM.U.Jy~.3.`.........<?#..@.{m...c.l4.N.!3V...+..+....wE............f...........Z.mg..C......M...IRy.....`............Z.{....ugyO..S.xz.8.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113084
Entropy (8bit):	5.285180915082997
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC2Jzc6VUWG:xkNh06VUT
MD5:	D62B4EDEB512B07ABEF4688E27ECDDE3
SHA1:	981A7825DA5E29938AB6FE0CBFE2DB622F7B8333
SHA-256:	4B01A0A34CE8ED4BC8A8713BE0442D49DA6A756236B7B4424622CA3DEE820F41
SHA-512:	6E91B285BEA8566EBB7829F592744A6706CF6498E6D5DC1C5A0EBDD0A685D767AA215B275A88568B957E6BE824AEE60521ED1D77D92A697A3CE0F446ECDCDDB9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msftauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113657
Entropy (8bit):	5.491055924169325
Encrypted:	false
SSDEEP:	1536:VlqCwY8gIRPY0+r5qnWisnv9ILXtlTJCwggqdq/7XtvUN5bHo:EgDTMnWBaTJggqkDxUbzo
MD5:	B6783C7717E4042517138D9C9A48C867
SHA1:	7A7D6B0F36C2A3B557F1A75461630D433E5F4942
SHA-256:	4BE11C075187615ADAF493D54CB7B05556E76806AED2B3B082D72952D0025BE5
SHA-512:	2A322A8377784CBE543C978F32CB811388658F2E328B0024580D83DDE24AF0E131276AA76FEBED0B3AD1073ABCA8189AB9CD40BC4D36CFD93C0A1ECDAD63B705
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{488:function(e,t,r

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1378
Entropy (8bit):	4.316299265862323
Encrypted:	false
SSDEEP:	24:t4pb8m3NquUzOqnXmZcU4BC+CaAIA5cAEisx+fUu3fLkY:zoNLUzOeXfU4BJxA5fXUWx
MD5:	F83EBFF69A4A1685E4DC9650CDAB8886
SHA1:	FD21658884945B00157557AE06803DAA6A9F10C6
SHA-256:	7B1669DA90261CDB1483950BB480AD96875F84B09BC48D1055303CE94821BF64
SHA-512:	AA21A03AB84FA0129AFCED8A56E499757A6625C9B24A81EE08F5775B9B542F71BA67EAE817D633CB4E4533A8CF6A0DDA80BD7EE8A90E95AB3D39A77F88073F23
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.494,0,0,1,32.5,40h-17A1.494,1.494,0,0,1,14,38.5v-23A1.494,1.494,0,0,1,15.5,14h4.873l-3-6h2.25l3,6h2.751l3-6h2.25l-3,6ZM32,16H23.623l1.266,2.546A1.13,1.13,0,0,1,25,19a1.009,1.009,0,0,1-1,1,1,1,0,0,1-.534-.149.974.974,0,0,1-.368-.4L21.375,16H16v22H32ZM20,26a3.92,3.92,0,0,1,.312-1.555,4.023,4.023,0,0,1,2.133-2.133,4.041,4.041,0,0,1,3.109,0,4.014,4.014,0,0,1,2.133,2.133A3.886,3.886,0,0,1,28,26a3.937,3.937,0,0,1-.288,1.485,3.987,3.987,0,0,1-.8,1.266A5.7,5.7,0,0,1,28.2,29.7a5.907,5.907,0,0,1,.968,1.251,6.388,6.388,0,0,1,.616,1.461A5.786,5.786,0,0,1,30,34H28a3.877,3.877,0,0,0-.312-1.554,4,4,0,0,0-2.133-2.133,4.011,4.011,0,0,0-3.109,0,4.023,4.023,0,0,0-2.133,2.133A3.912,3.912,0,0,0,20,33.995H18a5.786,5.786,0,0,1,.218-1.586,6.388,6.388,0,0,1,.61

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7923
Entropy (8bit):	7.954399703625362
Encrypted:	false
SSDEEP:	192:qy27IiMRaKteRFgg33cX64PNK4WRv/+JFl5KJvLK1WNqX9SYZXim+RqvBvE:qy27scFgn64PZ8GJFuJjlNqX9rX3+RCG
MD5:	28E61D2C069911C8E9898202D86C3E9C
SHA1:	820798AFF16B80DCE4DB6D744E6C8F9C3A1890BD
SHA-256:	F82B7E5219B5CC01D69CB9A5BBAE72B05624B58577AE8032BC8DC78F6CF9D3BA
SHA-512:	2D4F90C10E660A57DF4FAB2129C6C4B5AFB901EFC209C13515E861BD080B1CB37C6DD1974362CF0F33D6615050CA970B49F0D62D7F123425A2C1267113643F83
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.....E$^.....IDATx..y.....3,........h.}..E.v.g.\.<\."&j.....4...LW'......F.&n..q...%.F"...!2.4...}...LuM..=l..\|...]Uw.{...s.9W...zl.p<p40...4.........h........p.;.q.P@.........g.(ww.jp.(`.p......=....8..:6#h%....\|`..........E.HS./......../.p{.5.^..C.u.p+pH....&pe.y..m.2.....x.4...06z...'.{.../..=a..e......[j...u=6........H{.9P.]..I........xG..2..4....#...n0..J]....V...........U...\|."....jr.....8.g..^.nMn.).........D..........\|..q..~.q..W.{..+B$'.....V.cw..f.5.T5..M.+....x...)S..77....G]....6C.Q..=.-.....?...o..".....N....x.e...p....E......+.H......S..Sgk....8.e...t...b7.X.a.....@$.......vJ.{Q.c.......$.qN,.YE$.....If......9...d..............'6.S..+x.r;.=..b.:.D%.T....2...6_.c{..?..S..w<.k..d...;.,..gb....)v.R........WL.:...g...^..C...X...r.W'..T..............\;a...4.G...z..M...4.TUo.9.....F4Q.c.<D....!...=M3q.i&...B.....iZ.4...J?E.......^.B..T.M.Ej..F.f.8.L....&..L.LE.n..~.:uT`3q.>.Z..%.....zl.i&.os......4$V.o.M.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.202819531114783
Encrypted:	false
SSDEEP:	3:WRemVnCAd:rTAd
MD5:	7F6C2F2EC0AC79AF93AC42E55601E0D8
SHA1:	8DE377E67C5B4919C767A044051BFD52C77A985E
SHA-256:	5F1077DECBD2768AD99AF5D592C4DDE934F19682BB8BAD05599F9D403344DA27
SHA-512:	85DCD5AE0B75A54F30675AA864DC4526F9AAD07F9CAC63D9004B81EF2EA1D270909740137D72A9D8D0BBBD9D8674B8FFDDE1745E95E628D65B4F898F49FA9A91
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnw8PvhQPeM6xIFDewtwx0=?alt=proto
Preview:	ChUKEw3sLcMdGgQICRgBGgQIZBgCIAE=

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	379
Entropy (8bit):	4.942805876241154
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXADQKDTcVEq0FyX4bVGEynbtwag8R+mkbtR1dI1zAmiadc:t4pb8WsQKvkB0wX4gEkbtLv8mkbtvdIe
MD5:	2D8F86059BE176833897099EE6DDEDEB
SHA1:	93A2E327027DEED53076E86BFA7D9EEBBF0CC4B9
SHA-256:	34D8DA073F47030EE94B99D84FBE68E3345BD8AAA37EA909FF2DA00238447486
SHA-512:	64D75B1F35180FF61F5BF11D21544454DF016D0854573D75D277FCB933CE845D1436BDC822445B78C627A1FF730B39FC34B72C27D45A39E237F2CCF0876FCA4E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.982,0A10.573,10.573,0,0,0,13.44,36Zm4.8-16.32A5.76,5.76,0,1,1,24,25.44,5.766,5.766,0,0,1,18.24,19.68Z" fill="#404040"/></svg>

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1378
Entropy (8bit):	4.316299265862323
Encrypted:	false
SSDEEP:	24:t4pb8m3NquUzOqnXmZcU4BC+CaAIA5cAEisx+fUu3fLkY:zoNLUzOeXfU4BJxA5fXUWx
MD5:	F83EBFF69A4A1685E4DC9650CDAB8886
SHA1:	FD21658884945B00157557AE06803DAA6A9F10C6
SHA-256:	7B1669DA90261CDB1483950BB480AD96875F84B09BC48D1055303CE94821BF64
SHA-512:	AA21A03AB84FA0129AFCED8A56E499757A6625C9B24A81EE08F5775B9B542F71BA67EAE817D633CB4E4533A8CF6A0DDA80BD7EE8A90E95AB3D39A77F88073F23
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.494,0,0,1,32.5,40h-17A1.494,1.494,0,0,1,14,38.5v-23A1.494,1.494,0,0,1,15.5,14h4.873l-3-6h2.25l3,6h2.751l3-6h2.25l-3,6ZM32,16H23.623l1.266,2.546A1.13,1.13,0,0,1,25,19a1.009,1.009,0,0,1-1,1,1,1,0,0,1-.534-.149.974.974,0,0,1-.368-.4L21.375,16H16v22H32ZM20,26a3.92,3.92,0,0,1,.312-1.555,4.023,4.023,0,0,1,2.133-2.133,4.041,4.041,0,0,1,3.109,0,4.014,4.014,0,0,1,2.133,2.133A3.886,3.886,0,0,1,28,26a3.937,3.937,0,0,1-.288,1.485,3.987,3.987,0,0,1-.8,1.266A5.7,5.7,0,0,1,28.2,29.7a5.907,5.907,0,0,1,.968,1.251,6.388,6.388,0,0,1,.616,1.461A5.786,5.786,0,0,1,30,34H28a3.877,3.877,0,0,0-.312-1.554,4,4,0,0,0-2.133-2.133,4.011,4.011,0,0,0-3.109,0,4.023,4.023,0,0,0-2.133,2.133A3.912,3.912,0,0,0,20,33.995H18a5.786,5.786,0,0,1,.218-1.586,6.388,6.388,0,0,1,.61

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32153)
Category:	downloaded
Size (bytes):	55037
Entropy (8bit):	5.379274292725461
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3/ym+d/Px2g+0wtwGixnqTPRUbx3VDg/Mv+l:ABrkF7IyJvym+d/Pog+0wtwGiUig/MO
MD5:	D0BAE222726165C1EB13D010782BCC3E
SHA1:	96224469F74A5B6EC8677953BDBCE9A880837C8F
SHA-256:	1121CA08C71EC80299176C89AEC37F6D35F6A77C0D6C2F08EA25F034F057C3A6
SHA-512:	C82526421EB83C213506460D47E9405A0119DACF1551DAA7A8FFBDB6007FC2FCF5A512B9C8CA2D84357F9400B283EFC6544CCC4986BCC9AC34317E916F037BE9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7923
Entropy (8bit):	7.954399703625362
Encrypted:	false
SSDEEP:	192:qy27IiMRaKteRFgg33cX64PNK4WRv/+JFl5KJvLK1WNqX9SYZXim+RqvBvE:qy27scFgn64PZ8GJFuJjlNqX9rX3+RCG
MD5:	28E61D2C069911C8E9898202D86C3E9C
SHA1:	820798AFF16B80DCE4DB6D744E6C8F9C3A1890BD
SHA-256:	F82B7E5219B5CC01D69CB9A5BBAE72B05624B58577AE8032BC8DC78F6CF9D3BA
SHA-512:	2D4F90C10E660A57DF4FAB2129C6C4B5AFB901EFC209C13515E861BD080B1CB37C6DD1974362CF0F33D6615050CA970B49F0D62D7F123425A2C1267113643F83
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauthimages.net/c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/bannerlogo?ts=637719609708651854
Preview:	.PNG........IHDR.......<.....E$^.....IDATx..y.....3,........h.}..E.v.g.\.<\."&j.....4...LW'......F.&n..q...%.F"...!2.4...}...LuM..=l..\|...]Uw.{...s.9W...zl.p<p40...4.........h........p.;.q.P@.........g.(ww.jp.(`.p......=....8..:6#h%....\|`..........E.HS./......../.p{.5.^..C.u.p+pH....&pe.y..m.2.....x.4...06z...'.{.../..=a..e......[j...u=6........H{.9P.]..I........xG..2..4....#...n0..J]....V...........U...\|."....jr.....8.g..^.nMn.).........D..........\|..q..~.q..W.{..+B$'.....V.cw..f.5.T5..M.+....x...)S..77....G]....6C.Q..=.-.....?...o..".....N....x.e...p....E......+.H......S..Sgk....8.e...t...b7.X.a.....@$.......vJ.{Q.c.......$.qN,.YE$.....If......9...d..............'6.S..+x.r;.=..b.:.D%.T....2...6_.c{..?..S..w<.k..d...;.,..gb....)v.R........WL.:...g...^..C...X...r.W'..T..............\;a...4.G...z..M...4.TUo.9.....F4Q.c.<D....!...=M3q.i&...B.....iZ.4...J?E.......^.B..T.M.Ej..F.f.8.L....&..L.LE.n..~.:uT`3q.>.Z..%.....zl.i&.os......4$V.o.M.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	4.942805876241154
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXADQKDTcVEq0FyX4bVGEynbtwag8R+mkbtR1dI1zAmiadc:t4pb8WsQKvkB0wX4gEkbtLv8mkbtvdIe
MD5:	2D8F86059BE176833897099EE6DDEDEB
SHA1:	93A2E327027DEED53076E86BFA7D9EEBBF0CC4B9
SHA-256:	34D8DA073F47030EE94B99D84FBE68E3345BD8AAA37EA909FF2DA00238447486
SHA-512:	64D75B1F35180FF61F5BF11D21544454DF016D0854573D75D277FCB933CE845D1436BDC822445B78C627A1FF730B39FC34B72C27D45A39E237F2CCF0876FCA4E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.982,0A10.573,10.573,0,0,0,13.44,36Zm4.8-16.32A5.76,5.76,0,1,1,24,25.44,5.766,5.766,0,0,1,18.24,19.68Z" fill="#404040"/></svg>

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141305
Category:	downloaded
Size (bytes):	49609
Entropy (8bit):	7.995218009591201
Encrypted:	true
SSDEEP:	1536:XOwJxyZ3lVRv3jp+x5kTIGAdiGVSC7BAXjTzBTpb4J:ZJxyZ3l/3jTAdiCSGITzB1b4
MD5:	39D9433B35E581765AD76E19ECED2394
SHA1:	9A7D10B60067EF8B4F91519428B2D0A934A45966
SHA-256:	9834FA7CFC5ABB48CE82A9A57027CDD5F9958B21B3048D6E497D87B414E0A55C
SHA-512:	E2E6EA6F2D24BAE2193D3F011C67534EE0EB1F3BE57540E1F69EEAD4CEFD2968F3B3294F789A222299F6882B3A37939966946344D9463DB5CCB5C7FD09EC9FC5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js
Preview:	............[.8.8...+.w..OL..hpp..... .......pw....e .o?u.l.q.}.s....[.R..TUI.?..O.....S.....+.....g..Sx..r.??.;..z......W..DT....W..J.U.`.F.0r..W..7..Ie.....NT.Q.U...2......$\|.T.....Q.\9<5.P....[?..p...wI%...$n.Qm.x.bQ.....w..r.0..I%.#.?.G....?aU.HTb.T.a..q;..B.Zc...1&ph...A.c.(.B....8.A..L.L..Z#....6T.....d....m..v..w0=.....FI=..XD......xT!d....x..@<y..Fn.(W...so#!.E.X.<AE....~....Y..'.t&8.T.....".J.k.....Rm5.[k..F..$..........Qx....C.G.s../.......1....l.-......o...?.a.Ta...W...7.?.N.....2..#lXU./..T.x.....".w.......;.k.\^w.].>..mr.k53r.......k.0.I.<OE......d...#..jhE..jx.].....Y\|W....i...`.. .k.P...@.Uq.\;...T.huu....TK.Y=...I..s.A.en..K.n.;).\|.?.F.....d...\|........`....5.W..._..,$..51Qe...}.^&.J#K......<......8.(r....Y.ZR..G.zc.wc.A.pL.e&w...@<V.!. ..w.:+k..n..4..I.. .....S.....p"....8....v.l.[M.0..q..c;.....0...8.......t.\...n "..km..S...W..]......paJV.(J...g....!.\|........;.zN...5}.....DZ....=q.E.@ .Dv.z...@.d.#tE....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43896)
Category:	downloaded
Size (bytes):	223759
Entropy (8bit):	5.257015244909601
Encrypted:	false
SSDEEP:	3072:5Q0ZqoBmLJEoWcjY6B66pO25rksurxIDZVihYZ+V:RmNdTpOFsursZkV
MD5:	764E526CEF65C9F062BB8E83D8EBCE0B
SHA1:	F5166F7B003CBE1B171BE88AA65D2E3FD2331366
SHA-256:	474CE0790CEB18A100CEBAF1AC0915A51389FCAE0830C3B44BFA1E365D40B2B4
SHA-512:	49725A491D8C7494D4074D0A96D978D75700657CA9EDA456C3B3EBA3333DC6733D19A8BBE19BC9DCF381FA1B1CA96251A910056ADE259340A17F85FB6D5EF863
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{529:function(e,t,r)

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 16:54:04.224803925 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:04.224803925 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:04.334140062 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:13.834131002 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:13.896646976 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:14.021666050 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:15.477799892 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:15.477900028 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:16.934360981 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:16.934380054 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:16.934427023 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:16.934621096 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:16.934627056 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:17.343502045 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:17.344234943 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:17.344266891 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:17.345838070 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:17.346026897 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:17.347754955 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:17.347847939 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:17.422795057 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:17.422806025 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:17.531956911 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:22.834230900 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:22.834297895 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:22.834388971 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:22.834898949 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:22.834939957 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:22.834995985 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:22.835141897 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:22.835158110 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:22.835294008 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:22.835309982 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.230135918 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.230571985 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.230588913 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.231478930 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.231550932 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.232796907 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.232862949 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.233122110 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.233130932 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.239943027 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.240318060 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.240339994 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.241390944 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.241460085 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.242748976 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.242836952 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.320236921 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.320262909 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.374418020 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.518605947 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.523339987 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.523396969 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.523411989 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.523467064 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.523500919 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.526457071 CEST	49713	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.526477098 CEST	443	49713	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.531575918 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:23.572120905 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.824008942 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.824116945 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:23.824167967 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:25.662014961 CEST	49712	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:25.662050962 CEST	443	49712	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:25.699135065 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:25.699243069 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:25.699322939 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:25.699913025 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:25.699944973 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.154469013 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.154556990 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.154654026 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.156250954 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.156299114 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.397658110 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.413870096 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.413954020 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.420996904 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:26.421024084 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.421674013 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.422077894 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:26.422158957 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.422298908 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:26.427139997 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:26.427175045 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:26.427334070 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:26.429215908 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.429249048 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.429507971 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.429799080 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:26.429811954 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:26.464114904 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.602475882 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.644145966 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.728893042 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.729156971 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.729298115 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.729487896 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.729521036 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.729554892 CEST	49715	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.729569912 CEST	443	49715	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.858705997 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.858735085 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.858748913 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.858825922 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:26.858853102 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.858903885 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:26.858910084 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.858927965 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.859132051 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:26.862075090 CEST	49714	443	192.168.2.5	13.107.136.10
Apr 26, 2024 16:54:26.862091064 CEST	443	49714	13.107.136.10	192.168.2.5
Apr 26, 2024 16:54:26.867619038 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.867640018 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:26.867748976 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.868184090 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:26.868191957 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:27.147290945 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:27.147458076 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:27.151010036 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:27.151020050 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:27.151359081 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:27.154028893 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:27.190373898 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:27.190450907 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:27.197685957 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:27.197707891 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:27.198107004 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:27.200118065 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:27.313600063 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:27.313659906 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:27.313836098 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:27.313918114 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:27.392215967 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:27.392399073 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:27.392458916 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:27.398693085 CEST	49717	443	192.168.2.5	23.204.76.112
Apr 26, 2024 16:54:27.398736954 CEST	443	49717	23.204.76.112	192.168.2.5
Apr 26, 2024 16:54:27.718063116 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:27.760159969 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:28.646354914 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:28.647391081 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:28.652507067 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:28.652554035 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:28.652631044 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:28.878576994 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:28.879457951 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:28.901405096 CEST	49707	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:54:28.901426077 CEST	443	49707	142.250.64.164	192.168.2.5
Apr 26, 2024 16:54:29.030456066 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:29.030500889 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:29.030606031 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:29.031167984 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:29.031194925 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:29.418917894 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.419003010 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.419023037 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.419068098 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.419081926 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.419105053 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.419117928 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.419138908 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.419173956 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.419186115 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.419193029 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.419223070 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.419243097 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.419248104 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.458455086 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:29.458760977 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:29.458786011 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:29.460411072 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:29.460484028 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:29.616611958 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.644699097 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:29.644880056 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:29.644891024 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:29.645015955 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:29.656156063 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.656186104 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.656234980 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.656274080 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.656312943 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.656322956 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.656497955 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:29.656572104 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:29.817683935 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:29.817715883 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:29.927994967 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.067837954 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.067871094 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.067882061 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.067939043 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.067939997 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.067987919 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.068007946 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.068047047 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.068065882 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.068065882 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.068065882 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.068085909 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.069243908 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.069262028 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.069284916 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.069298029 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.069307089 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.069324017 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.069330931 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.069339991 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.069350004 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.069366932 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.069386005 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.194108009 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.194140911 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.194186926 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.194206953 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.194300890 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.194300890 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.194318056 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.194350004 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.194397926 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.194413900 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.194453001 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:30.194523096 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:30.194570065 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:31.733741045 CEST	49725	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:31.733781099 CEST	443	49725	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:31.914026022 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:31.914069891 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:31.914084911 CEST	49716	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:54:31.914091110 CEST	443	49716	40.68.123.157	192.168.2.5
Apr 26, 2024 16:54:33.161870003 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.161909103 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.162034035 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.162264109 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.162273884 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.193646908 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.193685055 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.193742037 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.194194078 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.194231987 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.194297075 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.194591045 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.194605112 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.194853067 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.194875002 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.577552080 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.577840090 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.577853918 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.580881119 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.581059933 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.582148075 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.582369089 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.582380056 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.628118992 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.675144911 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.675156116 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836031914 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836060047 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836122990 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836127996 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836144924 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836218119 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836244106 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836261034 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836288929 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836303949 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836323023 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836323977 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836344957 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836359024 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836379051 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836396933 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836422920 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836427927 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836445093 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836464882 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836494923 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836494923 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.836504936 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.836517096 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.881130934 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.960747004 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.960761070 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.960819960 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.960841894 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.960858107 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.960984945 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.960984945 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.960984945 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.960993052 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.962316990 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.962344885 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.962384939 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.962385893 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.962409019 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.962420940 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.964724064 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.999228001 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.999277115 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:33.999475956 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:33.999486923 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.000436068 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.000463009 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.000611067 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:34.000611067 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:34.000622034 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.002739906 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:34.085659027 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.085721970 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.085741997 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:34.085745096 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.085798025 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:34.725495100 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.730655909 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:34.776027918 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:34.776050091 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.105823040 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.105846882 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.106204987 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.106275082 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.109648943 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.109736919 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.110076904 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.110203981 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.216087103 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.216418028 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.216770887 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.217001915 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.218254089 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.219012022 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.219033003 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.219176054 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.219206095 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.232336998 CEST	49730	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.232356071 CEST	443	49730	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.271452904 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.271600962 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.345923901 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.349678993 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.406874895 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.406881094 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.595730066 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.595746994 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.595799923 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.595829010 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.595834970 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.595868111 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.595901966 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.596044064 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.596044064 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.596630096 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.596638918 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.596659899 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.596669912 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.596699953 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.596713066 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.596719980 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.596761942 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.599277020 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599297047 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599339962 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599358082 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599365950 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.599371910 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599394083 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599410057 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.599930048 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599940062 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599962950 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599972010 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.599983931 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.599997044 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.600016117 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.644939899 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.734810114 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.734834909 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.734880924 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.734900951 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.734967947 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.735007048 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.735071898 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.735769033 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.735846043 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.735857964 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.735913038 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.735918999 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.735975981 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.738365889 CEST	49732	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.738394976 CEST	443	49732	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.740492105 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.740505934 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.740550995 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.740559101 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.740566969 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.740586996 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.740622044 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.740638971 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.742125034 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.742136002 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.742156029 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.742191076 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.742213964 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.742232084 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.742250919 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.866200924 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.866245031 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.866288900 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.866319895 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.866334915 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.866357088 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.866810083 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.866835117 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.866875887 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.866880894 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.866890907 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.866919041 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.867655039 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.867682934 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.867718935 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.867727041 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.867760897 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.868182898 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.868206024 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.868238926 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.868247032 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.868279934 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.868618011 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.868655920 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.868678093 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.868684053 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.868721008 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.911607981 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.990657091 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.990686893 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.990744114 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.990753889 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.990793943 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.991175890 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.991209984 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.991235971 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.991242886 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.991282940 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.991298914 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.991883993 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.991904974 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.991969109 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.991976023 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.992013931 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.992647886 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.992683887 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.992707968 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.992713928 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.992757082 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.992770910 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.993033886 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.993055105 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.993097067 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.993103027 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.993130922 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.993150949 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.993627071 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.993649006 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.993705034 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.993711948 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.993747950 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.994007111 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.994015932 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.994071007 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.994076967 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.994111061 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.994409084 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.994430065 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.994472027 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.994477987 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:35.994508028 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:35.994527102 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.036953926 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.036976099 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.037025928 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.037036896 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.037075043 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.116566896 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.116588116 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.116652012 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.116667032 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.116695881 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.116714954 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.119262934 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.119286060 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.119322062 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.119328976 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.119359970 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.119378090 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.119967937 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.119990110 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.120035887 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.120043039 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.120091915 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.120639086 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.120666027 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.120702028 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.120707035 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.120728970 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.120747089 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.120750904 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.121613026 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.121639967 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.121670008 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.121676922 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.121721029 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.122368097 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.122406006 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.122427940 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.122435093 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.122464895 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.123505116 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.123543024 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.123577118 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.123583078 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.123641968 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.124454021 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.124473095 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.124514103 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.124520063 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.124543905 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.125334024 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.125361919 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.125392914 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.125399113 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.125423908 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.125449896 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.125540972 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.125602007 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.126255989 CEST	49731	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.126271963 CEST	443	49731	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.150856018 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.150927067 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.150995970 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.151309967 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.151325941 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.530345917 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.530709982 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.530765057 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.532284021 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.532360077 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.533472061 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.533565998 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.533612013 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.580118895 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.640994072 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.641030073 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.748393059 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.786581993 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787321091 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787332058 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787355900 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787367105 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787373066 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.787384033 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787400007 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787422895 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.787441969 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787456036 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.787744999 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787755013 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787816048 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.787822962 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787870884 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787909985 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787930965 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787931919 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.787931919 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.787945986 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.787951946 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.787978888 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.876720905 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.914431095 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.914443016 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.914484024 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.914499044 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.914509058 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.914547920 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.914552927 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.914557934 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.914570093 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.914592028 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.915358067 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.915365934 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.915411949 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.915427923 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.915446043 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.915460110 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.915468931 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.915494919 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.916812897 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.916836977 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.916876078 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.916887999 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.916910887 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.916928053 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.959513903 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.959544897 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.959630013 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.959630013 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:36.959659100 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:36.959793091 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.038404942 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.038434982 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.038552999 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.038552999 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.038621902 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.039556026 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.041213036 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.041235924 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.041569948 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.041584969 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.041651964 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.041676998 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.041690111 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.041703939 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.041740894 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.041740894 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.041836023 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.041850090 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042126894 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042145967 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042193890 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.042208910 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042239904 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.042586088 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042610884 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042691946 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.042691946 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.042707920 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042862892 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042900085 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.042937994 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.042946100 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.043137074 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.044189930 CEST	49735	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.044220924 CEST	443	49735	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.079862118 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.079889059 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.080821991 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.081083059 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.081103086 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.104749918 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.104784012 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.104990005 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.107714891 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.107728004 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.475609064 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.475987911 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.476002932 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.476494074 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.476907969 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.477001905 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.477170944 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.520121098 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.534025908 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.534447908 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.535325050 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.535348892 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.535828114 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.536262989 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.536359072 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.536422014 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.584120989 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.725241899 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.726021051 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.726031065 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.726053953 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.726066113 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.726073027 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.726109982 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.726126909 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.726145983 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.726162910 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.726205111 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.728713989 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.785032988 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.785469055 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.785487890 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.788763046 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.788795948 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.788809061 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.791868925 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.910907030 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.910940886 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.911063910 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.911063910 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.911092043 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.911248922 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.911286116 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.911294937 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.911309958 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.911329031 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.911673069 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.911694050 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.911715984 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.911724091 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.911747932 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.911780119 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.911780119 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.911786079 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.950449944 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.950476885 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.950516939 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:37.950535059 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:37.950587988 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.037862062 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.037899971 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.037951946 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.037964106 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.038012981 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.038882017 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.038912058 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.038976908 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.038984060 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.039025068 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.039355040 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.039381981 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.039428949 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.039434910 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.039444923 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.039469004 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.039834976 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.039860964 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.039906979 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.039912939 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.039946079 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.039946079 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.040474892 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.040503979 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.040541887 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.040548086 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.040560007 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.040582895 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.041189909 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.041213036 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.041245937 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.041250944 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.041264057 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.041280985 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.041285992 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.041901112 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.041929960 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.041954041 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.041960001 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.041980982 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.042341948 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.042418957 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.042417049 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.042459011 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.042469025 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:38.042474031 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:38.042515993 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:39.828566074 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.016340971 CEST	49736	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.016367912 CEST	443	49736	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.031080961 CEST	49737	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.031112909 CEST	443	49737	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.527488947 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.527587891 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.528034925 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.528188944 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.528243065 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.528295040 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.528800964 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.528815031 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.529006004 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.529042006 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.537853956 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.537895918 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.537959099 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.538451910 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.538480997 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.800721884 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.800770044 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.800837040 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.801107883 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.801124096 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.805190086 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.805219889 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.805279016 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.805779934 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.805793047 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.921542883 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.921854973 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.921900988 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.923177004 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.924037933 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.924093008 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.924846888 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.924853086 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.925136089 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.925467014 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.925519943 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:40.925719023 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:40.927773952 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.928092003 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.928170919 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.929126024 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.929148912 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.929383993 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.929445028 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.931041956 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.931122065 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.932296991 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.932420969 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.932512045 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:40.932528973 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:40.972115040 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.084299088 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.114942074 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.174550056 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.174860001 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.174930096 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.174966097 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.175256968 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.175343990 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.176892042 CEST	49740	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.176937103 CEST	443	49740	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.180358887 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.186364889 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.187397003 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.187418938 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.187752008 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.187810898 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.187814951 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.188354969 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.188425064 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.188653946 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.189371109 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.189485073 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.191517115 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.191678047 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.192028999 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.192045927 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.200234890 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.200253963 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.200844049 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.201472998 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.201484919 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.232146025 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.239428997 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.297759056 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.297838926 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.297862053 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.297900915 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.297909975 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.297939062 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.297955990 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.297965050 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.298155069 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.298599005 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.299951077 CEST	49739	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.299979925 CEST	443	49739	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.431015968 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.431809902 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.431826115 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.431849957 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.431863070 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.431873083 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.431881905 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.431920052 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.431950092 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.431953907 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.431967020 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.431976080 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.432027102 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.432056904 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.432125092 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.436121941 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.436162949 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:41.436302900 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.436717033 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.436731100 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:41.438184977 CEST	49742	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.438205004 CEST	443	49742	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.441940069 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.442787886 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.442802906 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.442878008 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.442898035 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.442945957 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.443875074 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.443897009 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.443958998 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.443965912 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.515840054 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.558301926 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.558322906 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.558329105 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.558398008 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.558404922 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.558460951 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.558486938 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.558536053 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.558595896 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.558595896 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.558595896 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.560976982 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.560983896 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.561018944 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.561044931 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.561048985 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.561075926 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.561113119 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.561113119 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.561141014 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.581667900 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.581701994 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.581744909 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.581769943 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.581788063 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.581811905 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.584336996 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.584358931 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.584424973 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.584439039 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.584476948 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.585131884 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.585150003 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.585205078 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.585213900 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.585249901 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.586040974 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.586059093 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.586116076 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.586123943 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.586158991 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.589871883 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.590166092 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.590178967 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.590483904 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.591717005 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.591773987 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.591901064 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.636107922 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.687122107 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.687146902 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.687236071 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.687273979 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.687444925 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.687671900 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.687746048 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.687758923 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.687778950 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.687853098 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.688056946 CEST	49738	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:54:41.688082933 CEST	443	49738	13.107.246.41	192.168.2.5
Apr 26, 2024 16:54:41.701875925 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.710416079 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.710458040 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.710474968 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.710483074 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.710505962 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.710520029 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.710542917 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.711496115 CEST	49743	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.711504936 CEST	443	49743	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.854662895 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:41.855020046 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.855050087 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:41.858902931 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:41.858968019 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.859275103 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.859299898 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.859363079 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.859384060 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.859409094 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.859431982 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.859457016 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.859605074 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:41.859926939 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.859935999 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:41.860552073 CEST	49744	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:54:41.860563040 CEST	443	49744	152.199.4.44	192.168.2.5
Apr 26, 2024 16:54:41.995294094 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.995346069 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:41.995484114 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.995855093 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:41.995871067 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:42.032421112 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:42.378103971 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:42.481193066 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:42.481241941 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:42.481251001 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:42.481281042 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:42.481364012 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:42.481374979 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:42.481417894 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:42.516344070 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:45.103482008 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:45.103519917 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:45.104238033 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:45.206242085 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:45.244544983 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:45.244772911 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:45.244944096 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:45.292141914 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:45.426711082 CEST	49745	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:45.426738024 CEST	443	49745	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.291296959 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.291330099 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.291338921 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.291358948 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.291368008 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.291377068 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.291404963 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.291435957 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.291451931 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.291475058 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.292320967 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.292330980 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.292371988 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.292399883 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.292411089 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.292418957 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.292427063 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.292447090 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.292473078 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.416615009 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.416631937 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.416697025 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.416723967 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.416738033 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.416799068 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.416836023 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.416836023 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.416867971 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.417296886 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.417380095 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.417395115 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.417414904 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:46.417612076 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.418289900 CEST	49746	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:54:46.418323040 CEST	443	49746	13.107.213.41	192.168.2.5
Apr 26, 2024 16:54:56.258229971 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:56.258269072 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:56.667495012 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:56.667567015 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:56.692307949 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:56.692332983 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:56.693561077 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:56.693627119 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:56.694333076 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:56.694385052 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:56.694624901 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:56.694629908 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:57.125770092 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:57.125837088 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:57.126164913 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:57.126219034 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:57.126316071 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:57.126364946 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:57.131252050 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:57.131268024 CEST	443	49724	23.1.237.91	192.168.2.5
Apr 26, 2024 16:54:57.131288052 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:54:57.132216930 CEST	49724	443	192.168.2.5	23.1.237.91
Apr 26, 2024 16:55:01.184910059 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.184954882 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.185026884 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.185720921 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.185739994 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.191468000 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.191484928 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.191581964 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.191864014 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.191875935 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.193175077 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.193217039 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.193280935 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.193892002 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.193907022 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.570868015 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.571146011 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.571172953 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.571461916 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.571813107 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.571876049 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.571959972 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.577162027 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.577352047 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.577375889 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.578259945 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.578336000 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.578721046 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.578779936 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.579062939 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.579073906 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.581912994 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.582097054 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.582113028 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.582566023 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.582921028 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.582999945 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.583141088 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.616111994 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.628110886 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.629260063 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.832097054 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.832146883 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.832190990 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.832199097 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.832248926 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.833722115 CEST	49750	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.833745003 CEST	443	49750	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.835376024 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.835508108 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.835591078 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.835619926 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.835674047 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.835728884 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.836112022 CEST	49749	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.836123943 CEST	443	49749	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.838521957 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.838547945 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.838797092 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.839289904 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.839301109 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.839648962 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.839684010 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.839848995 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.840089083 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.840105057 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.851825953 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.852530003 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.852586031 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:01.852592945 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.852639914 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.852880955 CEST	49748	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:01.852896929 CEST	443	49748	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:02.223284006 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:02.227227926 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:02.279154062 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:02.279174089 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.717967987 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.717995882 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.718280077 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.718343019 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.718770981 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.719436884 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.723377943 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.723453999 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.723969936 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.724194050 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.727039099 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.727551937 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.760188103 CEST	49753	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.760250092 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.760320902 CEST	49753	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.761089087 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.761162043 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.761234999 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.761511087 CEST	49753	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.761543989 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.761904001 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.761936903 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.768145084 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.772109985 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.852788925 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.852830887 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.852883101 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.852884054 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.852955103 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.854248047 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.854381084 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.854440928 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.854458094 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.854515076 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.854525089 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.854572058 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.855627060 CEST	49752	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.855663061 CEST	443	49752	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:03.861624956 CEST	49751	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:03.861646891 CEST	443	49751	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.142981052 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.143388987 CEST	49753	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.143451929 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.143966913 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.147176027 CEST	49753	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.147269964 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.147736073 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.147779942 CEST	49753	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.148525000 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.148571014 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.149727106 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.152851105 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.152928114 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.152968884 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.188133955 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.196145058 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.204760075 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.397281885 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.397356987 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.397466898 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.397509098 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.397527933 CEST	49753	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.397568941 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.399280071 CEST	49754	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.399317980 CEST	443	49754	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.399653912 CEST	49753	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.399686098 CEST	443	49753	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.408936977 CEST	49755	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.408976078 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.409039021 CEST	49755	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.409427881 CEST	49755	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.409442902 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.409869909 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.409926891 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.409980059 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.410270929 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.410284996 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.790060997 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.790380001 CEST	49755	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.790442944 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.790958881 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.791475058 CEST	49755	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.791578054 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.791637897 CEST	49755	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.796339989 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.796583891 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.796621084 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.797700882 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.798893929 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.799071074 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.799072981 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:04.832149029 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.844146967 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:04.844577074 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:05.046533108 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:05.046777010 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:05.046889067 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:05.047255993 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:05.047672987 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:05.047748089 CEST	49755	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:05.049464941 CEST	49756	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:05.049484015 CEST	443	49756	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:05.051995993 CEST	49755	443	192.168.2.5	152.199.4.44
Apr 26, 2024 16:55:05.052011967 CEST	443	49755	152.199.4.44	192.168.2.5
Apr 26, 2024 16:55:08.387974024 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:08.388015032 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:08.388075113 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:08.391689062 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:08.391710997 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:08.392430067 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:08.392465115 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:08.392543077 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:08.398332119 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:08.398343086 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:08.777224064 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:08.777527094 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:08.777571917 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:08.778704882 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:08.778773069 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:08.779973030 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:08.780090094 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:08.788681030 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:08.788896084 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:08.788906097 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:08.790327072 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:08.790389061 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:08.791326046 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:08.791414022 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:08.791568995 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:08.791575909 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:08.834142923 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:08.834146976 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:08.834170103 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:08.880275011 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:09.042062044 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043020964 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043042898 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043085098 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043114901 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.043131113 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043142080 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043169975 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.043191910 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.043555021 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043602943 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043649912 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.043657064 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.043672085 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.093826056 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.166605949 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.166630983 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.166672945 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.166697025 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.166749001 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.166757107 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.166814089 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.167023897 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.167063951 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.167085886 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.167093039 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.167121887 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.167139053 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.167546034 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.167588949 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.167632103 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.167639971 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.167650938 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.167690039 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.167696953 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.168080091 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.168148041 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.168154001 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.168179035 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.168204069 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.219018936 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.291074038 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.291117907 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.291172981 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.291198015 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.291222095 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.291235924 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.291270018 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.291300058 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.291675091 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.291718960 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.291743040 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.291749954 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.291786909 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.291804075 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.291980982 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292023897 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292052984 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.292058945 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292088032 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.292105913 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.292339087 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292382002 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292406082 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.292416096 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292442083 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.292463064 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.292474031 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292609930 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292650938 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292669058 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.292679071 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.292702913 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.321249962 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.321304083 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.321342945 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.321353912 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.321373940 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.374141932 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.416717052 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.416740894 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.416783094 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.416815042 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.416830063 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.416887045 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.416894913 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.416970015 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.418171883 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.418217897 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.418255091 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.418262959 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.418289900 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.418304920 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.418622017 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.418665886 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.418713093 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.418720007 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.418745995 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.418760061 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.419657946 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.419708967 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.419743061 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.419749975 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.419774055 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.419795990 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.419814110 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420018911 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420083046 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.420090914 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420130968 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420175076 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.420181990 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420488119 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420557976 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.420567989 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420583010 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420636892 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.420643091 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420830011 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420892954 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420905113 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.420922041 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.420938969 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.421272993 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.421312094 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.421350956 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.421360016 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.421370029 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.421642065 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.421689034 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.421700954 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.421720028 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.421749115 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.422415972 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.422463894 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.422504902 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.422516108 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.422530890 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.423063040 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.423113108 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.423125029 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.423139095 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.423168898 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.423409939 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.423449039 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.423470974 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.423479080 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.423522949 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.423535109 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.423584938 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.423935890 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.423981905 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.424005985 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.424014091 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.424042940 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.424053907 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.424191952 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.424235106 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.424279928 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.424285889 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.424309015 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.424336910 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.424344063 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.446125984 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.446177006 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.446206093 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.446219921 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.446279049 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.510279894 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:09.510324001 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:09.510395050 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:09.510859013 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:09.510871887 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:09.540957928 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.541013002 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.541043043 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.541059017 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.541117907 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.541137934 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.542013884 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.542082071 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.542107105 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.542114019 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.542152882 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.542465925 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.542527914 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.542566061 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.542635918 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.543385029 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.543427944 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.543463945 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.543473959 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.543495893 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.543515921 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.544292927 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.544336081 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.544384956 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.544404984 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.544426918 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.544440031 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.545167923 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.545243979 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.545275927 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.545347929 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.545550108 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.545600891 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.545614958 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.545623064 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.545675993 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.547555923 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.547599077 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.547632933 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.547638893 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.547671080 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.547689915 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.547765017 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.547810078 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.547832012 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.547838926 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.547864914 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.547872066 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.548194885 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.548252106 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.548278093 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.548296928 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.548321009 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.548343897 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.548438072 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.548506021 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.548523903 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.548595905 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.548710108 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.548922062 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.550754070 CEST	49763	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.550774097 CEST	443	49763	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.609622002 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.609688997 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.609855890 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.610831022 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.610850096 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.682617903 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.682673931 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.682753086 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.683252096 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.683295012 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.683345079 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.683506966 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.683521986 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:09.683686018 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:09.683695078 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.006165028 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.011473894 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.011538982 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.012842894 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.013427973 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.013571978 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.013585091 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.013609886 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.064680099 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.064987898 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.065042019 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.065049887 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.065768957 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.066200972 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.066217899 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.066560984 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.066652060 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.067027092 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.067120075 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.067193985 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.067280054 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.067359924 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.067698002 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.067756891 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.067819118 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.067826033 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.111685991 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.111710072 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.111711025 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.157877922 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.217138052 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.217228889 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.219119072 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.219140053 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.219496012 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.227515936 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.265897989 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.266845942 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.266881943 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.266901016 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.266946077 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.266944885 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.266967058 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.266994953 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.266998053 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.267029047 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.267050982 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.267931938 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.267977953 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.268018961 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.268052101 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.268084049 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.268124104 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.320787907 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.320806026 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.322376013 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.322410107 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.322525024 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.322570086 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.322607040 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.322766066 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.322834015 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.322899103 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.322926044 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.322949886 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.322979927 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.323009968 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.323537111 CEST	49768	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.323554993 CEST	443	49768	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.326847076 CEST	49767	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.326877117 CEST	443	49767	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.361108065 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.391174078 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.391199112 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.391242981 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.391262054 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.391285896 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.391304970 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.391330957 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.391349077 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.392898083 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.392919064 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.392956972 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.392960072 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.392988920 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.393021107 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.393021107 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.393037081 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.393085003 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.394087076 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.394136906 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.394177914 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.394191027 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.394236088 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.394236088 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.394742966 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.394821882 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.394835949 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.394897938 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.394956112 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.395267010 CEST	49766	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.395287037 CEST	443	49766	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.462691069 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.462713957 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.462831020 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.462995052 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.463025093 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.463227034 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.463238001 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.463248968 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.463499069 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.463510990 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.549537897 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:10.549583912 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:10.549674034 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:10.549910069 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:10.549921989 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:10.849888086 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.850249052 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.850269079 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.851434946 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.851639986 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.851655006 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.853251934 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.853327990 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.853410006 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.853463888 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.853977919 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.854083061 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.854109049 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.854506016 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.854562044 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.854703903 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.854711056 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.900118113 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.912839890 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.912899017 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.912940979 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.912981033 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.913063049 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.913101912 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.913105965 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.913126945 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.913145065 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.913162947 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.913162947 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.913182974 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.913197994 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.913244009 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.913258076 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.913333893 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.913393021 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.918179035 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.919013023 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.919044971 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.919070005 CEST	49765	443	192.168.2.5	40.68.123.157
Apr 26, 2024 16:55:10.919100046 CEST	443	49765	40.68.123.157	192.168.2.5
Apr 26, 2024 16:55:10.921988010 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.922003984 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:10.933108091 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:10.970325947 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:10.985919952 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:11.099122047 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:11.099322081 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:11.099467039 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:11.099504948 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:11.099524021 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:11.099900007 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:11.100142002 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:11.100202084 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:11.100219011 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:11.100325108 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:11.100722075 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:12.501351118 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.501399040 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.503142118 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.503160000 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.503196955 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.519196987 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.519366026 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.519632101 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.519646883 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.561615944 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.579709053 CEST	49771	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:12.579734087 CEST	443	49771	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:12.583035946 CEST	49770	443	192.168.2.5	192.229.211.199
Apr 26, 2024 16:55:12.583066940 CEST	443	49770	192.229.211.199	192.168.2.5
Apr 26, 2024 16:55:12.775382996 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775465012 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775485992 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775523901 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.775527954 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775547981 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775557995 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.775568008 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775577068 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.775594950 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.775599003 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775608063 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.775640965 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.775712967 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775763988 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.775774002 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775867939 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:12.775923014 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.881119967 CEST	49772	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:12.881139040 CEST	443	49772	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:13.644776106 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:13.644887924 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:13.644949913 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:13.675096989 CEST	49762	443	192.168.2.5	13.107.246.41
Apr 26, 2024 16:55:13.675144911 CEST	443	49762	13.107.246.41	192.168.2.5
Apr 26, 2024 16:55:13.740082979 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:13.740120888 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:13.740174055 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:13.740585089 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:13.740595102 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.131289959 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.131661892 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.131678104 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.133152962 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.133544922 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.134423971 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.134572029 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.134877920 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.134885073 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.250662088 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.525684118 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525731087 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525741100 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525759935 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525787115 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525795937 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525832891 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.525846958 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525862932 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.525870085 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525954962 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:14.525994062 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.526869059 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.526870012 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.954114914 CEST	49774	443	192.168.2.5	13.107.213.41
Apr 26, 2024 16:55:14.954152107 CEST	443	49774	13.107.213.41	192.168.2.5
Apr 26, 2024 16:55:17.618019104 CEST	49777	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:55:17.618063927 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:17.618128061 CEST	49777	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:55:17.619055033 CEST	49777	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:55:17.619074106 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:18.012814999 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:18.013323069 CEST	49777	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:55:18.013360977 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:18.014456987 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:18.014858961 CEST	49777	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:55:18.015064955 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:18.220155954 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:18.220242023 CEST	49777	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:55:27.996002913 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:27.996108055 CEST	443	49777	142.250.64.164	192.168.2.5
Apr 26, 2024 16:55:27.996175051 CEST	49777	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:55:29.508914948 CEST	49777	443	192.168.2.5	142.250.64.164
Apr 26, 2024 16:55:29.508999109 CEST	443	49777	142.250.64.164	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 16:54:16.807244062 CEST	57074	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:16.807410955 CEST	49596	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:16.929697990 CEST	53	49252	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:16.929800034 CEST	53	63357	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:16.932709932 CEST	53	49596	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:16.932744980 CEST	53	57074	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:17.803183079 CEST	53	51671	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:22.523575068 CEST	63635	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:22.523747921 CEST	57891	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:26.865818977 CEST	51093	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:26.866105080 CEST	64703	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:32.783442020 CEST	60035	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:32.783596992 CEST	58848	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:33.026566029 CEST	56562	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:33.035214901 CEST	55153	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:33.151971102 CEST	53	56562	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:33.161003113 CEST	53	55153	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:40.378822088 CEST	64517	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:40.378978014 CEST	60474	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:40.646090984 CEST	50637	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:40.646728992 CEST	61576	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:40.666814089 CEST	53	55609	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:40.772806883 CEST	53	61576	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:40.773277044 CEST	53	50637	1.1.1.1	192.168.2.5
Apr 26, 2024 16:54:41.306701899 CEST	52743	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:41.306982994 CEST	59526	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:54:42.015443087 CEST	53	49226	1.1.1.1	192.168.2.5
Apr 26, 2024 16:55:03.848546028 CEST	53	55730	1.1.1.1	192.168.2.5
Apr 26, 2024 16:55:05.527388096 CEST	49509	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:05.528105021 CEST	60892	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:08.249779940 CEST	60533	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:08.250374079 CEST	65319	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:08.375175953 CEST	53	60533	1.1.1.1	192.168.2.5
Apr 26, 2024 16:55:08.375940084 CEST	53	65319	1.1.1.1	192.168.2.5
Apr 26, 2024 16:55:10.150547981 CEST	53	52642	1.1.1.1	192.168.2.5
Apr 26, 2024 16:55:10.335395098 CEST	52293	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:10.335588932 CEST	55272	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:10.421730995 CEST	50619	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:10.422369003 CEST	64965	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:10.460846901 CEST	53	52293	1.1.1.1	192.168.2.5
Apr 26, 2024 16:55:10.462217093 CEST	53	55272	1.1.1.1	192.168.2.5
Apr 26, 2024 16:55:13.612411022 CEST	55080	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:13.612643957 CEST	60795	53	192.168.2.5	1.1.1.1
Apr 26, 2024 16:55:17.734828949 CEST	53	52146	1.1.1.1	192.168.2.5
Apr 26, 2024 16:55:29.825936079 CEST	53	60936	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 16:54:16.807244062 CEST	192.168.2.5	1.1.1.1	0x799d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:16.807410955 CEST	192.168.2.5	1.1.1.1	0x1754	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 16:54:22.523575068 CEST	192.168.2.5	1.1.1.1	0xc03c	Standard query (0)	esantegouv.sharepoint.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:22.523747921 CEST	192.168.2.5	1.1.1.1	0x6018	Standard query (0)	esantegouv.sharepoint.com	65	IN (0x0001)	false
Apr 26, 2024 16:54:26.865818977 CEST	192.168.2.5	1.1.1.1	0x632a	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:26.866105080 CEST	192.168.2.5	1.1.1.1	0xef63	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Apr 26, 2024 16:54:32.783442020 CEST	192.168.2.5	1.1.1.1	0x2870	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:32.783596992 CEST	192.168.2.5	1.1.1.1	0x7def	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Apr 26, 2024 16:54:33.026566029 CEST	192.168.2.5	1.1.1.1	0xf4f3	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:33.035214901 CEST	192.168.2.5	1.1.1.1	0x24de	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 26, 2024 16:54:40.378822088 CEST	192.168.2.5	1.1.1.1	0xa542	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:40.378978014 CEST	192.168.2.5	1.1.1.1	0xf8b4	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Apr 26, 2024 16:54:40.646090984 CEST	192.168.2.5	1.1.1.1	0x7fca	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:40.646728992 CEST	192.168.2.5	1.1.1.1	0x826d	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 26, 2024 16:54:41.306701899 CEST	192.168.2.5	1.1.1.1	0xb77e	Standard query (0)	aadcdn.msftauthimages.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:41.306982994 CEST	192.168.2.5	1.1.1.1	0xf922	Standard query (0)	aadcdn.msftauthimages.net	65	IN (0x0001)	false
Apr 26, 2024 16:55:05.527388096 CEST	192.168.2.5	1.1.1.1	0xca97	Standard query (0)	account.live.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:05.528105021 CEST	192.168.2.5	1.1.1.1	0x1a94	Standard query (0)	account.live.com	65	IN (0x0001)	false
Apr 26, 2024 16:55:08.249779940 CEST	192.168.2.5	1.1.1.1	0x8e3a	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:08.250374079 CEST	192.168.2.5	1.1.1.1	0x431d	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Apr 26, 2024 16:55:10.335395098 CEST	192.168.2.5	1.1.1.1	0x5471	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:10.335588932 CEST	192.168.2.5	1.1.1.1	0xce97	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Apr 26, 2024 16:55:10.421730995 CEST	192.168.2.5	1.1.1.1	0x8830	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:10.422369003 CEST	192.168.2.5	1.1.1.1	0xd161	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Apr 26, 2024 16:55:13.612411022 CEST	192.168.2.5	1.1.1.1	0xa010	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:13.612643957 CEST	192.168.2.5	1.1.1.1	0xdab8	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 16:54:16.932709932 CEST	1.1.1.1	192.168.2.5	0x1754	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 16:54:16.932744980 CEST	1.1.1.1	192.168.2.5	0x799d	No error (0)	www.google.com		142.250.64.164	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:22.773291111 CEST	1.1.1.1	192.168.2.5	0x6018	No error (0)	esantegouv.sharepoint.com	2340-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:22.773291111 CEST	1.1.1.1	192.168.2.5	0x6018	No error (0)	2340-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	190053-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:22.773291111 CEST	1.1.1.1	192.168.2.5	0x6018	No error (0)	190053-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	190053-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:22.824414968 CEST	1.1.1.1	192.168.2.5	0xc03c	No error (0)	esantegouv.sharepoint.com	2340-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:22.824414968 CEST	1.1.1.1	192.168.2.5	0xc03c	No error (0)	2340-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	190053-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:22.824414968 CEST	1.1.1.1	192.168.2.5	0xc03c	No error (0)	190053-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	190053-ipv4v6w.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:22.824414968 CEST	1.1.1.1	192.168.2.5	0xc03c	No error (0)	190053-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:22.824414968 CEST	1.1.1.1	192.168.2.5	0xc03c	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:22.824414968 CEST	1.1.1.1	192.168.2.5	0xc03c	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:26.991365910 CEST	1.1.1.1	192.168.2.5	0x632a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:26.991646051 CEST	1.1.1.1	192.168.2.5	0xef63	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:27.817032099 CEST	1.1.1.1	192.168.2.5	0x286a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:27.817032099 CEST	1.1.1.1	192.168.2.5	0x286a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:29.029346943 CEST	1.1.1.1	192.168.2.5	0xff5b	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:29.029346943 CEST	1.1.1.1	192.168.2.5	0xff5b	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:29.029346943 CEST	1.1.1.1	192.168.2.5	0xff5b	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:32.908287048 CEST	1.1.1.1	192.168.2.5	0x2870	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:32.910183907 CEST	1.1.1.1	192.168.2.5	0x7def	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:33.151971102 CEST	1.1.1.1	192.168.2.5	0xf4f3	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:33.151971102 CEST	1.1.1.1	192.168.2.5	0xf4f3	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:33.161003113 CEST	1.1.1.1	192.168.2.5	0x24de	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:40.513164997 CEST	1.1.1.1	192.168.2.5	0xf8b4	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:40.513196945 CEST	1.1.1.1	192.168.2.5	0xa542	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:40.513196945 CEST	1.1.1.1	192.168.2.5	0xa542	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:40.513196945 CEST	1.1.1.1	192.168.2.5	0xa542	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:40.513196945 CEST	1.1.1.1	192.168.2.5	0xa542	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:40.772806883 CEST	1.1.1.1	192.168.2.5	0x826d	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:40.773277044 CEST	1.1.1.1	192.168.2.5	0x7fca	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:40.773277044 CEST	1.1.1.1	192.168.2.5	0x7fca	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:41.432569027 CEST	1.1.1.1	192.168.2.5	0xb77e	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:41.432569027 CEST	1.1.1.1	192.168.2.5	0xb77e	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:41.432569027 CEST	1.1.1.1	192.168.2.5	0xb77e	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:41.432569027 CEST	1.1.1.1	192.168.2.5	0xb77e	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:41.434057951 CEST	1.1.1.1	192.168.2.5	0xf922	No error (0)	aadcdn.msftauthimages.net	aadcdn-msft.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:45.527070045 CEST	1.1.1.1	192.168.2.5	0x7775	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:45.527070045 CEST	1.1.1.1	192.168.2.5	0x7775	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:54:59.503372908 CEST	1.1.1.1	192.168.2.5	0x7413	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:54:59.503372908 CEST	1.1.1.1	192.168.2.5	0x7413	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:05.655250072 CEST	1.1.1.1	192.168.2.5	0xca97	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:05.695822001 CEST	1.1.1.1	192.168.2.5	0x1a94	No error (0)	account.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:08.374335051 CEST	1.1.1.1	192.168.2.5	0x3fc7	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:08.374335051 CEST	1.1.1.1	192.168.2.5	0x3fc7	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:08.374335051 CEST	1.1.1.1	192.168.2.5	0x3fc7	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:08.375175953 CEST	1.1.1.1	192.168.2.5	0x8e3a	No error (0)	logincdn.msftauth.net	cs1227.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:08.375175953 CEST	1.1.1.1	192.168.2.5	0x8e3a	No error (0)	cs1227.wpc.alphacdn.net		192.229.211.199	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:08.375940084 CEST	1.1.1.1	192.168.2.5	0x431d	No error (0)	logincdn.msftauth.net	cs1227.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:08.515574932 CEST	1.1.1.1	192.168.2.5	0xf5b7	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:08.515574932 CEST	1.1.1.1	192.168.2.5	0xf5b7	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:08.515574932 CEST	1.1.1.1	192.168.2.5	0xf5b7	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:08.516920090 CEST	1.1.1.1	192.168.2.5	0x197c	No error (0)	cs1227.wpc.alphacdn.net		192.229.211.199	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:10.460846901 CEST	1.1.1.1	192.168.2.5	0x5471	No error (0)	logincdn.msftauth.net	cs1227.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:10.460846901 CEST	1.1.1.1	192.168.2.5	0x5471	No error (0)	cs1227.wpc.alphacdn.net		192.229.211.199	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:10.462217093 CEST	1.1.1.1	192.168.2.5	0xce97	No error (0)	logincdn.msftauth.net	cs1227.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:10.548552990 CEST	1.1.1.1	192.168.2.5	0x8830	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:10.548552990 CEST	1.1.1.1	192.168.2.5	0x8830	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:10.548552990 CEST	1.1.1.1	192.168.2.5	0x8830	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:10.548552990 CEST	1.1.1.1	192.168.2.5	0x8830	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:10.548978090 CEST	1.1.1.1	192.168.2.5	0xd161	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:13.737850904 CEST	1.1.1.1	192.168.2.5	0xa010	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:13.737850904 CEST	1.1.1.1	192.168.2.5	0xa010	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:13.737850904 CEST	1.1.1.1	192.168.2.5	0xa010	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:13.737850904 CEST	1.1.1.1	192.168.2.5	0xa010	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 26, 2024 16:55:13.737888098 CEST	1.1.1.1	192.168.2.5	0xdab8	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:20.922630072 CEST	1.1.1.1	192.168.2.5	0x60b9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 16:55:20.922630072 CEST	1.1.1.1	192.168.2.5	0x60b9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

esantegouv.sharepoint.com

fs.microsoft.com

slscr.update.microsoft.com

https:

aadcdn.msauth.net

aadcdn.msftauth.net

aadcdn.msftauthimages.net

www.bing.com

logincdn.msftauth.net

acctcdn.msftauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49713	13.107.136.10	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:23 UTC	739	OUT	GET /sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc HTTP/1.1 Host: esantegouv.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:23 UTC	2008	IN	HTTP/1.1 302 Found Content-Length: 309 Content-Type: text/html; charset=utf-8 Location: https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FGED%2DCalypso%2Fespace%2Dprojets%3Fe%3D1%253A89e0ab13bf664a7a934564dea0253fdc P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,0,409,2368958,0,950440 X-SharePointHealthScore: 3 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 35d122a1-0029-8000-9f00-9de542560623 request-id: 35d122a1-0029-8000-9f00-9de542560623 MS-CV: oSLRNSkAAICfAJ3lQlYGIw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-MIA30r5c&frontEnd=AFD&RemoteIP=102.129.152.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 23 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 8DCFDE2D8FD849FF892B5A6C92D4C12B Ref B: MIA301000105019 Ref C: 2024-04-26T14:54:23Z Date: Fri, 26 Apr 2024 14:54:22 GMT Connection: close
2024-04-26 14:54:23 UTC	309	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 73 61 6e 74 65 67 6f 75 76 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 73 69 74 65 73 2f 47 45 44 2d 43 61 6c 79 70 73 6f 2f 65 73 70 61 63 65 2d 70 72 6f 6a 65 74 73 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 73 69 74 65 73 25 32 46 47 45 44 25 32 44 43 61 6c 79 70 73 6f 25 32 46 65 73 70 61 63 65 25 32 44 70 72 6f 6a 65 74 73 25 33 46 65 25 33 44 31 25 32 35 33 41 38 39 65 30 61 62 31 33 62 66 36 36 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FGED%2DCalypso%2Fespace%2Dprojets%3Fe%3D1%253A89e0ab13bf66

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	13.107.136.10	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:23 UTC	826	OUT	GET /sites/GED-Calypso/espace-projets/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FGED%2DCalypso%2Fespace%2Dprojets%3Fe%3D1%253A89e0ab13bf664a7a934564dea0253fdc HTTP/1.1 Host: esantegouv.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:23 UTC	1895	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 357 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fsites%2fGED-Calypso%2fespace-projets%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FGED%252DCalypso%252Fespace%252Dprojets%253Fe%253D1%25253A89e0ab13bf664a7a934564dea0253fdc&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRnNpdGVzJTJGR0VEJTJEQ2FseXBzbyUyRmVzcGFjZSUyRHByb2pldHMlM0ZlJTNEMSUyNTNBODllMGFiMTNiZjY2NGE3YTkzNDU2NGRlYTAyNTNmZGM=; expires=Fri, 26-Apr-2024 15:04:23 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,1051136,0,408,528718,0,318514 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 35d122a1-803b-8000-91a3-7c07d52c1a98 request-id: 35d122a1-803b-8000-91a3-7c07d52c1a98 MS-CV: oSLRNTuAAICRo3wH1SwamA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-MIA30r5a&frontEnd=AFD&RemoteIP=102.129.152.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 16 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F61C4A22E1994B6A8AA503177AEAC8C6 Ref B: MIA301000101033 Ref C: 2024-04-26T14:54:23Z Date: Fri, 26 Apr 2024 14:54:23 GMT Connection: close
2024-04-26 14:54:23 UTC	357	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 73 69 74 65 73 25 32 66 47 45 44 2d 43 61 6c 79 70 73 6f 25 32 66 65 73 70 61 63 65 2d 70 72 6f 6a 65 74 73 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 73 69 74 65 73 25 32 35 32 46 47 45 44 25 32 35 32 44 43 61 6c 79 70 73 6f 25 32 35 32 46 65 73 70 61 63 65 25 32 35 32 44 70 72 6f 6a 65 74 73 25 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2fsites%2fGED-Calypso%2fespace-projets%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FGED%252DCalypso%252Fespace%252Dprojets%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	13.107.136.10	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:26 UTC	1058	OUT	GET /_forms/default.aspx?ReturnUrl=%2fsites%2fGED-Calypso%2fespace-projets%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FGED%252DCalypso%252Fespace%252Dprojets%253Fe%253D1%25253A89e0ab13bf664a7a934564dea0253fdc&Source=cookie HTTP/1.1 Host: esantegouv.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RpsContextCookie=U291cmNlPSUyRnNpdGVzJTJGR0VEJTJEQ2FseXBzbyUyRmVzcGFjZSUyRHByb2pldHMlM0ZlJTNEMSUyNTNBODllMGFiMTNiZjY2NGE3YTkzNDU2NGRlYTAyNTNmZGM=
2024-04-26 14:54:26 UTC	3813	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 881 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7=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; expires=Fri, 26-Apr-2024 14:58:26 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=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; expires=Fri, 26-Apr-2024 15:04:26 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 0,525568,0,102,148975,0,61128 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 35d122a1-f0f7-8000-9f00-9b0014cd2e9c request-id: 35d122a1-f0f7-8000-9f00-9b0014cd2e9c MS-CV: oSLRNffwAICfAJsAFM0unA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=508449d3-d632-429b-97ce-f8ad22b3a7e7&destinationEndpoint=Edge-Prod-MIA30r5c&frontEnd=AFD&RemoteIP=102.129.152.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 51 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: EC0C3AEB1DCB41FFB9A017A096BC177F Ref B: MIA301000105025 Ref C: 2024-04-26T14:54:26Z Date: Fri, 26 Apr 2024 14:54:26 GMT Connection: close
2024-04-26 14:54:26 UTC	661	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 35 30 38 34 34 39 64 33 2d 64 36 33 32 2d 34 32 39 62 2d 39 37 63 65 2d 66 38 61 64 32 32 62 33 61 37 65 37 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for
2024-04-26 14:54:26 UTC	220	IN	Data Raw: 41 25 37 42 25 32 32 76 61 6c 75 65 73 25 32 32 25 33 41 25 35 42 25 32 32 43 50 31 25 32 32 25 35 44 25 37 44 25 37 44 25 37 44 26 61 6d 70 3b 77 73 75 63 78 74 3d 31 26 61 6d 70 3b 63 6f 62 72 61 6e 64 69 64 3d 31 31 62 64 38 30 38 33 25 32 44 38 37 65 30 25 32 44 34 31 62 35 25 32 44 62 62 37 38 25 32 44 30 62 63 34 33 63 38 61 38 65 38 61 26 61 6d 70 3b 63 6c 69 65 6e 74 25 32 44 72 65 71 75 65 73 74 25 32 44 69 64 3d 33 35 64 31 32 32 61 31 25 32 44 66 30 66 37 25 32 44 38 30 30 30 25 32 44 39 66 30 30 25 32 44 39 62 30 30 31 34 63 64 32 65 39 63 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:26 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 14:54:26 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=58159 Date: Fri, 26 Apr 2024 14:54:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:27 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 14:54:27 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=58152 Date: Fri, 26 Apr 2024 14:54:27 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 14:54:27 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49716	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:27 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+YGPeomb2VsMfUU&MD=SOTdARar HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 14:54:29 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 5382b522-fa8d-4d51-8afa-9a9404fa6892 MS-RequestId: 7b54be41-28f0-4b50-a4b9-396385096c96 MS-CV: kbV9d+QtvEOkQg3A.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 14:54:27 GMT Connection: close Content-Length: 24490
2024-04-26 14:54:29 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-26 14:54:29 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	13.107.246.41	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:29 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_Ggyc2EJnCaHFrI6xkBPLcg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:30 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:54:29 GMT Content-Type: application/x-javascript Content-Length: 49609 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 01 Apr 2024 18:07:19 GMT ETag: 0x8DC527692402A16 x-ms-request-id: 0084ac22-c01e-006a-21e9-97a9a9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T145429Z-1865489d5f4vxtqf9836nc5azn00000004e000000000phwv x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-26 14:54:30 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 70 e7 97 06 ba 9b 19 20 0c 81 e9 99 05 96 c7 89 15 70 77 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e 7d cf 73 be 9c b9 04 5b 2a c9 52 a9 aa 54 55 2a 49 eb 3f af fc 4f e5 e7 ca da 8f ff 53 19 9c f7 ce ce 2b fd 8f 95 f3 cf 87 67 fb 95 53 78 fb b3 72 d2 3f 3f dc 3b f8 f1 7a f0 a3 f8 ff f9 9d 1f 57 c6 fe 44 54 e0 ef d0 8d 85 57 09 83 4a 18 55 fc 60 14 46 d3 30 72 13 11 57 ee e1 37 f2 dd 49 65 1c 85 f7 95 e4 4e 54 a6 51 f8 55 8c 92 b8 32 f1 e3 04 0a 0d c5 24 7c ac 54 a1 ba c8 ab 9c ba 51 f2 5c 39 3c 35 eb 50 bf 80 da fc 5b 3f 80 d2 a3 70 fa 0c cf 77 49 25 08 13 7f 24 2a 6e e0 51 6d 13 78 09 62 51 99 05 9e 88 2a 8f 77 fe e8 ae 72 ec 8f a2 30 0e c7 49 25 12 23 e1 Data Ascii: [88+wOLhpp pwe o?ulq}s[RTUI?OS+gSxr??;zWDTWJU`F0rW7IeNTQU2$\|TQ\9<5P[?pwI%$nQmxbQwr0I%#
2024-04-26 14:54:30 UTC	16384	IN	Data Raw: 40 e8 c1 13 9e 56 01 b0 7d 30 34 bf 32 a5 e6 0e cc 14 97 06 1d d7 63 5c 57 4b 0e 5c 14 1d bc 10 11 10 01 36 45 38 e6 b3 c8 e8 a4 7a ed 64 b2 f4 5b 15 79 40 6b 25 52 5f b2 2b 46 0d 4f 35 8c 85 d2 3f b4 8f 98 2f f2 1c a8 b9 69 35 e8 ea 01 40 4b e9 7d 72 0b 87 bb 69 d7 85 45 5a 8d a1 e5 e3 cd 07 e9 2d 71 55 d3 ac a3 60 a4 8c 65 8d 08 f1 74 7e 13 2f eb 31 cd 37 70 bb 69 5a 74 b2 49 03 0f 0d c7 b3 be 2c 97 31 9e 9d 14 99 a2 0d cf 0d c7 63 4f 66 8e 8f a7 b0 90 fe 4e c7 1b f3 71 fa 7c e4 bb 35 a2 6b e6 eb 63 26 7d 36 b9 51 fd b8 47 a7 24 e6 f8 9c 06 d2 82 8e 90 b1 f8 04 a8 ec 83 9e 76 d8 66 fe ee ba 89 3a ab 6b 72 29 ae e5 21 8a 13 cb 8d 6e e9 f4 ab 18 fa a9 6e 31 3c 0a 5d b9 30 0c 82 7c 84 f7 0a 32 f6 9d c5 63 a1 10 db 6e 35 77 f0 cb 68 75 75 65 d2 4d ea 82 ce Data Ascii: @V}042c\WK\6E8zd[y@k%R_+FO5?/i5@K}riEZ-qU`et~/17piZtI,1cOfNq\|5kc&}6QG$vf:kr)!nn1<]0\|2cn5whuueM
2024-04-26 14:54:30 UTC	16384	IN	Data Raw: 15 3b 5a 35 d2 2d 24 be c1 ba 94 ea 78 c0 e0 b6 8a 79 cb 8c a3 13 bf 75 18 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 ac 33 6d ea 5c 99 d3 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf d6 69 91 4c 39 d2 41 ff 70 ed 5f 9e 7b 62 8a b5 a6 25 e9 d1 0b 70 ce e7 df 62 38 15 3b ca e4 ee 9c 4a 8c 8d 75 83 64 61 21 ff 41 e2 3a ef 4a a2 2b ea 0b fe 60 b6 06 9f 3f 78 f2 e2 a9 22 5c c8 13 05 82 07 0a 0f d2 58 35 2d 9b 5d 33 49 a6 75 88 1d 4a a8 5d d0 91 c9 92 d8 75 bd 2d 40 98 0c 2c 7d 37 df ea 30 eb 07 fc 9e f3 d1 b4 2e 22 b1 05 92 34 42 d5 f3 b9 c0 0e 0f b3 4e 52 83 ba 21 dc 0e 74 4c a7 cf d4 5f 67 54 b5 88 13 b0 09 91 a9 66 7d fa b8 2f 22 96 91 2f 2c e0 87 f1 3a eb e9 9d a1 6b f8 9c 22 33 ae 7e e3 d9 9c 29 b5 9c be 2d b1 31 ab fb 27 31 02 2a a1 52 Data Ascii: ;Z5-$xyuRegfr3m\n4$VaViL9Ap_{b%pb8;Juda!A:J+`?x"\X5-]3IuJ]u-@,}70."4BNR!tL_gTf}/"/,:k"3~)-1'1*R
2024-04-26 14:54:30 UTC	1255	IN	Data Raw: 21 44 5c 72 89 1b 13 34 2d b6 c9 f8 ec c4 eb 35 dd 6e df d6 74 e5 f0 f6 d6 8d 7a 8e f2 ee 3d 00 ef 71 5f 1c 1c a0 cd c1 e1 45 84 d1 51 5e eb 62 40 3f 44 c2 52 95 a3 0e ce a3 87 e1 6b 77 23 43 14 f4 ae 3b 33 61 81 49 89 a4 07 65 bb 55 23 f7 84 ce 9d c3 ba 2b 4f 5c c9 30 a1 9c dc 39 31 69 78 33 5e a4 45 59 71 6c d7 24 9b 78 e0 3d 63 51 c7 83 a8 dc bf ef ac 56 d9 2c 5b 25 f9 f2 fc 32 9d 9f 27 e7 97 b3 cb d9 87 ab 8b 25 b5 25 5f a5 1f 52 87 9d ed f1 12 dc 80 e8 02 f9 6d c4 71 4d 22 f6 32 af fd 1d f6 dd 51 e0 fb f6 ac 38 2f 73 e3 98 d3 70 d2 51 ee 8e ec b9 0d 57 c3 b1 a3 34 bb c6 99 c5 f6 35 72 1d b3 60 c7 70 a6 4b da 73 f0 ae ac 27 60 60 ca 72 5e b5 41 8a 45 9a 34 a2 88 cf ac 95 f7 6f 3a 8a 53 f1 e5 d4 6d b6 e2 af c6 cb 49 ef 0e f4 71 01 b0 30 7f b0 50 c9 6b Data Ascii: !D\r4-5ntz=q_EQ^b@?DRkw#C;3aIeU#+O\091ix3^EYql$x=cQV,[%2'%%_RmqM"2Q8/spQW45r`pKs'``r^AE4o:SmIq0Pk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49730	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:33 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:33 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792257 Cache-Control: public, max-age=31536000 Content-MD5: kqhA3D0Xczna4D/t8ioitQ== Content-Type: text/css Date: Fri, 26 Apr 2024 14:54:33 GMT Etag: 0x8DC070858CA028D Last-Modified: Wed, 27 Dec 2023 18:19:21 GMT Server: ECAcc (mic/9B0A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2200205c-a01e-00d5-7e84-7ee94a000000 x-ms-version: 2009-09-19 Content-Length: 113084 Connection: close
2024-04-26 14:54:33 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-04-26 14:54:33 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-04-26 14:54:33 UTC	16383	IN	Data Raw: 72 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 Data Ascii: rgin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-b
2024-04-26 14:54:33 UTC	16383	IN	Data Raw: 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 Data Ascii: flow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.ta
2024-04-26 14:54:33 UTC	16383	IN	Data Raw: 55 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e Data Ascii: UI","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mon
2024-04-26 14:54:33 UTC	16383	IN	Data Raw: 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: t[type="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{backgroun
2024-04-26 14:54:34 UTC	14786	IN	Data Raw: 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f Data Ascii: margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16px;margin-botto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49731	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:35 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:35 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1592596 Cache-Control: public, max-age=31536000 Content-MD5: Wy47KxpwbAEBtQO3Lwqbbw== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 14:54:35 GMT Etag: 0x8DC55179E1E3E92 Last-Modified: Fri, 05 Apr 2024 02:25:10 GMT Server: ECAcc (mic/9BE3) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 028f352d-801e-00bf-0d6d-89a57d000000 x-ms-version: 2009-09-19 Content-Length: 444357 Connection: close
2024-04-26 14:54:35 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 55 4e 41 55 54 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f 54 48 45 52 3a 22 38 30 30 34 35 35 33 39 22 2c 50 50 5f 45 5f 53 51 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 45 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 43 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 45 44 5f 49 4e 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 44 22 2c 50 50 5f 45 5f 4c 49 42 50 48 4f 4e 45 4e 55 4d 42 45 52 49 4e 54 45 52 4f 50 5f 4e 55 4d 42 45 52 50 41 52 53 45 5f 45 58 43 45 50 54 49 4f 4e 3a 22 Data Ascii: IP_VALIDATION_ERROR_UNAUTHENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_OTHER:"80045539",PP_E_SQ_CONTAINS_PASSWORD:"8004341E",PP_E_SA_CONTAINS_PASSWORD:"8004341C",PP_E_SA_CONTAINED_IN_PASSWORD:"8004341D",PP_E_LIBPHONENUMBERINTEROP_NUMBERPARSE_EXCEPTION:"
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 6e 2c 74 29 7d 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 74 2c 69 29 3a 65 2e 64 65 74 61 63 68 45 76 65 6e 74 26 26 65 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 6e 2c 74 29 7d 2c 67 65 74 45 76 65 6e 74 54 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 74 61 72 67 65 74 3f 65 2e 74 61 72 67 65 74 3a 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 3a 6e 75 6c 6c 7d 7d 2c 44 Data Ascii: hEvent&&e.attachEvent("on"+n,t)},removeEventListener:function(e,n,t,i){e.removeEventListener?e.removeEventListener(n,t,i):e.detachEvent&&e.detachEvent("on"+n,t)},getEventTarget:function(e){return e?e.target?e.target:e.srcElement?e.srcElement:null:null}},D
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 65 4c 69 6d 69 74 3d 7b 6d 65 74 68 6f 64 3a 22 6e 6f 74 69 66 79 57 68 65 6e 43 68 61 6e 67 65 73 53 74 6f 70 22 7d 2c 73 2e 67 65 74 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 49 49 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 4d 61 73 6b 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 Data Ascii: eLimit={method:"notifyWhenChangesStop"},s.getPropertyLogOption(e,n)},s.getPIITextBoxPropertyLogOption=function(e,n){return(n=n\|\|{}).hidingMode=i.HidingMode.Mask,s.getDefaultTextBoxPropertyLogOption(e,n)},s.getPasswordTextBoxPropertyLogOption=function(e,n)
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 22 2c 6d 3d 65 2e 64 61 74 61 2c 62 3d 65 2e 6f 6e 53 65 6e 64 2c 76 3d 65 2e 6f 6e 53 65 6e 64 46 61 69 6c 2c 68 3d 65 2e 6f 6e 46 6c 6f 77 45 78 70 69 72 65 64 2c 5f 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 34 2c 53 3d 65 2e 73 69 74 65 49 64 2c 43 3d 65 2e 63 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 78 3d 65 2e 6e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 3b 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 76 61 72 20 6e 3d 21 31 2c 74 3d 64 2e 67 65 74 52 65 73 70 6f 6e 73 65 4a 73 6f 6e 28 29 3b 67 3d 74 5b 73 2e 46 6c 6f 77 54 6f 6b 65 6e 5d 7c 7c 22 22 2c 74 5b 73 2e 53 74 61 74 65 5d 3f 28 6c 3d 74 5b 73 2e 53 74 61 74 65 5d 2c 75 3d 74 5b 73 2e 53 65 73 73 69 6f 6e 4c 6f 6f 6b 75 70 4b 65 79 5d 7c Data Ascii: ",m=e.data,b=e.onSend,v=e.onSendFail,h=e.onFlowExpired,_=e.timeout\|\|3e4,S=e.siteId,C=e.clientId,w=e.forwardedClientId,x=e.noPaBubbleVersion;function y(e){var n=!1,t=d.getResponseJson();g=t[s.FlowToken]\|\|"",t[s.State]?(l=t[s.State],u=t[s.SessionLookupKey]\|
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 6d 2e 52 65 6d 6f 74 65 4e 47 43 3a 63 61 73 65 20 6d 2e 46 65 64 65 72 61 74 69 6f 6e 3a 63 61 73 65 20 6d 2e 41 63 63 65 73 73 50 61 73 73 3a 63 61 73 65 20 6d 2e 4e 6f 50 72 65 66 65 72 72 65 64 43 72 65 64 65 6e 74 69 61 6c 3a 6f 26 26 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 26 26 6f 2e 52 65 6c 61 79 53 74 61 74 65 3f 28 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 75 65 73 74 3a 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 2c 52 65 6c 61 79 53 74 61 74 65 3a 6f 2e 52 65 6c 61 79 53 74 61 74 65 2c 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3a 65 7d Data Ascii: m.RemoteNGC:case m.Federation:case m.AccessPass:case m.NoPreferredCredential:o&&o.SamlRequest&&o.RelayState?(i.idpRedirectUrl=n.Credentials.FederationRedirectUrl,i.idpRedirectPostParams={SAMLRequest:o.SamlRequest,RelayState:o.RelayState,unsafe_username:e}
2024-04-26 14:54:35 UTC	737	IN	Data Raw: 65 28 29 2c 6e 2e 6f 6e 53 68 6f 77 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 43 6f 75 6e 74 3d 30 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 54 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 6b 65 72 3d 21 31 2c 6e 2e 73 77 69 74 63 68 54 6f 43 72 65 64 49 64 3d 6e 75 6c 6c 2c 6e 2e 73 77 69 74 63 68 54 6f 43 72 65 64 54 65 78 74 3d 6e 75 6c 6c 2c 6e 2e 73 68 6f 77 53 77 69 74 63 68 54 6f 43 72 65 64 50 69 63 6b 65 72 4c 69 6e 6b 3d 21 31 2c 6e 2e 73 68 Data Ascii: e(),n.onShowDialog=o.create(),n.onSetPendingRequest=o.create(),n.onUpdateFlowToken=o.create(),n.credentialCount=0,n.selectedCredType=null,n.selectedCredShownOnlyOnPicker=!1,n.switchToCredId=null,n.switchToCredText=null,n.showSwitchToCredPickerLink=!1,n.sh
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 77 69 74 63 68 28 6e 2e 63 72 65 64 4c 69 6e 6b 45 72 72 6f 72 28 22 22 29 2c 65 29 7b 63 61 73 65 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 3a 69 66 28 4f 2e 70 72 6f 6f 66 2e 63 6c 65 61 72 44 69 67 69 74 73 29 6e 2e 6f 6e 53 77 69 74 63 68 56 69 65 77 28 67 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 21 31 2c 4f 29 3b 65 6c 73 65 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 75 73 65 72 6e 61 6d 65 3a 66 2e 63 6c 65 61 6e 73 65 55 73 65 72 6e 61 6d 65 28 61 29 2c 70 72 6f 6f 66 44 61 74 61 3a 4f 2e 70 72 6f 6f 66 2e 64 61 74 61 2c 70 72 6f 6f 66 54 79 70 65 3a 4f 2e 70 72 6f 6f 66 2e 74 79 70 65 2c 70 75 72 70 6f 73 65 3a 4f 2e 70 72 6f 6f 66 2e 69 73 4e 6f 70 61 3f 6c 2e 50 75 72 70 6f 73 65 2e 4e 6f 50 61 73 Data Ascii: witch(n.credLinkError(""),e){case m.OneTimeCode:if(O.proof.clearDigits)n.onSwitchView(g.ProofConfirmation,!1,O);else{var t=function(){var e={username:f.cleanseUsername(a),proofData:O.proof.data,proofType:O.proof.type,purpose:O.proof.isNopa?l.Purpose.NoPas
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 44 65 74 61 69 6c 73 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 63 75 72 72 65 6e 74 56 69 65 77 48 61 73 4d 65 74 61 64 61 74 61 28 22 65 78 74 72 61 44 65 62 75 67 44 65 74 61 69 6c 73 22 29 7d 29 29 2c 61 2e 73 68 6f 77 46 6f 6f 74 65 72 43 6f 6e 74 72 6f 6c 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d Data Ascii: Details=i.pureComputed((function(){return a.paginationControlMethods()&&a.paginationControlMethods().currentViewHasMetadata("extraDebugDetails")})),a.showFooterControl=i.pureComputed((function(){return!r&&a.paginationControlMethods()&&a.paginationControlM
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 65 72 69 63 45 72 72 6f 72 3a 63 61 73 65 20 75 2e 47 65 6e 65 72 69 63 45 72 72 6f 72 4d 6f 62 69 6c 65 3a 63 61 73 65 20 75 2e 47 65 6e 65 72 69 63 45 72 72 6f 72 48 6f 73 74 3a 63 61 73 65 20 75 2e 53 77 69 74 63 68 55 73 65 72 3a 63 61 73 65 20 75 2e 53 77 69 74 63 68 55 73 65 72 4d 6f 62 69 6c 65 3a 63 61 73 65 20 75 2e 53 77 69 74 63 68 55 73 65 72 48 6f 73 74 3a 63 61 73 65 20 75 2e 49 6e 76 69 74 65 42 6c 6f 63 6b 65 64 3a 63 61 73 65 20 75 2e 53 65 72 76 69 63 65 42 6c 6f 63 6b 65 64 3a 63 61 73 65 20 75 2e 49 44 50 46 61 69 6c 65 64 3a 63 61 73 65 20 75 2e 48 49 50 5f 4c 6f 63 6b 6f 75 74 3a 63 61 73 65 20 75 2e 48 49 50 5f 4c 6f 63 6b 6f 75 74 4d 6f 62 69 6c 65 3a 63 61 73 65 20 75 2e 48 49 50 5f 4c 6f 63 6b 6f 75 74 48 6f 73 74 3a 63 61 73 65 Data Ascii: ericError:case u.GenericErrorMobile:case u.GenericErrorHost:case u.SwitchUser:case u.SwitchUserMobile:case u.SwitchUserHost:case u.InviteBlocked:case u.ServiceBlocked:case u.IDPFailed:case u.HIP_Lockout:case u.HIP_LockoutMobile:case u.HIP_LockoutHost:case

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49732	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:35 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:35 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2000896 Cache-Control: public, max-age=31536000 Content-MD5: CY0A6RVMGkhI2gFiBcGc6Q== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 14:54:35 GMT Etag: 0x8DC535BDA2DB838 Last-Modified: Tue, 02 Apr 2024 21:28:34 GMT Server: ECAcc (mic/9AFE) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a8dac9c6-d01e-000a-53b6-855433000000 x-ms-version: 2009-09-19 Content-Length: 55037 Connection: close
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-04-26 14:54:35 UTC	2	IN	Data Raw: 6f 74 Data Ascii: ot
2024-04-26 14:54:35 UTC	16383	IN	Data Raw: 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 3a 27 59 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 49 66 20 79 6f 75 20 64 6f 6e 5c 27 74 20 72 65 6d 65 6d 62 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2c 20 3c 61 20 69 64 3d 22 69 64 41 5f 49 4c 5f 46 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 2c 65 2e 43 54 5f 53 54 52 5f 43 6f 6e 66 69 72 6d 53 65 6e 64 5f 4f 74 63 3d 22 57 65 27 6c 6c 20 73 65 6e 64 20 61 20 63 6f 64 65 20 74 6f 20 7b 30 7d 20 74 6f 20 73 69 67 6e 20 79 6f 75 20 69 6e 2e 22 2c 65 2e 43 54 5f 4f 54 43 5f 53 54 52 5f Data Ascii: Password0" href="#">reset it now.</a>':'Your email or password is incorrect. If you don\'t remember your password, <a id="idA_IL_ForgotPassword0" href="#">reset it now.</a>',e.CT_STR_ConfirmSend_Otc="We'll send a code to {0} to sign you in.",e.CT_OTC_STR_
2024-04-26 14:54:35 UTC	5886	IN	Data Raw: 64 42 75 74 4e 6f 74 55 73 65 64 22 2c 49 6e 63 6f 6d 70 61 74 69 62 6c 65 41 70 70 56 65 72 73 69 6f 6e 3a 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 41 70 70 56 65 72 73 69 6f 6e 22 2c 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 54 66 61 3a 22 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 22 2c 41 70 70 6c 69 63 61 74 69 6f 6e 55 73 65 64 49 73 4e 6f 74 41 6e 41 70 70 72 6f 76 65 64 41 70 70 52 65 71 75 69 72 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 32 31 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 33 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 46 6f 72 52 65 6d 6f 74 65 44 65 76 69 63 65 46 6c 6f 77 3a 22 35 33 30 Data Ascii: dButNotUsed",IncompatibleAppVersion:"IncompatibleAppVersion",FlowTokenExpiredTfa:"FlowTokenExpired",ApplicationUsedIsNotAnApprovedAppRequiredByConditionalAccess:"530021",BlockedByConditionalAccess:"53003",BlockedByConditionalAccessForRemoteDeviceFlow:"530

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49735	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:36 UTC	579	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:36 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792337 Cache-Control: public, max-age=31536000 Content-MD5: wegr9xrdYirQ87+FcvY0/A== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 14:54:36 GMT Etag: 0x8DB5D44A2CEB430 Last-Modified: Thu, 25 May 2023 17:22:37 GMT Server: ECAcc (mic/9B9A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e8e768f0-201e-00e1-1684-7e6453000000 x-ms-version: 2009-09-19 Content-Length: 190152 Connection: close
2024-04-26 14:54:36 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b}
2024-04-26 14:54:36 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-04-26 14:54:36 UTC	16383	IN	Data Raw: 2c 22 50 72 6f 70 65 72 74 69 65 73 50 6c 75 67 69 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 50 6f 73 74 43 68 61 6e 6e 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 43 6f 72 65 55 74 69 6c 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 42 45 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 4e 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: ,"PropertiesPlugin",(function(){return g.a})),n.d(t,"PostChannel",(function(){return v.a})),n.d(t,"CoreUtils",(function(){return c.a})),n.d(t,"BE_PROFILE",(function(){return p.a})),n.d(t,"NRT_PROFILE",(function(){return p.b})),n.d(t,"RT_PROFILE",(function
2024-04-26 14:54:36 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-04-26 14:54:36 UTC	16383	IN	Data Raw: 73 2e 74 79 70 65 4e 61 6d 65 29 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 3b 76 61 72 20 61 3d 74 2e 73 74 61 63 6b 44 65 74 61 69 6c 73 7c 7c 6c 65 28 74 29 3b 74 68 69 73 2e 70 61 72 73 65 64 53 74 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 6f 62 6a 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 3d 5b 5d 3b 76 61 72 20 72 3d 30 2c 69 3d 30 3b 4f 62 6a 65 63 74 28 53 2e 62 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 67 65 2e 72 65 67 65 78 2e 74 65 73 74 28 6e 29 29 7b 76 61 72 20 61 3d 6e 65 77 20 67 65 28 6e 2c 72 2b 2b 29 3b 69 2b 3d 61 2e 73 69 7a 65 49 6e 42 79 74 65 73 2c 74 2e 70 75 73 68 28 61 29 7d 7d 29 29 3b 69 Data Ascii: s.typeName))\|\|"not_specified";var a=t.stackDetails\|\|le(t);this.parsedStack=function(e){var t,n=e.obj;if(n&&n.length>0){t=[];var r=0,i=0;Object(S.b)(n,(function(e){var n=e.toString();if(ge.regex.test(n)){var a=new ge(n,r++);i+=a.sizeInBytes,t.push(a)}}));i
2024-04-26 14:54:36 UTC	1	IN	Data Raw: 79 Data Ascii: y
2024-04-26 14:54:36 UTC	16383	IN	Data Raw: 20 70 72 65 76 65 6e 74 73 20 75 73 20 66 72 6f 6d 20 67 65 74 74 69 6e 67 20 74 68 65 20 64 65 74 61 69 6c 73 20 6f 66 20 74 68 69 73 20 65 78 63 65 70 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 68 65 20 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 20 61 74 74 72 69 62 75 74 65 2e 22 2c 61 2c 74 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 30 2c 74 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 30 2c 6e 2c 72 2c 6e 75 6c 6c 2c 6f 29 2c 63 29 3a 28 74 2e 65 72 72 6f 72 53 72 63 7c 7c 28 74 2e 65 72 72 6f 72 53 72 63 3d 6f 29 2c 65 2e 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 28 7b 65 78 63 65 70 74 69 6f 6e 3a 74 2c 73 65 76 65 72 69 74 79 4c 65 76 65 6c 3a 33 7d 2c 63 29 29 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 75 3d 6e 3f 6e 2e 6e 61 6d 65 Data Ascii: prevents us from getting the details of this exception. Consider using the 'crossorigin' attribute.",a,t.lineNumber\|\|0,t.columnNumber\|\|0,n,r,null,o),c):(t.errorSrc\|\|(t.errorSrc=o),e.trackException({exception:t,severityLevel:3},c))}catch(e){var u=n?n.name
2024-04-26 14:54:36 UTC	16383	IN	Data Raw: 4f 62 6a 65 63 74 28 63 2e 74 29 28 65 29 3f 65 3a 7b 7d 3b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 74 29 3f 74 3a 7b 7d 3b 74 68 69 73 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 6e 2c 65 29 2c 74 68 69 73 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 6e 2c 65 29 2c 6e 2e 69 73 4d 61 6e 75 61 6c 3d 21 65 2e 69 73 41 75 74 6f 2c 72 2e 62 65 68 61 76 69 6f 72 3d 74 68 69 73 2e 5f 67 65 74 42 65 68 61 76 69 6f 72 28 65 29 2c 72 2e 76 70 48 65 69 67 68 74 3d 65 2e 76 70 48 65 69 67 68 74 2c 72 2e 76 70 57 69 64 74 68 3d 65 2e 76 70 57 69 64 74 68 2c 72 2e 66 72 61 6d 65 77 6f 72 6b 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 2c 72 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 3d 65 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 2c 72 2e Data Ascii: Object(c.t)(e)?e:{};var n={},r=Object(c.t)(t)?t:{};this._setBasicProperties(n,e),this._setPageTags(n,e),n.isManual=!e.isAuto,r.behavior=this._getBehavior(e),r.vpHeight=e.vpHeight,r.vpWidth=e.vpWidth,r.framework=e.framework,r.systemTiming=e.systemTiming,r.
2024-04-26 14:54:36 UTC	2	IN	Data Raw: 22 5d Data Ascii: "]
2024-04-26 14:54:36 UTC	16383	IN	Data Raw: 29 2c 65 2e 65 6d 70 74 79 53 6e 69 70 70 65 74 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 7b 4f 62 6a 65 63 74 28 53 2e 73 29 28 6e 29 7c 7c 6e 2c 4f 62 6a 65 63 74 28 53 2e 43 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 69 66 28 4f 62 6a 65 63 74 28 53 2e 76 29 28 6e 29 26 26 21 4f 62 6a 65 63 74 28 53 2e 70 29 28 72 29 26 26 6e 26 26 22 5f 22 21 3d 3d 6e 5b 30 5d 26 26 2d 31 3d 3d 3d 4f 62 6a 65 63 74 28 53 2e 63 29 28 52 74 2c 6e 29 29 74 72 79 7b 74 5b 6e 5d 3d 72 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 66 2e 64 29 28 65 2e 6c 6f 67 67 65 72 2c 32 2c 35 31 34 2c 22 46 61 69 6c 65 64 20 74 6f 20 73 65 74 20 5b 22 2b 6e 2b 22 5d 20 64 75 72 69 6e 67 Data Ascii: ),e.emptySnippetQueue=function(t){try{if(function(){if(t){Object(S.s)(n)\|\|n,Object(S.C)(e,(function(n,r){if(Object(S.v)(n)&&!Object(S.p)(r)&&n&&"_"!==n[0]&&-1===Object(S.c)(Rt,n))try{t[n]=r}catch(t){Object(f.d)(e.logger,2,514,"Failed to set ["+n+"] during

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49736	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:37 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:37 UTC	719	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792259 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 26 Apr 2024 14:54:37 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (mic/9BA0) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 007b3b7e-b01e-0088-3084-7e5562000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-04-26 14:54:37 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-26 14:54:37 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49737	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:37 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:37 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2000897 Cache-Control: public, max-age=31536000 Content-MD5: P5ihddUjL2Zb7/wjNS1xdg== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 14:54:37 GMT Etag: 0x8DC4F6D50F3D2E7 Last-Modified: Thu, 28 Mar 2024 21:23:30 GMT Server: ECAcc (mic/9B79) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 79704d85-501e-002e-77b6-856908000000 x-ms-version: 2009-09-19 Content-Length: 223759 Connection: close
2024-04-26 14:54:37 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-26 14:54:37 UTC	1	IN	Data Raw: 30 Data Ascii: 0
2024-04-26 14:54:37 UTC	16383	IN	Data Raw: 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 2d 74 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 29 7c 7c 30 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 2d 74 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 29 3f 6e 3a 66 28 65 2e 6e 61 6d 65 2c 74 2e 6e 61 6d 65 29 7d 2c 74 2e 63 6f 6d 70 61 72 65 42 79 47 65 6e 65 72 61 74 65 64 50 6f 73 69 74 69 6f 6e 73 49 6e 66 6c 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2d 74 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 3b 72 65 74 75 72 6e 20 30 21 3d 3d 72 7c 7c 30 21 3d 3d 28 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2d 74 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 29 7c 7c 30 21 3d 3d 28 72 Data Ascii: !==(n=e.originalLine-t.originalLine)\|\|0!==(n=e.originalColumn-t.originalColumn)?n:f(e.name,t.name)},t.compareByGeneratedPositionsInflated=function(e,t){var r=e.generatedLine-t.generatedLine;return 0!==r\|\|0!==(r=e.generatedColumn-t.generatedColumn)\|\|0!==(r
2024-04-26 14:54:37 UTC	16383	IN	Data Raw: 74 68 3b 69 2b 3d 32 29 6f 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 5b 69 5d 2b 32 35 36 2a 6e 5b 69 2b 31 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 72 29 7b 69 66 28 65 25 31 21 3d 30 7c 7c 65 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 6f 66 66 73 65 74 20 69 73 20 6e 6f 74 20 75 69 6e 74 22 29 3b 69 66 28 65 2b 74 3e 72 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 54 72 79 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 62 65 79 6f 6e 64 20 62 75 66 66 65 72 20 6c 65 6e 67 74 68 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 29 7b 69 66 28 21 75 2e 69 73 42 75 66 66 65 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 Data Ascii: th;i+=2)o+=String.fromCharCode(n[i]+256*n[i+1]);return o}function R(e,t,r){if(e%1!=0\|\|e<0)throw new RangeError("offset is not uint");if(e+t>r)throw new RangeError("Trying to access beyond buffer length")}function M(e,t,r,n,o,i){if(!u.isBuffer(e))throw new
2024-04-26 14:54:37 UTC	2	IN	Data Raw: 65 3d Data Ascii: e=
2024-04-26 14:54:37 UTC	16383	IN	Data Raw: 74 68 69 73 3b 65 3d 65 2e 70 61 72 65 6e 74 3b 29 65 5b 68 5d 3d 21 31 7d 7d 7d 2c 7b 6b 65 79 3a 22 6e 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 70 61 72 65 6e 74 29 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 76 61 72 20 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 69 6e 64 65 78 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 2e 6e 6f 64 65 73 5b 65 2b 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 70 6f 73 69 74 69 6f 6e 42 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 73 6f 75 72 63 65 2e 73 74 61 72 74 3b 69 66 28 65 2e 69 6e 64 65 78 29 72 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 49 6e 73 69 64 65 28 65 2e 69 6e 64 65 78 2c Data Ascii: this;e=e.parent;)e[h]=!1}}},{key:"next",value:function(){if(!this.parent)return undefined;var e=this.parent.index(this);return this.parent.nodes[e+1]}},{key:"positionBy",value:function(e,t){var r=this.source.start;if(e.index)r=this.positionInside(e.index,
2024-04-26 14:54:37 UTC	16383	IN	Data Raw: 73 65 28 29 7d 63 61 74 63 68 28 73 29 7b 74 68 72 6f 77 20 73 7d 72 65 74 75 72 6e 20 69 2e 72 6f 6f 74 7d 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 74 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 35 39 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 72 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 29 2e 74 79 70 65 3d 22 63 6f 6d 6d 65 6e 74 22 2c 72 7d 72 65 74 75 72 6e 20 72 3d 65 Data Ascii: se()}catch(s){throw s}return i.root};t["default"]=s,e.exports=t["default"]},596:function(e,t,r){"use strict";var n;t.__esModule=!0,t["default"]=void 0;var o=function(e){var t,r;function n(t){var r;return(r=e.call(this,t)\|\|this).type="comment",r}return r=e
2024-04-26 14:54:37 UTC	2	IN	Data Raw: 75 72 Data Ascii: ur
2024-04-26 14:54:37 UTC	16383	IN	Data Raw: 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 65 29 7d 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 76 61 72 20 73 3d 72 28 36 33 37 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 29 2c 74 68 Data Ascii: n a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==n(t)?t:String(t)}var s=r(637),a=function(){function e(t,r,n){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e),th
2024-04-26 14:54:38 UTC	16383	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 65 2c 65 29 7d 2c 66 2e 68 61 6e 64 6c 65 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 74 68 69 73 2e 65 72 72 6f 72 3d 65 2c 22 43 73 73 53 79 6e 74 61 78 45 72 72 6f 72 22 21 3d 3d 65 2e 6e 61 6d 65 7c 7c 65 2e 70 6c 75 67 69 6e 29 7b 69 66 28 74 2e 70 6f 73 74 63 73 73 56 65 72 73 69 6f 6e 29 3b 7d 65 6c 73 65 20 65 2e 70 6c 75 67 69 6e 3d 74 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 2c 65 2e 73 65 74 4d 65 73 73 61 67 65 28 29 7d 63 61 74 63 68 28 72 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 72 29 7d 7d 2c 66 2e 61 73 79 6e 63 54 69 63 6b 3d 66 75 6e 63 Data Ascii: (e){return this.async().then(e,e)},f.handleError=function(e,t){try{if(this.error=e,"CssSyntaxError"!==e.name\|\|e.plugin){if(t.postcssVersion);}else e.plugin=t.postcssPlugin,e.setMessage()}catch(r){console&&console.error&&console.error(r)}},f.asyncTick=func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49740	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:40 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:41 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792280 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:54:41 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (mic/9B45) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c021b79-601e-0061-5584-7e3306000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-04-26 14:54:41 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49738	13.107.246.41	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:40 UTC	702	OUT	GET /c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/illustration?ts=637787140288729782 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:41 UTC	731	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:54:41 GMT Content-Type: image/* Content-Length: 56995 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Tue, 25 Jan 2022 13:27:09 GMT ETag: 0x8D9E006636FBA49 x-ms-request-id: ae482e3e-301e-0071-1fe9-97bd87000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T145441Z-1865489d5f4vxtqf9836nc5azn00000004bg00000000w86g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-26 14:54:41 UTC	15653	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 06 00 00 00 e8 d3 c1 43 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 de 55 49 44 41 54 78 9c ec fd 67 73 64 67 9a e6 79 5e cf 73 84 6b 38 b4 0c 84 96 64 52 93 a9 ab ab 2a ab 77 a6 bb 6a 6b c6 66 a7 67 da 6a 3f c1 be dd 6f 50 9f 62 5f ae d9 da ac 6d db 8e ad ed 4e 77 cf 74 4f 57 75 75 69 41 66 92 4c 6a 86 56 08 20 a0 85 6b f7 73 9e 67 5f 38 18 c9 4c 92 c9 08 06 80 e3 0e fc 7f 66 08 1d c0 15 88 13 f1 e6 f2 fb be cd ef ff 5f ff ad 17 00 00 00 00 00 00 00 00 00 f0 34 bc 94 7a af d4 79 5d 3d 3d aa ff cb 1f bf a8 37 af 4c 65 9d 0a 43 a4 d9 49 75 fd c1 8e fe 9f 7f 7e 43 7f fd e1 23 55 0a b1 8c c9 3a d5 f1 61 b3 0e 00 00 00 00 00 00 00 00 00 80 21 62 a4 c0 1a 25 89 Data Ascii: PNGIHDR8CpHYsUIDATxgsdgy^sk8dR*wjkfgj?oPb_mNwtOWuuiAfLjV ksg_8Lf_4zy]==7LeCIu~C#U:a!b%
2024-04-26 14:54:41 UTC	16384	IN	Data Raw: 4d 9d 9d 2b eb cc 4c 45 e7 e7 aa 5a 9c 2e 65 1d 75 e8 51 00 03 00 00 00 00 00 00 00 80 a1 e0 24 55 8a 91 26 aa 39 b1 ed f7 64 b3 92 c6 ca b1 a6 47 f3 0a 03 ab d4 7d 31 63 8a 41 17 58 2b 6b 8d bc f3 7a b8 d1 d0 c3 b5 86 ac f1 3a 33 3b a2 1f bd 38 a7 b7 ae 4c e9 cc 6c 45 e5 62 a8 5c 14 28 60 da ff 99 51 00 03 00 00 00 00 00 00 00 80 e1 e0 a5 72 21 d2 58 39 c7 cd d0 93 ce 48 e5 62 a4 6a 25 56 60 8d 52 47 03 3c 2c 8c 91 8c 8c 14 18 c9 7b 79 2f 79 79 ad 6c 36 f5 9f df 7d a0 77 3e 5d d5 f9 85 8a de b8 3c a9 97 ce 4f e8 f4 74 25 eb c8 43 87 02 18 00 00 00 00 00 00 00 00 0c 3c ef 9d 9c f7 2a 15 42 55 4b 39 59 51 00 9f 74 b9 30 d0 64 35 af 38 34 72 8e e6 77 18 05 c6 ec b7 95 81 7a a9 d3 ca 56 53 0f 7b 75 3d da ac 6b 65 ab a9 4f ee 6d eb d2 a9 aa 4e 4f 55 b4 30 5d Data Ascii: M+LEZ.euQ$U&9dG}1cAX+kz:3;8LlEb\(`Qr!X9Hbj%V`RG<,{y/yyl6}w>]<Ot%C<*BUK9YQt0d584rwzVS{u=keOmNOU0]
2024-04-26 14:54:41 UTC	16384	IN	Data Raw: d5 fc 4c 37 4b 6b c3 7c ee c9 d3 f9 d2 f7 cf e6 d2 f5 b5 49 8f b4 ad 08 c0 00 00 00 00 00 00 fc 46 77 1e 9a cf bf fb cc db f2 07 0f 1f cd 54 af 93 c1 a8 49 63 19 98 4d 54 4a 49 d3 36 59 58 19 e4 7f 7c e7 54 fe c7 77 5e cd e2 ea 20 0e 83 fe fd 08 c0 00 00 00 00 00 00 fc 66 a5 e4 de 3b 76 e7 df 7c ea fe 7c ea dd c7 92 36 59 eb 8f 53 ac 01 b3 49 4a 92 ba aa 52 d7 55 5e 3a bb 98 2f 7e ef 6c be fc 83 73 b9 be dc 9f f4 68 db 82 00 0c 00 00 00 00 00 c0 ef f4 8e bb f7 e5 cf 3f 7c 77 de 75 df 81 74 ea 92 d5 f5 61 9a b6 15 82 d9 14 25 49 b7 53 52 95 92 57 2f 2e e7 bf 7f f3 95 fc e0 85 cb e9 0f c7 93 1e 6d cb 13 80 01 00 00 00 00 00 f8 bd bc e3 9e 03 f9 77 9f 79 20 8f dc b3 3f e3 a6 cd 70 d8 a4 6d 1d cc cb e6 68 db a4 d7 ab b3 d6 1f e7 e9 97 ae e4 ef bf 7d 3a 3f 78 Data Ascii: L7Kk\|IFwTIcMTJI6YX\|Tw^ f;v\|\|6YSIJRU^:/~lsh?\|wuta%ISRW/.mwy ?pmh}:?x
2024-04-26 14:54:41 UTC	8574	IN	Data Raw: e0 a1 6a 9a a4 aa 8a 14 29 b2 bd 37 ca ab 6f 6e e4 e5 d7 d7 73 73 ad 97 a9 4e 99 d9 a9 4e 9a 26 49 8a 94 a5 dd d0 1f 84 09 60 00 00 00 00 00 00 e0 a1 2a 8a a4 db 2a 53 d7 c9 60 34 ce c6 ed 7e 56 d7 7b b9 be ba 93 d7 6e 6c e4 63 67 96 72 e6 d8 6c ce 9e 98 cf c5 53 f3 59 9c ed 3c ea 4b 7e 6c 98 00 06 00 00 00 00 00 00 1e ba 7b 03 be 69 b7 8a cc 74 db 69 b5 ca ec f4 86 79 f5 fa 66 5e ba ba 9e 37 6e ef 64 6d bb 9f e1 a8 4e 51 15 19 8f 9b 94 45 91 76 cb 7a e8 5f c7 04 30 00 00 00 00 00 00 f0 c8 34 4d d2 a4 49 d3 34 a9 ca 22 b3 53 ed 14 45 72 6b bd 97 b5 ed 41 be f7 da 9d 2c ce 76 72 f9 cc 52 be f8 b1 13 f9 e4 d3 cb 59 98 e9 a4 dd 2a 53 95 45 ca c2 8a e8 77 12 80 01 00 00 00 00 00 80 47 ae 28 8a 14 45 32 5d 15 a9 9b 64 38 aa b3 db 1b e6 f6 7a 2f 45 92 1b 77 f6 Data Ascii: j)7onssNN&I`*S`4~V{nlcgrlSY<K~l{itiyf^7ndmNQEvz_04MI4"SErkA,vrRYSEwG(E2]d8z/Ew

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49739	13.107.246.41	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:40 UTC	700	OUT	GET /c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/bannerlogo?ts=637719609708651854 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:41 UTC	737	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:54:41 GMT Content-Type: image/* Content-Length: 7923 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Mon, 08 Nov 2021 09:36:11 GMT ETag: 0x8D9A29B3313DFC5 x-ms-request-id: d52e058b-501e-0058-35e9-9783f3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T145441Z-17644f8887fbtmqb4y7scs3g3800000000kg00000000crhc x-fd-int-roxy-purgeid: 50755578 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-26 14:54:41 UTC	7923	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 3c 08 06 00 00 00 45 24 5e ef 00 00 1e ba 49 44 41 54 78 da ed 9d 79 9c 14 d5 b5 c7 bf d5 33 2c d2 03 82 8a 8a d0 08 2a fa 68 c4 7d f7 b9 45 8d 76 c4 67 1a 5c 92 3c 5c 9e 22 26 6a ba 0a 92 b8 fb 34 f1 99 18 8d 4c 57 27 be a8 89 d1 18 8d 46 84 26 6e 85 bb 71 89 bb 0f 25 14 46 22 08 0d b8 21 32 cc 34 db cc d4 7d 7f dc db 4c 75 4d ef d5 3d 6c fd fb 7c ea 03 d3 5d 55 77 e9 7b 7f f7 9c 73 cf 39 57 a3 04 e8 7a 6c 00 70 3c 70 34 30 06 18 02 34 02 9d c0 a7 80 0d bc 06 bc 68 9a 89 16 b6 02 d8 c1 e8 70 e0 3b c0 71 c0 50 40 00 8b 81 97 80 87 c3 e9 e4 67 b5 28 77 77 c3 6a 70 e0 28 60 1c 70 00 b0 ab 2a fb 0b e0 3d e0 b1 00 bc b9 38 1e e9 a4 8e 3a 36 23 68 25 10 c9 0e c0 7c 60 e7 12 de d7 0a cc 04 e2 Data Ascii: PNGIHDR<E$^IDATxy3,h}Evg\<\"&j4LW'F&nq%F"!24}LuM=l\|]Uw{s9Wzlp<p404hp;qP@g(wwjp(`p=8:6#h%\|`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49743	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:41 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:41 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2000900 Cache-Control: public, max-age=31536000 Content-MD5: /PcUcu/J5hSxDf1JmAX3KQ== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 14:54:41 GMT Etag: 0x8DC4F6D5254E400 Last-Modified: Thu, 28 Mar 2024 21:23:33 GMT Server: ECAcc (mic/9AB3) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 19cedb12-401e-008f-58b6-85846c000000 x-ms-version: 2009-09-19 Content-Length: 113657 Connection: close
2024-04-26 14:54:41 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-26 14:54:41 UTC	16383	IN	Data Raw: 69 74 60 20 70 72 65 73 65 74 2c 20 63 61 6e 27 74 20 62 65 20 65 6d 70 74 79 22 29 3b 72 65 74 75 72 6e 20 65 2e 6f 70 74 69 6f 6e 73 26 26 72 2e 73 65 74 28 65 2e 6f 70 74 69 6f 6e 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 26 26 72 5b 74 5d 2e 72 75 6c 65 72 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 32 26 26 72 5b 74 5d 2e 72 75 6c 65 72 32 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d Data Ascii: it` preset, can't be empty");return e.options&&r.set(e.options),e.components&&Object.keys(e.components).forEach((function(t){e.components[t].rules&&r[t].ruler.enableOnly(e.components[t].rules),e.components[t].rules2&&r[t].ruler2.enableOnly(e.components[t]
2024-04-26 14:54:41 UTC	2	IN	Data Raw: 75 30 Data Ascii: u0
2024-04-26 14:54:41 UTC	16383	IN	Data Raw: 33 66 30 22 2c 22 4b 63 65 64 69 6c 22 3a 22 5c 75 30 31 33 36 22 2c 22 6b 63 65 64 69 6c 22 3a 22 5c 75 30 31 33 37 22 2c 22 4b 63 79 22 3a 22 5c 75 30 34 31 61 22 2c 22 6b 63 79 22 3a 22 5c 75 30 34 33 61 22 2c 22 4b 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 30 65 22 2c 22 6b 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 32 38 22 2c 22 6b 67 72 65 65 6e 22 3a 22 5c 75 30 31 33 38 22 2c 22 4b 48 63 79 22 3a 22 5c 75 30 34 32 35 22 2c 22 6b 68 63 79 22 3a 22 5c 75 30 34 34 35 22 2c 22 4b 4a 63 79 22 3a 22 5c 75 30 34 30 63 22 2c 22 6b 6a 63 79 22 3a 22 5c 75 30 34 35 63 22 2c 22 4b 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 34 32 22 2c 22 6b 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 35 63 22 2c 22 4b 73 63 72 22 3a 22 5c 75 64 38 33 35 5c 75 Data Ascii: 3f0","Kcedil":"\u0136","kcedil":"\u0137","Kcy":"\u041a","kcy":"\u043a","Kfr":"\ud835\udd0e","kfr":"\ud835\udd28","kgreen":"\u0138","KHcy":"\u0425","khcy":"\u0445","KJcy":"\u040c","kjcy":"\u045c","Kopf":"\ud835\udd42","kopf":"\ud835\udd5c","Kscr":"\ud835\u
2024-04-26 14:54:41 UTC	16383	IN	Data Raw: 61 72 6f 6e 22 3a 22 5c 75 30 31 36 30 22 2c 22 73 63 61 72 6f 6e 22 3a 22 5c 75 30 31 36 31 22 2c 22 53 63 22 3a 22 5c 75 32 61 62 63 22 2c 22 73 63 22 3a 22 5c 75 32 32 37 62 22 2c 22 73 63 63 75 65 22 3a 22 5c 75 32 32 37 64 22 2c 22 73 63 65 22 3a 22 5c 75 32 61 62 30 22 2c 22 73 63 45 22 3a 22 5c 75 32 61 62 34 22 2c 22 53 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 65 22 2c 22 73 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 66 22 2c 22 53 63 69 72 63 22 3a 22 5c 75 30 31 35 63 22 2c 22 73 63 69 72 63 22 3a 22 5c 75 30 31 35 64 22 2c 22 73 63 6e 61 70 22 3a 22 5c 75 32 61 62 61 22 2c 22 73 63 6e 45 22 3a 22 5c 75 32 61 62 36 22 2c 22 73 63 6e 73 69 6d 22 3a 22 5c 75 32 32 65 39 22 2c 22 73 63 70 6f 6c 69 6e 74 22 3a 22 5c 75 32 61 31 33 22 2c 22 73 63 73 69 6d Data Ascii: aron":"\u0160","scaron":"\u0161","Sc":"\u2abc","sc":"\u227b","sccue":"\u227d","sce":"\u2ab0","scE":"\u2ab4","Scedil":"\u015e","scedil":"\u015f","Scirc":"\u015c","scirc":"\u015d","scnap":"\u2aba","scnE":"\u2ab6","scnsim":"\u22e9","scpolint":"\u2a13","scsim
2024-04-26 14:54:41 UTC	16383	IN	Data Raw: 5d 2c 63 3c 30 3f 6c 2e 70 75 73 68 28 5b 22 63 6c 61 73 73 22 2c 72 2e 6c 61 6e 67 50 72 65 66 69 78 2b 64 5d 29 3a 28 6c 5b 63 5d 3d 6c 5b 63 5d 2e 73 6c 69 63 65 28 29 2c 6c 5b 63 5d 5b 31 5d 2b 3d 22 20 22 2b 72 2e 6c 61 6e 67 50 72 65 66 69 78 2b 64 29 2c 70 3d 7b 61 74 74 72 73 3a 6c 7d 2c 22 3c 70 72 65 3e 3c 63 6f 64 65 22 2b 69 2e 72 65 6e 64 65 72 41 74 74 72 73 28 70 29 2b 22 3e 22 2b 61 2b 22 3c 2f 63 6f 64 65 3e 3c 2f 70 72 65 3e 5c 6e 22 29 3a 22 3c 70 72 65 3e 3c 63 6f 64 65 22 2b 69 2e 72 65 6e 64 65 72 41 74 74 72 73 28 68 29 2b 22 3e 22 2b 61 2b 22 3c 2f 63 6f 64 65 3e 3c 2f 70 72 65 3e 5c 6e 22 7d 2c 69 2e 69 6d 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 73 29 7b 76 61 72 20 6f 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 Data Ascii: ],c<0?l.push(["class",r.langPrefix+d]):(l[c]=l[c].slice(),l[c][1]+=" "+r.langPrefix+d),p={attrs:l},"<pre><code"+i.renderAttrs(p)+">"+a+"</code></pre>\n"):"<pre><code"+i.renderAttrs(h)+">"+a+"</code></pre>\n"},i.image=function(e,t,r,n,s){var o=e[t];return
2024-04-26 14:54:41 UTC	16383	IN	Data Raw: 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 62 72 65 61 6b 3b 66 6f 72 28 4c 3d 21 31 2c 63 3d 30 2c 64 3d 7a 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 7a 5b 63 5d 28 65 2c 76 2c 72 2c 21 30 29 29 7b 4c 3d 21 30 3b 62 72 65 61 6b 7d 69 66 28 4c 29 62 72 65 61 6b 3b 69 66 28 68 29 7b 69 66 28 28 45 3d 6f 28 65 2c 76 29 29 3c 30 29 62 72 65 61 6b 3b 46 3d 65 2e 62 4d 61 72 6b 73 5b 76 5d 2b 65 2e 74 53 68 69 66 74 5b 76 5d 7d 65 6c 73 65 20 69 66 28 28 45 3d 73 28 65 2c 76 29 29 3c 30 29 62 72 65 61 6b 3b 69 66 28 5f 21 3d 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 45 2d 31 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 28 52 3d 68 3f 65 2e 70 75 73 68 28 22 6f 72 64 65 72 65 64 5f 6c 69 73 74 5f 63 6c 6f 73 65 22 Data Ascii: unt[t]-e.blkIndent>=4)break;for(L=!1,c=0,d=z.length;c<d;c++)if(z[c](e,v,r,!0)){L=!0;break}if(L)break;if(h){if((E=o(e,v))<0)break;F=e.bMarks[v]+e.tShift[v]}else if((E=s(e,v))<0)break;if(_!==e.src.charCodeAt(E-1))break}return(R=h?e.push("ordered_list_close"
2024-04-26 14:54:41 UTC	15357	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 3d 30 2c 73 3d 65 2e 74 6f 6b 65 6e 73 2c 6f 3d 65 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 74 3d 72 3d 30 3b 74 3c 6f 3b 74 2b 2b 29 73 5b 74 5d 2e 6e 65 73 74 69 6e 67 3c 30 26 26 6e 2d 2d 2c 73 5b 74 5d 2e 6c 65 76 65 6c 3d 6e 2c 73 5b 74 5d 2e 6e 65 73 74 69 6e 67 3e 30 26 26 6e 2b 2b 2c 22 74 65 78 74 22 3d 3d 3d 73 5b 74 5d 2e 74 79 70 65 26 26 74 2b 31 3c 6f 26 26 22 74 65 78 74 22 3d 3d 3d 73 5b 74 2b 31 5d 2e 74 79 70 65 3f 73 5b 74 2b 31 5d 2e 63 6f 6e 74 65 6e 74 3d 73 5b 74 5d 2e 63 6f 6e 74 65 6e 74 2b 73 5b 74 2b 31 5d 2e 63 6f 6e 74 65 6e 74 3a 28 74 21 3d 3d 72 26 26 28 73 5b 72 5d 3d 73 5b 74 5d 29 2c 72 2b 2b 29 3b 74 21 3d 3d 72 26 26 28 73 2e 6c 65 6e 67 74 Data Ascii: function(e){var t,r,n=0,s=e.tokens,o=e.tokens.length;for(t=r=0;t<o;t++)s[t].nesting<0&&n--,s[t].level=n,s[t].nesting>0&&n++,"text"===s[t].type&&t+1<o&&"text"===s[t+1].type?s[t+1].content=s[t].content+s[t+1].content:(t!==r&&(s[r]=s[t]),r++);t!==r&&(s.lengt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49742	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:41 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:41 UTC	719	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792263 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 26 Apr 2024 14:54:41 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (mic/9BA0) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 007b3b7e-b01e-0088-3084-7e5562000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-04-26 14:54:41 UTC	15683	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-26 14:54:41 UTC	1491	IN	Data Raw: 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49744	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:41 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:41 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792280 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:54:41 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (mic/9B45) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c021b79-601e-0061-5584-7e3306000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-04-26 14:54:41 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49745	13.107.213.41	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:41 UTC	455	OUT	GET /c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/bannerlogo?ts=637719609708651854 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:42 UTC	737	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:54:42 GMT Content-Type: image/* Content-Length: 7923 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Mon, 08 Nov 2021 09:36:11 GMT ETag: 0x8D9A29B3313DFC5 x-ms-request-id: 56d7c49d-801e-0074-43e9-976f5c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T145442Z-1865489d5f46s4qnhr87brpyc40000000ab000000000axvq x-fd-int-roxy-purgeid: 50755578 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-26 14:54:42 UTC	7923	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 13 00 00 00 3c 08 06 00 00 00 45 24 5e ef 00 00 1e ba 49 44 41 54 78 da ed 9d 79 9c 14 d5 b5 c7 bf d5 33 2c d2 03 82 8a 8a d0 08 2a fa 68 c4 7d f7 b9 45 8d 76 c4 67 1a 5c 92 3c 5c 9e 22 26 6a ba 0a 92 b8 fb 34 f1 99 18 8d 4c 57 27 be a8 89 d1 18 8d 46 84 26 6e 85 bb 71 89 bb 0f 25 14 46 22 08 0d b8 21 32 cc 34 db cc d4 7d 7f dc db 4c 75 4d ef d5 3d 6c fd fb 7c ea 03 d3 5d 55 77 e9 7b 7f f7 9c 73 cf 39 57 a3 04 e8 7a 6c 00 70 3c 70 34 30 06 18 02 34 02 9d c0 a7 80 0d bc 06 bc 68 9a 89 16 b6 02 d8 c1 e8 70 e0 3b c0 71 c0 50 40 00 8b 81 97 80 87 c3 e9 e4 67 b5 28 77 77 c3 6a 70 e0 28 60 1c 70 00 b0 ab 2a fb 0b e0 3d e0 b1 00 bc b9 38 1e e9 a4 8e 3a 36 23 68 25 10 c9 0e c0 7c 60 e7 12 de d7 0a cc 04 e2 Data Ascii: PNGIHDR<E$^IDATxy3,h}Evg\<\"&j4LW'F&nq%F"!24}LuM=l\|]Uw{s9Wzlp<p404hp;qP@g(wwjp(`p=8:6#h%\|`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49746	13.107.213.41	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:45 UTC	457	OUT	GET /c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/illustration?ts=637787140288729782 HTTP/1.1 Host: aadcdn.msftauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:54:46 UTC	738	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:54:46 GMT Content-Type: image/* Content-Length: 56995 Connection: close Cache-Control: public, max-age=86400 Last-Modified: Tue, 25 Jan 2022 13:27:09 GMT ETag: 0x8D9E006636FBA49 x-ms-request-id: a4841ce7-d01e-0056-5fe9-97aa43000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T145445Z-17644f8887fxsmp62x2nasg16g00000002cg000000006dw3 x-fd-int-roxy-purgeid: 50755578 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-26 14:54:46 UTC	15646	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 04 38 08 06 00 00 00 e8 d3 c1 43 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 de 55 49 44 41 54 78 9c ec fd 67 73 64 67 9a e6 79 5e cf 73 84 6b 38 b4 0c 84 96 64 52 93 a9 ab ab 2a ab 77 a6 bb 6a 6b c6 66 a7 67 da 6a 3f c1 be dd 6f 50 9f 62 5f ae d9 da ac 6d db 8e ad ed 4e 77 cf 74 4f 57 75 75 69 41 66 92 4c 6a 86 56 08 20 a0 85 6b f7 73 9e 67 5f 38 18 c9 4c 92 c9 08 06 80 e3 0e fc 7f 66 08 1d c0 15 88 13 f1 e6 f2 fb be cd ef ff 5f ff ad 17 00 00 00 00 00 00 00 00 00 f0 34 bc 94 7a af d4 79 5d 3d 3d aa ff cb 1f bf a8 37 af 4c 65 9d 0a 43 a4 d9 49 75 fd c1 8e fe 9f 7f 7e 43 7f fd e1 23 55 0a b1 8c c9 3a d5 f1 61 b3 0e 00 00 00 00 00 00 00 00 00 80 21 62 a4 c0 1a 25 89 Data Ascii: PNGIHDR8CpHYsUIDATxgsdgy^sk8dR*wjkfgj?oPb_mNwtOWuuiAfLjV ksg_8Lf_4zy]==7LeCIu~C#U:a!b%
2024-04-26 14:54:46 UTC	16384	IN	Data Raw: de d0 ea 76 53 4b eb 4d 9d 9d 2b eb cc 4c 45 e7 e7 aa 5a 9c 2e 65 1d 75 e8 51 00 03 00 00 00 00 00 00 00 80 a1 e0 24 55 8a 91 26 aa 39 b1 ed f7 64 b3 92 c6 ca b1 a6 47 f3 0a 03 ab d4 7d 31 63 8a 41 17 58 2b 6b 8d bc f3 7a b8 d1 d0 c3 b5 86 ac f1 3a 33 3b a2 1f bd 38 a7 b7 ae 4c e9 cc 6c 45 e5 62 a8 5c 14 28 60 da ff 99 51 00 03 00 00 00 00 00 00 00 80 e1 e0 a5 72 21 d2 58 39 c7 cd d0 93 ce 48 e5 62 a4 6a 25 56 60 8d 52 47 03 3c 2c 8c 91 8c 8c 14 18 c9 7b 79 2f 79 79 ad 6c 36 f5 9f df 7d a0 77 3e 5d d5 f9 85 8a de b8 3c a9 97 ce 4f e8 f4 74 25 eb c8 43 87 02 18 00 00 00 00 00 00 00 00 0c 3c ef 9d 9c f7 2a 15 42 55 4b 39 59 51 00 9f 74 b9 30 d0 64 35 af 38 34 72 8e e6 77 18 05 c6 ec b7 95 81 7a a9 d3 ca 56 53 0f 7b 75 3d da ac 6b 65 ab a9 4f ee 6d eb d2 a9 Data Ascii: vSKM+LEZ.euQ$U&9dG}1cAX+kz:3;8LlEb\(`Qr!X9Hbj%V`RG<,{y/yyl6}w>]<Ot%C<*BUK9YQt0d584rwzVS{u=keOm
2024-04-26 14:54:46 UTC	16384	IN	Data Raw: 61 c6 4d eb 3e 60 36 d5 fc 4c 37 4b 6b c3 7c ee c9 d3 f9 d2 f7 cf e6 d2 f5 b5 49 8f b4 ad 08 c0 00 00 00 00 00 00 fc 46 77 1e 9a cf bf fb cc db f2 07 0f 1f cd 54 af 93 c1 a8 49 63 19 98 4d 54 4a 49 d3 36 59 58 19 e4 7f 7c e7 54 fe c7 77 5e cd e2 ea 20 0e 83 fe fd 08 c0 00 00 00 00 00 00 fc 66 a5 e4 de 3b 76 e7 df 7c ea fe 7c ea dd c7 92 36 59 eb 8f 53 ac 01 b3 49 4a 92 ba aa 52 d7 55 5e 3a bb 98 2f 7e ef 6c be fc 83 73 b9 be dc 9f f4 68 db 82 00 0c 00 00 00 00 00 c0 ef f4 8e bb f7 e5 cf 3f 7c 77 de 75 df 81 74 ea 92 d5 f5 61 9a b6 15 82 d9 14 25 49 b7 53 52 95 92 57 2f 2e e7 bf 7f f3 95 fc e0 85 cb e9 0f c7 93 1e 6d cb 13 80 01 00 00 00 00 00 f8 bd bc e3 9e 03 f9 77 9f 79 20 8f dc b3 3f e3 a6 cd 70 d8 a4 6d 1d cc cb e6 68 db a4 d7 ab b3 d6 1f e7 e9 97 ae Data Ascii: aM>`6L7Kk\|IFwTIcMTJI6YX\|Tw^ f;v\|\|6YSIJRU^:/~lsh?\|wuta%ISRW/.mwy ?pmh
2024-04-26 14:54:46 UTC	8581	IN	Data Raw: 68 00 00 00 00 00 00 e0 a1 6a 9a a4 aa 8a 14 29 b2 bd 37 ca ab 6f 6e e4 e5 d7 d7 73 73 ad 97 a9 4e 99 d9 a9 4e 9a 26 49 8a 94 a5 dd d0 1f 84 09 60 00 00 00 00 00 00 e0 a1 2a 8a a4 db 2a 53 d7 c9 60 34 ce c6 ed 7e 56 d7 7b b9 be ba 93 d7 6e 6c e4 63 67 96 72 e6 d8 6c ce 9e 98 cf c5 53 f3 59 9c ed 3c ea 4b 7e 6c 98 00 06 00 00 00 00 00 00 1e ba 7b 03 be 69 b7 8a cc 74 db 69 b5 ca ec f4 86 79 f5 fa 66 5e ba ba 9e 37 6e ef 64 6d bb 9f e1 a8 4e 51 15 19 8f 9b 94 45 91 76 cb 7a e8 5f c7 04 30 00 00 00 00 00 00 f0 c8 34 4d d2 a4 49 d3 34 a9 ca 22 b3 53 ed 14 45 72 6b bd 97 b5 ed 41 be f7 da 9d 2c ce 76 72 f9 cc 52 be f8 b1 13 f9 e4 d3 cb 59 98 e9 a4 dd 2a 53 95 45 ca c2 8a e8 77 12 80 01 00 00 00 00 00 80 47 ae 28 8a 14 45 32 5d 15 a9 9b 64 38 aa b3 db 1b e6 f6 Data Ascii: hj)7onssNN&I`*S`4~V{nlcgrlSY<K~l{itiyf^7ndmNQEvz_04MI4"SErkA,vrRYSEwG(E2]d8

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49724	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:54:56 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714143234053&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-26 14:54:56 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-26 14:54:56 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-26 14:54:57 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 164B14C58E4D450F9EAE5F2F0E7E3B1E Ref B: LAX311000108035 Ref C: 2024-04-26T14:54:56Z Date: Fri, 26 Apr 2024 14:54:57 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714143296.11ddcacf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49748	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:01 UTC	622	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_f7fbb7540d7be2ae771b.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:01 UTC	747	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 940022 Cache-Control: public, max-age=31536000 Content-MD5: khVpeG6+ZIeT5rwBhIy/mg== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 14:55:01 GMT Etag: 0x8DC4F6D523F783D Last-Modified: Thu, 28 Mar 2024 21:23:32 GMT Server: ECAcc (mic/9B06) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e4ff2cd9-601e-00b1-425d-8f0760000000 x-ms-version: 2009-09-19 Content-Length: 4730 Connection: close
2024-04-26 14:55:01 UTC	4730	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49750	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:01 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:01 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792306 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Fri, 26 Apr 2024 14:55:01 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (mic/9A97) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7f1e2119-201e-0065-2e84-7e9f0e000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-04-26 14:55:01 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49749	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:01 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:01 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792323 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Fri, 26 Apr 2024 14:55:01 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (mic/9AED) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 335ffc7a-301e-00bc-3284-7ed87b000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-04-26 14:55:01 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49752	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:03 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:03 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792308 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Fri, 26 Apr 2024 14:55:03 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (mic/9A97) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7f1e2119-201e-0065-2e84-7e9f0e000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-04-26 14:55:03 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49751	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:03 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:03 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2578860 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Fri, 26 Apr 2024 14:55:03 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (mic/9B0D) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d87f1b29-a01e-0081-0b75-802671000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-04-26 14:55:03 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49753	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:04 UTC	669	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:04 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792531 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:55:04 GMT Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Server: ECAcc (mic/9BE6) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c693d9c2-301e-0080-6583-7e0d73000000 x-ms-version: 2009-09-19 Content-Length: 1378 Connection: close
2024-04-26 14:55:04 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49754	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:04 UTC	669	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:04 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792361 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:55:04 GMT Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Server: ECAcc (mic/9B9A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: eb888099-d01e-00e6-6784-7eb55d000000 x-ms-version: 2009-09-19 Content-Length: 379 Connection: close
2024-04-26 14:55:04 UTC	379	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49755	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:04 UTC	424	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:05 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792361 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:55:04 GMT Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Server: ECAcc (mic/9B9A) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: eb888099-d01e-00e6-6784-7eb55d000000 x-ms-version: 2009-09-19 Content-Length: 379 Connection: close
2024-04-26 14:55:05 UTC	379	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49756	152.199.4.44	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:04 UTC	424	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:05 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792531 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:55:04 GMT Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Server: ECAcc (mic/9BE6) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c693d9c2-301e-0080-6583-7e0d73000000 x-ms-version: 2009-09-19 Content-Length: 1378 Connection: close
2024-04-26 14:55:05 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49763	192.229.211.199	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:08 UTC	619	OUT	GET /shared/5/js/reset-password-signinname_en_G9nzWSnqBfHRIaMd4FEm5g2.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:09 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 335468 Cache-Control: public, max-age=31536000 Content-MD5: 4fX+aE+n1rj2t5ncqL518g== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 14:55:08 GMT Etag: 0x8DC5F3CA9ABA6F3 Last-Modified: Thu, 18 Apr 2024 00:15:32 GMT Server: ECAcc (mic/9B88) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9acc0acb-701e-00d0-19dc-946e40000000 x-ms-version: 2009-09-19 Content-Length: 612341 Connection: close
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 72 65 73 65 74 2d 70 61 73 73 77 6f 72 64 2d 73 69 67 6e 69 6e 6e 61 6d 65 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 39 37 32 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 39 33 38 34 29 2c 6f 3d 7b 63 68 69 6c 64 43 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 3a 21 30 2c 63 6f 6e 74 65 78 74 54 79 70 65 73 3a 21 30 2c 64 65 66 61 75 6c 74 50 72 6f 70 73 3a 21 30 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 21 30 2c 67 65 74 44 65 66 61 Data Ascii: /! For license information please see reset-password-signinname_en.js.LICENSE.txt /!function(){var e,t,n,r,o={97206:function(e,t,n){"use strict";var r=n(9384),o={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefa
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 6c 75 65 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 65 5b 6f 5d 2e 73 65 6c 65 63 74 65 64 3d 21 30 2c 76 6f 69 64 28 72 26 26 28 65 5b 6f 5d 2e 64 65 66 61 75 6c 74 53 65 6c 65 63 74 65 64 3d 21 30 29 29 3b 6e 75 6c 6c 21 3d 3d 74 7c 7c 65 5b 6f 5d 2e 64 69 73 61 62 6c 65 64 7c 7c 28 74 3d 65 5b 6f 5d 29 7d 6e 75 6c 6c 21 3d 3d 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 3d 21 30 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 39 31 29 29 3b 72 65 74 75 72 6e 20 69 28 7b 7d 2c 74 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e Data Ascii: lue===n)return e[o].selected=!0,void(r&&(e[o].defaultSelected=!0));null!==t\|\|e[o].disabled\|\|(t=e[o])}null!==t&&(t.selected=!0)}}function Ie(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(l(91));return i({},t,{value:void 0,defaultValue:void 0,children
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 29 72 65 74 75 72 6e 20 65 2e 73 74 61 74 65 4e 6f 64 65 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 33 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 41 6e 5d 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4e 6e 28 65 29 7b 64 6f 7b 65 3d 65 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 65 26 26 35 21 3d 3d 65 2e 74 61 67 29 3b 72 65 74 75 72 6e 20 65 7c 7c 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 46 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6f 3d 68 28 6e 29 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 3d 6f 5b 74 5d 3b 65 3a 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 6f 6e 43 6c 69 63 6b 22 3a 63 61 73 Data Ascii: )return e.stateNode;throw Error(l(33))}function Bn(e){return e[An]\|\|null}function Nn(e){do{e=e.return}while(e&&5!==e.tag);return e\|\|null}function Fn(e,t){var n=e.stateNode;if(!n)return null;var o=h(n);if(!o)return null;n=o[t];e:switch(t){case"onClick":cas
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 75 6e 57 69 74 68 50 72 69 6f 72 69 74 79 2c 54 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 73 63 68 65 64 75 6c 65 43 61 6c 6c 62 61 63 6b 2c 6a 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 63 61 6e 63 65 6c 43 61 6c 6c 62 61 63 6b 2c 41 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 72 65 71 75 65 73 74 50 61 69 6e 74 2c 49 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 2c 4c 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 67 65 74 43 75 72 72 65 6e 74 50 72 69 6f 72 69 74 79 4c 65 76 65 6c 2c 52 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 2c 44 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 55 73 65 72 42 6c 6f 63 6b 69 6e 67 50 72 69 6f 72 69 74 79 2c 42 6f 3d 61 2e 75 6e 73 74 61 62 6c 65 5f 4e 6f 72 6d 61 6c 50 72 69 6f 72 69 74 79 2c 4e Data Ascii: unWithPriority,To=a.unstable_scheduleCallback,jo=a.unstable_cancelCallback,Ao=a.unstable_requestPaint,Io=a.unstable_now,Lo=a.unstable_getCurrentPriorityLevel,Ro=a.unstable_ImmediatePriority,Do=a.unstable_UserBlockingPriority,Bo=a.unstable_NormalPriority,N
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 6e 63 74 69 6f 6e 20 73 61 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 6e 61 28 29 3b 72 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 6e 75 6c 6c 3a 72 3b 76 61 72 20 69 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 21 3d 3d 51 69 29 7b 76 61 72 20 61 3d 51 69 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 69 3d 61 2e 64 65 73 74 72 6f 79 2c 6e 75 6c 6c 21 3d 3d 72 26 26 4a 69 28 72 2c 61 2e 64 65 70 73 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6c 61 28 74 2c 6e 2c 69 2c 72 29 7d 5a 69 2e 65 66 66 65 63 74 54 61 67 7c 3d 65 2c 6f 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6c 61 28 31 7c 74 2c 6e 2c 69 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 66 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 75 61 28 35 31 36 2c 34 2c 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: nction sa(e,t,n,r){var o=na();r=void 0===r?null:r;var i=void 0;if(null!==Qi){var a=Qi.memoizedState;if(i=a.destroy,null!==r&&Ji(r,a.deps))return void la(t,n,i,r)}Zi.effectTag\|=e,o.memoizedState=la(1\|t,n,i,r)}function fa(e,t){return ua(516,4,e,t)}function
2024-04-26 14:55:09 UTC	5	IN	Data Raw: 61 6b 3b 64 65 Data Ascii: ak;de
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 66 61 75 6c 74 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 75 2e 6f 6e 43 6c 69 63 6b 26 26 28 65 2e 6f 6e 63 6c 69 63 6b 3d 70 6e 29 7d 5f 6e 28 6f 2c 72 29 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 34 29 7d 6e 75 6c 6c 21 3d 3d 74 2e 72 65 66 26 26 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 31 32 38 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 63 61 73 65 20 36 3a 69 66 28 65 26 26 6e 75 6c 6c 21 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 5a 61 28 30 2c 74 2c 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2c 72 29 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 26 26 6e 75 6c 6c 3d 3d 3d 74 2e 73 74 61 74 65 4e 6f 64 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 31 36 36 29 29 3b 6e 3d 4e 69 28 42 69 2e 63 Data Ascii: fault:"function"==typeof u.onClick&&(e.onclick=pn)}_n(o,r)&&(t.effectTag\|=4)}null!==t.ref&&(t.effectTag\|=128)}return null;case 6:if(e&&null!=t.stateNode)Za(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(l(166));n=Ni(Bi.c
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 37 33 37 34 31 38 32 33 2c 30 21 3d 28 34 38 26 4c 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 33 32 37 29 29 3b 69 66 28 4f 63 28 29 2c 65 3d 3d 3d 52 6c 26 26 74 3d 3d 3d 42 6c 7c 7c 70 63 28 65 2c 74 29 2c 6e 75 6c 6c 21 3d 3d 44 6c 29 7b 76 61 72 20 6e 3d 4c 6c 3b 4c 6c 7c 3d 45 6c 3b 66 6f 72 28 76 61 72 20 72 3d 67 63 28 29 3b 3b 29 74 72 79 7b 62 63 28 29 3b 62 72 65 61 6b 7d 63 61 74 63 68 28 6f 29 7b 64 63 28 65 2c 6f 29 7d 69 66 28 61 69 28 29 2c 4c 6c 3d 6e 2c 6b 6c 2e 63 75 72 72 65 6e 74 3d 72 2c 31 3d 3d 3d 4e 6c 29 74 68 72 6f 77 20 6e 3d 46 6c 2c 70 63 28 65 2c 74 29 2c 57 63 28 65 2c 74 29 2c 6c 63 28 65 29 2c 6e 3b 69 66 28 6e 75 6c 6c 21 3d 3d 44 6c 29 74 68 72 6f 77 20 45 72 72 6f 72 28 6c 28 32 36 31 29 29 3b 65 2e 66 69 6e 69 Data Ascii: 73741823,0!=(48&Ll))throw Error(l(327));if(Oc(),e===Rl&&t===Bl\|\|pc(e,t),null!==Dl){var n=Ll;Ll\|=El;for(var r=gc();;)try{bc();break}catch(o){dc(e,o)}if(ai(),Ll=n,kl.current=r,1===Nl)throw n=Fl,pc(e,t),Wc(e,t),lc(e),n;if(null!==Dl)throw Error(l(261));e.fini
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 61 69 6e 65 72 49 6e 66 6f 2c 70 65 6e 64 69 6e 67 43 68 69 6c 64 72 65 6e 3a 6e 75 6c 6c 2c 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 3a 65 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 7d 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 63 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 74 61 67 3d 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 3d 65 2c 74 68 69 73 2e 70 69 6e 67 43 61 63 68 65 3d 74 68 69 73 2e 70 65 6e 64 69 6e 67 43 68 69 6c 64 72 65 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 30 2c 74 68 69 73 2e 66 69 6e 69 73 68 65 64 57 6f 72 6b 3d 6e 75 6c 6c 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 3d 2d 31 2c 74 68 69 73 Data Ascii: ainerInfo,pendingChildren:null,implementation:e.implementation},t}function Hc(e,t,n){this.tag=t,this.current=null,this.containerInfo=e,this.pingCache=this.pendingChildren=null,this.finishedExpirationTime=0,this.finishedWork=null,this.timeoutHandle=-1,this
2024-04-26 14:55:09 UTC	16383	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 65 7d 76 61 72 20 7a 3d 7b 52 65 61 63 74 43 75 72 72 65 6e 74 44 69 73 70 61 74 63 68 65 72 3a 4d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 42 61 74 63 68 43 6f 6e 66 69 67 3a 7b 73 75 73 70 65 6e 73 65 3a 6e 75 6c 6c 7d 2c 52 65 61 63 74 43 75 72 72 65 6e 74 4f 77 6e 65 72 3a 4f 2c 49 73 53 6f 6d 65 52 65 6e 64 65 72 65 72 41 63 74 69 6e 67 3a 7b 63 75 72 72 65 6e 74 3a 21 31 7d 2c 61 73 73 69 67 6e 3a 6f 7d 3b 74 2e 43 68 69 6c 64 72 65 6e 3d 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 55 28 65 2c 72 2c 6e 75 6c 6c 2c 74 2c 6e 29 2c 72 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: );return e}var z={ReactCurrentDispatcher:M,ReactCurrentBatchConfig:{suspense:null},ReactCurrentOwner:O,IsSomeRendererActing:{current:!1},assign:o};t.Children={map:function(e,t,n){if(null==e)return e;var r=[];return U(e,r,null,t,n),r},forEach:function(e,t,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49766	192.229.211.199	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:10 UTC	613	OUT	GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://account.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:10 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2073854 Cache-Control: public, max-age=31536000 Content-MD5: Hlt2WzLF9llz2DXp7j6/IA== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 14:55:10 GMT Etag: 0x8DC5057934D08E4 Last-Modified: Sat, 30 Mar 2024 01:20:24 GMT Server: ECAcc (mic/9ADB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 68b616bb-401e-008f-7e0d-85846c000000 x-ms-version: 2009-09-19 Content-Length: 90690 Connection: close
2024-04-26 14:55:10 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6f 6e 65 64 73 2d 61 6e 61 6c 79 74 69 63 73 2d 6a 73 5f 35 34 62 31 37 32 34 61 66 31 62 30 35 65 32 62 61 33 64 62 5f 65 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 6d 73 69 64 65 6e 74 69 74 79 5f 73 69 73 75 5f 6d 73 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 31 5d 2c 7b 34 31 36 39 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 41 70 70 49 6e 73 69 67 68 74 73 Data Ascii: /! For license information please see oneds-analytics-js_54b1724af1b05e2ba3db_en.js.LICENSE.txt /"use strict";(self.webpackChunk_msidentity_sisu_msa=self.webpackChunk_msidentity_sisu_msa\|\|[]).push([[251],{41696:function(n,e,t){t.r(e),t.d(e,{AppInsights
2024-04-26 14:55:10 UTC	16383	IN	Data Raw: 4d 54 53 74 72 69 6e 67 22 2c 61 74 3d 22 74 6f 55 54 43 53 74 72 69 6e 67 22 2c 75 74 3d 22 65 78 70 69 72 65 73 22 2c 63 74 3d 6e 75 6c 6c 2c 73 74 3d 6e 75 6c 6c 2c 6c 74 3d 6e 75 6c 6c 2c 66 74 3d 44 65 28 29 2c 64 74 3d 7b 7d 2c 76 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 74 28 6e 2c 65 29 7b 76 61 72 20 74 3d 6d 74 2e 5f 63 6b 4d 67 72 7c 7c 76 74 2e 5f 63 6b 4d 67 72 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6d 74 2e 5f 63 6b 4d 67 72 3d 6d 74 28 6e 2c 65 29 2c 76 74 2e 5f 63 6b 4d 67 72 3d 74 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 6e 29 7b 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 69 73 45 6e 61 62 6c 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 6e 2c 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 6e 26 26 42 6e 28 6e 2e 69 67 6e 6f 72 Data Ascii: MTString",at="toUTCString",ut="expires",ct=null,st=null,lt=null,ft=De(),dt={},vt={};function pt(n,e){var t=mt._ckMgr\|\|vt._ckMgr;return t\|\|(t=mt._ckMgr=mt(n,e),vt._ckMgr=t),t}function gt(n){return!n\|\|n.isEnabled()}function yt(n,e){return!!(e&&n&&Bn(n.ignor
2024-04-26 14:55:10 UTC	2	IN	Data Raw: 74 75 Data Ascii: tu
2024-04-26 14:55:10 UTC	16383	IN	Data Raw: 72 6e 20 74 65 28 75 29 7d 28 6e 2c 65 2c 74 29 3b 69 7c 7c 28 69 3d 75 29 2c 61 26 26 61 2e 5f 73 65 74 4e 65 78 74 28 75 29 2c 61 3d 75 7d 7d 29 29 7d 72 65 74 75 72 6e 20 72 26 26 21 69 3f 6c 69 28 5b 72 5d 2c 65 2c 74 29 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 66 69 28 29 7b 76 61 72 20 6e 3d 5b 5d 3b 72 65 74 75 72 6e 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 6e 2e 70 75 73 68 28 65 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 57 6e 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 28 65 2c 74 29 7d 63 61 74 63 68 28 72 29 7b 72 74 28 65 2e 64 69 61 67 4c 6f 67 28 29 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 63 61 6c 6c 69 6e 67 20 75 6e 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 Data Ascii: rn te(u)}(n,e,t);i\|\|(i=u),a&&a._setNext(u),a=u}}))}return r&&!i?li([r],e,t):i}function fi(){var n=[];return{add:function(e){e&&n.push(e)},run:function(e,t){Wn(n,(function(n){try{n(e,t)}catch(r){rt(e.diagLog(),2,73,"Unexpected error calling unload handler
2024-04-26 14:55:10 UTC	16383	IN	Data Raw: 32 5d 3d 72 2e 72 6f 6c 65 56 65 72 2c 74 29 2c 64 29 7d 2c 6e 2e 61 70 70 6c 79 41 49 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 3b 69 66 28 74 2e 65 6e 61 62 6c 65 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 54 72 61 63 65 29 7b 76 61 72 20 72 3d 70 28 29 3b 72 26 26 54 6f 28 32 2c 6e 2c 44 69 2c 28 28 65 3d 7b 7d 29 5b 30 5d 3d 72 2e 67 65 74 54 72 61 63 65 49 64 28 29 2c 65 5b 31 5d 3d 72 2e 67 65 74 4e 61 6d 65 28 29 2c 65 5b 32 5d 3d 72 2e 67 65 74 53 70 61 6e 49 64 28 29 2c 65 29 2c 21 31 29 7d 7d 2c 6e 2e 61 70 70 6c 79 44 69 73 74 72 69 62 75 74 65 64 54 72 61 63 65 43 6f 6e 74 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 65 2c 74 3d 70 28 29 3b 69 66 28 74 29 7b 76 61 72 Data Ascii: 2]=r.roleVer,t),d)},n.applyAITraceContext=function(n){var e;if(t.enableApplicationInsightsTrace){var r=p();r&&To(2,n,Di,((e={})[0]=r.getTraceId(),e[1]=r.getName(),e[2]=r.getSpanId(),e),!1)}},n.applyDistributedTraceContext=function(n){var e,t=p();if(t){var
2024-04-26 14:55:10 UTC	16383	IN	Data Raw: 69 7a 65 45 78 63 65 65 64 3a 5b 5d 2c 66 61 69 6c 65 64 45 76 74 73 3a 5b 5d 2c 62 61 74 63 68 65 73 3a 5b 5d 2c 6e 75 6d 45 76 65 6e 74 73 3a 30 2c 72 65 74 72 79 43 6e 74 3a 6e 2c 69 73 54 65 61 72 64 6f 77 6e 3a 65 2c 69 73 53 79 6e 63 3a 74 2c 69 73 42 65 61 63 6f 6e 3a 72 2c 73 65 6e 64 54 79 70 65 3a 6f 2c 73 65 6e 64 52 65 61 73 6f 6e 3a 69 7d 7d 2c 6e 2e 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 74 26 26 72 26 26 21 74 2e 6f 76 65 72 66 6c 6f 77 3b 72 65 74 75 72 6e 20 6f 26 26 47 72 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 53 65 72 69 61 6c 69 7a 65 72 3a 61 70 70 65 6e 64 50 61 79 6c 6f 61 64 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 Data Ascii: izeExceed:[],failedEvts:[],batches:[],numEvents:0,retryCnt:n,isTeardown:e,isSync:t,isBeacon:r,sendType:o,sendReason:i}},n.appendPayload=function(t,r,i){var o=t&&r&&!t.overflow;return o&&Gr(e,(function(){return"Serializer:appendPayload"}),(function(){for(v
2024-04-26 14:55:10 UTC	8773	IN	Data Raw: 20 58 28 29 7b 28 62 3d 7b 7d 29 5b 6a 6f 5d 3d 5b 32 2c 31 2c 30 5d 2c 62 5b 57 6f 5d 3d 5b 36 2c 33 2c 30 5d 2c 62 5b 56 6f 5d 3d 5b 31 38 2c 39 2c 30 5d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 6b 3b 50 26 26 28 69 3d 4e 29 2c 57 6e 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 65 2e 63 6f 75 6e 74 28 29 3e 30 26 26 57 6e 28 65 2e 65 76 65 6e 74 73 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 26 26 28 65 2e 73 79 6e 63 26 26 28 65 2e 6c 61 74 65 6e 63 79 3d 34 2c 65 2e 73 79 6e 63 3d 21 31 29 2c 65 2e 73 65 6e 64 41 74 74 65 6d 70 74 3c 69 3f 28 7a 72 28 65 2c 6e 2e 69 64 65 6e 74 69 66 69 65 72 29 2c 41 28 65 2c 21 31 29 29 3a 72 2e 70 75 73 68 28 65 29 29 7d 29 29 7d 29 29 2c 72 2e 6c 65 6e Data Ascii: X(){(b={})[jo]=[2,1,0],b[Wo]=[6,3,0],b[Vo]=[18,9,0]}function G(e,t){var r=[],i=k;P&&(i=N),Wn(e,(function(e){e&&e.count()>0&&Wn(e.events(),(function(e){e&&(e.sync&&(e.latency=4,e.sync=!1),e.sendAttempt<i?(zr(e,n.identifier),A(e,!1)):r.push(e))}))})),r.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49767	192.229.211.199	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:10 UTC	636	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:10 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792325 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:55:10 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (mic/9ADB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 27587d74-401e-00cb-1a84-7efb75000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-04-26 14:55:10 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49768	192.229.211.199	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:10 UTC	623	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:10 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792290 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:55:10 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (mic/9BD2) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e75c98d3-a01e-00e9-0784-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-04-26 14:55:10 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49765	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:10 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+YGPeomb2VsMfUU&MD=SOTdARar HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 14:55:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 701496fd-793e-41c4-91d0-70fcefca866d MS-RequestId: d13af7a1-aae0-4cb7-a68a-63c295228fae MS-CV: eUazmoLJ6Uy8qb1T.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 14:55:10 GMT Connection: close Content-Length: 25457
2024-04-26 14:55:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-26 14:55:10 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49771	192.229.211.199	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:10 UTC	387	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:11 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792291 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:55:11 GMT Etag: 0x8DB77257C91B168 Last-Modified: Tue, 27 Jun 2023 15:45:09 GMT Server: ECAcc (mic/9BD2) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e75c98d3-a01e-00e9-0784-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-04-26 14:55:11 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49770	192.229.211.199	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:10 UTC	400	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: logincdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:11 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2792326 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 26 Apr 2024 14:55:11 GMT Etag: 0x8DB77257FFE6B4E Last-Modified: Tue, 27 Jun 2023 15:45:14 GMT Server: ECAcc (mic/9ADB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 27587d74-401e-00cb-1a84-7efb75000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-04-26 14:55:11 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49772	13.107.213.41	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:12 UTC	602	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://account.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:12 UTC	764	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:55:12 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 26 Apr 2024 05:01:11 GMT ETag: 0x8DC65ADE4847984 x-ms-request-id: 8e35b810-701e-00a4-3cd0-971cd5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T145512Z-17644f8887fvnmt8f6f16dxvk800000004pg000000000es6 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-26 14:55:12 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-26 14:55:12 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49774	13.107.213.41	443	6348	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 14:55:14 UTC	366	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 14:55:14 UTC	757	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 14:55:14 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 26 Apr 2024 05:01:11 GMT ETag: 0x8DC65ADE4847984 x-ms-request-id: 8e35b810-701e-00a4-3cd0-971cd5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240426T145514Z-1865489d5f4b68hj4nmrur3p700000000be0000000007sh2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 14:55:14 UTC	15627	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-26 14:55:14 UTC	1547	IN	Data Raw: 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333""""

Target ID:	0
Start time:	16:54:03
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:54:10
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2224,i,15247115325435003209,870430601353658888,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:54:17
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Windows Analysis Report
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc