Edit tour

Windows Analysis Report
https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9

Overview

General Information

Sample URL:	https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9
Analysis ID:	1711299
Infos:

Detection

Score:	2
Range:	0 - 100
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Classification

Process Tree

System is w11x64_office

chrome.exe (PID: 5196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

chrome.exe (PID: 2132 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1948,i,14049268193459184991,7695379603295095455,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=1756 /prefetch:11 MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

appidpolicyconverter.exe (PID: 6540 cmdline: "C:\Windows\system32\appidpolicyconverter.exe" MD5: 6567D9CF2545FAAC60974D9D682700D4)

conhost.exe (PID: 6548 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 9698384842DA735D80D278A427A229AB)

chrome.exe (PID: 6692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9" MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true

HTTP Parser: Number of links: 0

HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.24:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.24:49724 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: goldstonemanagment-my.sharepoint.com to https://login.microsoftonline.com:443/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5fid=00000003%2d0000%2d0ff1%2dce00%2d000000000000&response%5fmode=form%5fpost&response%5ftype=code%20id%5ftoken&resource=00000003%2d0000%2d0ff1%2dce00%2d000000000000&scope=openid&nonce=ce2e5519f6c3feffb0acff29f2ceb805deb5fb86ed78c639%2d19a748356579eb0dd834b8dd2337f923a05b9c03231bb41feba67846d6c4ba12&redirect%5furi=https%3a%2f%2fgoldstonemanagment%2dmy%2esharepoint%2ecom%2f%5fforms%2fdefault%2easpx&state=od0w&claims=%7b%22id%5ftoken%22%3a%7b%22xms%5fcc%22%3a%7b%22values%22%3a%5b%22cp1%22%5d%7d%7d%7d&wsucxt=1&cobrandid=11bd8083%2d87e0%2d41b5%2dbb78%2d0bc43c8a8e8a&client%2drequest%2did=e5cfa6a1%2de048%2d9000%2d00c3%2d6510b75557a4

Source: global traffic

HTTP traffic detected: POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1749575335084&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1host: browser.events.data.msn.cnaccept-encoding: identitycontent-length: 3745content-type: application/json; charset=UTF-8cache-control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 13.69.109.130
Source: unknown	TCP traffic detected without corresponding DNS query: 13.69.109.130
Source: unknown	TCP traffic detected without corresponding DNS query: 13.69.109.130
Source: unknown	TCP traffic detected without corresponding DNS query: 13.69.109.130
Source: unknown	TCP traffic detected without corresponding DNS query: 13.69.109.130
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 13.69.109.130
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 13.69.109.130
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.163
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 23.223.209.79
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.4
Source: unknown	TCP traffic detected without corresponding DNS query: 104.117.182.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.4

Source: global traffic	HTTP traffic detected: GET /:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 HTTP/1.1host: goldstonemanagment-my.sharepoint.comsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"upgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: nonesec-fetch-mode: navigatesec-fetch-user: ?1sec-fetch-dest: documentaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0, i
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG505 HTTP/1.1host: goldstonemanagment-my.sharepoint.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic	HTTP traffic detected: GET /_layouts/15/1033/styles/corev15.css?rev=tJSIZchOAVdu3jcvNxysgA%3D%3DTAG505 HTTP/1.1host: goldstonemanagment-my.sharepoint.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: stylereferer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=sr6F3K1Q0GRnD4wb9zrBwPoIvMbEPt-0JaQtZ2Mb3Vn2jVfVgDPU9iKIjfhaW45AYSHlsItWnMQ9vXt_5XC8Wa94u7DJVAawj0-l3jAC6jqDqnCcBHNZcDxMBtl8o-JdbhH7frf9kRm-3KWrGoLkADokDa52GtzlZfPjpXW-t1fMGv_aGr6wfkV8c_9o3aJX0&t=2a9d95e3 HTTP/1.1host: goldstonemanagment-my.sharepoint.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=LGCbvPqDWr6NGAoANcpURE6wX-2D5oGrf28m_P6v5AWqox645ulKE4STbYM8PekIOxkIg8mD9pD-iLx71QtT44qTiD8Gi7tXKkfQTBjCwSY1&t=638823999370157672 HTTP/1.1host: goldstonemanagment-my.sharepoint.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=B4bLup9GT6FvNBDj7lSdY2DxqLAWAfC59a2KqSTY1FBECZs9i9ufw291GYdpWdLJQVtlZSNYwYZfC9HP7UcuaXjP6q-f2WXlpuPanmeHJ2wZ0kpdjDsx3tu3Hvq6sUyIZsFBk6TyauZKGjEr7qx_bdaybHfMwK0kaI5_evnFU8W1gDWToPANfm54gjpb4i8s0&t=2a9d95e3 HTTP/1.1host: goldstonemanagment-my.sharepoint.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: scriptreferer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /bld/_layouts/15/16.0.26121.12013/1033/initstrings.js HTTP/1.1host: res-1.cdn.office.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://goldstonemanagment-my.sharepoint.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /bld/_layouts/15/16.0.26121.12013/blank.js HTTP/1.1host: res-1.cdn.office.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://goldstonemanagment-my.sharepoint.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /bld/_layouts/15/16.0.26121.12013/theming.js HTTP/1.1host: res-1.cdn.office.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://goldstonemanagment-my.sharepoint.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /bld/_layouts/15/16.0.26121.12013/init.js HTTP/1.1host: res-1.cdn.office.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://goldstonemanagment-my.sharepoint.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1host: goldstonemanagment-my.sharepoint.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: same-originsec-fetch-mode: no-corssec-fetch-dest: imagereferer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /bld/_layouts/15/16.0.26121.12013/1033/strings.js HTTP/1.1host: res-1.cdn.office.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://goldstonemanagment-my.sharepoint.com/accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bld/_layouts/15/16.0.26121.12013/core.js HTTP/1.1host: res-1.cdn.office.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://goldstonemanagment-my.sharepoint.com/accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.22631.4169/0?CH=902&L=en-US&P=&PT=0x30&WUA=1220.2407.15022.0&MK=1CocMgeHrKELNWb&MD=TMrlDezF HTTP/1.1host: slscr.update.microsoft.comaccept: /user-agent: Windows-Update-Agent/1220.2407.15022.0 Client-Protocol/2.80accept-encoding: identity
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1host: goldstonemanagment-my.sharepoint.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /personal/sandrar_goldstonem_com HTTP/1.1host: goldstonemanagment-my.sharepoint.comsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"upgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: same-originsec-fetch-mode: navigatesec-fetch-user: ?1sec-fetch-dest: documentreferer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9cookie: WSS_FullScreenMode=falsepriority: u=0, i
Source: global traffic	HTTP traffic detected: GET /personal/sandrar_goldstonem_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fsandrar%5Fgoldstonem%5Fcom HTTP/1.1host: goldstonemanagment-my.sharepoint.comupgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: same-originsec-fetch-mode: navigatesec-fetch-user: ?1sec-fetch-dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9cookie: WSS_FullScreenMode=falsepriority: u=0, i
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2fsandrar_goldstonem_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fsandrar%255Fgoldstonem%255Fcom&Source=cookie HTTP/1.1host: goldstonemanagment-my.sharepoint.comupgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: same-originsec-fetch-mode: navigatesec-fetch-user: ?1sec-fetch-dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9accept-encoding: identityaccept-language: en-US,en;q=0.9cookie: WSS_FullScreenMode=falsecookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGc2FuZHJhciU1RmdvbGRzdG9uZW0lNUZjb20=priority: u=0, i
Source: global traffic	HTTP traffic detected: GET /14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4 HTTP/1.1host: login.microsoftonline.comupgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: cross-sitesec-fetch-mode: navigatesec-fetch-user: ?1sec-fetch-dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"referer: https://goldstonemanagment-my.sharepoint.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0, i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_bazYuVH6rF7OQmuNhACwPg2.js HTTP/1.1host: aadcdn.msftauth.netorigin: https://login.microsoftonline.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: scriptreferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true HTTP/1.1host: login.microsoftonline.comsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"upgrade-insecure-requests: 1user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-fetch-site: same-originsec-fetch-mode: navigatesec-fetch-dest: documentreferer: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&respon
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l8i1wwom7wbodda4l9b6dw2.js HTTP/1.1host: aadcdn.msauth.netorigin: https://login.microsoftonline.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: scriptreferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1host: aadcdn.msauth.netorigin: https://login.microsoftonline.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: text/css,/;q=0.1sec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: stylereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=0
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_k4QdCmHtAxG2-1HsSIy8zw2.js HTTP/1.1host: aadcdn.msauth.netorigin: https://login.microsoftonline.comsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: corssec-fetch-dest: scriptreferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_486f0cce3c3db211da28.js HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_41f36656d3c0bb04c90c.js HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4f75990aeef30238698e.js HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: /sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: scriptsec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1host: aadcdn.msauth.netuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1host: aadcdn.msauth.netuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1host: aadcdn.msauth.netuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1host: aadcdn.msauth.netuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1host: aadcdn.msauth.netsec-ch-ua-platform: "Windows"user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8sec-fetch-site: cross-sitesec-fetch-mode: no-corssec-fetch-dest: imagesec-fetch-storage-access: activereferer: https://login.microsoftonline.com/accept-encoding: identityaccept-language: en-US,en;q=0.9priority: i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1host: aadcdn.msauth.netuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1host: aadcdn.msauth.netuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9priority: u=1, i
Source: global traffic	HTTP traffic detected: GET /common/GetCredentialType?mkt=en-US HTTP/1.1host: login.microsoftonline.comuser-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36accept: /sec-fetch-site: nonesec-fetch-mode: corssec-fetch-dest: emptysec-fetch-storage-access: activeaccept-encoding: identityaccept-language: en-US,en;q=0.9cookie: esctx-71YInml3DZE=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWRDa3Ner4X-GaKw_n7FSlUA5yIaKwaEj6P2C_XLbt7JFnV5fNIRm9fqHD-8wxBxjl6CP_HtMxcLqdPcJVZ-PPVB9kD00IZ40vFUZ5Hcp5NmTfcLb9gQJHb2Dx31ZSGQksmhldnwRAqhpS5An1iyCXCAAcookie: x-ms-gateway-slice=estsfdcookie: stsservicecookie=estsfdcookie: AADSSO=NA\|NoExtensioncookie: SSOCOOKIEPULLED=1cookie: buid=1.AW4AiouGFGqTN0SBmP2fpPaVSAMAAAAAAPEPzgAAAAAAAABuAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE3I5pqbIRmN026x6Cl0C8kUKvut9vA7uVnkDN3sWDbQ12vmHYFuPJCjTHUAeNq-H03lSYL6tLIe9dYTJ-dW9-yZWmHA48SzzL9oIqsXtpfjggAAcookie: esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEX8rqiRqlioAsqp0V9WEXetaiodOk9YfETe9sv7KlBl1x-ec5Ka1pWb9ahO5m7-NpDVXj7chr1TEY5nIVaJNuEKEsMfE64rf2i0r0m8F2z8wH6rQHpVrjVvUelvXpUpeK8e1S8fj5EpQWH5QbB6TDfR6sUKIVZTMpkeR4rsgYLfsgAAcookie: esctx-m77HPvFtk=AQABCQEAAABVrSpeuWamRam2jAF1XRQEoz7x4jdzc2MvCyNSDFY347a2XdVFM5WwGiJyHMl9pbzMDLWrbHGnpdmoEHx99cnfBIkNkaZ4RxBB1c5UQ436ALrQoGh5AlbjRV3CBoKOSUnnihlRbPWPu5FICEQK8d2llKD0V_w2SAahwC1rNzKcLiAAcookie: fpc=AsEr7rtG_vJGmnZ5g8rTo0GEDnIxAQAAAMld2t8OAAAAcookie: MicrosoftApplicationsTeleme
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.22631.4169/0?CH=902&L=en-US&P=&PT=0x30&WUA=1220.2407.15022.0&MK=1CocMgeHrKELNWb&MD=TMrlDezF HTTP/1.1host: slscr.update.microsoft.comaccept: /user-agent: Windows-Update-Agent/1220.2407.15022.0 Client-Protocol/2.80accept-encoding: identity
Source: global traffic	HTTP traffic detected: GET /r/r1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: goldstonemanagment-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: logincdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: unknown

Source: chromecache_84.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_84.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_84.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_90.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/1033/initstrings.js
Source: chromecache_90.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/blank.js
Source: chromecache_90.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/init.js
Source: chromecache_90.2.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/theming.js
Source: chromecache_90.2.dr	String found in binary or memory: https://res.cdn.office.net/teams-js/2.21.0/js/MicrosoftTeams.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49678
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49677
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49674
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.24:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.24:49724 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@24/61@16/11

Source: C:\Windows\System32\appidpolicyconverter.exe	Mutant created: PolicyMutex
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:6548:120:WilError_03

Source: C:\Windows\System32\appidpolicyconverter.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1948,i,14049268193459184991,7695379603295095455,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=1756 /prefetch:11
Source: unknown	Process created: C:\Windows\System32\appidpolicyconverter.exe "C:\Windows\system32\appidpolicyconverter.exe"
Source: C:\Windows\System32\appidpolicyconverter.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1948,i,14049268193459184991,7695379603295095455,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=1756 /prefetch:11	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\appidpolicyconverter.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\appidpolicyconverter.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\appidpolicyconverter.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\appidpolicyconverter.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\appidpolicyconverter.exe	Section loaded: gpapi.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Process Injection	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 DLL Side-Loading	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
e329293.dscd.akamaiedge.net	23.216.132.21	true	false	high
s-part-0023.t-0009.t-msedge.net	13.107.246.51	true	false	high
a726.dscd.akamai.net	23.206.121.60	true	false	high
mira-ssc.tm-4.office.com	52.107.251.51	true	false	high
www.google.com	142.250.176.196	true	false	high
www.tm.a.prd.aadg.akadns.net	20.190.152.19	true	false	high
a1894.dscb.akamai.net	23.200.0.195	true	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
logincdn.msftauth.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
goldstonemanagment-my.sharepoint.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
http://c.pki.goog/r/r4.crl	false	high
https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true	false	high
http://c.pki.goog/r/r1.crl	false	high
https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_84.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_84.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_84.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.107.251.51	mira-ssc.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.176.196	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.40	s-part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.51	s-part-0023.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.216.132.21	e329293.dscd.akamaiedge.net	United States	7016	CCCH-3US	false
23.206.121.60	a726.dscd.akamai.net	United States	33490	COMCAST-33490US	false
23.200.0.195	a1894.dscb.akamai.net	United States	20940	AKAMAI-ASN1EU	false
20.190.152.20	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.107.252.9	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
20.190.152.19	www.tm.a.prd.aadg.akadns.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.24

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1711299
Start date and time:	2025-06-10 19:07:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 58s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@24/61@16/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, appidcertstorecheck.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.238, 142.250.80.35, 142.251.41.14, 172.253.122.84, 142.250.72.110, 142.251.35.174, 142.250.65.206, 142.250.65.174, 23.210.73.5, 142.250.80.110, 142.250.80.46, 40.126.24.147, 142.250.81.234, 142.250.176.202, 142.250.65.170, 142.251.40.106, 142.250.65.202, 142.250.65.234, 142.250.80.106, 142.250.64.74, 142.251.40.138, 142.251.41.10, 142.251.40.202, 172.217.165.138, 142.251.35.170, 142.251.40.170, 142.251.40.234, 142.251.32.106, 142.250.64.110, 142.250.176.206, 142.250.65.227, 142.251.40.142, 20.189.173.27, 20.189.173.3, 20.190.152.21, 40.126.24.83, 23.205.30.159, 40.126.24.149
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, clients2.google.com, redirector.gvt1.com, login.live.com, onedscolprdwus21.westus.cloudapp.azure.com, update.googleapis.com, c.pki.goog, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, onedscolprdwus02.westus.cloudapp.azure.com, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, aadcdn.msauth.net, www.googleapis.com, res-stls-prod.edgesuite.net, login.msa.msidentity.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116364
Entropy (8bit):	7.997236503670438
Encrypted:	true
SSDEEP:	3072:7EoTCjm+KsUvGOonzI627JoxMrHDGqMzn4:/Cy+KNvGVns6+MijGTT4
MD5:	991F65CE1AA4809A6ED028BD54B3D1E3
SHA1:	18B2197389C0AE376309E3A5D03CC1C039337685
SHA-256:	3C2C2CFEA40049D60B0BCEA06AE9A3558D0D264B318F06DD180A920774EC6365
SHA-512:	32F2D67286A4A813A3FBC60DA16923D5B210237D39F331244A4ADDB52A9AF66A606E38CE64D219F78A8FBDC20756B42382B136210DE75FF4FE2ED39C154E27F9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_41f36656d3c0bb04c90c.js
Preview:	...........k{.H.(.}.......c....8=.Ib......#Ca.....K..o..ZU%...q..9...ct).....S..?U.6..rqyt~Y9}W..........Z.xzy..x.z.Q.w9......^...U.........<..G....=wZ.....Oxe.._.0.S/..k>..&T..gn.?TN....6.....a0...I\......)....$......7.T>x.0..q\...{..H...\|.....2..x"..\`IYkD..#....FP....a.^.].'0h.&.....ie..\|.qPy....l<..S.y.E..>.....a...3..-vq:..P<..dE.....C.h.P..]..\5.......3.<N.^?T...:B#c....\|...T.........(...Q.l7[...V.e.W.8.G.....O...0.m...f.F...7..h.......F..b...Yr.=...f.....?......S.}U..g.......t..../...G.......~.+...)y.X\...<.&.........`.v.....`^....c4c.Yh=.a.wB.m.......i..~v-..O..nY....A....5...v...t..FSw...Q/n...c.9Y{.-..>a..7h..o..ec...O...)~..8...j-M..nD....9......f5..'Q#...L.'......fZW."Q[.<.nx..O...LU.;..a.m..&.k.$...;.=L...yv....,.f<Hb{.w.@.8...8F.D.>.04.[K6v.i..2.#?..&.;-.].....1.X0w.H6mZ..A...t..e-.\...MC6.xt`..cu...@_...v....;z'.mV.T/o.i....-...K......\..Sn>B......%x..%......W.\|......~.6.%...+.:..x5..s5P.-..!.G...ZT.i...;.&

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (456), with no line terminators
Category:	downloaded
Size (bytes):	456
Entropy (8bit):	5.2175398274239475
Encrypted:	false
SSDEEP:	6:A+roDEH6IgMbIZc8Z1jmzRkvIKMPAI0qKIKMPAI0qeCMRTxIj+01KyBui9YDre:A+MYcYkc8Z1SzRk7ASAWCKx2+Wuit
MD5:	D82C3B70564E5836C3D1015A1927EC02
SHA1:	EAFD835FA552C14EC82E774C120397F4B86CBB0B
SHA-256:	5D67056CF39F4E77BF50CF942019A8CE72328FE49A2EE0DB6325BF6833AEF290
SHA-512:	4C7142094A862420199E08BD02F8B03FACA77ED4CB1B4F7FD4F3EF11E4D9D011D47CDC416747C1A1FEA1DA7000F7B86749C803A6BF3AE52EDBA1E84F82A15AF1
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/blank.js
Preview:	function $_global_blank(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["blank.js"]={version:{rmj:16,rmm:0,rup:26121,rpr:12013}};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_blank.js");typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkEnd_blank.js")}function ULSaew(){var a={};a.ULSTeamName="Microsoft SharePoint Foundation";a.ULSFileName="blank.commentedjs";return a}$_global_blank();

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	186722
Entropy (8bit):	5.127936869447186
Encrypted:	false
SSDEEP:	1536:qofu83Pw6jz1+8YZwf7BN6pJsnNxezT8+zacaS8Ob4C//aT5L4DK:883z5+nMDEuvezT8++6kZCe
MD5:	2DE2482829622DE740DB42E04CBCD047
SHA1:	2A88D65A01BDA232B97B24163F66BA7F90A63386
SHA-256:	947D9E7117E8528021EC98FBBD6FE75A4D393A699DFFFFB3A2803EAE42845CEB
SHA-512:	35A2B88CF1FD1505BAD30CF68FB235ED5E5029D4824EC8586452A53E820563229AEA06156B46702C5046DC4BCE0046DFC74E934E215BFDD040B2715D298E8886
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/1033/strings.js
Preview:	var Strings; if (Strings === undefined) { Strings=new Object(); }Strings.CMS=function(){};Strings.CMS.L_SelectAllAltKey_TEXT="false";Strings.CMS.L_SpellCheckKey_VALUE="0x76";Strings.CMS.L_Callout_Usage_Count="<p>{0}</p>view\|\|<p>{0}</p>views";Strings.CMS.L_NoElementStylesWereRemoved_TEXT="The selection did not contain any instances of element styles to remove.";Strings.CMS.L_DecWidthAltKey_TEXT="false";Strings.CMS.L_ExpandedTagNameH4="Heading 4";Strings.CMS.L_DecWidthShiftKey_TEXT="true";Strings.CMS.L_EditImageRenditionsAction="Edit Renditions";Strings.CMS.L_TabBackKey_TEXT="N";Strings.CMS.L_SvrBusySpellchecker_TEXT="The spell checking server was busy";Strings.CMS.L_RemoveLinkShiftKey_TEXT="false";Strings.CMS.L_Show_TEXT="Show";Strings.CMS.L_Title_TEXT="Title:";Strings.CMS.L_ShowSpecific_TEXT="Show the selected item in navigation";Strings.CMS.L_DecHeightShiftKey_TEXT="true";Strings.CMS.L_ChangeColumnWidthAndRowHeightKey_TEXT="W";Strings.CMS.L_UnlinkToolTip_TEXT="Remove Hyperlink";Strin

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://goldstonemanagment-my.sharepoint.com/WebResource.axd?d=LGCbvPqDWr6NGAoANcpURE6wX-2D5oGrf28m_P6v5AWqox645ulKE4STbYM8PekIOxkIg8mD9pD-iLx71QtT44qTiD8Gi7tXKkfQTBjCwSY1&t=638823999370157672
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	5.182072991812046
Encrypted:	false
SSDEEP:	3:quSHUKiuqtT2ynzj7mSHdtwFGrY:VSHUKiuuTnzj7m0BM
MD5:	4CD46B0ED25DD75BA3C3CAA1FB541EEB
SHA1:	C55D8191FA6779A2E5B962D579170CB0D4E3FEA1
SHA-256:	BDF1A43E9F197BBAD8A9F2FB244A6F64DD54ED6F77011D556A2008AB67409BE4
SHA-512:	EB546027D1F0FAAF9272A26AF61B1FD4DC109012FB06432A5D351D55EA6163EB975581B8A20B35B5728E0982480F97B127619814EE68A727BD583C6823591519
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC44ORIgCYICaXLWAdtdEgUN0VtRUhIFDVd69_0hz9fsrKNrzYE=?alt=proto
Preview:	CkQKBw3RW1FSGgAKOQ1Xevf9GgQISxgCKiwIClIoCh5AIS4jKiQtXyslJj8vXik9KCw6O348IidcXT5bfXsQARj/////Dw==

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 102804
Category:	downloaded
Size (bytes):	25609
Entropy (8bit):	7.992070293592458
Encrypted:	true
SSDEEP:	768:65FO8CctusRS+4iLLuVC9Vri5MLPMTleAD5:8FbxwsR/4iAz5MbMl5
MD5:	B62553925BD98826C60457D2EB6B9A46
SHA1:	84DBBB6D9B36A587C21B5A56B1D9E587E33BA943
SHA-256:	C58166FE4DF4BA8F25A960C21451EAF841D97F6F552F104E43431C9DB1C2E2CC
SHA-512:	7B6872144AE308224FF671A1EC63F040A40115888790CF6834AD85D517471CE5DAD3EC297EE751FB196B55118A181017151F7F06FCE0F2F26FF94E8EEC070033
Malicious:	false
Reputation:	low
URL:	https://goldstonemanagment-my.sharepoint.com/ScriptResource.axd?d=B4bLup9GT6FvNBDj7lSdY2DxqLAWAfC59a2KqSTY1FBECZs9i9ufw291GYdpWdLJQVtlZSNYwYZfC9HP7UcuaXjP6q-f2WXlpuPanmeHJ2wZ0kpdjDsx3tu3Hvq6sUyIZsFBk6TyauZKGjEr7qx_bdaybHfMwK0kaI5_evnFU8W1gDWToPANfm54gjpb4i8s0&t=2a9d95e3
Preview:	............r.I.(.>f..d..B6. )U/.(....mGRuw.... I..B..X...<.O..p}.=#.P.>s.Y...D,..........................'.......;.'..2.Uu5.C..%..v.M&;T...u1.T.=...m....'_z.......4.&?~.__....".db00..IR..\|.(tj6+.y.$.L.$..."..FIx3+..tG%.7...N.'..........A9....9;.O...j...Y\|8.........LW........h&.%WW...\|\.Q..Tr....$\..?-&....}O...w..$R}....W.k.+.._..q...P..dR......`^.j]0.L..9......)...."...I....,.K..j...`1.a9-.`..-p..O..t...\|Bo..Uu.~.t...uB9S.J.o..Fe<.....A.SM.....d>.].HO..Qx...ao....a.J..h6K..q7.N.n'..Ga78....v..n...>..0.I.X?...$=...x..H..&.V.+.h..GyTJ....AT...x.Jl...X..t.H4...$9..^u....r9rq3.._..a...^I.{{.Ch....@.l.....@..BW.[..8~6.U3].I#....8....H`...4..I..6...I...Q1...W^]>...P.KJ.L......A...>.@hf.M...RP..)m.F...Wp{.!.R.".j.....!soO..]k...a."eo.S,...G\|n.\|!F[..O../.aR...$.\..4.N.-p1..}...2...r\a[`e.E..{H..?.....J.ak.Y...P......DP.d.?...<..Y.8....%d...@..e.....exc..g...b.....<z....7*8!...n..wG0.C..f..Y5....qE..p....2.rH-..r.S........q..R.$Q^q....!....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.993219152622706
Encrypted:	true
SSDEEP:	768:j6PfHtcQsNe72gH9i6EndaklFS0VBrXFm4soWu7VOYpRf0WL/:5xoCgH9i6EFFhrXFmUW4JpRc+/
MD5:	E9745F803E3FBA8FA0CC8C1E6E4506C6
SHA1:	87E8B2D2F29CB42BAD597390234F66745642D080
SHA-256:	D5496BC436AAD08CCA3F391A3CA8D7DAFC076B081567511A8B1358F860DA8003
SHA-512:	C74C91DD85D312ED34E2275E13AC778E186581BF43F70B379C3B370755AF46EDA4EE0FE1C52997385848084C90CE2466AB3E7F71D9A2EBE1B6BB85AD0FB66AD6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4f75990aeef30238698e.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:{...r..._........,...A........:..x.>.y..u.....N..f...).......<?._.f..C.....%..@..~....`P../.Q4..IQ.' ...e)'.q..Y:...%.z..x..k.z.../....@.D.r?......GP....`..o.'..~1.....&.HJ.`.@.}mV../8.b.m..guo.H_.7Qv.....dQ.....-.NE......G:.U'.....~.1.....H.k...O..dk.d.\|.7..x\/..i^.Y..Q_/.`..i.&...-.......P...yEv....,....'.^...X.......YK.".....l.r.ax.....<...1!..4GQ.M_.....L..F..51.!.....].....y...(...=O5?.nT...~

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61051
Entropy (8bit):	7.996174443760279
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzz:fq1HoUBIpU5TG7JSmwuTe+f
MD5:	B10C50C98F0C64E2F85C58FD3A99C5AB
SHA1:	24F47D45A0315A9B1F95EBDC4A8392C3CA84882E
SHA-256:	F272F3CED934E1965F7224E1A866204394824DDB625D2DEF37BCB77BE69E620C
SHA-512:	554226CDCC8CA9195CE56303C737B275E075A6D4FD9A29631BF81780FCA24046DB2690EAD2369ABC08462C03078C7E196C5438F9D8DAFBBC53353CF5177AC7FA
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_486f0cce3c3db211da28.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 59293
Category:	downloaded
Size (bytes):	16714
Entropy (8bit):	7.987160006931144
Encrypted:	false
SSDEEP:	384:TplwL5Bt/vaGc5eK6IaRSSzjnl0Y6kxKNUb6ptH:wL5riGcacQjnKk+vr
MD5:	878F0134D5623C12145B3C539CCB0A31
SHA1:	8DA453BA5ACE4E06F9E3599DD765E1E2C8D17AA9
SHA-256:	FDE7337DB19DC211784EEEE2AAD0856785D1A940C2EA73A6E6B6659233D3AFC7
SHA-512:	73C1C7735E6A442CB54CC2818B5004201AB556737B35FDA1064EEC8430BF9B2F012AA3B32F04350A8C3B9AEC1821B75548FCE9C36EB4354C57AA3BC3074E08E7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l8i1wwom7wbodda4l9b6dw2.js
Preview:	...........}Ms#G.....u...z \|..#......!...g..dD.(........R.....}..'.}..?e#.........#.....!..>....2.2..0[......b.A.......o.....i/..:....$>..0.^~t.B..W........u.Y..TL...\|~)...:q...j....w...\..r..3v.5.tCAi..NP.4<.w.(...yy.....a8.....+{....W.}.......`.q.qi...?.....qg.D.X.wb..?.bOD...x.B1..X..`.N..b..E...%J.....`<...zu....&4..^..x$>.b+.n,.n...A...;..k?.:......I.._.-.F.B+.n=q..Pgl7.(^.....B.......gQ.k......0..0?...E<.y.B4..w..=?..F..Z........EhH...b.,...].O.z...<.;.....=.L....GB.......i......J.\9.........2.A)h.V..:t.)..?..f.'.....v.%.;.WP...2oOe9./..u1......_...~(..`[.7/5..m...4...?.2.e ...y....#...tg"......O.J.N..~n....q-...U>9l..}........K...I...b.S.:..U$.........P.>X...p-..........,L.G .B.."..O.."..f..P..N&"...._pW.......{..B..{.q..R....._..q_.f.Bp.=.=..:.....=..D.`,!IGr.. ...z.?.g_0N(...:..;..0.z.h....6.../.......?.....c.3...3@n.......=P A.Bv...{{.'.=...L......9..P,`%.N........3.7.G...9:..o....[...........s\|.._.:*...Jh.^.(.....s...e.......

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23437), with CRLF line terminators
Category:	downloaded
Size (bytes):	23594
Entropy (8bit):	5.107347306409284
Encrypted:	false
SSDEEP:	384:zyWvVsT5pTtxJOyNm7lMqasjI8LWv3n8wyM:zJsT5pTt7kK+M
MD5:	964FCB2BAF87049DC68975291AE89431
SHA1:	D0CD8C989D44BC531472B632868D3FB2DE4B3184
SHA-256:	B8F7BD568E379502CF0C00027581D2761C7DC14B166F5D25FC048A0B56B7BFBB
SHA-512:	03CB58D197A776F9C315C2A14B9C034D88C7B7E9F4247C5698396F4FE7363A22FC2042A24C02A245C7E035DD2862F88E8EF46A7E5A269EDC2B69E39752A52987
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/1033/initstrings.js
Preview:	var Strings; if (Strings === undefined) { Strings=new Object(); }Strings.STS=function(){};Strings.STS.L_NewTab="New tab";Strings.STS.L_CalloutLastEditedNameAndDate="Changed by ^1 on ^2";Strings.STS.L_CalloutSourceUrlHeader="Location";Strings.STS.L_SPDiscBestUndo="Remove best reply";Strings.STS.L_SPClientManage="manage";Strings.STS.L_SPAddNewWiki="new Wiki page";Strings.STS.L_SPCategorySortRecent="Recent";Strings.STS.L_ViewSelectorTitle="Change View";Strings.STS.L_SPDiscNumberOfLikes="{0} likes\|\|{0} like\|\|{0} likes";Strings.STS.L_Timeline_DfltViewName="Timeline";Strings.STS.L_TimelineToday="Today";Strings.STS.L_SPDiscNoPreviewAvailable="No preview available for this reply";Strings.STS.L_NODOCView="There are no documents in this view.";Strings.STS.L_SPBlogPostAuthorCategories="by {0} in {1}";Strings.STS.L_SPBlogsNoItemsInCategory="There are no posts in this category.";Strings.STS.L_QRCodeDescription="Scan this QR code with your phone or tablet to open {0}";Strings.STS.L_RelativeDateTime

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	512795
Entropy (8bit):	5.442031248907637
Encrypted:	false
SSDEEP:	12288:z3OkpWJupsTyhEQLQr4ABnIF7SEyAJU7/:z3OkpWJuGTyhEQLQr4ABnIdSEyAm
MD5:	F30696AB3D69E00C440C39447D47E198
SHA1:	683440221A4F8FC26010E8C9464CA3E87D104E07
SHA-256:	5D51850C4E87FE061D7F6E8498433B7EC4C190C528531BA21E761A7455C5953E
SHA-512:	60E0BCD86BC93D370E3A4643EC67C6AD6ADFE2B69D2B13DF7A6CCFBBC263BEBCCB9ECD5ED5981EBC8E9DF4F511329F2B7287B0A80427CF319E3B38E43B982BEB
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/core.js
Preview:	function $_global_core(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["core.js"]={version:{rmj:16,rmm:0,rup:26121,rpr:12013}};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_core.js");SPAnimation={};SPAnimation.g_Curves=new Array(7);SPAnimation.g_Curves[0]=new SPCurve(0,0,0,0,0,0);SPAnimation.g_Curves[1]=new SPCurve(1,1,0,0,0,0);SPAnimation.g_Curves[2]=new SPCurve(2,2,0,0,0,0);SPAnimation.g_Curves[3]=new SPCurve(3,3,.1,.9,.2,1);SPAnimation.g_Curves[4]=new SPCurve(4,3,.42,0,1,1);SPAnimation.g_Curves[5]=new SPCurve(5,3,0,0,.58,1);SPAnimation.g_Curves[6]=new SPCurve(6,3,.42,0,.58,1);SPKeyFrame.prototype={type:0,curveID:0,startTime:0,endTime:0,startValue:0,endValue:0,relativeTo:0,operationType:0};SPAnimation.Attribute={PositionX:1,PositionY:2,Height:3,Width:4,Opacity:5};SPAnimation.ID={Basic_Show:0,Basic_SlowShow:1,Basic_Fade:2,Basic_Move:3,Basic_Size:4,Content_SlideInFadeInRight:5,Content_SlideInFadeInRightInc:6,Content_SlideOutFadeOutRigh

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	340993
Entropy (8bit):	5.4428491331574325
Encrypted:	false
SSDEEP:	6144:8XVJjsUJaW86hPIjcfb+47IunpizIcxdS+MI4Ny6qF+HNJdWLWnAboc3lexR1Yh5:8XVJjsUPV0ugzIE
MD5:	7DA7BF4AF908D00367B066B5E97AA67D
SHA1:	C751B0C4D70AF992CF0ADD2286970B022498B3A2
SHA-256:	C7D57BCBC4FA671090B8EB60F97DBAA8CF9DB30CE8964D9AED893A06327D319A
SHA-512:	6EA3875BB2EB93023608F54B4C149ECD90A5314FE88BD610082249B7C92373C556E4574494ACD389AF280A7C0F8B1D314D718DE8B387BB6A8766511C17A9C81B
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/init.js
Preview:	function $_global_init(){if("undefined"==typeof g_all_modules)g_all_modules={};g_all_modules["init.js"]={version:{rmj:16,rmm:0,rup:26121,rpr:12013}};if(-1!=navigator.userAgent.indexOf("ProfilerMark")&&"function"==typeof msWriteProfilerMark)spWriteProfilerMark=function(a){window.msWriteProfilerMark(a)};typeof spWriteProfilerMark=="function"&&spWriteProfilerMark("perfMarkBegin_init.js");if(typeof OffSwitch=="undefined"){OffSwitch={__namespace:true};OffSwitch_module_def()}if(typeof RuntimeErrors=="undefined"){RuntimeErrors={__namespace:true};RuntimeErrors_module_def()}if(typeof Verify=="undefined"){Verify={__namespace:true};Verify_module_def()}if(typeof Define=="undefined"){Define={__namespace:true};Define_module_def()}if(typeof BrowserDetection=="undefined"){BrowserDetection={__namespace:true};BrowserDetection_module_def()}(function(){b.prototype={firefox:undefined,firefox36up:undefined,firefox3up:undefined,firefox4up:undefined,ie:undefined,ie55up:undefined,ie5up:undefined,ie7down:undefi

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46880)
Category:	downloaded
Size (bytes):	142656
Entropy (8bit):	5.430346865177417
Encrypted:	false
SSDEEP:	1536:PyeDWHTpHgTPRUbx3XCg/MJA5NZii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGg:IHlU1g/Mq529EveUynbBwsIccb
MD5:	6DACD8B951FAAC5ECE426B8D8400B03E
SHA1:	5F344BF7B4F4E981F4DB74083742B9D57ABF8ABF
SHA-256:	F2542C4AC79F296F7D9AADD9C2B1A03E003F25CFDF37924AAA24BEAEB554F649
SHA-512:	AFF2F41CF61433CC083BCE787292D3864CF84904A54D5D48091D5E4634974D5644702FF7054652EADE182CAA85DD6B9E50147D08787AF34D438FA1E8B2FBE185
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_bazYuVH6rF7OQmuNhACwPg2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 40329
Category:	downloaded
Size (bytes):	9984
Entropy (8bit):	7.979200972475404
Encrypted:	false
SSDEEP:	192:/Z/x+yzJpYhEFmtHByePw0JwScHXWumyaxkomNwWs8pQegUOX+B/rHiG:/JP8hEFshyePw8cHXx58k3OWVpQegUO0
MD5:	027A7D52E1CEED8AEF7DC13505B81D36
SHA1:	33CF0BCE6A4C8B44B4A80B3116C978C12EE93FD0
SHA-256:	29061464FB6FCE2326B952EACAA95C3C6183BFEA74C3851390E9838720D372A6
SHA-512:	FCDDEBF6DE759B5079E7DF2432771A866DE1824B119AD8CB3BAE11F9FAA060B943D52F121E4C63E7E20D43F31B2220C1D4E9C24A20004C4B061CD1A0A5EE5AC9
Malicious:	false
Reputation:	low
URL:	https://goldstonemanagment-my.sharepoint.com/ScriptResource.axd?d=sr6F3K1Q0GRnD4wb9zrBwPoIvMbEPt-0JaQtZ2Mb3Vn2jVfVgDPU9iKIjfhaW45AYSHlsItWnMQ9vXt_5XC8Wa94u7DJVAawj0-l3jAC6jqDqnCcBHNZcDxMBtl8o-JdbhH7frf9kRm-3KWrGoLkADokDa52GtzlZfPjpXW-t1fMGv_aGr6wfkV8c_9o3aJX0&t=2a9d95e3
Preview:	...........}ks.H......@a{ebU......h.^.._a..3!k...HB....m.%....?i..e..U@.........wefefefU........O.....?8).we:...?x..eQ.....EQ.:-.`p.e.^....b.W..X.........UQ.......,...4.jV~..tQ........`......Y..,.]........sR..E...M....\.c>H5.t......xW.jt.?6?.c(..`_....B.G..'.<.1.c....o...yZ..cZ.a=K+....l.l...EQ..4.=......L_..Z..4gYuQ\|._!]m1.`Q.uQ....)..=..\|.....2.8G."XY.......]c..\|xT....3@..?..Zm..E.'........2..E gy..<(.Z...8XY..4O2....U...4.0..5.W!}x._i.`.T,.V.G...b/.t..j>...<.((....,."Uo5X}.@QE.b.khU.h...>...Q~=.k.?.....o.0k........GM..X......P^G....=..<fY.U..S....K....H..9:......'...J=).O....#G[m...30k...j.2+.im.(Km3.uxv._.pT.4.>..f.-..UZ.=e...C....._5..xR.:..\U..jR. .....9A..1:1.......a..2...U......YTP..`...l0.9.t.}.'.p.c3q.. {m.,...G1..".L.Aj@.D.h.p......fZ{...eYB......1.Ep.b&..% .c.._i9.).,.eD.'...`.E.i..M3#+6...9+....B..NYB..%..8..?....zv.r..XP..W.../+..e.N........Z..i..... ....4I..iR...8+.>....k...N?....MA.....uU...&...Xyb..u..H....%.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	341640
Entropy (8bit):	5.323819749959233
Encrypted:	false
SSDEEP:	1536:k6Bi397Ra/9FjWr5JwiaPyJmbu52JmKI1DS9sw83nm5ZMUuj24S+o0WmuGUmh4jJ:Lvf42B9HeX3s
MD5:	B4948865C84E01576EDE372F371CAC80
SHA1:	60A0AA2EF8895FE78B182A0B63E7A4FFBB1BA256
SHA-256:	8132FEB57BF5EE1D9D2D0BB420EF1968A403B61220A0B049E60E3155AA0B14E6
SHA-512:	ACCA2377372001DDAE1B1607EF619EBFCB87C1F466B16963F5F36CBF40031C18DAC91A326050B2643892B940016B5B07AD22BF18467511FE5B3386DD09221866
Malicious:	false
Reputation:	low
URL:	https://goldstonemanagment-my.sharepoint.com/_layouts/15/1033/styles/corev15.css?rev=tJSIZchOAVdu3jcvNxysgA%3D%3DTAG505
Preview:	/* _lcid="1033".._LocalBinding /..body,...ms-core-defaultFont,..#pageStatusBar,..#hybridTooltipStatusBar,...ms-status-msg,...js-callout-body..{../ [ReplaceFont(themeFont:"body")] / font-family:"Segoe UI","Segoe",Tahoma,Helvetica,Arial,sans-serif;..font-size:13px;..}..body,...ms-core-defaultFont,...js-callout-body..{../ [ReplaceColor(themeColor:"BodyText")] / color:#444;..}...ms-core-defaultFont..{..font-weight:normal;..text-decoration:none;..white-space:normal;..word-break:normal;..line-height:normal;..}..body..{..margin:0px;..overflow:hidden;../ [ReplaceColor(themeColor:"PageBackground")] / background-color:#fff;..background-size:cover;..background-repeat:no-repeat;..}..html > .ms-core-needIEFilter..{../ [ReplaceBGImage] / -ms-filter:"progid:DXImageTransform.Microsoft.AlphaImageLoader(src='about:blank',sizingMethod='scale');";..}...ms-backgroundImage..{../ [ReplaceBGImage] */ background-image:url();..}..#s4-ribbonrow..{..position:relative;..}..#s4-workspace..{..overflow:auto

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (64257), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	303105
Entropy (8bit):	4.897149488699614
Encrypted:	false
SSDEEP:	6144:a/EXyU44kAIAVL3B27x1Uw32oAa581MV1tP0EWZ2owIz+ArBz6/zQTqIeTAR3zav:EDAIAVL3B27x1Uw32oFvcMUGzXL
MD5:	FB24F62AADD7BA328C79C5A89AE999A7
SHA1:	3D9CAB6C655B23649DAEC49FCC79383DF79A5EBC
SHA-256:	FF62A27122A5CFE4F5C424D689B49B1D887C29FFA01F951CAA548F4FD9B301CB
SHA-512:	74C37D4A93DF21AEEBF7BDB3DCFF674F84C4DE4FBFC24511B2379FCA8701406B5EF05A2CCB518B9669F82B89F316AA140205AC3AFD77196E70AB4B779F6453E9
Malicious:	false
Reputation:	low
URL:	https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN".."http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta http-equiv="X-UA-Compatible" content="IE=8"/><meta name="ROBOTS" content="NOHTMLINDEX" /><title>......Error....</title><link id="CssLink-955b7d52b5134c89a787097068a2c82a" rel="stylesheet" type="text/css" href="/_layouts/15/1033/styles/corev15.css?rev=tJSIZchOAVdu3jcvNxysgA%3D%3DTAG505"/>.<link id="CssLink-7f023023af7f4b109c8c8d49f655f311" rel="stylesheet" type="text/css" href="/_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG505"/>.<style id="SPThemeHideForms" type="text/css">body {opacity:0 !important}</style><script type="text/javascript">// <![CDATA[ ...var _initGlobalSnapShot = {};try { if (O

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 459255
Category:	downloaded
Size (bytes):	124082
Entropy (8bit):	7.997271965085238
Encrypted:	true
SSDEEP:	3072:6WGjF9qkuami5zUIL2+MdueBQzQR14h4STyAQPJb9hh2Ifn:f+fX5LMdpQzqSh4STyAQPJb9hh1
MD5:	FB40FF082772ED1074E6C81BEB1E18B7
SHA1:	D2F8C46030A0473236C2FED39775DE48429C3812
SHA-256:	F2635A59DE0867157037CC14288EC01A2EA7A1E75799630EA6A42C3CCE89FAE9
SHA-512:	3A90FA1AD0DA5D8D4C3E44ECB2A4F7D79EE05723667F713C8090AEDF154CFD4EEC61FFD34F6579D3BF8D7EC63933318F618F74C8B50F4EC2A00F2F8601398141
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_k4QdCmHtAxG2-1HsSIy8zw2.js
Preview:	...........kw.8.(....G37mw...Wl....'..t^.'.O.%K...#yKr..x.....D.r...Y....<...@..@......U...........W........a.....rv~5..}.=.(....+....w....A%.~...<....G.7.Ye.....U.Q.'s..2......,\|.T...\8Q.Z.^..P?.....@i7...........xT..>..U.......WN}7..p.T".2.......oB.8...,.L.(....WF.)j....bL...'..'4P..........e.`.ZW:.V.........p!z........cL.`zV.t.[.I=7.EO.....xT!d....{..@<{.L#'@...`.i..#.........?.#42...$.......cV.dP....A..g\.6...k.w....d.[.>L..~1...../\LgN.]w.`p.....v..y...+.r..C............./$....................ak..\.X...w%....F.'....zh.7.....V.mCw......>c.4..wvj.......WM.f?...9..;..s.(.3 ...s_ut.........n}.......t.a....H.....HO...In....Q.......weOkn=..'I.V......Jw.e.e.....!...T.....d....].:....Si...o....2u.i-W.}Q.a!.c"....k.1...,mu,z..z....[5..Q..1.E}C.[.b..&..-......Zr..w..s..R.....m....k.I..&.+...Re...T\.8`g<cZ......h..u..f.P......~.......D...,b.z@.Sw...k5....Db.../...I..}..ZL.j.taJV.HJ...g..H.C.z...^.R?........[.9e..xZ.....9...!.V....<%J.D...

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35238), with no line terminators
Category:	downloaded
Size (bytes):	35238
Entropy (8bit):	5.390650418562352
Encrypted:	false
SSDEEP:	768:PrxzCC2akwbs7lSZTprPaTrPyrfKwKTZiNOzpCk47S:hsp7ly9rP0S4pCkx
MD5:	C637DE6889D81964119BA1FD124E2454
SHA1:	5DB2B1681BE6FF9A7B26E269CD80D817D41A01BE
SHA-256:	18E8366C8C5590C3D056BA6CA9691B7471D6970EE00D0E22A4B68E517B54F087
SHA-512:	78288767F08DB38F6DC8C366546CECC05DF35C25BCD898B94DCCC5ECCB3ACD7807817BAF813BCA11F4CCAC169A980E4F10EBF4334000C4D2D0F74DCC30BB36EE
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.26121.12013/theming.js
Preview:	var Theming={__namespace:true};Theming_module_def();function Theming_module_def(){Theming.ApplyThemeToCss=tb;Theming.ReplaceCssTextForElement=J;Theming.ThemeInfo=E;Theming.ImageProcessor=R;Theming.Colors={Color:a,ColorApplication:x,HslColor:h};function cb(d,c,e){for(var b=true,a=0;a<c.length;a++)if(d.charCodeAt(e+a)!==c.charCodeAt(a)){b=false;break}return b}var c={text:0,comment:1,string:2,url:3,right_par:4,font_family:5,rgb:6,rgba:7,colon:8,semicolon:9,right_curly:10,color:11};function d(a,b){this.kind=a;this.text=b}function Db(b){var e,a,g,f,l="*/",u="url(",i=")",j="font-family",t="rgb(",s="rgba(",o="#",w=":",y=";",x="}",k=new d(c.text,"");if(!Boolean(b))b="";a=0;f=b.length;m.prototype={kind:0,text:"",getToken:function(){return null}};function m(){}var r={"/":{},"'":{},'"':{},"#":{},")":new d(c.right_par,")"),";":new d(c.semicolon,";"),":":new d(c.colon,":"),"}":new d(c.right_curly,"}"),u:{getToken:q},f:{getToken:n},r:{getToken:p}};function h(c){var a=b.indexOf(")",c);if(a<0)a=f;retu

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
Category:	downloaded
Size (bytes):	20410
Entropy (8bit):	7.980582012022051
Encrypted:	false
SSDEEP:	384:8RvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGTS8r2k:8pmm7ZFM+ObGGUIjN5PJV3Tp
MD5:	3BA4D76A17ADD0A6C34EE696F28C8541
SHA1:	5E8A4B8334539A7EAB798A7799F6E232016CB263
SHA-256:	17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
SHA-512:	8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	5.030708856292114
Encrypted:	false
SSDEEP:	12:UXRtEohlWNmONv0MBR0/vUvFa9vN8ESve77Lxukm3auDjqHV:Ofa9n2H8qzxukmKuDjkV
MD5:	B45EDFC9FCDB690CCDA004A8483955E0
SHA1:	BAEDF73329EABB32504CAC640538EE3B6B31819F
SHA-256:	E817BF53005172205995AA07E0021BD8254A0204A1177E925F365E838C32D069
SHA-512:	E2709C77BA686FC58FE528EC2C2CEB6B9C84D045018D77FB9B376359F204FB6B889910B6748C978B4FF9712A7611342DF3C8C59711AA42090219DEC0C83778D2
Malicious:	false
Reputation:	low
URL:	https://goldstonemanagment-my.sharepoint.com/_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG505
Preview:	/* _lcid="1033".._LocalBinding */..#ms-error-header..{..margin:118px 0px 16px;..min-height:50px;..}..#ms-error-gobackcont..{..margin-top:28px;..}..#ms-accessDenied-reqDialog..{..max-width:100%;..}..#ms-error-body..{..background-size:auto;..overflow:auto;..width:830px;..margin-right:auto;..margin-left:auto;..}...ms-error-returnLink..{..line-height:19px;..vertical-align:middle;..}...ms-error-detailsFold..{..padding-top:42px;..}...ms-error-techMsg..{..padding-top:28px;..}...ms-error-groupJoinPanel..{..margin-top:15px;..}...ms-error-groupProfileText..{..margin-top:17px;..}...ms-error-separator..{..margin:34px 0px;..}..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
URL:	https://goldstonemanagment-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 10, 2025 19:09:07.700788975 CEST	49672	443	192.168.2.24	13.69.109.130
Jun 10, 2025 19:09:08.105134010 CEST	49672	443	192.168.2.24	13.69.109.130
Jun 10, 2025 19:09:08.776983976 CEST	49672	443	192.168.2.24	13.69.109.130
Jun 10, 2025 19:09:10.120783091 CEST	49672	443	192.168.2.24	13.69.109.130
Jun 10, 2025 19:09:11.022694111 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:09:11.022739887 CEST	443	49692	142.250.176.196	192.168.2.24
Jun 10, 2025 19:09:11.022814035 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:09:11.023387909 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:09:11.023396969 CEST	443	49692	142.250.176.196	192.168.2.24
Jun 10, 2025 19:09:11.218249083 CEST	443	49692	142.250.176.196	192.168.2.24
Jun 10, 2025 19:09:11.218336105 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:09:11.219513893 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:09:11.219525099 CEST	443	49692	142.250.176.196	192.168.2.24
Jun 10, 2025 19:09:11.220062971 CEST	443	49692	142.250.176.196	192.168.2.24
Jun 10, 2025 19:09:11.260133982 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:09:12.793037891 CEST	49672	443	192.168.2.24	13.69.109.130
Jun 10, 2025 19:09:13.081670046 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.081712961 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.081796885 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.082150936 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.082159996 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.082715988 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.082756042 CEST	443	49697	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.082832098 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.083153963 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.083162069 CEST	443	49697	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.379839897 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.379945993 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.382695913 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.382707119 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.383361101 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.383361101 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.383368969 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.383377075 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.388474941 CEST	443	49697	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.388607979 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.388928890 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.389478922 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.389522076 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.389528036 CEST	443	49697	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.389579058 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.390595913 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.390616894 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.392220974 CEST	443	49697	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.432274103 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.433051109 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.433053017 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.474971056 CEST	443	49697	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.529872894 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.730032921 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.730381012 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.730446100 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.730698109 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.730710983 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.730742931 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.730782986 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.730875015 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.769833088 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.769849062 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.770555973 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.770561934 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.820015907 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.820039034 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.820142031 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.820446968 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.820573092 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.912209988 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.912362099 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.912594080 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.912676096 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.912957907 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.913060904 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:13.957662106 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:13.957792044 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.005846024 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.005994081 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.006130934 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.006200075 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.006376028 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.006525040 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.006586075 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.006896973 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.007070065 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.007102966 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.007252932 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.009314060 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.009499073 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.009572029 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.009818077 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.010016918 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.012190104 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.012276888 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.012856007 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.012923956 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.013062000 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.013134956 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.013256073 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.013359070 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.049964905 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.050122023 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.063278913 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.063297987 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.063339949 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.063347101 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.063450098 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.063455105 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.097980022 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.098138094 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.099158049 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.099361897 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.099481106 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.099597931 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.099708080 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.100465059 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.100585938 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.103328943 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.103445053 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.103595972 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.103792906 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.105169058 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.112524033 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.112632990 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.112679958 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.112817049 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.113567114 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.113754988 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.113821983 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.113914013 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.113956928 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.116168022 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.116576910 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.116720915 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.116787910 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.116880894 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.116894007 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.116969109 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.117357969 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.117419004 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.117463112 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.117542028 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.117559910 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.117651939 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.117682934 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.117758036 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.117770910 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.117862940 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.117866039 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.117964983 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.141208887 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.141341925 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.141653061 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.141757011 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.190582991 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.190730095 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.190901041 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.191093922 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.192126989 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.192249060 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.192450047 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.192538023 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.192679882 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.192783117 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.193604946 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.193726063 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.193846941 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.193932056 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.194909096 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.195015907 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.195169926 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.195276976 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.195403099 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.195496082 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.195611954 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.195663929 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.208837986 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.210628986 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.210905075 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.210998058 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.211069107 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.211080074 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.211219072 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.212709904 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.213844061 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.216785908 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.217053890 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.217230082 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.217564106 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.217648983 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.217670918 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.217758894 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.217804909 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.217804909 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.219592094 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.221201897 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.221872091 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.395976067 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.395992994 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:14.396152020 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.404727936 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:14.410478115 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.410528898 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.410614014 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.410861015 CEST	49699	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.410911083 CEST	443	49699	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.410991907 CEST	49699	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.411356926 CEST	49700	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.411365032 CEST	443	49700	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.411425114 CEST	49700	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.411659002 CEST	49701	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.411668062 CEST	443	49701	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.411770105 CEST	49701	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.412867069 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.412883043 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.413580894 CEST	49700	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.413589001 CEST	443	49700	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.413871050 CEST	49699	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.413877964 CEST	443	49699	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.414252996 CEST	49701	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.414258957 CEST	443	49701	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.619626045 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.619749069 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.625097036 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.625124931 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.625478029 CEST	49699	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.625547886 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.625556946 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.625591993 CEST	49700	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.626019001 CEST	49701	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.626085997 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.626085997 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.626091957 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.626101017 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.626142979 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.626147032 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.626251936 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.626255989 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.632977009 CEST	443	49699	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.633053064 CEST	49699	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.633080006 CEST	49699	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.643811941 CEST	443	49700	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.643894911 CEST	49700	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.643925905 CEST	49700	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.652463913 CEST	443	49701	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.652550936 CEST	49701	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.652550936 CEST	49701	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.654042959 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.655083895 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.655142069 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.655684948 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.658891916 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.698448896 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.763180017 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.769608974 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.769628048 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.769649982 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.769679070 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.769695997 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.769716978 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.769716978 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.769741058 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.773166895 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.773400068 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.776377916 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.781831980 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.782108068 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.782356977 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.785410881 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.785474062 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.785799026 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.786657095 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.786684036 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.786750078 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.800664902 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.800790071 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.855420113 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.855586052 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.871839046 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.871995926 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.882122993 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.882272959 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.930291891 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.930402040 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.940932035 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.941044092 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.948703051 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.948793888 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.958058119 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.958168983 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.965697050 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.965801001 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.974078894 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.974169016 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.981642008 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.981739998 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.989260912 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.989398003 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:14.997119904 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:14.997215986 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.006329060 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.006438017 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.014199018 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.014309883 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.021307945 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.021543980 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.027582884 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.027812004 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.030389071 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.030523062 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.035785913 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.035870075 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.041800022 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.042140961 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.042855978 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.042901039 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.045169115 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.049583912 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.049806118 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.055175066 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.055268049 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.061157942 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.061270952 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.061283112 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.061355114 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.061553001 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.069381952 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.069442034 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.272052050 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:15.302653074 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.312263966 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:15.344306946 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.415441036 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:15.415783882 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:15.415857077 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:15.415880919 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:15.416001081 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:15.416280985 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:15.417963028 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:15.418019056 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:15.419528961 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.420103073 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.420120955 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.420296907 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.420449018 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.420521975 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.423034906 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.423135996 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.425717115 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.425832987 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.426466942 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.426748991 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.431989908 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.432096958 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.434472084 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.434581995 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.438570976 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.438779116 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.440212011 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.440310955 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.445481062 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.445585012 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.447917938 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.448004961 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.450706959 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.450797081 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.450818062 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.450936079 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.451091051 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.456502914 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.456552029 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.470299006 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.470314980 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.598963022 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.599674940 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.599778891 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.601924896 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.602030039 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.602030039 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.604331017 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.604424953 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.607074022 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.607152939 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.607861996 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.607938051 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.611062050 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.611202002 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.615633011 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.615751982 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.617867947 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.617981911 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.622488976 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.622586012 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.622742891 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.622806072 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.626868010 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.626949072 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.632894039 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.633054972 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.635171890 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.635257959 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.638937950 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.639029980 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.640573025 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.640645027 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.644016027 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.644103050 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.649974108 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.650073051 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.652447939 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.652595043 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.656069040 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.656174898 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.657793999 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.657881021 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.663881063 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.663969994 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.669501066 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.669604063 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.671818972 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.671902895 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.676224947 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.676353931 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.678730965 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.678853035 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.681477070 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.681593895 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.682426929 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:15.682454109 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:15.682517052 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:15.683521986 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:15.683531046 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:15.686953068 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.687052965 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.689330101 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.689455032 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.693238974 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.693346024 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.694833040 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.694902897 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.699434996 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.699568033 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.719403028 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.719485998 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.721687078 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.721786022 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.722326040 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.730401039 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.730452061 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:15.739146948 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:09:15.781790018 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:09:16.704632998 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:16.704720974 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:16.762677908 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:16.762697935 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:16.763358116 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:16.763362885 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:16.763401031 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:16.763406038 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:16.763592005 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:16.764223099 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:16.764292002 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:16.764461994 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:16.765975952 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:16.809133053 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:17.428761959 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:17.428818941 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:17.428915024 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:17.430970907 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:17.430989981 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:17.916537046 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:17.916616917 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:17.918853045 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:17.918864012 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:17.919388056 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:17.964900970 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.075906992 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.075941086 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.076047897 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.076982975 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.077227116 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.077900887 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.121124983 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.152348995 CEST	49672	443	192.168.2.24	13.69.109.130
Jun 10, 2025 19:09:18.237880945 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.277368069 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.392087936 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392107010 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392132044 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392153978 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392162085 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392185926 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.392215967 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392227888 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392241955 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392271996 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.392275095 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.392298937 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.393909931 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.393971920 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.538218021 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.538626909 CEST	443	49707	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:18.538769960 CEST	49707	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:18.738157988 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:18.738434076 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:18.738502026 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:18.738528967 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:18.738532066 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:18.738571882 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:18.738571882 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:18.738759995 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:18.739957094 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:09:18.740026951 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:09:27.403650045 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.403676033 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.403769016 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.403774977 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.405222893 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.450723886 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.570664883 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.570965052 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.571039915 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.571276903 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.572400093 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.572400093 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.572506905 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.575193882 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.620280027 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.735980034 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.736277103 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.736335039 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.736610889 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.737504005 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.737525940 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.737884998 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.739990950 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.780313969 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.924791098 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.924920082 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.925075054 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.925148010 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.925188065 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:27.925477028 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.926989079 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:09:27.927062035 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:28.263989925 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.264050961 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.264126062 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.264622927 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.264636993 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.596910000 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.597042084 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.598421097 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.598433018 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.598627090 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.598634958 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.598840952 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.598849058 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.599046946 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.599636078 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.599680901 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.599829912 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.601782084 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.652332067 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.831442118 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.831538916 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.831933975 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.831943035 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.831971884 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.832005024 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.832012892 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.832015038 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.832062960 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.832083941 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.832125902 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.832143068 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.833903074 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:28.833996058 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:28.844921112 CEST	49672	443	192.168.2.24	13.69.109.130
Jun 10, 2025 19:09:28.997072935 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:28.997101068 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:28.997262001 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:28.997586012 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:28.997594118 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.192599058 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.192766905 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.194196939 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.194212914 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.194488049 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.194499969 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.194695950 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.194699049 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.197640896 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.197776079 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.197915077 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.244266033 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.287144899 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.340780020 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.352720976 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.352740049 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.352762938 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.352770090 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.352782965 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.352941036 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.352941036 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.352952957 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.353079081 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.390269995 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.390288115 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.390453100 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.416146994 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.416323900 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.447309971 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.447490931 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.467989922 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.468564034 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.484266043 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.484437943 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.502984047 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.503176928 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.523747921 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.523957014 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.540025949 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.540186882 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.541960955 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.542026997 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.542043924 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.545408010 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:09:29.545718908 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:09:29.599838972 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.599912882 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.604520082 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.648266077 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.759936094 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.760104895 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.760305882 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.760315895 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.760391951 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.760399103 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.760446072 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.760601997 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.760611057 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.760674000 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.792506933 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.792531967 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.855091095 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.855176926 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.855298042 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.857705116 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:29.857795000 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:29.879678011 CEST	49711	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.879714966 CEST	443	49711	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:29.879781008 CEST	49711	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.879971027 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.879997015 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:29.880083084 CEST	49713	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.880121946 CEST	443	49713	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:29.880177975 CEST	49713	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.880179882 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.880939960 CEST	49713	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.880948067 CEST	443	49713	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:29.881916046 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.881936073 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:29.882543087 CEST	49711	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:29.882553101 CEST	443	49711	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.165983915 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.166471958 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.167737961 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.167746067 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.167999983 CEST	49711	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.168114901 CEST	49713	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.168282986 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.168288946 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.168428898 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.168428898 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.168433905 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.168442011 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.168562889 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.168565989 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.173372030 CEST	443	49713	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.173496962 CEST	49713	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.173572063 CEST	49713	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.180947065 CEST	443	49711	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.181032896 CEST	49711	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.181078911 CEST	49711	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.181924105 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.182600021 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.182806015 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.182961941 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.184526920 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.232845068 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.379951000 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.380660057 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.380673885 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.380753994 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.380764961 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.380779982 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.380803108 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.380809069 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.380850077 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.380850077 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.382365942 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.382669926 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.382714033 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.401431084 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.401627064 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.431607962 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.431706905 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.431777000 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.431787968 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.431859970 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.475302935 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.475562096 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.491219997 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.491305113 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.491394043 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.491427898 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.509644985 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.509808064 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.510132074 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.510247946 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.510406017 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.520632029 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.520741940 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.520798922 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.520798922 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.561113119 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.561187983 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.561283112 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.561283112 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.567425013 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.567492008 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.567548037 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.567548037 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.568775892 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.568945885 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.569116116 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.569163084 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.575156927 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.575236082 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.575272083 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.575295925 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.575356960 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.577687025 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.577744961 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.692536116 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.730057001 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.730087996 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:30.730184078 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.730529070 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:30.730535984 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.094902039 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.094978094 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.095607996 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.095618963 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.095788956 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.095793009 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.096003056 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.096153975 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.096621990 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.096757889 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.096805096 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.138156891 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.291282892 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.291579962 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.291589022 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.291655064 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.346757889 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.346856117 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.346862078 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.346941948 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.346983910 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.347044945 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.375823021 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.375983000 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.387164116 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.387244940 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.387267113 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.387295961 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.387305975 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.387346029 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.389468908 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.389550924 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.449394941 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.492273092 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.492804050 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.492816925 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.550239086 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.550494909 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.550615072 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.557816029 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.557890892 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.557910919 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.557991982 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.558017969 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.558056116 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.566716909 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.566791058 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.574945927 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.575011015 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.575038910 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.575076103 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.575084925 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.575136900 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.627836943 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.627918005 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.634479046 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.634548903 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.634552002 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.634608984 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.634608984 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.634666920 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.641707897 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.641778946 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.643089056 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.643161058 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.643162966 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.643212080 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.646121979 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.650216103 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.650281906 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.650676012 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.650732994 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.651149035 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.651204109 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.651237011 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.652820110 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.652870893 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.718091011 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.718111992 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.718426943 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.718434095 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.736232996 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.736248016 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.811758041 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.812000990 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.812066078 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.813074112 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.813143015 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.814053059 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.814208031 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.814254999 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.816006899 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.835709095 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.835875034 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.836237907 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.836335897 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.837526083 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.837610006 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.837636948 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.837693930 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.837732077 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.837793112 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.837815046 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.837862968 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:31.840094090 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:31.888576984 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:32.041703939 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:32.041737080 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:32.112313986 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.112354994 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.112446070 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.112502098 CEST	49718	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.112526894 CEST	443	49718	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.112643957 CEST	49718	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.112653971 CEST	49719	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.112698078 CEST	443	49719	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.112746000 CEST	49719	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.113028049 CEST	49718	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.113044024 CEST	443	49718	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.113342047 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.113351107 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.113631964 CEST	49719	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.113645077 CEST	443	49719	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.133868933 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:32.134291887 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:32.134386063 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:32.136671066 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:32.183917999 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:32.390553951 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.390616894 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.392872095 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.392883062 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.393063068 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.393069983 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.393193007 CEST	49718	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.393203020 CEST	49719	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.393593073 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.393596888 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.393620014 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.393623114 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.393711090 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.393714905 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.399832964 CEST	443	49719	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.399899960 CEST	49719	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.399919033 CEST	49719	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.405932903 CEST	443	49718	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.405985117 CEST	49718	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.406039953 CEST	49718	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.406817913 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.407484055 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.407542944 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.408279896 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.409141064 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.455212116 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.588129997 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.588403940 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.588413000 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.588478088 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.588494062 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.588507891 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.588538885 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.588565111 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.588577986 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.588612080 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.590962887 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.591344118 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.591396093 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.591978073 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.593456984 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.593522072 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.593728065 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.593894958 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.593940020 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:32.594957113 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:32.595007896 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:33.698236942 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:33.740267038 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:33.790611982 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:33.790867090 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:33.790920973 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:33.792001963 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:33.964764118 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:43.929233074 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:43.929269075 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:43.929308891 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:43.929313898 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:43.929338932 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:43.929356098 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:43.929786921 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:43.929815054 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:43.929826975 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:43.929831028 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:43.931123018 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:43.932297945 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:43.932307959 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:43.934225082 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:43.980901957 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:43.980906963 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:44.028665066 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:44.028985977 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:44.029067993 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:44.029756069 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:44.030603886 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:44.030913115 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:44.030967951 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:44.031109095 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:44.031117916 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:44.031168938 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:44.032224894 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:09:44.032291889 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:09:44.036998034 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.037014961 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.037029028 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.037034035 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.037854910 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.038172960 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.084271908 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.136735916 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.137012005 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.137089968 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.138325930 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.138406038 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.139513969 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.139525890 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.148399115 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.148674011 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.148718119 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.148746967 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.148792028 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.149985075 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:09:44.202359915 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:09:44.327367067 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:44.327635050 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:44.327691078 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:44.327694893 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:44.329144001 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:44.329225063 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:44.330235958 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:09:44.376269102 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:09:44.424102068 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.424151897 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.424237013 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.424635887 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.424645901 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.735079050 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.735250950 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.736558914 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.736569881 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.736769915 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.736774921 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.736968040 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.736980915 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.737045050 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.737624884 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.737682104 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.737826109 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.738830090 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.793135881 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.917484045 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.917763948 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.917819977 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:44.917831898 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.919050932 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:09:44.919127941 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:09:47.921536922 CEST	49722	80	192.168.2.24	142.251.40.163
Jun 10, 2025 19:09:48.007541895 CEST	80	49722	142.251.40.163	192.168.2.24
Jun 10, 2025 19:09:48.007661104 CEST	49722	80	192.168.2.24	142.251.40.163
Jun 10, 2025 19:09:48.007880926 CEST	49722	80	192.168.2.24	142.251.40.163
Jun 10, 2025 19:09:48.093626022 CEST	80	49722	142.251.40.163	192.168.2.24
Jun 10, 2025 19:09:48.095351934 CEST	80	49722	142.251.40.163	192.168.2.24
Jun 10, 2025 19:09:48.095366955 CEST	80	49722	142.251.40.163	192.168.2.24
Jun 10, 2025 19:09:48.095458984 CEST	49722	80	192.168.2.24	142.251.40.163
Jun 10, 2025 19:09:48.370873928 CEST	49722	80	192.168.2.24	142.251.40.163
Jun 10, 2025 19:09:48.457144022 CEST	80	49722	142.251.40.163	192.168.2.24
Jun 10, 2025 19:09:48.511739016 CEST	49722	80	192.168.2.24	142.251.40.163
Jun 10, 2025 19:09:54.973253965 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:54.973288059 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:54.973407030 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:54.973984957 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:54.973994017 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.455586910 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.455662012 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.460475922 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.460486889 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.461096048 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.474508047 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.474540949 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.474566936 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.475194931 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.475385904 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.476121902 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.527036905 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.634149075 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.683305025 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.788933039 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.788950920 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.788970947 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.788986921 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.788999081 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.789117098 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.789149046 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.789163113 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.789175034 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.789180040 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.789189100 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.789210081 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.789237976 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.790910006 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.798072100 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:55.798275948 CEST	443	49724	4.245.163.56	192.168.2.24
Jun 10, 2025 19:09:55.798331022 CEST	49724	443	192.168.2.24	4.245.163.56
Jun 10, 2025 19:09:56.230390072 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:09:56.230418921 CEST	443	49692	142.250.176.196	192.168.2.24
Jun 10, 2025 19:09:58.480417013 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:09:58.480432034 CEST	443	49697	52.107.251.51	192.168.2.24
Jun 10, 2025 19:10:00.746170998 CEST	49698	443	192.168.2.24	23.206.121.60
Jun 10, 2025 19:10:00.746200085 CEST	443	49698	23.206.121.60	192.168.2.24
Jun 10, 2025 19:10:03.746057034 CEST	49705	443	192.168.2.24	52.107.252.9
Jun 10, 2025 19:10:03.746072054 CEST	443	49705	52.107.252.9	192.168.2.24
Jun 10, 2025 19:10:11.613401890 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:10:11.613843918 CEST	443	49692	142.250.176.196	192.168.2.24
Jun 10, 2025 19:10:11.613945007 CEST	49692	443	192.168.2.24	142.250.176.196
Jun 10, 2025 19:10:12.933568001 CEST	49696	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:10:12.933583975 CEST	443	49696	52.107.251.51	192.168.2.24
Jun 10, 2025 19:10:13.637274981 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:10:13.637701035 CEST	443	49697	52.107.251.51	192.168.2.24
Jun 10, 2025 19:10:13.637793064 CEST	49697	443	192.168.2.24	52.107.251.51
Jun 10, 2025 19:10:14.558917999 CEST	49710	443	192.168.2.24	23.216.132.21
Jun 10, 2025 19:10:14.558931112 CEST	443	49710	23.216.132.21	192.168.2.24
Jun 10, 2025 19:10:15.203820944 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.203850985 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.203919888 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.205316067 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.205327034 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.399441004 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.399534941 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.439260960 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.439277887 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.440079927 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.440613985 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.441195965 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.441390038 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.441663027 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.441978931 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.442929029 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.531477928 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.531950951 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.532170057 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.533035040 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.534018993 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.534975052 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.535017967 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.535058022 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.576271057 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.590234995 CEST	49712	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:10:15.590255976 CEST	443	49712	13.107.246.40	192.168.2.24
Jun 10, 2025 19:10:15.853451967 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.853705883 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.853760004 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.854607105 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:15.854614973 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.854808092 CEST	443	49727	23.200.0.195	192.168.2.24
Jun 10, 2025 19:10:15.902715921 CEST	49727	443	192.168.2.24	23.200.0.195
Jun 10, 2025 19:10:29.042689085 CEST	49715	443	192.168.2.24	13.107.246.40
Jun 10, 2025 19:10:29.042707920 CEST	443	49715	13.107.246.40	192.168.2.24
Jun 10, 2025 19:10:29.152051926 CEST	49717	443	192.168.2.24	13.107.246.51
Jun 10, 2025 19:10:29.152079105 CEST	443	49717	13.107.246.51	192.168.2.24
Jun 10, 2025 19:10:29.386704922 CEST	49709	443	192.168.2.24	20.190.152.19
Jun 10, 2025 19:10:29.386724949 CEST	443	49709	20.190.152.19	192.168.2.24
Jun 10, 2025 19:10:29.933981895 CEST	49721	443	192.168.2.24	20.190.152.20
Jun 10, 2025 19:10:29.934006929 CEST	443	49721	20.190.152.20	192.168.2.24
Jun 10, 2025 19:10:36.246934891 CEST	49677	443	192.168.2.24	23.223.209.79
Jun 10, 2025 19:10:36.246938944 CEST	49678	443	192.168.2.24	20.189.173.4
Jun 10, 2025 19:10:36.247364044 CEST	49674	443	192.168.2.24	104.117.182.209
Jun 10, 2025 19:10:36.247385979 CEST	443	49678	20.189.173.4	192.168.2.24
Jun 10, 2025 19:10:36.247574091 CEST	49678	443	192.168.2.24	20.189.173.4
Jun 10, 2025 19:10:36.334039927 CEST	443	49674	104.117.182.209	192.168.2.24
Jun 10, 2025 19:10:36.334062099 CEST	443	49674	104.117.182.209	192.168.2.24
Jun 10, 2025 19:10:36.334161997 CEST	49674	443	192.168.2.24	104.117.182.209
Jun 10, 2025 19:10:36.334161997 CEST	49674	443	192.168.2.24	104.117.182.209
Jun 10, 2025 19:10:36.334429979 CEST	443	49677	23.223.209.79	192.168.2.24
Jun 10, 2025 19:10:36.334450960 CEST	443	49677	23.223.209.79	192.168.2.24
Jun 10, 2025 19:10:36.334570885 CEST	49677	443	192.168.2.24	23.223.209.79
Jun 10, 2025 19:10:36.334570885 CEST	49677	443	192.168.2.24	23.223.209.79
Jun 10, 2025 19:10:36.574891090 CEST	49676	80	192.168.2.24	23.203.176.221
Jun 10, 2025 19:10:36.574966908 CEST	49675	80	192.168.2.24	199.232.214.172
Jun 10, 2025 19:10:36.660679102 CEST	80	49675	199.232.214.172	192.168.2.24
Jun 10, 2025 19:10:36.660729885 CEST	80	49675	199.232.214.172	192.168.2.24
Jun 10, 2025 19:10:36.660782099 CEST	49675	80	192.168.2.24	199.232.214.172
Jun 10, 2025 19:10:36.661037922 CEST	80	49676	23.203.176.221	192.168.2.24
Jun 10, 2025 19:10:36.661083937 CEST	49676	80	192.168.2.24	23.203.176.221

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 10, 2025 19:09:02.423938990 CEST	137	137	192.168.2.24	192.168.2.255
Jun 10, 2025 19:09:03.164330006 CEST	137	137	192.168.2.24	192.168.2.255
Jun 10, 2025 19:09:03.914263010 CEST	137	137	192.168.2.24	192.168.2.255
Jun 10, 2025 19:09:06.586180925 CEST	53	63185	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:06.653223991 CEST	53	63870	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:07.887332916 CEST	53	63587	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:07.973494053 CEST	53	59611	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:10.934497118 CEST	52320	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:10.934721947 CEST	49243	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:11.020689964 CEST	53	52320	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:11.021704912 CEST	53	49243	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:12.924817085 CEST	54853	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:12.925304890 CEST	50395	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:13.070228100 CEST	53	50395	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:13.077600002 CEST	53	54853	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:15.543627024 CEST	51272	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:15.543803930 CEST	54043	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:15.656128883 CEST	53	51272	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:15.685704947 CEST	53	54043	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:24.915463924 CEST	53	60689	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:28.173021078 CEST	58094	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:28.175906897 CEST	55782	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:28.259511948 CEST	53	58094	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:28.261746883 CEST	53	55782	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:28.906481981 CEST	49258	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:28.906752110 CEST	55600	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:28.992197037 CEST	53	49258	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:28.996388912 CEST	53	55600	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:29.599419117 CEST	61936	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:29.599549055 CEST	54380	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:29.685420036 CEST	53	54380	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:29.686284065 CEST	53	61936	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:31.978311062 CEST	53	53456	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:36.231507063 CEST	53	56396	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:43.914810896 CEST	53	65262	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:44.337167978 CEST	52958	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:44.337743044 CEST	56510	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:09:44.423141003 CEST	53	52958	1.1.1.1	192.168.2.24
Jun 10, 2025 19:09:44.423337936 CEST	53	56510	1.1.1.1	192.168.2.24
Jun 10, 2025 19:10:06.302906036 CEST	53	53440	1.1.1.1	192.168.2.24
Jun 10, 2025 19:10:06.352976084 CEST	53	52015	1.1.1.1	192.168.2.24
Jun 10, 2025 19:10:15.109668970 CEST	55959	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:10:15.110608101 CEST	58306	53	192.168.2.24	1.1.1.1
Jun 10, 2025 19:10:15.196443081 CEST	53	55959	1.1.1.1	192.168.2.24
Jun 10, 2025 19:10:15.200012922 CEST	53	58306	1.1.1.1	192.168.2.24
Jun 10, 2025 19:10:15.936048985 CEST	138	138	192.168.2.24	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jun 10, 2025 19:09:07.887397051 CEST	192.168.2.24	1.1.1.1	c236	(Port unreachable)	Destination Unreachable
Jun 10, 2025 19:09:15.685769081 CEST	192.168.2.24	1.1.1.1	c327	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 10, 2025 19:09:10.934497118 CEST	192.168.2.24	1.1.1.1	0xb440	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:10.934721947 CEST	192.168.2.24	1.1.1.1	0xd3fe	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 10, 2025 19:09:12.924817085 CEST	192.168.2.24	1.1.1.1	0xc7b0	Standard query (0)	goldstonemanagment-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:12.925304890 CEST	192.168.2.24	1.1.1.1	0xe717	Standard query (0)	goldstonemanagment-my.sharepoint.com	65	IN (0x0001)	false
Jun 10, 2025 19:09:15.543627024 CEST	192.168.2.24	1.1.1.1	0xf141	Standard query (0)	goldstonemanagment-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.543803930 CEST	192.168.2.24	1.1.1.1	0x37c9	Standard query (0)	goldstonemanagment-my.sharepoint.com	65	IN (0x0001)	false
Jun 10, 2025 19:09:28.173021078 CEST	192.168.2.24	1.1.1.1	0x4b2b	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.175906897 CEST	192.168.2.24	1.1.1.1	0x489	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jun 10, 2025 19:09:28.906481981 CEST	192.168.2.24	1.1.1.1	0x303d	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.906752110 CEST	192.168.2.24	1.1.1.1	0xcda6	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Jun 10, 2025 19:09:29.599419117 CEST	192.168.2.24	1.1.1.1	0x86d0	Standard query (0)	logincdn.msftauth.net	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:29.599549055 CEST	192.168.2.24	1.1.1.1	0x90d5	Standard query (0)	logincdn.msftauth.net	65	IN (0x0001)	false
Jun 10, 2025 19:09:44.337167978 CEST	192.168.2.24	1.1.1.1	0x601d	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.337743044 CEST	192.168.2.24	1.1.1.1	0xf46c	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Jun 10, 2025 19:10:15.109668970 CEST	192.168.2.24	1.1.1.1	0xdb2e	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:10:15.110608101 CEST	192.168.2.24	1.1.1.1	0x357b	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jun 10, 2025 19:09:11.020689964 CEST	1.1.1.1	192.168.2.24	0xb440	No error (0)	www.google.com		142.250.176.196	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:11.021704912 CEST	1.1.1.1	192.168.2.24	0xd3fe	No error (0)	www.google.com			65	IN (0x0001)	false
Jun 10, 2025 19:09:13.070228100 CEST	1.1.1.1	192.168.2.24	0xe717	No error (0)	goldstonemanagment-my.sharepoint.com	21026-ipv4v6c.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:13.070228100 CEST	1.1.1.1	192.168.2.24	0xe717	No error (0)	21026-ipv4v6c.clump.dprodmgd105.aa-rt.sharepoint.com	193042-ipv4v6c.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:13.070228100 CEST	1.1.1.1	192.168.2.24	0xe717	No error (0)	193042-ipv4v6c.farm.dprodmgd105.aa-rt.sharepoint.com	193042-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:13.070228100 CEST	1.1.1.1	192.168.2.24	0xe717	No error (0)	193042-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net	mira-ssc.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	goldstonemanagment-my.sharepoint.com	21026-ipv4v6c.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	21026-ipv4v6c.clump.dprodmgd105.aa-rt.sharepoint.com	193042-ipv4v6c.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	193042-ipv4v6c.farm.dprodmgd105.aa-rt.sharepoint.com	193042-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	193042-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net	mira-ssc.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	mira-ssc.tm-4.office.com		52.107.251.51	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	mira-ssc.tm-4.office.com		52.107.251.68	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	mira-ssc.tm-4.office.com		52.107.251.1	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	mira-ssc.tm-4.office.com		52.107.251.67	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	mira-ssc.tm-4.office.com		52.107.251.59	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	mira-ssc.tm-4.office.com		52.107.251.35	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	mira-ssc.tm-4.office.com		52.107.251.45	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:13.077600002 CEST	1.1.1.1	192.168.2.24	0xc7b0	No error (0)	mira-ssc.tm-4.office.com		52.107.251.65	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.141999960 CEST	1.1.1.1	192.168.2.24	0x4123	No error (0)	res-stls-prod.edgesuite.net.globalredir.akadns88.net	a726.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	res-stls-prod.edgesuite.net.globalredir.akadns88.net	a726.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.60	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.63	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.8	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.4	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.5	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.10	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.62	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.56	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:14.142683983 CEST	1.1.1.1	192.168.2.24	0xb6eb	No error (0)	a726.dscd.akamai.net		23.206.121.7	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	goldstonemanagment-my.sharepoint.com	21026-ipv4v6c.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	21026-ipv4v6c.clump.dprodmgd105.aa-rt.sharepoint.com	193042-ipv4v6c.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	193042-ipv4v6c.farm.dprodmgd105.aa-rt.sharepoint.com	193042-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	193042-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net	mira-ssc.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	mira-ssc.tm-4.office.com		52.107.252.9	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	mira-ssc.tm-4.office.com		52.107.252.19	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	mira-ssc.tm-4.office.com		52.107.252.11	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	mira-ssc.tm-4.office.com		52.107.252.8	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	mira-ssc.tm-4.office.com		52.107.252.16	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	mira-ssc.tm-4.office.com		52.107.252.33	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	mira-ssc.tm-4.office.com		52.107.252.21	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.656128883 CEST	1.1.1.1	192.168.2.24	0xf141	No error (0)	mira-ssc.tm-4.office.com		52.107.252.13	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:15.685704947 CEST	1.1.1.1	192.168.2.24	0x37c9	No error (0)	goldstonemanagment-my.sharepoint.com	21026-ipv4v6c.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:15.685704947 CEST	1.1.1.1	192.168.2.24	0x37c9	No error (0)	21026-ipv4v6c.clump.dprodmgd105.aa-rt.sharepoint.com	193042-ipv4v6c.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:15.685704947 CEST	1.1.1.1	192.168.2.24	0x37c9	No error (0)	193042-ipv4v6c.farm.dprodmgd105.aa-rt.sharepoint.com	193042-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:15.685704947 CEST	1.1.1.1	192.168.2.24	0x37c9	No error (0)	193042-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net	mira-ssc.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	login.mso.msidentity.com	ak.privatelink.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	ak.privatelink.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	www.tm.a.prd.aadg.akadns.net		20.190.152.19	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.148	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.82	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.149	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	www.tm.a.prd.aadg.akadns.net		20.190.152.20	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.146	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.83	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.259511948 CEST	1.1.1.1	192.168.2.24	0x4b2b	No error (0)	www.tm.a.prd.aadg.akadns.net		20.190.152.21	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.261746883 CEST	1.1.1.1	192.168.2.24	0x489	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.261746883 CEST	1.1.1.1	192.168.2.24	0x489	No error (0)	login.mso.msidentity.com	ak.privatelink.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.261746883 CEST	1.1.1.1	192.168.2.24	0x489	No error (0)	ak.privatelink.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.992197037 CEST	1.1.1.1	192.168.2.24	0x303d	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.992197037 CEST	1.1.1.1	192.168.2.24	0x303d	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.992197037 CEST	1.1.1.1	192.168.2.24	0x303d	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.992197037 CEST	1.1.1.1	192.168.2.24	0x303d	No error (0)	e329293.dscd.akamaiedge.net		23.216.132.21	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.992197037 CEST	1.1.1.1	192.168.2.24	0x303d	No error (0)	e329293.dscd.akamaiedge.net		23.216.132.28	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:28.996388912 CEST	1.1.1.1	192.168.2.24	0xcda6	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.996388912 CEST	1.1.1.1	192.168.2.24	0xcda6	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:28.996388912 CEST	1.1.1.1	192.168.2.24	0xcda6	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:29.685420036 CEST	1.1.1.1	192.168.2.24	0x90d5	No error (0)	logincdn.msftauth.net	www.tm.lgincdntcs.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:29.685420036 CEST	1.1.1.1	192.168.2.24	0x90d5	No error (0)	www.tm.lgincdntcs.msftauth.akadns.net	logincdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:29.685420036 CEST	1.1.1.1	192.168.2.24	0x90d5	No error (0)	logincdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:29.686284065 CEST	1.1.1.1	192.168.2.24	0x86d0	No error (0)	logincdn.msftauth.net	www.tm.lgincdntcs.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:29.686284065 CEST	1.1.1.1	192.168.2.24	0x86d0	No error (0)	www.tm.lgincdntcs.msftauth.akadns.net	logincdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:29.686284065 CEST	1.1.1.1	192.168.2.24	0x86d0	No error (0)	logincdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:29.686284065 CEST	1.1.1.1	192.168.2.24	0x86d0	No error (0)	e329293.dscd.akamaiedge.net		23.209.72.31	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:29.686284065 CEST	1.1.1.1	192.168.2.24	0x86d0	No error (0)	e329293.dscd.akamaiedge.net		23.209.72.9	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:29.877136946 CEST	1.1.1.1	192.168.2.24	0x66eb	No error (0)	shed.dual-low.s-part-0012.t-0009.t-msedge.net	s-part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:29.877136946 CEST	1.1.1.1	192.168.2.24	0x66eb	No error (0)	s-part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:32.109977007 CEST	1.1.1.1	192.168.2.24	0xd76d	No error (0)	shed.dual-low.s-part-0023.t-0009.t-msedge.net	s-part-0023.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:32.109977007 CEST	1.1.1.1	192.168.2.24	0xd76d	No error (0)	s-part-0023.t-0009.t-msedge.net		13.107.246.51	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	login.mso.msidentity.com	ak.privatelink.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	ak.privatelink.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	www.tm.a.prd.aadg.akadns.net		20.190.152.20	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.146	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	www.tm.a.prd.aadg.akadns.net		20.190.152.19	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.81	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.84	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	www.tm.a.prd.aadg.akadns.net		20.190.152.22	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.148	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423141003 CEST	1.1.1.1	192.168.2.24	0x601d	No error (0)	www.tm.a.prd.aadg.akadns.net		40.126.24.149	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423337936 CEST	1.1.1.1	192.168.2.24	0xf46c	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423337936 CEST	1.1.1.1	192.168.2.24	0xf46c	No error (0)	login.mso.msidentity.com	ak.privatelink.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:09:44.423337936 CEST	1.1.1.1	192.168.2.24	0xf46c	No error (0)	ak.privatelink.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:10:15.196443081 CEST	1.1.1.1	192.168.2.24	0xdb2e	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:10:15.196443081 CEST	1.1.1.1	192.168.2.24	0xdb2e	No error (0)	nel.measure.office.net.edgesuite.net	a1894.dscb.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:10:15.196443081 CEST	1.1.1.1	192.168.2.24	0xdb2e	No error (0)	a1894.dscb.akamai.net		23.200.0.195	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:10:15.196443081 CEST	1.1.1.1	192.168.2.24	0xdb2e	No error (0)	a1894.dscb.akamai.net		23.200.0.202	A (IP address)	IN (0x0001)	false
Jun 10, 2025 19:10:15.200012922 CEST	1.1.1.1	192.168.2.24	0x357b	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jun 10, 2025 19:10:15.200012922 CEST	1.1.1.1	192.168.2.24	0x357b	No error (0)	nel.measure.office.net.edgesuite.net	a1894.dscb.akamai.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

browser.events.data.msn.cn

goldstonemanagment-my.sharepoint.com

res-1.cdn.office.net

aadcdn.msftauth.net

aadcdn.msauth.net

slscr.update.microsoft.com

identity.nel.measure.office.net

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.24	49722	142.251.40.163	80

Timestamp	Bytes transferred	Direction	Data
Jun 10, 2025 19:09:48.007880926 CEST	200	OUT	GET /r/r1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Jun 10, 2025 19:09:48.095351934 CEST	1358	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 993 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 10 Jun 2025 16:35:02 GMT Expires: Tue, 10 Jun 2025 17:25:02 GMT Cache-Control: public, max-age=3000 Age: 2086 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 03 dd 30 82 01 c5 02 01 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 31 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 82 01 17 30 2f 02 10 6e 47 a9 c9 a5 53 e3 c2 ce 1f 14 4e d7 7d ac e7 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 03 f3 58 88 16 16 0e 0a 45 27 f2 a5 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 f7 9d 5e 78 27 fb 40 a9 12 b3 10 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 03 bc 50 a3 27 53 f0 91 80 22 ed f1 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 03 bc 53 59 6b 34 c7 18 f5 01 50 66 17 [TRUNCATED] Data Ascii: 000H0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R1250403080000Z260228075959Z00/nGSN}190930000000Z00U0,XE'230613000000Z00U0,^x'@230613000000Z00U0,P'S"250403080000Z00U0,SYk4Pf250403080000Z00U0,36ed250403080000Z00U/0-0U0U#0+&q+H'/Rf,q>0Hag8m$@auY`a$2C{T6i"CA{)z\|MP#5"[.R\^_4xkU72:[}{p41M0i#u72EIN3
Jun 10, 2025 19:09:48.095366955 CEST	348	IN	Data Raw: 1c dd ee 43 0f 21 ce ea 34 b5 c0 6a ab ee a2 3b fb ea 36 86 b1 6b ff 1c 25 b4 4d b7 05 09 6c 0f f8 3c a6 a3 2d be 29 06 92 88 3c 7d f3 bf 80 09 5e 55 71 bd fc c8 a1 7a bd 5b e4 fc a8 a7 ac b0 88 c1 b2 eb 70 7c c5 be b5 f1 d2 1b df 4a 2d e2 c8 dd Data Ascii: C!4j;6k%Ml<-)<}^Uqz[p\|J-9P~bf'caG>KbD/Egk{J"\U#_nj:!EI>KTPmY+Rp/1YEEe)U34qp7?++
Jun 10, 2025 19:09:48.370873928 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Jun 10, 2025 19:09:48.457144022 CEST	1243	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="cacerts" Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]} Content-Length: 530 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 10 Jun 2025 16:50:40 GMT Expires: Tue, 10 Jun 2025 17:40:40 GMT Cache-Control: public, max-age=3000 Age: 1148 Last-Modified: Thu, 03 Apr 2025 14:18:00 GMT Content-Type: application/pkix-crl Vary: Accept-Encoding Data Raw: 30 82 02 0e 30 82 01 93 02 01 01 30 0a 06 08 2a 86 48 ce 3d 04 03 03 30 47 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 22 30 20 06 03 55 04 0a 13 19 47 6f 6f 67 6c 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 20 4c 4c 43 31 14 30 12 06 03 55 04 03 13 0b 47 54 53 20 52 6f 6f 74 20 52 34 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 17 0d 32 36 30 32 32 38 30 37 35 39 35 39 5a 30 81 e9 30 2f 02 10 6e 47 a9 ce 4f 46 c2 3d e2 49 ea cc 38 94 53 73 17 0d 31 39 30 39 33 30 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 f0 9c 5b 70 05 a6 dc 86 e2 f9 9e f3 17 0d 32 30 30 31 33 31 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 01 fe a5 81 44 7e 3b fd 3b b8 1c 24 98 17 0d 32 33 30 36 31 33 30 30 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 16 68 25 e1 70 04 40 61 24 91 f5 40 17 0d 32 35 30 34 30 33 30 38 30 30 30 30 5a 30 0c 30 0a 06 03 55 1d 15 04 03 0a 01 05 30 2c 02 0d 02 00 8e b2 58 e7 b5 94 0c 1f f9 00 44 17 0d 32 35 30 [TRUNCATED] Data Ascii: 000H=0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R4250403080000Z260228075959Z00/nGOF=I8Ss190930000000Z00U0,[p200131000000Z00U0,D~;;$230613000000Z00U0,h%p@a$@250403080000Z00U0,XD250403080000Z00U/0-0U0U#0LtI6>j0H=i0f1>2en:IN@g=;bQZ~`NX1?^4y[$\4{;$zDeU6O

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.24	49678	20.189.173.4	443

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:08:57 UTC	444	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1749575335084&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1 host: browser.events.data.msn.cn accept-encoding: identity content-length: 3745 content-type: application/json; charset=UTF-8 cache-control: no-cache
2025-06-10 17:08:57 UTC	1460	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 53 65 72 76 65 72 4c 6f 67 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 63 34 39 38 37 31 31 66 30 32 36 35 34 65 64 63 61 38 61 37 31 35 63 61 36 65 31 63 62 34 64 34 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 35 2d 30 36 2d 31 30 54 31 37 3a 30 38 3a 34 35 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 72 6f 64 75 63 74 22 3a 22 65 6e 74 77 69 6e 64 6f 77 73 64 61 73 68 22 2c 22 61 70 70 54 79 70 65 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 6e 61 6d 65 22 3a 22 77 69 6e 70 32 62 61 63 6b 69 6e 67 61 70 70 22 2c 22 69 73 4d 6f 63 6b 45 6e 76 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 56 65 72 22 3a 22 35 32 34 2e 33 30 35 30 32 2e 33 30 2e 30 22 2c 22 Data Ascii: {"name":"MS.News.Web.ServerLog","iKey":"o:c498711f02654edca8a715ca6e1cb4d4","time":"2025-06-10T17:08:45Z","ver":"4.0","data":{"page":{"product":"entwindowsdash","appType":"winWidgets","name":"winp2backingapp","isMockEnv":false,"hostVer":"524.30502.30.0","
2025-06-10 17:08:57 UTC	1460	OUT	Data Raw: 38 44 32 42 36 32 37 32 22 2c 22 6d 75 69 64 22 3a 22 31 34 45 41 32 45 38 32 38 43 34 44 36 33 39 35 30 39 39 34 33 42 44 32 38 44 32 42 36 32 37 32 22 2c 22 61 6e 6f 6e 63 6b 6e 6d 22 3a 22 61 6c 5f 61 70 70 5f 61 6e 6f 6e 22 7d 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 67 69 6e 53 74 61 74 65 22 3a 22 61 61 64 22 7d 2c 22 6c 6f 63 61 6c 65 22 3a 7b 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 43 48 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 7d 2c 22 72 65 71 75 65 73 74 22 3a 7b 22 61 63 74 69 76 69 74 79 49 64 22 3a 22 62 36 63 63 62 63 39 66 2d 62 31 36 32 2d 34 66 34 39 2d 39 65 39 33 2d 63 36 31 31 39 64 33 34 66 32 38 66 22 7d 2c 22 65 78 74 53 63 68 65 6d 61 22 3a 7b 22 74 79 70 65 22 3a 22 6d 65 74 72 69 63 73 22 2c 22 6d 61 72 Data Ascii: 8D2B6272","muid":"14EA2E828C4D639509943BD28D2B6272","anoncknm":"al_app_anon"},"user":{"loginState":"aad"},"locale":{"mkt":"en-US","region":"CH","lang":"en"},"request":{"activityId":"b6ccbc9f-b162-4f49-9e93-c6119d34f28f"},"extSchema":{"type":"metrics","mar
2025-06-10 17:08:57 UTC	825	OUT	Data Raw: 77 69 6e 64 6f 77 73 64 61 73 68 22 2c 22 61 70 70 54 79 70 65 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 6e 61 6d 65 22 3a 22 77 69 6e 70 32 62 61 63 6b 69 6e 67 61 70 70 22 2c 22 69 73 4d 6f 63 6b 45 6e 76 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 56 65 72 22 3a 22 35 32 34 2e 33 30 35 30 32 2e 33 30 2e 30 22 2c 22 61 76 65 72 22 3a 22 31 2e 31 2e 32 30 30 2e 30 22 2c 22 6f 76 65 72 22 3a 22 31 30 2e 30 2e 32 32 36 33 31 2e 34 31 36 39 2e 61 6d 64 36 34 66 72 65 2e 6e 69 5f 72 65 6c 65 61 73 65 2e 32 32 30 35 30 36 2d 31 32 35 30 22 2c 22 66 72 69 6e 67 22 3a 22 52 65 74 61 69 6c 22 2c 22 64 65 76 69 63 65 74 79 70 65 22 3a 22 31 22 2c 22 6f 65 6d 22 3a 22 56 4d 77 61 72 65 25 32 43 25 32 30 49 6e 63 2e 22 2c 22 73 6d 6f 64 65 22 3a 22 66 61 6c 73 65 Data Ascii: windowsdash","appType":"winWidgets","name":"winp2backingapp","isMockEnv":false,"hostVer":"524.30502.30.0","aver":"1.1.200.0","over":"10.0.22631.4169.amd64fre.ni_release.220506-1250","fring":"Retail","devicetype":"1","oem":"VMware%2C%20Inc.","smode":"false
2025-06-10 17:08:57 UTC	853	IN	HTTP/1.1 204 No Content content-length: 0 server: Microsoft-HTTPAPI/2.0 strict-transport-security: max-age=31536000 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" set-cookie: MC1=GUID=a8810ed6b05940d78543d9dac6b82011&HASH=a881&LV=202506&V=4&LU=1749575336943; Domain=.microsoft.com; Expires=Wed, 10 Jun 2026 17:08:56 GMT; Path=/;Secure; SameSite=None set-cookie: MS0=d8319e0cd6294db19a03e8a6643ab7b7; Domain=.microsoft.com; Expires=Tue, 10 Jun 2025 17:38:56 GMT; Path=/;Secure; SameSite=None time-delta-millis: 1859 access-control-allow-headers: P3P,Set-Cookie,time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: time-delta-millis date: Tue, 10 Jun 2025 17:08:56 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.24	49696	52.107.251.51	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:14 UTC	767	OUT	GET /:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 HTTP/1.1 host: goldstonemanagment-my.sharepoint.com sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: none sec-fetch-mode: navigate sec-fetch-user: ?1 sec-fetch-dest: document accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0, i
2025-06-10 17:09:14 UTC	1460	IN	HTTP/1.1 200 OK cache-control: private content-length: 303105 content-type: text/html; charset=utf-8 request-id: 7025acbb-5cfc-20ee-d8d7-e1aade7c470f x-backendhttpstatus: 200 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,0,0,0,0,0,0,0 x-sharepointhealthscore: 2 referrer-policy: no-referrer, strict-origin-when-cross-origin sharepointerror: 0 x-aspnet-version: 4.0.30319 isocdi: 0 x-databoundary: NONE x-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ x-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/ ms-cv: oabP4c0wAJAAw2ec6vYoNA.0 splogid: e1cfa6a1-30cd-9000-00c3-679ceaf62834 report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=14868b8a-936a-4437-8198-fd9fa4f69548&destinationEndpoint=MIRA-WW-MN2&frontEnd=MIRA&RemoteIP=156.146.37.0"}]} nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} strict-transport-security: max-age=31536000 sprequestduration: 112 spiislatency: 5 microsoftsharepointteamservices: 16.0.0.26121 x-content-type-options: nosniff x-ms-invokeapp: 1; RequireReadOnly x-proxy-routingcorrectness: 1 x-msedge-ref: MIRA: 7025acbb-5cfc-20ee-d8d7-e1aade7c470f MN2PR16CA0014 2025-06-10T17:09:13.457Z alt-svc: ":443";ma=2592000,h3-29=":443";ma=25920
2025-06-10 17:09:14 UTC	278	IN	Data Raw: 30 30 0d 0a 73 70 72 65 71 75 65 73 74 67 75 69 64 3a 20 65 31 63 66 61 36 61 31 2d 33 30 63 64 2d 39 30 30 30 2d 30 30 63 33 2d 36 37 39 63 65 61 66 36 32 38 33 34 0d 0a 78 2d 70 72 6f 78 79 2d 62 61 63 6b 65 6e 64 73 65 72 76 65 72 73 74 61 74 75 73 3a 20 32 30 30 0d 0a 78 2d 66 69 72 73 74 68 6f 70 63 61 66 65 65 66 7a 3a 20 4d 4e 5a 0d 0a 78 2d 66 65 70 72 6f 78 79 69 6e 66 6f 3a 20 4d 4e 32 50 52 31 36 43 41 30 30 31 34 2e 4e 41 4d 50 52 44 31 36 2e 50 52 4f 44 2e 4f 55 54 4c 4f 4f 4b 2e 43 4f 4d 0d 0a 78 2d 66 65 65 66 7a 69 6e 66 6f 3a 20 4d 4e 5a 0d 0a 78 2d 70 6f 77 65 72 65 64 2d 62 79 3a 20 41 53 50 2e 4e 45 54 0d 0a 78 2d 66 65 73 65 72 76 65 72 3a 20 4d 4e 32 50 52 31 36 43 41 30 30 31 34 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 31 30 20 4a 75 Data Ascii: 00sprequestguid: e1cfa6a1-30cd-9000-00c3-679ceaf62834x-proxy-backendserverstatus: 200x-firsthopcafeefz: MNZx-feproxyinfo: MN2PR16CA0014.NAMPRD16.PROD.OUTLOOK.COMx-feefzinfo: MNZx-powered-by: ASP.NETx-feserver: MN2PR16CA0014date: Tue, 10 Ju
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0d 0a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint"
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 22 3a 31 2c 22 31 30 45 38 32 34 38 35 2d 45 30 35 32 2d 34 43 38 46 2d 39 35 32 39 2d 45 30 30 31 33 33 35 37 34 31 38 43 22 3a 31 2c 22 39 32 32 45 33 46 46 34 2d 30 41 39 35 2d 34 39 34 44 2d 38 30 36 35 2d 36 42 30 35 44 42 30 34 31 39 39 30 22 3a 31 2c 22 44 34 38 39 41 34 30 39 2d 46 43 44 45 2d 34 30 34 36 2d 41 39 44 38 2d 45 32 41 37 31 32 35 30 30 33 31 32 22 3a 31 2c 22 39 31 35 32 34 46 36 30 2d 38 34 33 39 2d 34 37 38 34 2d 39 42 38 30 2d 41 35 41 43 38 41 39 45 30 39 33 45 22 3a 31 2c 22 35 46 36 30 37 41 38 44 2d 36 34 32 39 2d 34 39 36 32 2d 42 31 32 30 2d 31 45 42 31 33 35 34 45 45 36 45 41 22 3a 31 2c 22 42 35 42 42 33 34 36 32 2d 33 35 33 35 2d 34 44 32 34 2d 42 31 41 32 2d 39 37 32 35 46 41 43 44 34 32 46 31 22 3a 31 2c 22 35 34 46 32 Data Ascii: ":1,"10E82485-E052-4C8F-9529-E0013357418C":1,"922E3FF4-0A95-494D-8065-6B05DB041990":1,"D489A409-FCDE-4046-A9D8-E2A712500312":1,"91524F60-8439-4784-9B80-A5AC8A9E093E":1,"5F607A8D-6429-4962-B120-1EB1354EE6EA":1,"B5BB3462-3535-4D24-B1A2-9725FACD42F1":1,"54F2
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 43 30 45 2d 34 39 33 32 46 39 31 34 41 41 44 45 22 3a 31 2c 22 38 30 34 32 43 43 44 37 2d 37 41 44 44 2d 34 32 32 34 2d 39 31 45 30 2d 46 34 37 32 35 38 42 30 39 35 39 45 22 3a 31 2c 22 38 31 36 30 43 34 45 39 2d 36 45 44 31 2d 34 31 38 30 2d 39 44 34 45 2d 38 38 41 46 37 30 42 45 45 37 37 42 22 3a 31 2c 22 46 46 39 37 33 31 34 32 2d 41 31 45 41 2d 34 43 31 31 2d 41 43 45 35 2d 44 33 38 44 34 39 30 46 30 33 35 37 22 3a 31 2c 22 42 37 35 42 33 35 30 45 2d 38 45 33 37 2d 34 36 46 36 2d 42 33 34 30 2d 41 41 35 39 43 45 31 38 44 37 31 35 22 3a 31 2c 22 37 39 37 35 46 44 36 42 2d 41 37 37 34 2d 34 35 32 44 2d 39 43 46 31 2d 46 46 33 34 36 30 33 32 46 46 41 43 22 3a 31 2c 22 32 37 39 33 34 36 44 41 2d 33 43 36 44 2d 34 36 31 46 2d 41 43 39 30 2d 38 39 33 32 30 Data Ascii: C0E-4932F914AADE":1,"8042CCD7-7ADD-4224-91E0-F47258B0959E":1,"8160C4E9-6ED1-4180-9D4E-88AF70BEE77B":1,"FF973142-A1EA-4C11-ACE5-D38D490F0357":1,"B75B350E-8E37-46F6-B340-AA59CE18D715":1,"7975FD6B-A774-452D-9CF1-FF346032FFAC":1,"279346DA-3C6D-461F-AC90-89320
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 43 38 36 33 2d 44 46 30 32 2d 34 37 43 45 2d 42 35 31 42 2d 36 43 36 33 33 31 38 31 35 43 45 31 22 3a 31 2c 22 32 37 37 31 32 35 35 34 2d 32 33 36 39 2d 34 36 44 31 2d 38 31 43 37 2d 34 37 41 45 44 46 45 34 36 42 33 38 22 3a 31 2c 22 36 37 31 30 33 30 38 31 2d 36 39 41 31 2d 34 37 36 43 2d 39 41 36 46 2d 43 35 46 32 31 42 35 31 44 41 38 32 22 3a 31 2c 22 34 46 30 37 35 39 37 33 2d 36 44 32 31 2d 34 42 34 32 2d 39 46 31 36 2d 34 44 33 30 34 38 34 35 30 32 35 42 22 3a 31 2c 22 30 42 45 30 38 32 43 36 2d 34 33 41 36 2d 34 32 45 39 2d 41 39 45 42 2d 43 33 38 31 30 43 44 36 42 36 37 36 22 3a 31 2c 22 45 37 35 42 43 37 46 45 2d 43 36 30 38 2d 34 32 42 46 2d 39 41 31 32 2d 46 36 37 46 46 45 34 41 37 43 39 36 22 3a 31 2c 22 33 33 39 30 30 37 33 37 2d 35 42 35 35 Data Ascii: C863-DF02-47CE-B51B-6C6331815CE1":1,"27712554-2369-46D1-81C7-47AEDFE46B38":1,"67103081-69A1-476C-9A6F-C5F21B51DA82":1,"4F075973-6D21-4B42-9F16-4D304845025B":1,"0BE082C6-43A6-42E9-A9EB-C3810CD6B676":1,"E75BC7FE-C608-42BF-9A12-F67FFE4A7C96":1,"33900737-5B55
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 30 38 37 39 42 31 30 22 3a 31 2c 22 36 33 34 30 33 30 32 30 2d 36 32 45 32 2d 31 31 45 45 2d 38 33 44 46 2d 38 43 31 44 39 36 42 43 37 36 41 38 22 3a 31 2c 22 37 39 46 38 38 41 43 35 2d 33 34 30 42 2d 34 36 31 35 2d 38 33 36 44 2d 30 31 33 44 31 30 37 33 39 44 34 38 22 3a 31 2c 22 45 35 38 44 37 32 32 46 2d 35 46 31 32 2d 34 35 41 44 2d 41 37 36 43 2d 37 37 33 42 44 36 37 31 46 42 43 33 22 3a 31 2c 22 36 39 34 35 30 45 35 45 2d 31 36 37 43 2d 34 34 43 33 2d 38 45 43 38 2d 44 43 36 46 38 39 44 35 43 42 31 31 22 3a 31 2c 22 38 45 30 41 39 38 46 30 2d 33 36 45 41 2d 34 41 32 45 2d 41 35 36 31 2d 32 43 43 42 44 34 31 46 42 38 44 46 22 3a 31 2c 22 36 38 35 42 41 39 35 44 2d 30 42 35 39 2d 34 30 32 36 2d 42 32 33 43 2d 38 44 30 41 45 30 44 41 43 42 39 37 22 3a Data Ascii: 0879B10":1,"63403020-62E2-11EE-83DF-8C1D96BC76A8":1,"79F88AC5-340B-4615-836D-013D10739D48":1,"E58D722F-5F12-45AD-A76C-773BD671FBC3":1,"69450E5E-167C-44C3-8EC8-DC6F89D5CB11":1,"8E0A98F0-36EA-4A2E-A561-2CCBD41FB8DF":1,"685BA95D-0B59-4026-B23C-8D0AE0DACB97":
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 2d 34 45 32 42 2d 42 34 36 44 2d 39 46 45 45 44 39 32 34 41 32 46 33 22 3a 31 2c 22 39 34 36 33 42 38 38 41 2d 46 34 38 41 2d 34 30 35 42 2d 42 36 42 33 2d 31 38 30 30 46 38 36 42 37 35 32 36 22 3a 31 2c 22 38 34 32 33 42 46 41 30 2d 37 33 42 35 2d 34 42 46 46 2d 42 32 46 42 2d 42 43 36 41 31 42 46 41 45 44 30 39 22 3a 31 2c 22 42 43 46 30 37 46 42 44 2d 43 31 45 45 2d 34 39 36 34 2d 38 38 33 43 2d 37 39 43 35 32 46 37 32 32 31 37 42 22 3a 31 2c 22 35 43 30 41 38 37 42 34 2d 46 36 33 33 2d 34 38 37 34 2d 41 33 43 30 2d 46 38 36 42 33 42 38 37 42 33 34 42 22 3a 31 2c 22 41 33 45 46 41 30 30 30 2d 37 43 34 32 2d 34 31 38 41 2d 41 42 37 46 2d 31 45 45 33 44 37 36 31 32 44 39 37 22 3a 31 2c 22 43 34 44 34 44 37 32 42 2d 42 33 35 36 2d 34 46 34 44 2d 39 44 32 Data Ascii: -4E2B-B46D-9FEED924A2F3":1,"9463B88A-F48A-405B-B6B3-1800F86B7526":1,"8423BFA0-73B5-4BFF-B2FB-BC6A1BFAED09":1,"BCF07FBD-C1EE-4964-883C-79C52F72217B":1,"5C0A87B4-F633-4874-A3C0-F86B3B87B34B":1,"A3EFA000-7C42-418A-AB7F-1EE3D7612D97":1,"C4D4D72B-B356-4F4D-9D2
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 31 2c 22 43 46 38 46 41 42 31 41 2d 38 37 39 34 2d 34 33 42 45 2d 39 36 31 30 2d 39 42 36 44 32 38 35 46 43 32 44 46 22 3a 31 2c 22 45 32 44 31 34 43 32 41 2d 41 42 32 36 2d 34 42 37 30 2d 38 37 46 37 2d 45 41 37 41 39 37 31 35 34 36 38 44 22 3a 31 2c 22 39 42 32 30 32 41 33 30 2d 33 39 32 32 2d 34 37 35 32 2d 38 31 31 46 2d 38 38 39 37 42 39 30 35 33 41 45 31 22 3a 31 2c 22 41 35 41 38 39 30 44 44 2d 33 46 45 36 2d 34 44 33 31 2d 41 44 44 45 2d 43 38 37 32 38 45 32 38 44 38 42 44 22 3a 31 2c 22 43 44 35 37 36 32 44 35 2d 36 32 30 37 2d 34 34 30 43 2d 41 42 43 42 2d 45 34 38 38 46 33 39 41 30 38 43 41 22 3a 31 2c 22 30 43 46 37 45 32 33 39 2d 34 32 33 42 2d 34 36 33 31 2d 42 33 43 46 2d 32 41 46 46 39 44 42 36 34 32 37 41 22 3a 31 2c 22 46 41 44 36 45 41 Data Ascii: 1,"CF8FAB1A-8794-43BE-9610-9B6D285FC2DF":1,"E2D14C2A-AB26-4B70-87F7-EA7A9715468D":1,"9B202A30-3922-4752-811F-8897B9053AE1":1,"A5A890DD-3FE6-4D31-ADDE-C8728E28D8BD":1,"CD5762D5-6207-440C-ABCB-E488F39A08CA":1,"0CF7E239-423B-4631-B3CF-2AFF9DB6427A":1,"FAD6EA
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 35 2d 31 37 44 33 39 36 42 45 33 44 32 43 22 3a 31 2c 22 46 33 43 30 39 33 42 33 2d 43 32 42 39 2d 34 34 35 42 2d 41 30 45 30 2d 39 39 42 46 30 34 37 32 31 34 46 33 22 3a 31 2c 22 35 30 30 30 34 35 36 42 2d 39 46 37 31 2d 34 38 38 34 2d 39 36 38 37 2d 35 31 45 31 39 44 31 31 36 38 44 38 22 3a 31 2c 22 38 38 36 36 33 44 45 31 2d 38 33 33 32 2d 34 32 33 37 2d 41 34 35 42 2d 38 42 33 41 38 42 31 31 32 43 37 33 22 3a 31 2c 22 32 34 38 32 35 36 36 34 2d 36 33 42 45 2d 31 31 45 45 2d 38 43 39 39 2d 30 32 34 32 41 43 31 32 30 30 30 32 22 3a 31 2c 22 31 46 30 46 35 39 44 39 2d 42 33 36 46 2d 34 30 41 42 2d 41 39 45 34 2d 33 32 30 46 37 39 38 34 38 30 38 37 22 3a 31 2c 22 35 31 35 41 34 33 44 43 2d 38 33 41 36 2d 34 35 37 39 2d 39 43 38 38 2d 42 39 37 31 44 39 36 Data Ascii: 5-17D396BE3D2C":1,"F3C093B3-C2B9-445B-A0E0-99BF047214F3":1,"5000456B-9F71-4884-9687-51E19D1168D8":1,"88663DE1-8332-4237-A45B-8B3A8B112C73":1,"24825664-63BE-11EE-8C99-0242AC120002":1,"1F0F59D9-B36F-40AB-A9E4-320F79848087":1,"515A43DC-83A6-4579-9C88-B971D96
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 45 36 2d 31 32 46 43 2d 34 45 35 33 2d 41 43 35 43 2d 35 37 30 33 32 37 35 32 34 46 44 36 22 3a 31 2c 22 31 33 38 33 32 37 31 37 2d 33 44 38 38 2d 34 35 36 37 2d 42 42 45 37 2d 45 31 41 31 41 30 33 31 39 43 44 39 22 3a 31 2c 22 46 36 45 42 41 38 33 38 2d 42 31 45 33 2d 34 30 36 35 2d 39 39 33 35 2d 46 41 33 45 32 33 39 43 30 43 31 37 22 3a 31 2c 22 38 32 42 42 39 44 35 31 2d 44 34 45 32 2d 34 42 32 42 2d 39 31 32 43 2d 34 30 39 35 43 34 32 39 35 35 42 36 22 3a 31 2c 22 44 42 42 39 46 30 44 35 2d 44 46 32 39 2d 34 44 30 31 2d 42 30 38 44 2d 34 34 45 44 36 30 41 46 44 36 34 43 22 3a 31 2c 22 42 46 38 43 45 37 34 30 2d 34 30 34 42 2d 34 30 45 42 2d 42 37 41 32 2d 44 36 37 44 31 33 33 32 38 43 30 45 22 3a 31 2c 22 32 33 46 30 37 30 44 39 2d 32 41 41 44 2d 34 Data Ascii: E6-12FC-4E53-AC5C-570327524FD6":1,"13832717-3D88-4567-BBE7-E1A1A0319CD9":1,"F6EBA838-B1E3-4065-9935-FA3E239C0C17":1,"82BB9D51-D4E2-4B2B-912C-4095C42955B6":1,"DBB9F0D5-DF29-4D01-B08D-44ED60AFD64C":1,"BF8CE740-404B-40EB-B7A2-D67D13328C0E":1,"23F070D9-2AAD-4
2025-06-10 17:09:14 UTC	728	OUT	GET /_layouts/15/1033/styles/error.css?rev=tF7fyfzbaQzNoASoSDlV4A%3D%3DTAG505 HTTP/1.1 host: goldstonemanagment-my.sharepoint.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: style referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0
2025-06-10 17:09:14 UTC	996	IN	HTTP/1.1 200 OK cache-control: max-age=31536000 content-length: 622 content-type: text/css last-modified: Sat, 07 Jun 2025 04:26:22 GMT accept-ranges: bytes etag: "2aeed45264d7db1:0" request-id: 04b799f4-ec68-b419-b72d-937dadbc0ec7 x-backendhttpstatus: 200 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,4194720,0,0,86,26345,26345,36841 sprequestduration: 4 spiislatency: 2 microsoftsharepointteamservices: 16.0.0.26121 x-content-type-options: nosniff x-ms-invokeapp: 1; RequireReadOnly x-proxy-routingcorrectness: 1 x-msedge-ref: MIRA: 04b799f4-ec68-b419-b72d-937dadbc0ec7 MN2PR16CA0014 2025-06-10T17:09:13.847Z alt-svc: ":443";ma=2592000,h3-29=":443";ma=2592000 x-proxy-backendserverstatus: 200 x-firsthopcafeefz: MNZ x-feproxyinfo: MN2PR16CA0014.NAMPRD16.PROD.OUTLOOK.COM x-feefzinfo: MNZ x-powered-by: ASP.NET x-feserver: MN2PR16CA0014 date: Tue, 10 Jun 2025 17:09:13 GMT
2025-06-10 17:09:14 UTC	730	OUT	GET /_layouts/15/1033/styles/corev15.css?rev=tJSIZchOAVdu3jcvNxysgA%3D%3DTAG505 HTTP/1.1 host: goldstonemanagment-my.sharepoint.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: style referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0
2025-06-10 17:09:14 UTC	999	IN	HTTP/1.1 200 OK cache-control: max-age=31536000 content-length: 341640 content-type: text/css last-modified: Sat, 07 Jun 2025 04:30:17 GMT accept-ranges: bytes etag: "67dfcdde64d7db1:0" request-id: 934f19cf-08ca-b93d-cc81-1c1f27ccef90 x-backendhttpstatus: 200 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,4194720,0,0,86,26345,26345,39852 sprequestduration: 4 spiislatency: 2 microsoftsharepointteamservices: 16.0.0.26121 x-content-type-options: nosniff x-ms-invokeapp: 1; RequireReadOnly x-proxy-routingcorrectness: 1 x-msedge-ref: MIRA: 934f19cf-08ca-b93d-cc81-1c1f27ccef90 MN2PR16CA0014 2025-06-10T17:09:13.832Z alt-svc: ":443";ma=2592000,h3-29=":443";ma=2592000 x-proxy-backendserverstatus: 200 x-firsthopcafeefz: MNZ x-feproxyinfo: MN2PR16CA0014.NAMPRD16.PROD.OUTLOOK.COM x-feefzinfo: MNZ x-powered-by: ASP.NET x-feserver: MN2PR16CA0014 date: Tue, 10 Jun 2025 17:09:13 GMT
2025-06-10 17:09:14 UTC	867	OUT	GET /ScriptResource.axd?d=sr6F3K1Q0GRnD4wb9zrBwPoIvMbEPt-0JaQtZ2Mb3Vn2jVfVgDPU9iKIjfhaW45AYSHlsItWnMQ9vXt_5XC8Wa94u7DJVAawj0-l3jAC6jqDqnCcBHNZcDxMBtl8o-JdbhH7frf9kRm-3KWrGoLkADokDa52GtzlZfPjpXW-t1fMGv_aGr6wfkV8c_9o3aJX0&t=2a9d95e3 HTTP/1.1 host: goldstonemanagment-my.sharepoint.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:14 UTC	1055	IN	HTTP/1.1 200 OK cache-control: public content-length: 9984 content-type: application/x-javascript content-encoding: gzip expires: Wed, 10 Jun 2026 15:12:52 GMT last-modified: Tue, 10 Jun 2025 15:12:52 GMT request-id: 68d15486-369b-7e9d-7b49-467615de8e7f x-backendhttpstatus: 200 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,4194720,0,33,1311847,393460,393460,34943 x-aspnet-version: 4.0.30319 sprequestduration: 3 spiislatency: 0 microsoftsharepointteamservices: 16.0.0.26121 x-content-type-options: nosniff x-ms-invokeapp: 1; RequireReadOnly x-proxy-routingcorrectness: 1 x-msedge-ref: MIRA: 68d15486-369b-7e9d-7b49-467615de8e7f MN2PR16CA0014 2025-06-10T17:09:14.145Z alt-svc: ":443";ma=2592000,h3-29=":443";ma=2592000 x-proxy-backendserverstatus: 200 x-firsthopcafeefz: MNZ x-feproxyinfo: MN2PR16CA0014.NAMPRD16.PROD.OUTLOOK.COM x-feefzinfo: MNZ x-powered-by: ASP.NET x-feserver: MN2PR16CA0014 date: Tue, 10 Jun 2025 17:09:13 GMT
2025-06-10 17:09:14 UTC	789	OUT	GET /WebResource.axd?d=LGCbvPqDWr6NGAoANcpURE6wX-2D5oGrf28m_P6v5AWqox645ulKE4STbYM8PekIOxkIg8mD9pD-iLx71QtT44qTiD8Gi7tXKkfQTBjCwSY1&t=638823999370157672 HTTP/1.1 host: goldstonemanagment-my.sharepoint.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:14 UTC	1024	IN	HTTP/1.1 200 OK cache-control: public content-length: 23063 content-type: application/x-javascript expires: Wed, 10 Jun 2026 03:08:47 GMT last-modified: Fri, 09 May 2025 22:05:37 GMT request-id: cb181d4b-f2af-b382-cdc5-f3aa248c18e1 x-backendhttpstatus: 200 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,4194720,0,0,59,26345,26345,25779 x-aspnet-version: 4.0.30319 sprequestduration: 3 spiislatency: 1 microsoftsharepointteamservices: 16.0.0.26121 x-content-type-options: nosniff x-ms-invokeapp: 1; RequireReadOnly x-proxy-routingcorrectness: 1 x-msedge-ref: MIRA: cb181d4b-f2af-b382-cdc5-f3aa248c18e1 MN2PR16CA0014 2025-06-10T17:09:14.145Z alt-svc: ":443";ma=2592000,h3-29=":443";ma=2592000 x-proxy-backendserverstatus: 200 x-firsthopcafeefz: MNZ x-feproxyinfo: MN2PR16CA0014.NAMPRD16.PROD.OUTLOOK.COM x-feefzinfo: MNZ x-powered-by: ASP.NET x-feserver: MN2PR16CA0014 date: Tue, 10 Jun 2025 17:09:13 GMT
2025-06-10 17:09:14 UTC	867	OUT	GET /ScriptResource.axd?d=B4bLup9GT6FvNBDj7lSdY2DxqLAWAfC59a2KqSTY1FBECZs9i9ufw291GYdpWdLJQVtlZSNYwYZfC9HP7UcuaXjP6q-f2WXlpuPanmeHJ2wZ0kpdjDsx3tu3Hvq6sUyIZsFBk6TyauZKGjEr7qx_bdaybHfMwK0kaI5_evnFU8W1gDWToPANfm54gjpb4i8s0&t=2a9d95e3 HTTP/1.1 host: goldstonemanagment-my.sharepoint.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: script referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:14 UTC	1052	IN	HTTP/1.1 200 OK cache-control: public content-length: 25609 content-type: application/x-javascript content-encoding: gzip expires: Wed, 10 Jun 2026 17:07:40 GMT last-modified: Tue, 10 Jun 2025 17:07:40 GMT request-id: 95293607-d619-d1c7-bc88-5280c9b32b15 x-backendhttpstatus: 200 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,4194720,0,0,472147,91562,91562,46052 x-aspnet-version: 4.0.30319 sprequestduration: 3 spiislatency: 1 microsoftsharepointteamservices: 16.0.0.26121 x-content-type-options: nosniff x-ms-invokeapp: 1; RequireReadOnly x-proxy-routingcorrectness: 1 x-msedge-ref: MIRA: 95293607-d619-d1c7-bc88-5280c9b32b15 MN2PR16CA0014 2025-06-10T17:09:14.145Z alt-svc: ":443";ma=2592000,h3-29=":443";ma=2592000 x-proxy-backendserverstatus: 200 x-firsthopcafeefz: MNZ x-feproxyinfo: MN2PR16CA0014.NAMPRD16.PROD.OUTLOOK.COM x-feefzinfo: MNZ x-powered-by: ASP.NET x-feserver: MN2PR16CA0014 date: Tue, 10 Jun 2025 17:09:13 GMT
2025-06-10 17:09:15 UTC	742	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 host: goldstonemanagment-my.sharepoint.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: same-origin sec-fetch-mode: no-cors sec-fetch-dest: image referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:15 UTC	1007	IN	HTTP/1.1 200 OK cache-control: max-age=31536000 content-length: 7886 content-type: image/x-icon last-modified: Tue, 03 Jun 2025 05:34:41 GMT accept-ranges: bytes etag: "e2597d3449d4db1:0" request-id: 0e24c9c1-0ba0-18da-773f-9e4557feb0f4 x-backendhttpstatus: 200 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,4194720,0,132,1748,179682,179682,33886 sprequestduration: 4 spiislatency: 1 microsoftsharepointteamservices: 16.0.0.26121 x-content-type-options: nosniff x-ms-invokeapp: 1; RequireReadOnly x-proxy-routingcorrectness: 1 x-msedge-ref: MIRA: 0e24c9c1-0ba0-18da-773f-9e4557feb0f4 MN2PR16CA0014 2025-06-10T17:09:15.348Z alt-svc: ":443";ma=2592000,h3-29=":443";ma=2592000 x-proxy-backendserverstatus: 200 x-firsthopcafeefz: MNZ x-feproxyinfo: MN2PR16CA0014.NAMPRD16.PROD.OUTLOOK.COM x-feefzinfo: MNZ x-powered-by: ASP.NET x-feserver: MN2PR16CA0014 date: Tue, 10 Jun 2025 17:09:14 GMT
2025-06-10 17:09:27 UTC	895	OUT	GET /personal/sandrar_goldstonem_com HTTP/1.1 host: goldstonemanagment-my.sharepoint.com sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: same-origin sec-fetch-mode: navigate sec-fetch-user: ?1 sec-fetch-dest: document referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: WSS_FullScreenMode=false priority: u=0, i
2025-06-10 17:09:27 UTC	1460	IN	HTTP/1.1 302 Found content-length: 271 content-type: text/html; charset=utf-8 location: https://goldstonemanagment-my.sharepoint.com/personal/sandrar_goldstonem_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fsandrar%5Fgoldstonem%5Fcom request-id: 94c514d6-534b-67ed-6127-1e059c3f6f36 x-backendhttpstatus: 302 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,4194720,0,144,13484,233808,233808,36473 x-sharepointhealthscore: 0 isocdi: 0 x-databoundary: NONE x-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ x-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/ ms-cv: oabP5TQwAJAAw2ag48Y3kg.0 splogid: e5cfa6a1-3034-9000-00c3-66a0e3c63792 report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=MIRA-WW-MN2&frontEnd=MIRA&RemoteIP=156.146.37.0"}]} nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} strict-transport-security: max-age=31536000 x-frame-options: SAMEORIGIN content-security-policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com .powerbi.com *.yammer.com
2025-06-10 17:09:27 UTC	973	OUT	GET /personal/sandrar_goldstonem_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Fsandrar%5Fgoldstonem%5Fcom HTTP/1.1 host: goldstonemanagment-my.sharepoint.com upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: same-origin sec-fetch-mode: navigate sec-fetch-user: ?1 sec-fetch-dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: WSS_FullScreenMode=false priority: u=0, i
2025-06-10 17:09:27 UTC	1460	IN	HTTP/1.1 302 Found cache-control: private content-length: 298 content-type: text/html; charset=utf-8 location: /_forms/default.aspx?ReturnUrl=%2fpersonal%2fsandrar_goldstonem_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fsandrar%255Fgoldstonem%255Fcom&Source=cookie request-id: ad1178c8-d869-55b4-cbdb-814cefe0c261 x-backendhttpstatus: 302 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" set-cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGc2FuZHJhciU1RmdvbGRzdG9uZW0lNUZjb20=; expires=Tue, 10-Jun-2025 17:19:27 GMT; path=/; SameSite=None; secure; HttpOnly x-networkstatistics: 0,4194720,0,0,13789,47861,47861,37938 x-sharepointhealthscore: 1 x-aspnet-version: 4.0.30319 isocdi: 0 x-databoundary: NONE x-1dscollectorurl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ x-ariacollectorurl: https://browser.pipe.aria.microsoft.com/Collector/3.0/ ms-cv: oabP5T+AAJBIkwZSBhq6ZA.0 splogid: e5cfa6a1-803f-9000-4893-0652061aba64 report-to: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=MIRA-WW-MN2&frontEnd=MIRA&RemoteIP=156.146.37.0"}]} nel: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} strict-transport-security: max-age=31536000 sprequestduration: 15 spiisla
2025-06-10 17:09:27 UTC	1131	OUT	GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2fsandrar_goldstonem_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Fsandrar%255Fgoldstonem%255Fcom&Source=cookie HTTP/1.1 host: goldstonemanagment-my.sharepoint.com upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: same-origin sec-fetch-mode: navigate sec-fetch-user: ?1 sec-fetch-dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" referer: https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9 accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: WSS_FullScreenMode=false cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGc2FuZHJhciU1RmdvbGRzdG9uZW0lNUZjb20= priority: u=0, i
2025-06-10 17:09:27 UTC	1460	IN	HTTP/1.1 302 Found cache-control: no-cache, no-store pragma: no-cache content-length: 894 content-type: text/html; charset=utf-8 expires: -1 location: https://login.microsoftonline.com:443/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4 request-id: 47d85534-0112-cb6d-b0eb-cd8f8924847f x-backendhttpstatus: 302 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" set-cookie: nSGt-CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639=gYEwMTRFM0Q4NUZDNUM4REYzQzBCNjhEN0E3NEVGRjVBRTdCNjJFNzhEMzU4RjNBMUU4MENFMkU1NTE5RjZDM0ZFRkZCMEFDRkYyOUYyQ0VCODA1REVCNUZCODZFRDc4QzYzORIxMzM5NDA0OTIwNzg1MzQ5NzMkZ29sZHN0b25lbWFuYWdtZW50LW15LnNoYXJlcG9pbnQuY29tIvxJrl8EQ+MzaqOeWODOyV6ozQJSma8szgA5cgM5nAp2V225G7dWZNd1wW4jd2SWB7dP0h9droh2fnlAcjPyX2lT+gn+fosxXmXmQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.24	49698	23.206.121.60	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:14 UTC	609	OUT	GET /bld/_layouts/15/16.0.26121.12013/1033/initstrings.js HTTP/1.1 host: res-1.cdn.office.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://goldstonemanagment-my.sharepoint.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:14 UTC	1314	IN	HTTP/1.1 200 OK last-modified: Sat, 07 Jun 2025 04:24:15 GMT x-ms-request-id: b6ae0a32-a01e-009d-6c98-d730b8000000 vary: Accept-Encoding cache-control: max-age=630720000 date: Tue, 10 Jun 2025 17:09:14 GMT alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,quic=":443"; ma=93600; v="43" content-length: 23594 akamai-request-bc: [a=23.220.248.153,b=534982826,c=g,n=US_NY_NEWYORK,o=20940] ak-network: FF report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=NEWYORK&ASN=20940&Country=US&Region=NY&RequestIdentifier=0.99f8dc17.1749575354.1fe330aa&TotalRTCDNTime=86&CompressionType=gzip&FileSize=6852"}],"include_subdomains ":true} nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} server-timing: clientrtt; dur=86, clienttt; dur=, origin; dur=0 , cdntime; dur=0 akamai-cache-status: Hit from child x-content-type-options: nosniff timing-allow-origin: * access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains content-type: application/javascript x-cdn-provider: Akamai
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 76 61 72 20 53 74 72 69 6e 67 73 3b 20 20 69 66 20 28 53 74 72 69 6e 67 73 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 20 53 74 72 69 6e 67 73 3d 6e 65 77 20 4f 62 6a 65 63 74 28 29 3b 20 7d 53 74 72 69 6e 67 73 2e 53 54 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 4e 65 77 54 61 62 3d 22 4e 65 77 20 74 61 62 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 43 61 6c 6c 6f 75 74 4c 61 73 74 45 64 69 74 65 64 4e 61 6d 65 41 6e 64 44 61 74 65 3d 22 43 68 61 6e 67 65 64 20 62 79 20 5e 31 20 6f 6e 20 5e 32 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 43 61 6c 6c 6f 75 74 53 6f 75 72 63 65 55 72 6c 48 65 61 64 65 72 3d 22 4c 6f 63 61 74 69 6f 6e 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 44 69 73 63 Data Ascii: var Strings; if (Strings === undefined) { Strings=new Object(); }Strings.STS=function(){};Strings.STS.L_NewTab="New tab";Strings.STS.L_CalloutLastEditedNameAndDate="Changed by ^1 on ^2";Strings.STS.L_CalloutSourceUrlHeader="Location";Strings.STS.L_SPDisc
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 6d 3d 22 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 6c 65 74 65 20 74 68 69 73 20 70 6f 73 74 3f 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 42 75 73 69 6e 65 73 73 44 61 74 61 46 69 65 6c 64 5f 41 63 74 69 6f 6e 4d 65 6e 75 41 6c 74 54 65 78 74 3d 22 41 63 74 69 6f 6e 73 20 4d 65 6e 75 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 4d 61 78 3d 22 4d 61 78 69 6d 75 6d 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 47 53 43 61 6c 6c 6f 75 74 3d 22 54 68 65 20 47 65 74 74 69 6e 67 20 53 74 61 72 74 65 64 20 74 61 73 6b 73 20 61 72 65 20 61 76 61 69 6c 61 62 6c 65 20 66 72 6f 6d 20 74 68 65 20 53 65 74 74 69 6e 67 73 20 6d 65 6e 75 20 61 74 20 61 6e 79 20 74 69 6d 65 2e 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 Data Ascii: m="Are you sure you want to delete this post?";Strings.STS.L_BusinessDataField_ActionMenuAltText="Actions Menu";Strings.STS.L_SPMax="Maximum";Strings.STS.L_GSCallout="The Getting Started tasks are available from the Settings menu at any time.";Strings.STS
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 6f 72 74 41 73 63 3d 22 53 6f 72 74 20 41 73 63 65 6e 64 69 6e 67 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 4e 65 77 44 6f 63 75 6d 65 6e 74 46 6f 6c 64 65 72 3d 22 4e 65 77 20 66 6f 6c 64 65 72 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 44 69 73 63 53 6f 72 74 4e 65 77 65 73 74 3d 22 4e 65 77 65 73 74 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 44 69 73 63 4d 65 74 61 4c 69 6e 65 43 61 74 65 67 6f 72 79 3d 22 49 6e 20 7b 30 7d 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 52 65 70 75 74 61 74 69 6f 6e 53 63 6f 72 65 3d 22 72 65 70 75 74 61 74 69 6f 6e 20 73 63 6f 72 65 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 50 72 65 76 3d 22 50 72 65 76 69 6f 75 73 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 43 6c 69 Data Ascii: ortAsc="Sort Ascending";Strings.STS.L_NewDocumentFolder="New folder";Strings.STS.L_SPDiscSortNewest="Newest";Strings.STS.L_SPDiscMetaLineCategory="In {0}";Strings.STS.L_SPReputationScore="reputation score";Strings.STS.L_Prev="Previous";Strings.STS.L_SPCli
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 65 6c 70 20 6d 65 6e 75 20 74 6f 20 61 63 63 65 73 73 20 68 65 6c 70 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2c 20 61 6e 64 20 6c 65 67 61 6c 20 61 6e 64 20 70 72 69 76 61 63 79 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 66 72 6f 6d 20 4d 69 63 72 6f 73 6f 66 74 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 43 61 74 65 67 6f 72 79 53 6f 72 74 41 6c 70 68 61 52 65 76 3d 22 5a 2d 41 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 4f 6b 42 75 74 74 6f 6e 43 61 70 74 69 6f 6e 3d 22 4f 4b 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 75 69 74 65 4e 61 76 5f 48 65 6c 70 5f 4c 69 6e 6b 5f 54 65 78 74 3d 22 48 65 6c 70 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 44 69 73 63 55 6e 6d 61 72 6b 41 73 46 65 61 74 75 72 65 64 54 6f 6f 6c 74 69 70 Data Ascii: elp menu to access help documentation, and legal and privacy information from Microsoft";Strings.STS.L_SPCategorySortAlphaRev="Z-A";Strings.STS.L_OkButtonCaption="OK";Strings.STS.L_SuiteNav_Help_Link_Text="Help";Strings.STS.L_SPDiscUnmarkAsFeaturedTooltip
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 73 2e 53 54 53 2e 4c 5f 53 50 44 69 73 63 52 65 70 6f 72 74 41 62 75 73 65 44 69 61 6c 6f 67 54 65 78 74 32 3d 22 4c 65 74 20 75 73 20 6b 6e 6f 77 20 77 68 61 74 20 74 68 65 20 70 72 6f 62 6c 65 6d 20 69 73 20 61 6e 64 20 77 65 27 6c 6c 20 6c 6f 6f 6b 20 69 6e 74 6f 20 69 74 2e 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 44 69 73 63 48 6f 6d 65 50 61 67 65 3d 22 43 6f 6d 6d 75 6e 69 74 79 20 48 6f 6d 65 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 46 69 65 6c 64 54 79 70 65 5f 46 69 6c 65 3d 22 46 69 6c 65 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 68 61 72 69 6e 67 48 69 6e 74 53 68 61 72 65 64 5f 53 68 6f 72 74 3d 22 53 68 61 72 65 64 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 43 6c 69 65 6e 74 4e 75 6d 43 6f 6d 6d 65 6e Data Ascii: s.STS.L_SPDiscReportAbuseDialogText2="Let us know what the problem is and we'll look into it.";Strings.STS.L_SPDiscHomePage="Community Home";Strings.STS.L_FieldType_File="File";Strings.STS.L_SharingHintShared_Short="Shared";Strings.STS.L_SPClientNumCommen
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 54 6f 64 61 79 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 46 72 61 75 64 54 68 72 6f 74 74 6c 65 45 72 72 6f 72 54 65 78 74 3d 22 54 68 69 73 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 61 73 20 69 74 20 76 69 6f 6c 61 74 65 73 20 74 68 65 20 41 63 63 65 70 74 61 62 6c 65 20 55 73 65 20 50 6f 6c 69 63 79 20 6c 6f 63 61 74 65 64 20 69 6e 20 74 68 65 20 54 65 72 6d 73 20 6f 66 20 55 73 65 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 20 6d 69 73 74 61 6b 65 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 6f 75 72 20 53 75 70 70 6f 72 74 20 74 65 61 6d 20 75 73 69 6e 67 20 4d 33 36 35 20 41 64 6d 69 6e 20 43 65 6e 74 65 72 20 66 6f 72 20 66 75 72 74 68 65 72 20 61 73 73 69 73 74 61 6e 63 Data Ascii: Today";Strings.STS.L_SPFraudThrottleErrorText="This page has been blocked as it violates the Acceptable Use Policy located in the Terms of Use. If you believe this is a mistake, please contact our Support team using M365 Admin Center for further assistanc
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 6f 6e 3d 22 44 65 6c 65 74 65 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 4c 69 73 74 4e 65 77 4c 6f 6f 6b 48 65 61 64 69 6e 67 3d 22 4c 69 73 74 73 20 61 72 65 20 67 65 74 74 69 6e 67 20 61 20 6e 65 77 20 6c 6f 6f 6b 21 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 41 42 4f 55 54 5f 55 53 45 52 3d 22 41 62 6f 75 74 20 7b 30 7d 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 68 61 72 65 64 57 69 74 68 4e 6f 6e 65 5f 53 68 6f 72 74 3d 22 4f 6e 6c 79 20 79 6f 75 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 4e 4f 44 4f 43 53 45 41 52 43 48 3d 22 59 6f 75 72 20 73 65 61 72 63 68 20 72 65 74 75 72 6e 65 64 20 6e 6f 20 72 65 73 75 6c 74 73 2e 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 43 61 6c 6c 6f 75 74 41 63 74 69 6f 6e 5f 50 4f 53 54 Data Ascii: on="Delete";Strings.STS.L_ListNewLookHeading="Lists are getting a new look!";Strings.STS.L_ABOUT_USER="About {0}";Strings.STS.L_SharedWithNone_Short="Only you";Strings.STS.L_NODOCSEARCH="Your search returned no results.";Strings.STS.L_SPCalloutAction_POST
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 65 77 5f 53 65 6c 65 63 74 65 64 5f 61 6c 74 3d 22 53 65 6c 65 63 74 65 64 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 52 65 71 75 69 72 65 64 46 69 65 6c 64 5f 54 65 78 74 3d 22 52 65 71 75 69 72 65 64 20 46 69 65 6c 64 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 42 6c 6f 67 43 61 74 65 67 6f 72 69 65 73 46 6f 6c 64 65 72 3d 22 43 61 74 65 67 6f 72 69 65 73 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 41 64 64 4e 65 77 41 6e 64 44 72 61 67 3d 22 7b 30 7d 20 6f 72 20 64 72 61 67 20 66 69 6c 65 73 20 68 65 72 65 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 6c 69 64 65 53 68 6f 77 4e 65 78 74 42 75 74 74 6f 6e 5f 54 65 78 74 3d 22 4e 65 78 74 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 54 61 67 5f 43 61 6c 6c 6f 75 74 5f 42 6c 6f Data Ascii: ew_Selected_alt="Selected";Strings.STS.L_RequiredField_Text="Required Field";Strings.STS.L_BlogCategoriesFolder="Categories";Strings.STS.L_SPAddNewAndDrag="{0} or drag files here";Strings.STS.L_SlideShowNextButton_Text="Next";Strings.STS.L_Tag_Callout_Blo
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 79 6e 63 3d 22 73 79 6e 63 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 44 65 6c 65 74 65 4c 69 73 74 5f 54 65 78 74 3d 22 44 65 6c 65 74 65 20 6c 69 73 74 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 43 6c 69 65 6e 74 4e 65 78 74 3d 22 4e 65 78 74 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 43 61 6c 6c 6f 75 74 41 63 74 69 6f 6e 5f 53 48 41 52 45 3d 22 53 68 61 72 65 20 66 69 6c 65 20 6f 72 20 66 6f 6c 64 65 72 20 77 69 74 68 20 6f 74 68 65 72 20 70 65 72 73 6f 6e 20 6f 72 20 67 72 6f 75 70 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 4d 79 46 6f 6c 64 65 72 73 53 68 61 72 65 64 57 69 74 68 4d 65 52 65 6e 64 65 72 4c 69 73 74 46 61 69 6c 65 64 3d 22 53 6f 72 72 79 2c 20 77 65 20 6e 65 65 64 20 61 20 6c 69 74 74 6c 65 20 6d 6f 72 Data Ascii: ync="sync";Strings.STS.L_DeleteList_Text="Delete list";Strings.STS.L_SPClientNext="Next";Strings.STS.L_SPCalloutAction_SHARE="Share file or folder with other person or group";Strings.STS.L_MyFoldersSharedWithMeRenderListFailed="Sorry, we need a little mor
2025-06-10 17:09:14 UTC	1460	IN	Data Raw: 54 53 2e 4c 5f 52 65 6c 61 74 69 76 65 44 61 74 65 54 69 6d 65 5f 44 61 79 41 6e 64 54 69 6d 65 3d 22 7b 30 7d 20 61 74 20 7b 31 7d 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 4e 65 77 44 6f 63 75 6d 65 6e 74 50 6f 77 65 72 50 6f 69 6e 74 3d 22 50 6f 77 65 72 50 6f 69 6e 74 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 44 69 73 63 4e 75 6d 62 65 72 4f 66 4c 69 6b 65 73 49 6e 74 65 72 76 61 6c 73 3d 22 30 7c 7c 31 7c 7c 32 2d 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 53 50 44 69 73 63 49 6e 69 74 69 61 6c 50 6f 73 74 3d 22 42 79 20 7b 30 7d 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c 5f 43 61 6c 6c 6f 75 74 4f 70 65 6e 41 63 74 69 6f 6e 3d 22 4f 70 65 6e 22 3b 53 74 72 69 6e 67 73 2e 53 54 53 2e 4c Data Ascii: TS.L_RelativeDateTime_DayAndTime="{0} at {1}";Strings.STS.L_NewDocumentPowerPoint="PowerPoint presentation";Strings.STS.L_SPDiscNumberOfLikesIntervals="0\|\|1\|\|2-";Strings.STS.L_SPDiscInitialPost="By {0}";Strings.STS.L_CalloutOpenAction="Open";Strings.STS.L
2025-06-10 17:09:14 UTC	598	OUT	GET /bld/_layouts/15/16.0.26121.12013/blank.js HTTP/1.1 host: res-1.cdn.office.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://goldstonemanagment-my.sharepoint.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:14 UTC	1228	IN	HTTP/1.1 200 OK last-modified: Sat, 07 Jun 2025 04:23:56 GMT x-ms-request-id: d9965450-101e-000e-1198-d7ebb2000000 vary: Accept-Encoding cache-control: max-age=630720000 date: Tue, 10 Jun 2025 17:09:14 GMT content-length: 456 akamai-request-bc: [a=23.220.248.153,b=534982828,c=g,n=US_NY_NEWYORK,o=20940] ak-network: FF report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=NEWYORK&ASN=20940&Country=US&Region=NY&RequestIdentifier=0.99f8dc17.1749575354.1fe330ac&TotalRTCDNTime=86&CompressionType=gzip&FileSize=273"}],"include_subdomains ":true} nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} server-timing: clientrtt; dur=86, clienttt; dur=, origin; dur=0 , cdntime; dur=0 akamai-cache-status: Hit from child x-content-type-options: nosniff timing-allow-origin: * access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains content-type: application/javascript x-cdn-provider: Akamai
2025-06-10 17:09:15 UTC	600	OUT	GET /bld/_layouts/15/16.0.26121.12013/theming.js HTTP/1.1 host: res-1.cdn.office.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://goldstonemanagment-my.sharepoint.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:15 UTC	1232	IN	HTTP/1.1 200 OK last-modified: Sat, 07 Jun 2025 04:23:45 GMT x-ms-request-id: fcd2b85f-b01e-0038-7e98-d766c2000000 vary: Accept-Encoding cache-control: max-age=630720000 date: Tue, 10 Jun 2025 17:09:14 GMT content-length: 35238 akamai-request-bc: [a=23.220.248.153,b=534982829,c=g,n=US_NY_NEWYORK,o=20940] ak-network: FF report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=NEWYORK&ASN=20940&Country=US&Region=NY&RequestIdentifier=0.99f8dc17.1749575354.1fe330ad&TotalRTCDNTime=86&CompressionType=gzip&FileSize=12519"}],"include_subdomains ":true} nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} server-timing: clientrtt; dur=86, clienttt; dur=, origin; dur=0 , cdntime; dur=0 akamai-cache-status: Hit from child x-content-type-options: nosniff timing-allow-origin: * access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains content-type: application/javascript x-cdn-provider: Akamai
2025-06-10 17:09:15 UTC	597	OUT	GET /bld/_layouts/15/16.0.26121.12013/init.js HTTP/1.1 host: res-1.cdn.office.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://goldstonemanagment-my.sharepoint.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:15 UTC	1233	IN	HTTP/1.1 200 OK last-modified: Sat, 07 Jun 2025 04:23:05 GMT x-ms-request-id: 7a70a3de-c01e-0050-5596-d70052000000 vary: Accept-Encoding cache-control: max-age=630720000 date: Tue, 10 Jun 2025 17:09:14 GMT akamai-request-bc: [a=23.220.248.153,b=534982827,c=g,n=US_NY_NEWYORK,o=20940] ak-network: FF report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=NEWYORK&ASN=20940&Country=US&Region=NY&RequestIdentifier=0.99f8dc17.1749575354.1fe330ab&TotalRTCDNTime=86&CompressionType=gzip&FileSize=89047"}],"include_subdomains ":true} nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} server-timing: clientrtt; dur=86, clienttt; dur=, origin; dur=0 , cdntime; dur=0 akamai-cache-status: Hit from child x-content-type-options: nosniff timing-allow-origin: * access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains content-type: application/javascript x-cdn-provider: Akamai content-length: 340993
2025-06-10 17:09:15 UTC	590	OUT	GET /bld/_layouts/15/16.0.26121.12013/1033/strings.js HTTP/1.1 host: res-1.cdn.office.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://goldstonemanagment-my.sharepoint.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-06-10 17:09:15 UTC	1233	IN	HTTP/1.1 200 OK last-modified: Sat, 07 Jun 2025 04:24:29 GMT x-ms-request-id: 97dc21bf-e01e-00a3-0798-d7a7c7000000 vary: Accept-Encoding cache-control: max-age=630720000 date: Tue, 10 Jun 2025 17:09:15 GMT akamai-request-bc: [a=23.220.248.153,b=534984035,c=g,n=US_NY_NEWYORK,o=20940] ak-network: FF report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=NEWYORK&ASN=20940&Country=US&Region=NY&RequestIdentifier=0.99f8dc17.1749575355.1fe33563&TotalRTCDNTime=86&CompressionType=gzip&FileSize=50826"}],"include_subdomains ":true} nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} server-timing: clientrtt; dur=86, clienttt; dur=, origin; dur=0 , cdntime; dur=0 akamai-cache-status: Hit from child x-content-type-options: nosniff timing-allow-origin: * access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains content-type: application/javascript x-cdn-provider: Akamai content-length: 186722
2025-06-10 17:09:15 UTC	582	OUT	GET /bld/_layouts/15/16.0.26121.12013/core.js HTTP/1.1 host: res-1.cdn.office.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://goldstonemanagment-my.sharepoint.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-06-10 17:09:15 UTC	1234	IN	HTTP/1.1 200 OK last-modified: Sat, 07 Jun 2025 04:23:07 GMT x-ms-request-id: 0982dc2b-801e-0033-5898-d79da9000000 vary: Accept-Encoding cache-control: max-age=630720000 date: Tue, 10 Jun 2025 17:09:15 GMT akamai-request-bc: [a=23.220.248.153,b=534984350,c=g,n=US_NY_NEWYORK,o=20940] ak-network: FF report-to: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=NEWYORK&ASN=20940&Country=US&Region=NY&RequestIdentifier=0.99f8dc17.1749575355.1fe3369e&TotalRTCDNTime=86&CompressionType=gzip&FileSize=134728"}],"include_subdomains ":true} nel: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} server-timing: clientrtt; dur=86, clienttt; dur=, origin; dur=0 , cdntime; dur=0 akamai-cache-status: Hit from child x-content-type-options: nosniff timing-allow-origin: * access-control-expose-headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id access-control-allow-origin: * strict-transport-security: max-age=31536000; includeSubDomains content-type: application/javascript x-cdn-provider: Akamai content-length: 512795

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.24	49707	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:18 UTC	312	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.22631.4169/0?CH=902&L=en-US&P=&PT=0x30&WUA=1220.2407.15022.0&MK=1CocMgeHrKELNWb&MD=TMrlDezF HTTP/1.1 host: slscr.update.microsoft.com accept: / user-agent: Windows-Update-Agent/1220.2407.15022.0 Client-Protocol/2.80 accept-encoding: identity
2025-06-10 17:09:18 UTC	558	IN	HTTP/1.1 200 OK content-type: application/octet-stream date: Tue, 10 Jun 2025 17:09:18 GMT cache-control: no-cache etag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" expires: -1 last-modified: Mon, 01 Jan 0001 00:00:00 GMT pragma: no-cache content-length: 24490 slsversion: 2.0 ms-correlationid: da4ae6c1-643b-461f-8b82-4efceae0bb31 ms-requestid: 14cc0ed6-e3c1-4150-9735-b2c9e189627c ms-cv: vSE3hyykD0axz3Cw.0 x-content-type-options: nosniff x-microsoft-slsclientcache: 2880 content-disposition: attachment; filename=environment.cab
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: c7 c3 8f 06 b6 24 05 3c f9 2c cb e0 99 86 1a f8 03 ca b3 04 d8 16 f0 f9 32 7f 28 14 e1 08 d8 03 b6 5f ca 00 2c ca e8 4f 1f 06 4e 31 f0 2f 3c 0e 0b 50 12 26 c4 00 85 7e 42 c0 00 c8 0f fa 0d c7 c3 a0 90 23 e5 21 63 33 1e a7 e6 2a f9 c3 ee 4b 69 ce 94 9b 68 c7 7b df ba c7 eb c3 55 b3 50 05 c8 b4 a7 ea a2 5e 5e cd 3a a2 aa 75 43 4b 97 f4 bd 25 ec 55 81 8f 48 6a d4 2b fb 61 52 86 d0 3b 01 14 b0 69 f4 31 7a b6 35 59 f1 51 9b 07 06 22 e9 3b 54 1f 1c 09 53 6c 08 99 9d 74 59 32 ad 33 42 5a f5 2c 05 bf b7 e9 cf 8f 5d 2c 89 c9 8a 5f 6c 65 4c 0c 6d 6a 3f 83 6c b8 bf a3 10 39 92 ad fd bc d8 94 f7 ca 6b ef 90 4b eb 87 76 34 1d 50 f6 0b 7d 4a 62 19 4b 92 ae d4 3f 79 3c 37 e1 2d 6c bc f7 fc 95 94 bd 9c f5 56 86 da 39 b9 b3 67 4c 1a 17 d4 27 59 97 fa bb 03 e7 1b 32 9c 5f Data Ascii: $<,2(_,ON1/<P&~B#!c3*Kih{UP^^:uCK%UHj+aR;i1z5YQ";TSltY23BZ,],_leLmj?l9kKv4P}JbK?y<7-lV9gL'Y2_
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 99 5f f0 57 d3 49 7b b2 e4 e5 c0 9e f2 e2 b5 17 92 26 2b c1 a3 c2 60 60 5d 36 2c de 60 61 ea e8 98 df 55 7a a8 91 e4 a9 84 e0 3b 6e 95 89 91 fc a7 0f 95 af 35 36 d1 a7 99 9e 88 5e 1c 90 6f 76 55 35 c9 a6 7b 9c 57 31 1c 7d 98 8c a5 d0 5c 66 01 23 08 79 a0 ac fd 28 e3 66 c4 5d bc 06 ed c2 ac 2e 85 85 1d 2c f9 63 f9 ae 62 0a e0 dc fd 65 e4 07 da 27 83 27 db 54 2f 30 4f ab 57 35 d0 e3 25 bc 3a 8a 0f 18 ab 06 65 1d c3 c6 d7 dc 20 e5 92 42 df 59 3a dd 99 b4 1e 33 04 f5 9c 31 69 0f ec 13 9b b8 7c 93 51 3a 5b 90 33 78 d9 c2 f9 a0 e5 54 1d b7 41 12 7c ea 48 f9 8b 32 9d cb 22 59 19 02 65 dd 61 fc 1e b6 2d 6d 85 1b 49 c9 9e 9d a6 e3 15 82 bd e8 4e 07 0a 96 41 09 6c 7a 91 fe 23 c6 ec 81 c3 34 b3 bc bd 6d 1b a2 f9 9d 9a 55 ad 27 0b b3 da 0d 82 7c 98 8d 2d 3b d6 c6 13 Data Ascii: _WI{&+``]6,`aUz;n56^ovU5{W1}\f#y(f].,cbe''T/0OW5%:e BY:31i\|Q:[3xTA\|H2"Yea-mINAlz#4mU'\|-;
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 2d 5f d0 00 d0 07 f4 72 f6 e6 e8 44 69 fd 25 5f 10 dc 3f 70 f7 40 41 25 f8 69 80 38 20 27 0e a0 36 fd 40 ab 6d 7e e0 7e 60 1f a0 bb cd 0f 54 fd d7 fc c0 df e9 fb c7 c8 07 c3 96 47 48 09 90 7f f5 08 49 7f e5 05 82 72 c3 a4 de 98 91 55 c3 ea 10 ce a3 13 c3 f7 12 97 f6 c4 ce d7 c2 d9 28 f3 83 ce ec 99 14 4b d4 be 03 9e 48 26 e8 06 e4 1c e3 a4 41 09 dd e2 d3 84 db 86 e8 d2 f6 fb 0d f2 bb 63 cb fd 6b 48 cc 83 a9 85 16 0a 62 17 34 a2 dc b2 5c 8e 5a 11 11 25 46 bc 99 aa 15 3b c9 46 0f 5f 5e b9 9a fd a8 03 36 50 d9 0b 10 d7 86 2a ed 8c d3 6e 1f ed e9 f0 96 84 f7 3b dc 1d 9e 09 6e c5 df da 17 74 23 13 af d2 ac 85 dd 4d 74 ea 15 fd 52 cf 64 7f b7 fa f3 19 03 d1 3c 1d f9 9e 49 c6 ae 97 08 66 b1 ba 94 91 c7 2a c7 ee c7 ef 55 45 e4 5e a7 ed 2e 5d 46 59 44 0d 4b 8d 93 Data Ascii: -_rDi%_?p@A%i8 '6@m~~`TGHIrU(KH&AckHb4\Z%F;F_^6Pn;nt#MtRd<IfUE^.]FYDK
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: f4 d2 5b 0d c4 46 f4 08 0d 64 b7 dd 0e 23 c4 4a be c6 2c 08 e4 15 96 43 0e 90 12 6e 83 93 e4 22 73 bf 9c 43 a3 72 7e 18 32 1c 87 83 10 55 1d 3d 13 70 78 a0 df ea 3e bc 8f 9c f3 c9 cd b2 63 9f 56 68 27 2f ce f2 f7 d1 be 1e 37 ef db 07 4d 38 19 d3 72 07 4b 21 bd e4 5a 22 2f df 9c d9 42 cd 28 ce 46 7d 02 5e c0 3a 7d 59 8f ba 2b d9 8a 6a ee ee 00 2f 1d b9 28 fd 40 78 e3 bc e0 27 36 dd fd 43 d9 6a 3e 0d 73 ca 91 ee 0f 3d a6 1a b5 25 8c d1 15 8a d7 f8 93 2e 54 ac df 56 e1 7f ed 19 54 17 27 34 90 14 e3 70 8c 6c 7f ff 7e 4f 51 14 1e 4e 05 72 47 b2 4d 89 4e f9 67 77 f4 77 a9 eb f6 50 12 1e aa 0b b0 6d 8f 25 51 7d 17 52 f8 55 b8 68 f5 90 ab 07 5f 36 1f f1 e4 1e e5 fb f3 73 97 9a e6 1d ab bb ee b9 59 5a f2 3c e8 6d 9f be 51 7b 02 c0 7d d8 d6 01 4c 12 85 7b 05 e0 5e Data Ascii: [Fd#J,Cn"sCr~2U=px>cVh'/7M8rK!Z"/B(F}^:}Y+j/(@x'6Cj>s=%.TVT'4pl~OQNrGMNgwwPm%Q}RUh_6sYZ<mQ{}L{^
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 17 7a 50 e3 3d 37 50 78 c6 9b 00 9e b1 6c 93 1f 64 fc 47 28 e5 6f 7b 2c 3f 66 9c 1b c0 91 91 7f f1 eb 59 11 28 38 61 06 ff bf 92 d0 14 5f 4d 0f e8 d9 e9 00 5a 30 6e 48 2f 23 03 13 4d 57 f0 f8 e5 8d 51 9b 88 0d f9 1d 57 58 98 cf e8 0b 8c f6 eb 9c da ff e4 4a 13 15 29 0c 69 75 94 79 e3 95 50 e5 48 e0 90 99 54 fe c5 90 26 13 97 27 85 89 ed 99 b4 32 69 b3 23 07 e3 9e fb e7 e2 e9 27 ff d9 3c 6e 78 48 c3 3d 4c b0 78 83 47 97 43 99 4b fa 65 6a 2b a5 20 16 23 d3 dd e2 46 1d 6b 79 16 e2 7b e7 3e e7 71 eb 7f c8 e3 4a 49 a0 64 7e e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 7f e6 71 ff ab f3 b8 5d a3 0e 92 5e 1d d9 33 07 9d b4 5a 5b 1f 36 94 07 fb 31 44 46 72 24 1d af 77 ba 94 e6 6b df 96 Data Ascii: zP=7PxldG(o{,?fY(8a_MZ0nH/#MWQWXJ)iuyPHT&'2i#'<nxH=LxGCKej+ #Fky{>qJId~qqqqqqqqqqqqqqq]^3Z[61DFr$wk
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 72 61 74 69 6f 6e 73 20 50 75 65 72 74 6f 20 52 69 63 6f 31 16 30 14 06 03 55 04 05 13 0d 32 33 30 38 32 39 2b 34 35 34 32 33 37 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ad 94 76 8f 83 ad 0e 03 a3 e8 3b b0 d7 34 68 d4 79 3a 7d dc 30 60 06 03 55 1d 1f 04 59 30 57 30 55 a0 53 a0 51 86 4f 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 72 6c 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 55 70 64 61 74 65 25 32 30 53 69 67 6e 69 6e 67 25 32 30 43 41 25 32 30 32 2e 31 2e 63 72 6c 30 6d 06 08 2b 06 01 05 05 07 01 01 04 61 30 5f 30 5d 06 08 2b 06 01 05 05 07 30 02 86 51 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 6f 70 73 2f 63 65 72 74 73 2f 4d 69 63 72 6f 73 6f 66 74 25 32 30 55 Data Ascii: rations Puerto Rico10U230829+4542370U#0v;4hy:}0`UY0W0USQOhttp://www.microsoft.com/pkiops/crl/Microsoft%20Update%20Signing%20CA%202.1.crl0m+a0_0]+0Qhttp://www.microsoft.com/pkiops/certs/Microsoft%20U
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 6c d5 21 c9 b8 50 68 05 c3 e4 09 c9 bd 51 c9 5f 6d 75 4f 8d 35 30 c5 8c c1 83 b2 1f 93 b5 72 6f d2 44 90 1d ed 7f 13 a9 7d 53 24 9c aa 46 c0 8f c5 c5 be bf c8 55 14 fe 87 35 fe cd d5 7e 02 d2 87 68 00 c9 b8 d7 44 cb 71 db a4 8b b3 e0 0e a6 0b ce 12 7d f6 68 dc c0 91 31 f8 59 2c 2c f5 d5 d1 2e 08 9d 2b 30 6a 6e aa ad 9e 16 4e 27 d0 ba 3b 1a 81 30 43 38 92 87 e1 6c 6f 43 3d 2d 4e 1f 0d 10 c1 f8 fa bc 84 c8 93 c3 9e 47 fc b6 fa d1 2f b6 af 39 3e 9c 3f 1c f1 4d a4 16 d3 0a e2 e7 4e f5 37 88 03 46 8e 1e cc 77 c1 47 d3 44 b7 e4 35 23 db eb 20 cb 2a f5 57 ae 2e 00 3b 6b e6 a3 6e 05 99 70 bb 76 3b d8 3c b4 76 f6 28 15 3a 25 d4 26 a4 08 9f d9 7e 7b 44 8a b7 15 8a c6 c5 78 2a 9d 32 c4 83 7b b9 6e 42 14 99 5d 49 7f 45 99 57 a7 33 77 44 1a ff 47 a3 71 b7 b0 b1 56 8a Data Ascii: l!PhQ_muO50roD}S$FU5~hDq}h1Y,,.+0jnN';0C8loC=-NG/9>?MN7FwGD5# W.;knpv;<v(:%&~{Dx2{nB]IEW3wDGqV
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 42 06 0a 2b 06 01 04 01 82 37 02 01 0c 31 34 30 32 a0 14 80 12 00 4d 00 69 00 63 00 72 00 6f 00 73 00 6f 00 66 00 74 a1 1a 80 18 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 04 82 01 00 3d cd 0e 0a 7b 43 82 69 14 76 9b c2 1b 25 6c 3f 01 d0 b8 bb 6f e9 4d 62 55 f3 7a 5b c4 05 04 2e 09 48 41 fd e9 13 24 1e f0 71 f0 79 9e 8e a7 ea d7 72 49 9f 71 e8 41 4c 0a 8e 69 71 3c 8f e9 56 c5 9d a0 e6 3c df 48 88 1c cf 7f eb a0 34 f3 ff 37 ca 6d 9f c7 86 eb 12 35 0a 45 a5 81 a8 f8 53 6d c6 11 4e ef 37 77 2a 73 bf 08 f9 ee ba 8d b8 48 1a 93 32 44 3a cd 7c 41 2d e3 20 7e 34 a2 7c 2b 93 92 2f 0a 5f 17 c8 65 98 79 74 bb e7 1c 1a e2 6c a4 15 db cf ae 5b 18 f9 9a 82 ab 98 f5 13 93 f3 0f 89 71 a4 2f c0 7e Data Ascii: B+71402Microsofthttp://www.microsoft.com0H={Civ%l?oMbUz[.HA$qyrIqALiq<V<H47m5ESmN7wsH2D:\|A- ~4\|+/_eytl[q/~
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: a3 82 01 1b 30 82 01 17 30 1d 06 03 55 1d 0e 04 16 04 14 ec 97 76 68 29 fe 13 4f cd 74 c6 25 18 f2 00 7c da 7d d7 a7 30 1f 06 03 55 1d 23 04 18 30 16 80 14 d5 63 3a 5c 8a 31 90 f3 43 7b 7c 46 1b c5 33 68 5a 85 6d 55 30 56 06 03 55 1d 1f 04 4f 30 4d 30 4b a0 49 a0 47 86 45 68 74 74 70 3a 2f 2f 63 72 6c 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 72 6c 2f 70 72 6f 64 75 63 74 73 2f 4d 69 63 54 69 6d 53 74 61 50 43 41 5f 32 30 31 30 2d 30 37 2d 30 31 2e 63 72 6c 30 5a 06 08 2b 06 01 05 05 07 01 01 04 4e 30 4c 30 4a 06 08 2b 06 01 05 05 07 30 02 86 3e 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 65 72 74 73 2f 4d 69 63 54 69 6d 53 74 61 50 43 41 5f 32 30 31 30 2d 30 37 2d 30 31 2e 63 72 74 30 0c 06 Data Ascii: 00Uvh)Ot%\|}0U#0c:\1C{\|F3hZmU0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.24	49705	52.107.252.9	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:18 UTC	416	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 host: goldstonemanagment-my.sharepoint.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:18 UTC	1008	IN	HTTP/1.1 200 OK cache-control: max-age=31536000 content-length: 7886 content-type: image/x-icon last-modified: Tue, 03 Jun 2025 05:34:41 GMT accept-ranges: bytes etag: "e2597d3449d4db1:0" request-id: 1d9348c6-9921-ba52-bad8-c72715a32cb9 x-backendhttpstatus: 200 p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" x-networkstatistics: 0,4194720,0,0,407,26345,26345,199360 sprequestduration: 5 spiislatency: 3 microsoftsharepointteamservices: 16.0.0.26121 x-content-type-options: nosniff x-ms-invokeapp: 1; RequireReadOnly x-proxy-routingcorrectness: 1 x-msedge-ref: MIRA: 1d9348c6-9921-ba52-bad8-c72715a32cb9 SG2PR01CA0154 2025-06-10T17:09:16.945Z alt-svc: ":443";ma=2592000,h3-29=":443";ma=2592000 x-proxy-backendserverstatus: 200 x-firsthopcafeefz: XSP x-feproxyinfo: SG2PR01CA0154.APCPRD01.PROD.EXCHANGELABS.COM x-feefzinfo: XSP x-powered-by: ASP.NET x-feserver: SG2PR01CA0154 date: Tue, 10 Jun 2025 17:09:17 GMT
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 23 ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a 60 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff da d8 b0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d2 d1 a1 ff 8f 8b 13 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 78 72 1f ff bb b2 31 ff d0 c6 37 ff d0 c6 37 ff b3 ab 25 ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a af 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff ff ff ff ff f8 f7 ef ff e1 e0 c0 ff e1 e0 c0 ff ff ff ff ff ff ff ff ff d2 d1 a1 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 78 72 1f ff bb b2 31 ff c1 b9 2e ff aa a3 1f ff a1 9b 1a ff a1 Data Ascii: #`xr177%xr1.
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 41 3e 02 ff 65 61 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 73 6f 04 ff 7c 78 09 ff 7c 78 09 ff 84 7f 0c 9f a1 9b 1a 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 83 03 cf 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 7a 76 03 ff 48 45 02 ff 65 61 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: A>eaplplplso\|x\|x@zvHEeaplplplplplplpl
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 80 d0 c6 37 ef d0 c6 37 ff d0 c6 37 ff d0 c6 37 ef d0 c6 37 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 cf d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 cf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 80 d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 777777777777777777777777
2025-06-10 17:09:18 UTC	1460	IN	Data Raw: 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 4f 4c 0c ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ef a1 9b 1a 30 00 00 00 00 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 3b 39 03 ff 8f 89 11 ff 9e 98 19 ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ef a1 9b 1a 9f a1 9b 1a 20 00 00 00 00 00 00 00 00 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 3c 39 01 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 87 83 03 ef 87 83 03 ff 87 Data Ascii: OL0;9 <9plplpl
2025-06-10 17:09:18 UTC	586	IN	Data Raw: 1a ff a1 9b 1a ff a1 9b 1a ff 87 83 03 ff 87 83 03 ff 87 83 03 ff e9 e8 d0 ff ff ff ff ff d2 d1 a1 ff 96 93 23 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 50 4d 0d ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a df 87 83 03 ff 87 83 03 ff 87 83 03 ff ff ff ff ff cb c9 91 ff 87 83 03 ff b4 b2 62 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 50 4d 0d ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a 50 87 83 03 ff 87 83 03 ff 87 83 03 ff cb c9 91 ff ff ff ff ff ff ff ff ff ff ff ff ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 4d 4a 0c ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a df a1 9b 1a 50 00 00 00 00 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 3c 39 01 ff 70 6c 03 ff 70 6c 03 40 00 Data Ascii: #PMbPMPMJP<9plpl@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.24	49709	20.190.152.19	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:28 UTC	1411	OUT	GET /14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4 HTTP/1.1 host: login.microsoftonline.com upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: cross-site sec-fetch-mode: navigate sec-fetch-user: ?1 sec-fetch-dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" referer: https://goldstonemanagment-my.sharepoint.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0, i
2025-06-10 17:09:28 UTC	1460	IN	HTTP/1.1 200 OK cache-control: no-store, no-cache pragma: no-cache content-type: text/html; charset=utf-8 expires: -1 strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: cee8c366-7459-458f-92d0-5a488fa13e00 x-ms-ests-server: 2.1.20899.4 - NCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+bno"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-security-policy-report-only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-UYgLGP3Krbvy29ufydzKCA' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All x-xss-protection: 0 set-cookie: esctx-71YInml3DZE=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWRDa3Ner4X-GaKw_n7FSlUA5yIaKwaEj6P2C_XLbt7JFnV5fNIRm9fqHD-8wxBxjl6CP_HtMxcLqdPcJVZ-PPVB9kD00IZ40vFUZ5Hcp5NmTfcLb9gQJHb2Dx31ZSGQksmhldnwRAqhpS5An
2025-06-10 17:09:28 UTC	730	IN	Data Raw: 31 69 79 43 58 43 41 41 3b 20 64 6f 6d 61 69 6e 3d 2e 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 66 70 63 3d 41 73 45 72 37 72 74 47 5f 76 4a 47 6d 6e 5a 35 67 38 72 54 6f 30 45 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 31 30 2d 4a 75 6c 2d 32 30 32 35 20 31 37 3a 30 39 3a 32 38 20 47 4d 54 3b 20 70 61 74 68 3d 2f 3b 20 73 65 63 75 72 65 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 65 73 63 74 78 3d 50 41 51 41 42 42 77 45 41 41 41 42 56 72 53 70 65 75 57 61 6d 52 61 6d 32 6a 41 46 31 58 Data Ascii: 1iyCXCAA; domain=.login.microsoftonline.com; path=/; secure; HttpOnly; SameSite=Noneset-cookie: fpc=AsEr7rtG_vJGmnZ5g8rTo0E; expires=Thu, 10-Jul-2025 17:09:28 GMT; path=/; secure; HttpOnly; SameSite=Noneset-cookie: esctx=PAQABBwEAAABVrSpeuWamRam2jAF1X
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 0d 0a 0d 0a 3c 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e Data Ascii: ... Copyright (C) Microsoft Corporation. All rights reserved. --><!DOCTYPE html><html><head> <title>Redirecting</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta http-equiv="X-UA-Compatible" conten
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 72 6d 73 25 32 66 64 65 66 61 75 6c 74 2e 61 73 70 78 5c 75 30 30 32 36 73 74 61 74 65 3d 4f 44 30 77 5c 75 30 30 32 36 63 6c 61 69 6d 73 3d 25 37 62 25 32 32 69 64 5f 74 6f 6b 65 6e 25 32 32 25 33 61 25 37 62 25 32 32 78 6d 73 5f 63 63 25 32 32 25 33 61 25 37 62 25 32 32 76 61 6c 75 65 73 25 32 32 25 33 61 25 35 62 25 32 32 43 50 31 25 32 32 25 35 64 25 37 64 25 37 64 25 37 64 5c 75 30 30 32 36 77 73 75 63 78 74 3d 31 5c 75 30 30 32 36 63 6f 62 72 61 6e 64 69 64 3d 31 31 62 64 38 30 38 33 2d 38 37 65 30 2d 34 31 62 35 2d 62 62 37 38 2d 30 62 63 34 33 63 38 61 38 65 38 61 5c 75 30 30 32 36 63 6c 69 65 6e 74 2d 72 65 71 75 65 73 74 2d 69 64 3d 65 35 63 66 61 36 61 31 2d 65 30 34 38 2d 39 30 30 30 2d 30 30 63 33 2d 36 35 31 30 62 37 35 35 35 37 61 34 5c 75 Data Ascii: rms%2fdefault.aspx\u0026state=OD0w\u0026claims=%7b%22id_token%22%3a%7b%22xms_cc%22%3a%7b%22values%22%3a%5b%22CP1%22%5d%7d%7d%7d\u0026wsucxt=1\u0026cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a\u0026client-request-id=e5cfa6a1-e048-9000-00c3-6510b75557a4\u
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 73 3a 2f 2f 61 75 74 6f 6c 6f 67 6f 6e 2e 6d 69 63 72 6f 73 6f 66 74 61 7a 75 72 65 61 64 2d 73 73 6f 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 77 69 6e 61 75 74 68 2f 73 73 6f 2f 65 64 67 65 72 65 64 69 72 65 63 74 3f 63 6c 69 65 6e 74 2d 72 65 71 75 65 73 74 2d 69 64 3d 65 35 63 66 61 36 61 31 2d 65 30 34 38 2d 39 30 30 30 2d 30 30 63 33 2d 36 35 31 30 62 37 35 35 35 37 61 34 5c 75 30 30 32 36 6f 72 69 67 69 6e 3d 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 75 30 30 32 36 69 73 5f 72 65 64 69 72 65 63 74 65 64 3d 31 22 2c 22 69 73 46 6c 6f 77 54 6f 6b 65 6e 50 61 73 73 65 64 49 6e 45 64 67 65 22 3a 74 72 75 65 7d 2c 22 69 53 65 73 73 69 6f 6e 50 75 6c 6c 54 79 70 65 22 3a 32 2c 22 66 55 73 65 53 61 6d 65 53 69 74 65 22 3a 74 Data Ascii: s://autologon.microsoftazuread-sso.com/common/winauth/sso/edgeredirect?client-request-id=e5cfa6a1-e048-9000-00c3-6510b75557a4\u0026origin=login.microsoftonline.com\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":t
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 72 75 65 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 65 35 63 66 61 36 61 31 2d 65 30 34 38 2d 39 30 30 30 2d 30 30 63 33 2d 36 35 31 30 62 37 35 35 35 37 61 34 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 63 65 65 38 63 33 36 36 2d 37 34 35 39 2d 34 35 38 66 2d 39 32 64 30 2d 35 61 34 38 38 66 61 31 33 65 30 30 22 2c 22 73 52 69 6e 67 49 64 22 3a 22 52 34 22 2c 22 6c 6f 63 61 6c 65 22 3a 7b 22 6d 6b 74 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 63 69 64 22 3a 31 30 33 33 7d 2c 22 73 6c 4d 61 78 52 65 74 72 79 22 3a 32 2c 22 73 6c 52 65 70 6f 72 74 46 61 69 6c 75 72 65 22 3a 74 72 75 65 2c 22 73 74 72 69 6e 67 73 22 3a 7b 22 64 65 73 6b 74 6f 70 73 73 6f 22 3a 7b 22 61 75 74 68 65 6e 74 69 63 61 74 69 6e 67 6d 65 73 73 61 67 65 22 3a 22 54 72 79 69 6e Data Ascii: rue,"correlationId":"e5cfa6a1-e048-9000-00c3-6510b75557a4","sessionId":"cee8c366-7459-458f-92d0-5a488fa13e00","sRingId":"R4","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Tryin
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 2f 22 2c 22 68 74 74 70 73 3a 2f 2f 61 61 64 63 64 6e 2e 6d 73 66 74 61 75 74 68 2e 6e 65 74 2f 22 5d 2c 22 6c 6f 67 42 79 54 68 72 6f 77 69 6e 67 22 3a 74 72 75 65 7d 2c 22 73 65 72 76 65 72 44 65 74 61 69 6c 73 22 3a 7b 22 73 6c 63 22 3a 22 50 72 6f 64 53 6c 69 63 65 73 22 2c 22 64 63 22 3a 22 4e 43 55 53 22 2c 22 72 69 22 3a 22 43 48 31 58 58 58 58 22 2c 22 76 65 72 22 3a 7b 22 76 22 3a 5b 32 2c 31 2c 32 30 38 39 39 2c 34 5d 7d 2c 22 72 74 22 3a 22 32 30 32 35 2d 30 36 2d 31 30 54 31 37 3a 30 39 3a 32 38 22 2c 22 65 74 22 3a 36 7d 2c 22 63 6c 69 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 65 6c 65 6d 65 74 72 79 45 6e 61 62 6c 65 64 22 3a Data Ascii: ttps://aadcdn.msauth.net/","https://aadcdn.msftauth.net/"],"logByThrowing":true},"serverDetails":{"slc":"ProdSlices","dc":"NCUS","ri":"CH1XXXX","ver":{"v":[2,1,20899,4]},"rt":"2025-06-10T17:09:28","et":6},"clientEvents":{"enabled":true,"telemetryEnabled":
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 63 6f 6f 6b 69 65 73 64 69 73 61 62 6c 65 64 22 2c 22 66 54 72 69 6d 43 68 72 6f 6d 65 42 73 73 6f 55 72 6c 22 3a 74 72 75 65 2c 22 69 6e 6c 69 6e 65 4d 6f 64 65 22 3a 35 2c 22 66 53 68 6f 77 43 6f 70 79 44 65 62 75 67 44 65 74 61 69 6c 73 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 66 54 65 6e 61 6e 74 42 72 61 6e 64 69 6e 67 43 64 6e 41 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 22 3a 74 72 75 65 2c 22 66 41 64 64 54 72 79 43 61 74 63 68 46 6f 72 49 46 72 61 6d 65 52 65 64 69 72 65 63 74 73 22 3a 74 72 75 65 7d 3b 0a 2f 2f 5d 5d 3e 3c 2f 73 63 72 69 70 74 3e 20 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e Data Ascii: ps://login.microsoftonline.com/cookiesdisabled","fTrimChromeBssoUrl":true,"inlineMode":5,"fShowCopyDebugDetailsLink":true,"fTenantBrandingCdnAddEventHandlers":true,"fAddTryCatchForIFrameRedirects":true};//...</script> <script type="text/javascript" non
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 7d 3b 69 66 28 74 26 26 28 69 2e 6d 65 74 68 6f 64 3d 74 29 2c 6e 26 26 28 69 2e 73 6b 69 70 54 69 6d 65 6f 75 74 3d 6e 29 2c 61 72 67 75 6d 65 6e 74 73 26 26 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 29 7b 69 2e 65 78 74 72 61 41 72 67 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 33 3b 61 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 69 2e 65 78 74 72 61 41 72 67 73 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 7d 7d 6f 2e 72 5b 65 5d 3d 69 2c 6f 2e 6c 6f 63 6b 2b 2b 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 6f 2e 71 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 75 3d 6f 2e 71 5b 73 5d 3b 75 2e 69 64 3d 3d 65 26 26 72 28 65 2c 75 2e 63 2c 75 2e 61 29 26 26 6f 2e 72 65 6d 6f 76 65 49 74 65 Data Ascii: };if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeIte
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 61 73 79 6e 63 3a 22 2b 28 72 2e 61 73 79 6e 63 7c 7c 22 22 29 2c 65 2b 3d 22 2c 20 64 65 66 65 72 3a 22 2b 28 72 2e 64 65 66 65 72 7c 7c 22 22 29 29 2c 74 2e 61 70 70 65 6e 64 4c 6f 67 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 66 2e 24 42 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 29 7b 69 66 28 65 29 7b 64 3d 65 2e 49 45 7d 65 6c 73 65 7b 76 61 72 20 72 3d 66 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 64 3d 2d 31 21 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 20 22 29 7c 7c 2d 31 21 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 22 29 7d 7d 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 65 3d 66 2e 24 42 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6c 29 7b Data Ascii: async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){
2025-06-10 17:09:28 UTC	1460	IN	Data Raw: 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 3b 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 6e 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 72 29 7b 76 61 72 20 74 3d 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 72 29 3b 72 65 74 75 72 6e 20 74 2e 73 72 63 3d 65 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 72 29 7b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 3e 30 26 26 72 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 69 66 28 2d 31 21 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 65 5b 74 5d 29 29 7b 72 65 74 75 72 6e 21 30 7d 7d 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 69 66 28 65 28 29 2e 66 54 65 6e 61 6e 74 42 72 Data Ascii: getAttribute("nonce");r.setAttribute("nonce",n)}return r}function s(e,r){var t=g.createElement(r);return t.src=e,t}function d(e,r){if(e&&e.length>0&&r){for(var t=0;t<e.length;t++){if(-1!==r.indexOf(e[t])){return!0}}}return!1}function l(r){if(e().fTenantBr
2025-06-10 17:09:29 UTC	1460	OUT	GET /14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=e5cfa6a1%2De048%2D9000%2D00c3%2D6510b75557a4&sso_reload=true HTTP/1.1 host: login.microsoftonline.com sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" upgrade-insecure-requests: 1 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-fetch-site: same-origin sec-fetch-mode: navigate sec-fetch-dest: document referer: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&respon
2025-06-10 17:09:29 UTC	1460	IN	HTTP/1.1 200 OK cache-control: no-store, no-cache pragma: no-cache content-type: text/html; charset=utf-8 expires: -1 strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff x-frame-options: DENY link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch link: <https://aadcdn.msauth.net>; rel=preconnect; crossorigin,<https://aadcdn.msauth.net>; rel=dns-prefetch,<https://aadcdn.msftauth.net>; rel=dns-prefetch x-dns-prefetch-control: on p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: d82992c0-e549-4915-930a-6138baf7d500 x-ms-ests-server: 2.1.20899.4 - NCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+bno"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-security-policy-report-only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-GJcV1AkN_Iiqbrj1_Vp2AQ' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://*.outlook.com https:
2025-06-10 17:09:44 UTC	1460	OUT	POST /common/GetCredentialType?mkt=en-US HTTP/1.1 host: login.microsoftonline.com content-length: 1759 sec-ch-ua-platform: "Windows" hpgid: 1104 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" hpgact: 1800 canary: PAQABDgEAAABVrSpeuWamRam2jAF1XRQE9K_ZVXZcFFhHUZOu1av1ho7EQZy7p2m75jVMNbRxGKrbUWnNQgBJ0c7cuyZTu5Zej0G9Sh0KA1YhNQPv-buRt_FCm_h2oy5vRqLROFJd1XMeglaehGSXScSBScunay9cXay9sLUH3BDNy7s2rzkZJzitLuCAfucws5Ehzg6Hyz13voPhvyJv_hhQdWCUDD5ivjG0Jccj5Tstqa3WZAHY2SAA sec-ch-ua-mobile: ?0 client-request-id: e5cfa6a1-e048-9000-00c3-6510b75557a4 user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: application/json hpgrequestid: d82992c0-e549-4915-930a-6138baf7d500 content-type: application/json; charset=UTF-8 origin: https://login.microsoftonline.com sec-fetch-site: same-origin sec-fetch-mode: cors sec-fetch-dest: empty referer: https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CE2E5519F6C3FEFFB0ACFF29F2CEB805DEB5FB86ED78C639%2D19A748356579EB0DD834B8DD2337F923A05B9C03231BB41FEBA67846D6C4BA12&redirect%5Furi=https%3A%2F%2Fgoldstonemanagment%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD
2025-06-10 17:09:44 UTC	1460	IN	HTTP/1.1 200 OK cache-control: no-store, no-cache pragma: no-cache content-type: application/json; charset=utf-8 expires: -1 strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" client-request-id: e5cfa6a1-e048-9000-00c3-6510b75557a4 x-ms-request-id: cee8c366-7459-458f-92d0-5a48e4a43e00 x-ms-ests-server: 2.1.20899.4 - NCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+bno"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-security-policy-report-only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-m52KM8gBtYpgcfdBQINIvg' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All x-xss-protection: 0 set-cookie: fpc=AsEr7rtG_vJGmnZ5g8rTo0GEDnIxAQAAAMld2t8OAAAA; expires=Thu, 10-Jul-2025 17:09:44 GMT; path=/; secure; HttpOnly; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.24	49710	23.216.132.21	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:29 UTC	618	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_bazYuVH6rF7OQmuNhACwPg2.js HTTP/1.1 host: aadcdn.msftauth.net origin: https://login.microsoftonline.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: script referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:29 UTC	629	IN	HTTP/1.1 200 OK content-type: application/x-javascript content-md5: OE7vSVlIO0DM/xjIsmm3lA== last-modified: Wed, 26 Mar 2025 20:12:16 GMT etag: "0x8DD6CA28167B527" x-ms-request-id: 008e1526-a01e-0026-7ea1-9f1cd6000000 x-ms-version: 2018-03-28 access-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version access-control-allow-origin: * vary: Accept-Encoding cache-control: public, max-age=25100065 date: Tue, 10 Jun 2025 17:09:29 GMT akamai-grn: 0.9c85d817.1749575369.65f7877 content-length: 142656
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 72 72 6f 72 28 22 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 20 2d 20 77 68 61 74 20 69 73 20 74 72 79 69 6e 67 20 74 6f 20 62 65 20 62 6f 75 6e 64 20 69 73 20 6e 6f 74 20 63 61 6c 6c 61 62 6c 65 22 29 3b 76 61 72 20 74 3d 6e 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 72 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 74 68 69 73 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3d 72 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 2e 61 70 70 6c 79 28 69 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 29 3f 74 68 69 73 3a 65 2c 74 29 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: rror("Function.prototype.bind - what is trying to be bound is not callable");var t=n.call(arguments,1),r=t.length,o=this,i=function(){},a=function(){return t.length=r,t.push.apply(t,arguments),o.apply(i.prototype.isPrototypeOf(this)?this:e,t)};return this
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 6f 28 61 29 7d 29 2c 30 29 7d 29 29 3a 65 2e 72 65 73 6f 6c 76 65 28 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 29 7d 7d 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 2c 21 30 29 7d 2c 65 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 2c 21 31 29 7d 2c 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 69 66 28 74 26 26 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 69 3d 30 2c 61 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 2b 2b 69 29 7b 76 61 72 20 73 3d 74 5b 69 5d 3b 73 20 69 6e 73 74 61 6e Data Ascii: o(a)}),0)})):e.resolve([])}function r(e,t){return function(){e(t)}}e.all=function(e){return n(e,!0)},e.allSettled=function(e){return n(e,!1)},e.race=function(t){return new e((function(n,o){if(t&&t.length)for(var i=0,a=t.length;i<a;++i){var s=t[i];s instan
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 69 6e 67 20 63 68 75 6e 6b 20 22 2b 65 2b 22 20 66 61 69 6c 65 64 20 61 66 74 65 72 20 22 2b 28 75 2b 31 29 2b 22 20 74 72 69 65 73 2e 5c 6e 28 22 2b 6c 2b 22 3a 20 22 2b 70 2b 22 29 22 2c 63 2e 6e 61 6d 65 3d 22 43 68 75 6e 6b 4c 6f 61 64 45 72 72 6f 72 22 2c 63 2e 74 79 70 65 3d 6c 2c 63 2e 72 65 71 75 65 73 74 3d 70 2c 61 5b 31 5d 28 63 29 2c 6f 5b 65 5d 3d 75 6e 64 65 66 69 6e 65 64 2c 53 52 53 52 65 74 72 79 26 26 28 77 69 6e 64 6f 77 2e 65 78 74 65 72 6e 61 6c 2e 6e 6f 74 69 66 79 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 74 79 70 65 3a 22 69 6e 76 6f 6b 65 22 2c 76 61 6c 75 65 3a 7b 6e 61 6d 65 3a 22 43 6c 6f 75 64 45 78 70 65 72 69 65 6e 63 65 48 6f 73 74 2e 54 65 6c 65 6d 65 74 72 79 2e 6c 6f 67 45 76 65 6e 74 22 2c 61 72 67 73 3a 5b 22 Data Ascii: ing chunk "+e+" failed after "+(u+1)+" tries.\n("+l+": "+p+")",c.name="ChunkLoadError",c.type=l,c.request=p,a[1](c),o[e]=undefined,SRSRetry&&(window.external.notify(JSON.stringify({type:"invoke",value:{name:"CloudExperienceHost.Telemetry.logEvent",args:["
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 20 65 29 69 2e 64 28 6e 2c 72 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 69 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 5b 22 64 65 66 61 75 6c 74 22 5d 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 69 2e 64 28 74 2c 22 61 22 2c 74 29 2c 74 7d 2c 69 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 2e 6f 65 3d 66 Data Ascii: e)i.d(n,r,function(t){return e[t]}.bind(null,r));return n},i.n=function(e){var t=e&&e.__esModule?function(){return e["default"]}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i.oe=f
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 69 66 28 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 28 6f 3d 3d 3d 74 7c 7c 6e 26 26 6f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 72 29 29 72 65 74 75 72 6e 20 6f 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 65 78 74 65 6e 64 3a 6f 2e 75 74 69 6c 73 2e 65 78 74 65 6e 64 7d 2c 63 3d 74 2e 53 74 72 69 6e 67 3d 7b 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2b 7c 5c 73 2b 24 2f 67 2c 22 22 29 7d 2c 66 69 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 65 3f 6e 3f 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 29 3a 65 2e 69 6e 64 65 78 4f 66 28 74 2c 72 Data Ascii: if(e.hasOwnProperty(o)&&(o===t\|\|n&&o.toLowerCase()===r))return o;return null},extend:o.utils.extend},c=t.String={trim:function(e){return e.replace(/^\s+\|\s+$/g,"")},find:function(e,t,n,r){return e?n?e.toLowerCase().indexOf(t.toLowerCase(),r):e.indexOf(t,r
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 29 7b 76 61 72 20 6e 3d 63 2e 65 78 74 72 61 63 74 4f 72 69 67 69 6e 46 72 6f 6d 55 72 6c 28 65 29 3b 72 65 74 75 72 6e 20 63 2e 65 78 74 72 61 63 74 4f 72 69 67 69 6e 46 72 6f 6d 55 72 6c 28 74 29 3d 3d 3d 6e 7d 2c 63 61 70 46 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 6c 69 63 65 28 31 29 7d 2c 63 6c 65 61 6e 73 65 55 73 65 72 6e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 22 22 3b 69 66 28 65 3d 63 2e 74 72 69 6d 28 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 21 63 2e 69 73 45 6d 61 69 6c 41 64 64 72 65 73 73 28 65 29 26 26 21 63 2e 69 73 53 6b 79 70 65 4e 61 6d 65 28 65 29 26 26 63 2e Data Ascii: ){var n=c.extractOriginFromUrl(e);return c.extractOriginFromUrl(t)===n},capFirst:function(e){return e.charAt(0).toUpperCase()+e.slice(1)},cleanseUsername:function(e,t){if(!e)return"";if(e=c.trim(e).toLowerCase(),!c.isEmailAddress(e)&&!c.isSkypeName(e)&&c.
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 29 28 65 29 7d 76 61 72 20 6f 3d 6e 28 31 36 29 2c 69 3d 6e 28 30 29 2c 61 3d 6e 28 32 29 2c 73 3d 6e 28 38 29 2c 75 3d 69 2e 4f 62 6a 65 63 74 2c 63 3d 69 2e 53 74 72 69 6e 67 2c 6c 3d 69 2e 41 72 72 61 79 2c 64 3d 77 69 6e 64 6f 77 2c Data Ascii: &&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}var o=n(16),i=n(0),a=n(2),s=n(8),u=i.Object,c=i.String,l=i.Array,d=window,
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 69 73 45 64 67 65 43 6c 69 65 6e 74 42 72 6f 77 73 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 53 26 26 28 53 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 65 64 67 65 63 6c 69 65 6e 74 2f 22 29 3e 2d 31 29 2c 53 7d 2c 69 73 4f 6e 54 6f 75 63 68 53 74 61 72 74 45 76 65 6e 74 53 75 70 70 6f 72 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 2c 67 65 74 49 45 56 65 72 73 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 Data Ascii: isEdgeClientBrowser:function(){return null===S&&(S=navigator.userAgent.toLowerCase().indexOf("edgeclient/")>-1),S},isOnTouchStartEventSupported:function(){return"ontouchstart"in document.documentElement},getIEVersion:function(){var e=d.navigator.userAgent
2025-06-10 17:09:29 UTC	1460	IN	Data Raw: 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 4f 41 6e 69 6d 61 74 69 6f 6e 3a 22 6f 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 41 6e 69 6d 61 74 69 6f 6e 3a 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 57 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 3a 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 7d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 69 66 28 65 2e 73 74 79 6c 65 5b 6e 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 74 5b 6e 5d 3b 72 65 74 75 72 6e 22 22 7d 2c 69 73 53 74 61 63 6b 53 69 7a 65 47 72 65 61 74 65 72 54 68 61 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 5f 2e 67 65 74 53 74 61 63 6b 53 69 7a 65 28 65 29 3e 65 7d 2c 69 73 53 76 67 49 6d 67 53 75 70 70 6f 72 74 65 64 Data Ascii: imationend",OAnimation:"oAnimationEnd",MozAnimation:"animationend",WebkitAnimation:"webkitAnimationEnd"};for(var n in t)if(e.style[n]!==undefined)return t[n];return""},isStackSizeGreaterThan:function(e){return e=e\|\|0,_.getStackSize(e)>e},isSvgImgSupported

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.24	49712	13.107.246.40	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:30 UTC	637	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l8i1wwom7wbodda4l9b6dw2.js HTTP/1.1 host: aadcdn.msauth.net origin: https://login.microsoftonline.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: script referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:30 UTC	799	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:30 GMT content-type: application/x-javascript content-length: 16714 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Thu, 27 Mar 2025 19:08:48 GMT etag: 0x8DD6D62CDCA7C7B x-ms-request-id: 57a5f65e-d01e-0044-131f-da76c4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170930Z-r1698f64d9cfnpv4hC1TEBfmfn00000006u000000000n7t0 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT x-cache-info: L1_T2 accept-ranges: bytes
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 ec 0c 9f 7a 20 7c f0 13 23 cc 18 04 c1 19 bc 21 01 08 00 67 a4 90 64 44 13 28 80 bd 04 ba f1 ba 1b c3 e1 52 e3 d8 9b 0f ef e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 9e 7f 87 f3 a3 aa ba aa bb 01 90 23 ad f4 9e 15 8a 21 ba bb 3e b2 b2 b2 b2 32 b3 32 b3 fe 30 5b fb 93 d8 0b fc e7 62 ef 41 fd 2e 04 cf fd bd 07 6f f6 dc fb c1 ff 69 2f 14 f1 3a f4 0b f8 bb 24 3e ad 82 30 8e 5e 7e 74 c3 42 d8 c0 57 8d 07 f9 ae fe f0 d9 f1 a6 75 df 59 04 ee 54 4c eb 7f a8 7c 7e 29 ab 0a ac 3a 71 17 8b e7 a1 6a c1 09 9d e4 77 b0 07 0f 5c ad f1 87 72 f2 e1 33 76 e3 35 1e 74 43 41 69 d9 10 4e 50 9a 34 3c f8 77 d5 28 16 9d e0 79 79 ef f3 f3 1f 92 61 38 81 e3 01 f0 cf 2b 7b 04 a5 df f0 9e 57 a1 7d f8 b3 bf e7 c4 f0 e7 Data Ascii: }Ms#Guz \|#!gdD(R}'}?e##!>220[bA.oi/:$>0^~tBWuYTL\|~):qjw\r3v5tCAiNP4<w(yya8+{W}
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: c7 8b de 05 20 fc f9 42 bc 00 02 03 fd 61 2a 36 54 67 5e de 7d a3 1a 61 84 e1 6e 01 4d 81 c2 e9 a6 87 ce 15 48 38 b6 bb 9d 85 40 af 36 e3 ce 19 d9 d5 6a 7c 29 fc 35 57 55 2a a4 bf 61 6e 98 3b 75 fc 8f ee c2 9b d2 d2 51 94 af 08 c4 2d d0 37 9b fe be 80 f1 98 1d 3d aa 0f b9 80 0a fe 7a 79 2d c2 64 1d 15 b0 66 e9 e9 3c 2a 17 80 8d 5c 64 1b 5c 19 ce 25 61 2c e9 15 9b 5b 31 a7 f8 df 07 42 93 eb ed 80 09 f6 ad cd 30 28 4e d2 28 8e 4c 2e 81 52 8f 3f 09 c2 10 84 a1 ec ce 54 ca a5 b0 37 22 06 52 24 42 71 17 68 70 a1 d7 d4 30 c8 2e 77 2e ca d4 d0 70 b4 46 51 24 b8 c5 1d 72 bd 62 c6 a7 f6 f6 c2 c8 5d 15 70 99 92 b4 b9 b3 bb 9e 0f 3b fc 12 34 ca e9 96 be 26 b8 3c b0 33 97 56 30 31 40 29 ea 03 02 9f d4 e5 39 cc d1 28 b8 15 7e fb d3 ca 83 a1 e2 66 1f 86 f7 0e 0f 02 f9 Data Ascii: Ba6Tg^}anMH8@6j\|)5WUan;uQ-7=zy-df<*\d\%a,[1B0(N(L.R?T7"R$Bqhp0.w.pFQ$rb]p;4&<3V01@)9(~f
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: 48 89 26 87 d0 1d 35 5e da c7 48 ab 9e 7b be 31 66 73 b5 fc 0a e3 fd dd a6 e9 f7 41 c3 9b 35 ac 45 7b cc 99 b9 ff 7d 99 e9 6f 83 17 ff d6 0f ee fc 2c f1 cb cd ec c7 2f d8 cd 7e 97 09 8d f8 30 aa 17 27 14 fc 8b e5 46 a9 64 93 5a e1 f9 1f bd 98 55 f5 3f 07 68 64 f2 ad f9 d7 a3 8a 84 3f ed c5 13 b4 f5 e7 8c 49 6e 6a 30 c5 2f d0 ee c8 2a 68 84 c4 02 ed 26 87 4a bf 60 d8 e6 1c fe 1b 47 c0 6f 42 47 54 0b 11 06 04 3d ee f9 8b 7b c0 9f a2 a0 1d a2 49 be fc 61 08 28 1a e4 8c 5a 91 16 52 9e c0 ac 40 ce ac 7c 96 50 5d 0b f6 77 99 ac 43 e4 38 0b e4 d1 13 17 f5 5e 6d ff 5a b9 21 70 a0 59 7a ba ec 53 02 69 ef 4d 6b 95 e7 6d a9 f0 dc b8 fe 9c b4 61 e3 bc d0 56 7d b3 c7 8d f2 cc fd 3c 08 27 02 84 a0 8e 3f 0b 1a c5 53 09 9e f4 bd 62 e7 1d 14 7c 80 04 22 d0 1c 3f 22 9d cd Data Ascii: H&5^H{1fsA5E{}o,/~0'FdZU?hd?Inj0/*h&J`GoBGT={Ia(ZR@\|P]wC8^mZ!pYzSiMkmaV}<'?Sb\|"?"
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: 7a d3 b1 a0 ca c1 23 c7 05 3b 5d d5 82 e2 3c 40 23 1f fb 1c c2 94 86 6b 0a 2a 8e 72 db 33 24 36 d8 47 d9 67 57 ae 7a a5 66 a4 c0 95 8b 6b c4 3c 74 0b 8a 52 05 2d 10 fb 21 ae 8f 58 7a 8b 32 09 4d 02 0c 93 90 71 41 c8 a2 a5 95 49 62 cd da ee 72 7b b2 f9 a5 d5 85 d8 08 9e ac b4 6b 1a 57 dc 9a 36 b7 18 b4 93 02 66 b8 a6 fd 48 07 e1 f0 e3 6c 8d be a9 1f 65 ad fc 1a 16 0c 86 c2 9c 68 c5 0a 74 41 d1 b0 ba 8b 1b 74 24 b5 e8 39 09 1f cc af 69 75 45 4c 10 a9 65 db 56 40 5e a8 e8 d7 65 10 32 f1 30 ea dc 60 d7 d0 bf 01 48 9a 7a 06 bc a8 75 cc 84 7c 26 2f 01 58 95 5d 61 fa d4 13 51 bd ce e3 46 09 1f ca 68 0b 2e da 86 35 d7 2d b8 31 db ef 90 a0 52 ae 3f 8a 8b 10 c1 af 18 33 56 65 00 be fe fc 97 75 6f ef 59 b9 c0 64 b4 19 63 13 21 8c fe da bd ec a5 ba b9 18 66 f7 61 59 Data Ascii: z#;]<@#k*r3$6GgWzfk<tR-!Xz2MqAIbr{kW6fHlehtAt$9iuELeV@^e20`Hzu\|&/X]aQFh.5-1R?3VeuoYdc!faY
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: c8 e1 9d c6 44 3c 41 36 04 83 89 b5 73 ad 8c bc c2 81 48 ce a3 3c d7 13 74 a1 b0 87 8b 25 98 7e 09 a5 fc 9d a1 ce 5a 21 32 73 50 2a 34 17 31 6a 1c e8 8a be b8 cf f3 e8 21 e6 8d 91 e6 bf 02 65 fd c6 03 d6 c7 f1 44 6d fe 46 6b 75 10 fe 72 dc ec e5 21 c7 e2 f5 8f d5 b7 0b 1b f5 67 3a 46 cd fa 69 e8 3e 01 07 4d 5c 72 fa 34 50 2f c2 fc 9d 0d a6 eb 1c 14 1d 90 40 fe f6 d7 7f 36 a5 88 e4 00 a2 20 5d 62 11 83 f8 88 de fa 96 c4 95 a7 98 9a db 92 8a ca 21 a4 61 2b b9 2e 98 59 c0 74 60 cd bf 32 d0 64 14 1c 49 5d 37 2e 9a 63 41 7a b8 5e 88 a5 c5 16 58 6f 7e 84 fc ab 7c 59 71 9e 5d f2 b4 1f 51 3a 59 43 cd 51 63 53 09 67 64 0e 21 1c ec 65 de ee 8f 6d 57 5f 4c dc 15 39 a9 e6 8f 6b d4 b9 68 53 ff 2a ae 18 55 c2 54 a2 39 5d 86 2c 17 17 a4 46 a3 79 27 95 fa c5 ce ad a9 4e Data Ascii: D<A6sH<t%~Z!2sP41j!eDmFkur!g:Fi>M\r4P/@6 ]b!a+.Yt`2dI]7.cAz^Xo~\|Yq]Q:YCQcSgd!emW_L9khSUT9],Fy'N
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: 8e fa 00 22 2f fb 93 8a 75 da 56 bb bd 5c 2d 82 7b bc bc d0 8c aa 42 87 68 ed 68 a5 d2 0c 0b 59 94 a2 d9 e6 a0 80 f2 ae 89 56 79 cf 47 79 e4 11 dd 0d 01 f7 96 08 f1 36 58 4c ed 58 39 ba 94 41 fb 0e 64 8f 60 72 db 6d 51 69 65 50 c3 df 5b 07 8d 62 6a 37 e0 82 98 07 44 f5 36 95 46 82 6d 95 9b d3 29 57 b4 83 7f a7 64 de d0 40 1b d9 ba d1 3a 3b 0f 31 56 06 54 de 25 66 5c 67 b7 35 0a 49 93 a3 8e 74 68 28 d7 a1 c3 5e b2 55 46 5b c7 cd 99 bf 3d df e2 25 fd 4e 77 5b 1d f8 69 ad cc 1d c5 09 59 f2 6a 22 cf d7 37 12 a9 9e 5e eb c0 b4 9d 09 0a 36 37 2f 93 74 f0 47 90 2b f9 51 07 9d fe 1a 5d c0 f3 15 5d 93 d0 28 f2 df 47 e1 ca ae 7a ee 85 18 d2 f6 bd 91 05 6d 6d b7 a5 33 bd a9 03 2f 24 e5 19 56 63 a3 87 3a 2f cb 9e 17 c7 3a 29 00 34 b3 75 38 c6 e4 b5 38 c3 1c d4 00 b2 Data Ascii: "/uV\-{BhhYVyGy6XLX9Ad`rmQieP[bj7D6Fm)Wd@:;1VT%f\g5Ith(^UF[=%Nw[iYj"7^67/tG+Q]](Gzmm3/$Vc:/:)4u88
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: fe bd 2b e2 b8 64 40 c1 67 cb 78 fd e2 a9 eb fb 78 f0 44 c3 92 ce 13 31 9d c3 e2 45 7a 74 41 23 a7 41 80 36 ef 81 a1 e0 45 db b2 0b 32 a8 a8 a4 7e 38 79 2e b0 e2 ff f3 df 4f ef d5 51 b0 3c 5a be 0e 41 77 50 47 9b d0 38 c7 4e bb f3 50 08 6d 24 26 bb 4c 7a b0 cb 68 32 d1 b1 8b c5 57 49 18 9c 1a 09 b9 6f be 1d 5d 5e b0 ff e6 50 90 59 99 65 8f 67 df 44 2b dc 49 a0 1d 98 68 f9 09 45 a2 22 bb ac e0 d7 57 b4 a7 19 b1 db 91 f2 c6 b6 8d d7 25 75 9f 47 d2 12 63 fe 4a 8d 2b 75 77 c6 2f bb ec e7 5f c5 15 3f b9 d0 d3 49 0e 6e 45 11 4a 9a 28 16 a9 f1 90 1e f1 d6 9b 0a cb 69 18 b1 f4 fa 69 f7 81 e7 de cd fe cc 62 bb 66 aa 82 4d c9 83 7f 34 9d 31 ac 4d dc 31 ef 5c ec 5c a4 b4 85 b2 81 17 96 00 3c 4e b9 4d 34 57 67 40 98 6f fd 7e 60 6c 74 12 7d b2 a3 a9 4a a5 cd e9 4e e9 Data Ascii: +d@gxxD1EztA#A6E2~8y.OQ<ZAwPG8NPm$&Lzh2WIo]^PYegD+IhE"W%uGcJ+uw/_?InEJ(iibfM41M1\\<NM4Wg@o~`lt}JN
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: fe ab 62 63 e6 2e 50 7e 0c 4a c0 40 fb 40 44 b0 2d 0a c3 de fd 2d 48 9a fe 6a 82 05 9a be c7 e0 cb c0 9d c6 51 99 20 80 55 31 5c 2f 97 6e 78 ff 5e 84 68 9d 69 54 e0 f5 9b b5 37 55 9a 51 a3 f8 49 fe f7 82 fe d9 c7 7f ee d5 a3 fa 0f fb 80 0d 3a 98 5d ad 5a a8 cb 2f a8 b3 ce 14 64 4e 77 c9 7e b8 9f 5e 2c a3 17 93 e4 e3 0b 8f 8e a5 07 62 2e 3e 35 1e 0c 6c bf 47 ab 3d 15 a9 7f fd 1f 7f 28 bf 38 29 3c df fb e1 c7 9f 4a 3f be f8 e3 3f fc f8 f5 57 3f 7d f5 ef bf fe 8c b0 73 77 ea b6 80 0b 97 82 95 51 71 68 3c 48 8b 75 0b e4 dc 30 58 e2 06 5f af 38 1c cd c9 46 a8 7a 15 9b a0 b3 4b 12 77 1e ba d0 7d bd ec d0 1b 28 4b b1 94 88 49 3c 67 a9 d7 9c 8b 0f 4d cc fc 00 78 ad ef 3b 94 7e c9 9b d0 1e 56 3f 70 8c b8 cb fa a1 d3 1b 0d eb 47 ce db 4e 9f 33 66 d6 8f e5 ef c9 2d Data Ascii: bc.P~J@@D--HjQ U1\/nx^hiT7UQI:]Z/dNw~^,b.>5lG=(8)<J??W?}swQqh<Hu0X_8FzKw}(KI<gMx;~V?pGN3f-
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: e0 1e 64 ac 93 d3 07 72 a4 d9 a4 da df 41 86 1c 0a f1 36 b8 3b 73 63 b7 13 5d 02 7a e7 c0 50 41 76 54 41 e9 52 ef 8f ae 56 91 58 2c 50 74 cc ff c2 fe 35 28 3b e6 7f 07 ac 05 d2 67 18 e5 c8 0f e2 9a dd f0 4e 43 6f 3a 17 28 3d 5a d4 09 0c 61 81 46 16 da 8e 8e 70 fc 69 ff 40 89 57 10 2b 0d 36 ab 8a a1 78 49 3c 16 97 46 c2 16 41 bc d4 6f a5 8b 23 0a 96 c6 fd 0e e6 d5 17 34 a3 20 59 4a 9c 0d 64 be 7c 24 09 14 2a ad fd 13 44 ca f7 2d f3 5a c2 fa 71 cd 49 22 58 ea c7 fb c6 f6 7a 7c 90 37 6d 09 67 3f a4 8d 07 b6 40 de bf 34 5b 04 ae 2e af 9a 22 d5 19 f6 f8 b7 cd 0a 32 6a 53 7e 32 35 23 b4 00 21 ef 35 94 7b e4 6a b2 3d b6 20 22 4f 4e b6 a6 2a ce 2f 2d 9b a6 bc ba 16 99 31 7d a9 39 bd 78 d2 0d 12 26 bd 6f 53 a5 f4 ab 54 29 ee 91 3b 93 6a 7e 24 59 ff b1 9e 61 12 cf Data Ascii: drA6;sc]zPAvTARVX,Pt5(;gNCo:(=ZaFpi@W+6xI<FAo#4 YJd\|$D-ZqI"Xz\|7mg?@4[."2jS~25#!5{j= "ON/-1}9x&oST);j~$Ya
2025-06-10 17:09:30 UTC	1460	IN	Data Raw: 72 6b 5d 7e c7 2b 07 88 cc da 32 80 6e 52 0c 2c 6f a3 da b7 98 d5 f8 b2 d9 05 a2 6f b6 de 22 5b 19 a2 fc 27 a9 ab 59 d6 cb 98 86 78 de 6c b5 69 97 3a bd 48 56 c7 be 9a 31 c0 55 af d5 81 c9 1c 9f 5d f5 2f 68 5a c7 cd 56 ab 77 d5 55 44 78 90 2c 59 5a f2 83 f6 25 6c dd 88 f2 6e 1b 43 71 40 1d 20 e1 5f ef a0 bd d4 ae 71 74 dc 52 44 c5 84 de ed f5 9b 5c 4f 4d 15 34 fa ed 15 08 ed 49 0d 45 01 9d b3 3e cc 5b 17 76 7c a8 78 da e9 9e 61 0f 80 c0 71 6a d3 3d 3b 30 2a bc e9 f5 de c0 a4 6c 2b 7e 68 16 ef 8c de 5e 9d 6e 2d 7e 64 14 57 e5 48 7c 01 1e de bc 1c 5e a9 b5 b6 7f 50 53 90 8f 06 cd ee f0 9c b6 5c 50 69 12 2e c0 93 a5 90 db 2c 93 4a d0 8e e2 48 0a d8 14 db c4 f6 0b 6d 07 53 42 59 b1 72 58 c6 9d 10 cb 5c 19 89 32 ea c5 03 10 a2 cb d9 0f cd 95 27 cf d8 93 08 42 Data Ascii: rk]~+2nR,oo"['Yxli:HV1U]/hZVwUDx,YZ%lnCq@ _qtRD\OM4IE>[v\|xaqj=;0*l+~h^n-~dWH\|^PS\Pi.,JHmSBYrX\2'B
2025-06-10 17:09:30 UTC	641	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 host: aadcdn.msauth.net origin: https://login.microsoftonline.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: text/css,/;q=0.1 sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: style referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=0
2025-06-10 17:09:30 UTC	784	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:30 GMT content-type: text/css content-length: 20410 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Fri, 08 Nov 2024 04:59:25 GMT etag: 0x8DCFFB21E496F3A x-ms-request-id: 4b00bf50-c01e-003a-0cd5-d9e683000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170930Z-r1698f64d9cfnpv4hC1TEBfmfn00000006u000000000n7sz x-fd-int-roxy-purgeid: 0 x-cache-info: L2_T2 x-cache: TCP_REMOTE_HIT accept-ranges: bytes
2025-06-10 17:09:30 UTC	618	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_k4QdCmHtAxG2-1HsSIy8zw2.js HTTP/1.1 host: aadcdn.msauth.net origin: https://login.microsoftonline.com sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: cors sec-fetch-dest: script referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1
2025-06-10 17:09:30 UTC	794	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:30 GMT content-type: application/x-javascript content-length: 124082 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Sat, 26 Apr 2025 05:11:54 GMT etag: 0x8DD8480DC53597A x-ms-request-id: f13a2cca-901e-002c-2013-da5846000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170930Z-r1698f64d9cfnpv4hC1TEBfmfn00000006u000000000n7t1 x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.24	49715	13.107.246.40	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:31 UTC	579	OUT	GET /shared/1.0/content/js/oneDs_486f0cce3c3db211da28.js HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-06-10 17:09:31 UTC	793	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:31 GMT content-type: application/x-javascript content-length: 61051 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Thu, 10 Apr 2025 15:11:59 GMT etag: 0x8DD78420A4E63AC x-ms-request-id: cb76689e-501e-0023-0752-d92e2a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170931Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f24b x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 4e a3 d1 63 2a b4 b7 be 8c 4f d2 6b fe 08 8e 6b 5c 9d e9 a1 86 4e 16 b2 3d ad ad d3 ca fc 8f 9d 95 a4 32 f7 63 27 c6 66 3f 38 c2 ef 55 93 bc 03 87 9e 0a c8 8b ea 93 dc 81 43 d5 27 3c bb 84 7e 14 78 ce c9 a7 51 cd d6 79 e0 d0 5f b1 f0 8f 93 18 10 79 79 be 5f 5d 29 da 19 ac e6 03 7e 89 5d ce b8 18 fb ba 49 8b 16 ea 7b 9a 88 77 91 50 89 09 97 18 26 85 13 35 e3 fe be a2 7a ba 52 d8 07 da 5a c3 ce bd 73 f2 4c a3 2c 7f 44 96 2b 87 a4 c0 1e 12 8f 28 53 0d 23 ff ce 59 37 32 c3 e1 34 4a 6a e1 79 4d 05 4b 5b 75 e9 64 82 dd 67 3a e6 a3 f7 e3 a8 9a 00 bf 73 08 0f 71 60 c5 c3 75 d8 d4 03 76 da d1 a7 17 c3 87 33 9d 97 7b 33 e3 e2 50 5a 43 82 c7 25 41 cb b2 3b a7 71 e9 6c 7c 1c 27 c5 1b 92 21 2d df 13 c7 65 ee f9 88 27 51 52 d4 cc c8 d8 a1 46 b9 bc 4b 59 2a cc 1c 3b 2c Data Ascii: NcOkk\N=2c'f?8UC'<~xQy_yy_])~]I{wP&5zRZsL,D+(S#Y724JjyMK[udg:sq`uv3{3PZC%A;ql\|'!-e'QRFKY;,
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 1e a5 82 41 51 53 8e df 92 b7 7a 9f 48 60 7a 00 41 f8 49 72 da 8c 47 80 93 45 a0 e9 43 3e a5 fd 27 61 ed e0 a4 75 aa 18 21 ac 61 0e 1f 65 43 49 74 61 11 3d 20 88 b9 68 cc 45 18 d3 e8 26 58 09 1b c2 be 71 b1 16 7a cf 7c 6f 6d b8 e6 05 9e e0 eb 60 e5 ae 79 77 de 5a b6 e6 cd bd 6e b6 b6 46 a9 23 76 ce ae d9 34 bc e3 d7 45 87 ba 54 4c 3a 80 04 2c 1e 75 60 ff cc 0f 60 02 81 99 ef ac b4 e1 65 e3 9c 24 8f f0 32 57 6d 9c 36 21 63 58 f4 fc 51 38 85 bd bd 80 7d 1d f1 e6 d2 2f 71 6d 62 40 a0 e0 67 e7 cd 62 02 fb f3 39 0c 42 37 f2 3d 18 fd 0b 1c 7d 20 ae 37 11 30 47 c9 65 03 06 b0 71 42 0d ed 40 9f d6 bc c6 24 3f 6d 14 29 b0 39 28 14 28 38 f0 40 00 82 4a a1 51 46 19 9e 3d 43 f8 2f 72 a4 b1 34 55 54 94 8c f0 d3 c4 fa 94 89 1e 79 c0 a3 36 23 ec 90 b3 8f a8 34 1a 8a d4 Data Ascii: AQSzH`zAIrGEC>'au!aeCIta= hE&Xqz\|om`ywZnF#v4ETL:,u``e$2Wm6!cXQ8}/qmb@gb9B7=} 70GeqB@$?m)9((8@JQF=C/r4UTy6#4
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 09 95 f9 a6 fd c3 3a 2c 3e fc 59 cd 25 22 8e c2 67 f0 fe 62 35 27 b4 87 cd 66 c5 9e 54 85 76 f7 f7 6d a0 58 a3 d5 d5 75 f1 f3 42 fc e0 32 5e 91 ab d9 5d b7 82 22 a2 30 2f bf bf 5f 17 3f 2f c4 8f 4d 02 f2 a0 87 2b 41 60 55 07 17 1c 72 2d 2a 29 eb a1 8a 5a 33 a7 05 1f 5f 00 89 09 3a 49 20 17 a8 42 5b e0 c9 11 36 67 33 18 b9 b9 dd 04 98 4d b5 b0 1f 31 a1 0f cd de 83 13 e2 0c 5c 22 07 6e 61 7a 86 ee bc 48 30 b5 fb e3 16 32 ec 21 70 47 75 6c 48 cd 9d 9b 5d 5b 5d 26 21 b1 0a a1 14 b1 01 f7 f1 9a e4 45 c0 0e f1 f7 55 c0 76 f1 ba 04 7e 6f e0 f7 35 70 79 fb f8 bb 1e b0 0d fc fe 43 c0 be e2 77 80 3f c3 77 f8 fe 0d bf 03 a7 bc 85 b7 32 2f 03 76 80 e9 00 bf 8d ef 00 bf 83 bf 50 de 31 fe be 09 d8 af 98 1f e0 de a3 cc 07 f2 bd 43 f8 97 b0 06 dd 91 ae 34 af d4 d7 40 2f Data Ascii: :,>Y%"gb5'fTvmXuB2^]"0/_?/M+A`Ur-*)Z3_:I B[6g3M1\"nazH02!pGulH][]&!EUv~o5pyCw?w2/vP1C4@/
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 64 7b f0 33 42 b4 35 04 26 d8 00 07 7d a4 aa 6d 5a 86 56 8a 9c 6c 6c 77 9b 56 de a6 6e 6f 7f 67 63 80 a9 88 1c f4 ac 17 f6 ce f1 2e 8e 5a 7b fd 95 58 d3 e2 dd ae ed 3d 6c 89 48 d1 d6 5f eb ea 44 92 9c 9c 3d dc a7 68 05 e3 a3 cc 79 7c f0 6b ff 77 bd a6 da b4 7c dd 44 1b 50 23 55 fb e5 ba 06 74 71 0a 7a 08 db 02 ee 22 83 4d 49 97 5f be 20 5c 2d a5 db e0 07 7d c4 16 80 7c a9 21 45 92 53 b9 21 82 ed 97 af 4c f5 0b 44 10 68 ff 26 c0 10 91 91 6f aa b2 0f b0 12 0f a8 7a d3 67 22 34 55 9f 16 33 99 fe 13 f5 a9 fa a4 26 17 69 e8 e1 f1 3b e0 54 06 fb 62 18 5e 8b a9 2e 7f 50 b5 ec f6 3f 95 e0 c5 60 94 d2 15 a5 d8 d8 fd d0 2f c1 0b a2 51 fe 50 d1 0b 6b 20 5f bf 2e f7 a3 3c 9c 1f 21 59 8f 15 91 4b 3b c9 00 f5 81 01 68 13 c5 94 6f 92 1a 1f e0 d2 81 f5 75 bc 0f 9b 1c 6d Data Ascii: d{3B5&}mZVllwVnogc.Z{X=lH_D=hy\|kw\|DP#Utqz"MI_ \-}\|!ES!LDh&ozg"4U3&i;Tb^.P?`/QPk _.<!YK;houm
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 26 1d ad 96 b7 56 74 d6 dd 34 4c 2a a0 59 89 4c 7a bb 4e 89 49 07 09 78 e6 26 66 9d 8c f9 d1 8f ad 5e 84 9a 51 1d 0f 96 16 6c 91 b1 0b 14 77 e2 80 b4 f2 b5 6e 7e 13 ea 30 83 b7 af f4 37 50 e7 54 e2 78 ac 75 ff 0e 95 2e a0 ef 1d 0e b3 78 5a 34 38 2a 48 36 69 6a 60 49 db 89 94 26 ec 4d 36 a4 ca c3 57 b5 90 37 70 e3 b8 43 3f 4d e3 43 58 07 40 d2 3b 2d 26 6f 15 55 42 7b 8e ba 13 be 93 63 63 00 70 1b 83 b3 8d dd ad b3 4f 2f 36 3b 6d 86 7f d7 01 52 a0 0f 6a 59 88 27 83 66 5b 88 0e 68 c8 63 14 c5 0e 51 a3 44 3e 8f c8 64 65 51 8d a4 b0 71 df 20 1d cc 85 26 46 97 30 16 d0 c9 af 4d bb 23 3d 6f 6c bd c1 18 e7 4e b7 3c bc 44 05 82 3d 28 f8 c4 2f 98 d1 5b c0 f5 25 12 83 15 40 01 32 ee 6c 0a 85 6e 99 cc 56 b4 5e 53 62 19 28 da 0a 39 ba d3 07 96 63 1c 3f e8 6d f9 5f 9b Data Ascii: &Vt4LYLzNIx&f^Qlwn~07PTxu.xZ48H6ij`I&M6W7pC?MCX@;-&oUB{ccpO/6;mRjY'f[hcQD>deQq &F0M#=olN<D=(/[%@2lnV^Sb(9c?m_
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 8c f8 f3 03 a8 e3 91 d8 43 28 13 ad 41 cc 9c 41 ac 1c 2e 89 44 68 b2 06 83 23 18 c0 36 1b a6 b3 a4 40 74 8a 13 fc 1b 7d 83 bf 79 31 da e2 d7 30 68 a2 a7 98 23 84 97 f8 c1 89 42 9b 38 e1 a6 67 e9 84 a1 9a 74 5e c2 67 7b 82 94 46 38 2c fa 8c 77 51 b2 0f 6d 0c b3 1f 5b bd ac 23 b8 6f 06 e3 1f 7d 0b 85 14 2c 42 6b 26 12 a6 85 51 4f 7c ef 44 08 11 27 12 22 36 10 b1 82 88 d9 03 6b 24 97 b6 5c 09 3c 89 11 91 a5 a5 a6 b4 54 95 96 2a a4 a0 be 85 27 f9 69 25 f2 0c eb 90 67 f6 97 50 04 2b 2d 63 08 a6 59 08 12 3d 6a f2 1e a6 42 2d 36 cb 70 71 8d 66 19 b5 a4 b4 ce 4a 64 09 bd 74 54 d0 a6 18 36 3d 1f 09 b1 78 9d e1 6e 6b 51 a0 a5 d3 22 e6 20 83 2f 62 a9 a9 86 84 37 90 58 bd 64 e3 ba 51 8f fe c2 a8 e3 4d cd 75 cc 6f dc 71 57 a9 d6 c8 a7 ff 8b 23 cf b3 8b a3 b4 88 30 39 Data Ascii: C(AA.Dh#6@t}y10h#B8gt^g{F8,wQm[#o},Bk&QO\|D'"6k$\<T*'i%gP+-cY=jB-6pqfJdtT6=xnkQ" /b7XdQMuoqW#09
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 37 fa 72 c5 89 43 f9 74 e9 ee 54 b3 2f a1 30 83 a5 b3 02 95 07 e1 49 75 c1 11 42 da fd 27 51 9a f8 a5 d0 27 23 91 ba 3e 47 96 e3 d1 1b 93 5d a2 da 8f 54 d5 cb 76 a3 80 fa 60 c6 59 3f ba a2 ce 42 3d c9 c3 2c cd 90 e4 e2 e5 4e 61 da 8e 0b c4 bc 99 cd c4 99 f5 c2 79 35 8c 21 2c 48 58 85 c0 81 64 e4 11 54 f7 36 0d 84 38 07 55 be 88 98 11 6d 53 72 56 dd 01 14 2e 8c d0 1b 72 9d 80 c1 16 de 02 45 06 1e 30 73 8b a8 c8 29 bd 71 14 0e 81 bd bf 1f a3 5a 71 77 a1 f7 0b 0a a1 c4 89 03 87 49 3a 23 16 87 d7 42 8e f4 e4 b4 6b bc 0d b7 4c 7f cf 17 48 84 62 9b 0d cb 88 05 5e a2 27 ec 4b fe ad 59 f0 1c 3d 34 6a a2 8d fe 25 c9 59 19 30 f0 5d e0 e9 a3 66 4e 57 47 ef 6e 0b dc c0 05 47 1f 91 af 2f d2 f5 10 17 da 81 ab e5 a1 6f f7 da 40 e6 5a 40 e3 22 20 6d 69 37 7a 9b 76 89 eb Data Ascii: 7rCtT/0IuB'Q'#>G]Tv`Y?B=,Nay5!,HXdT68UmSrV.rE0s)qZqwI:#BkLHb^'KY=4j%Y0]fNWGnG/o@Z@" mi7zv
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: d7 86 e1 80 ce ff 78 76 0e 87 4d a4 46 6c 25 0a f4 ca 1a 36 d1 57 36 4e 87 72 c6 4d 7e 77 75 aa 36 70 7b ee 75 4c 6a 17 5e 57 42 f4 9d 7d 15 65 1b 85 4f 66 7b 30 fb cf bd b5 19 ba 99 33 90 d0 3c ec 45 d2 c3 6b 67 f8 da 99 a9 70 18 52 c3 42 86 0f 81 4e 40 47 94 34 4e 4e 77 2c f0 24 12 58 90 e2 1d 1e f4 7c 88 6e a1 c5 d8 a2 12 e4 07 ba 54 b8 bf 1f d1 ab 1c 3d ca 2f c4 2c f2 25 60 b9 62 b9 e5 57 cf c3 3b ae 61 54 d8 a9 cc 6b dc 37 80 26 c8 2f 79 50 d6 09 19 d1 63 b5 72 ce 45 dd a5 c7 f8 2f a8 4f 60 d4 96 82 6f 69 b4 73 25 84 e5 af 96 b2 ce 3e 97 7e 89 37 b8 74 80 fc 95 4b cf c5 67 f8 d0 06 d6 ea 1b ec 8f b8 ad 7a b0 b9 e6 53 f8 7b f5 b5 9f 65 f0 7b 91 e0 af b5 45 6e 71 ad b0 6e 8c a1 65 d8 a5 93 33 de fc 76 ba ba ba 52 50 c8 25 38 da 51 04 a6 ae 65 e5 e6 a8 Data Ascii: xvMFl%6W6NrM~wu6p{uLj^WB}eOf{03<EkgpRBN@G4NNw,$X\|nT=/,%`bW;aTk7&/yPcrE/O`ois%>~7tKgzS{e{Enqne3vRP%8Qe
2025-06-10 17:09:31 UTC	1460	IN	Data Raw: 1b d7 a1 c3 1f 26 8f 5f 1a 04 52 1c 06 52 df 4f 60 57 e5 f9 3b 3a ca 57 a5 f9 9e e9 bc a7 6d 5e 5b a5 ea 97 e7 3a 69 9d 76 34 c6 59 ac ec 07 6e c5 39 e7 88 7c c2 b5 94 e6 bb 6d 17 53 82 39 54 5f 50 2e 59 92 63 4f 94 d8 13 c5 81 b0 c7 66 1b 97 00 09 ac 3b ac 48 f2 c2 64 dd 98 77 a3 b7 ef 74 a8 5c 8c 03 1d 87 f1 fd fd 33 0c 6b 94 b9 c2 30 ad 3c f9 8e 03 77 1d d8 cc 1d 72 57 50 a4 28 ce 2d 0d 03 ef 46 a7 6f 5b c0 0e c2 ef 8f 21 79 d9 d1 b9 b4 5f 26 6c cd a7 5a ce 4f ed 3a f2 34 a2 a9 e1 c5 23 dd 9a 3d b4 cb b8 ce b7 d4 76 83 c3 25 c4 c0 88 3e e8 66 42 88 04 51 cb a0 25 95 0b 5a 0c 6f b4 50 27 23 c6 9d b7 e8 f9 a8 74 a1 0d 36 52 92 a0 90 16 46 46 7e 98 7a 36 96 77 60 af b0 be 31 fb 1b 3a e6 a7 cf f6 4a 62 a5 b5 86 3b 95 04 b2 52 99 b3 b4 d0 a5 bf 03 03 69 cc Data Ascii: &_RRO`W;:Wm^[:iv4Yn9\|mS9T_P.YcOf;Hdwt\3k0<wrWP(-Fo[!y_&lZO:4#=v%>fBQ%ZoP'#t6RFF~z6w`1:Jb;Ri
2025-06-10 17:09:31 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_41f36656d3c0bb04c90c.js HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-06-10 17:09:31 UTC	794	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:31 GMT content-type: application/x-javascript content-length: 116364 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Wed, 19 Mar 2025 22:11:52 GMT etag: 0x8DD67330D88A349 x-ms-request-id: 76eac34f-f01e-0031-1c8c-d71de8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170931Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f25k x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:31 UTC	669	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:31 UTC	740	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:31 GMT content-type: image/x-icon content-length: 17174 cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: bfc5b24c-101e-0040-6585-d6b3d1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170931Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f25p x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:31 UTC	678	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-06-10 17:09:31 UTC	760	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:31 GMT content-type: image/svg+xml content-length: 1435 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 0b9e1f1a-f01e-003a-3b42-d9ae91000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170931Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f26e x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:31 UTC	677	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-06-10 17:09:31 UTC	780	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:31 GMT content-type: image/svg+xml content-length: 673 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 9ce1d7ae-e01e-0026-6072-d6fcf1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170931Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f26d x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:31 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4f75990aeef30238698e.js HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: / sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: script sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9
2025-06-10 17:09:31 UTC	793	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:31 GMT content-type: application/x-javascript content-length: 35168 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Wed, 19 Mar 2025 22:11:53 GMT etag: 0x8DD67330E362146 x-ms-request-id: f4003307-d01e-000a-6c88-d667e1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170931Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f26g x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:32 UTC	678	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-06-10 17:09:32 UTC	780	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:32 GMT content-type: image/svg+xml content-length: 621 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: aab7e348-501e-001c-7554-d9e689000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170932Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f27h x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:44 UTC	683	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-06-10 17:09:44 UTC	715	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:44 GMT content-type: image/gif content-length: 2672 cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 2fbd0257-801e-006d-4151-d900a2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170944Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f37n x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:44 UTC	677	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 host: aadcdn.msauth.net sec-ch-ua-platform: "Windows" user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 sec-fetch-site: cross-site sec-fetch-mode: no-cors sec-fetch-dest: image sec-fetch-storage-access: active referer: https://login.microsoftonline.com/ accept-encoding: identity accept-language: en-US,en;q=0.9 priority: i
2025-06-10 17:09:44 UTC	736	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:44 GMT content-type: image/gif content-length: 3620 cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: 2266bfa6-c01e-0058-633f-d924a4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170944Z-17bbbb86b5bvv8hhhC1TEBzp1n0000000dp000000000f37p x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.24	49717	13.107.246.51	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:32 UTC	423	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 host: aadcdn.msauth.net user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:32 UTC	719	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:32 GMT content-type: image/x-icon content-length: 17174 cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: bfc5b24c-101e-0040-6585-d6b3d1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170932Z-17bbbb86b5bd2vrlhC1TEBhass0000000ddg00000000eax6 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 Data Ascii: 33333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 Data Ascii: """" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""""""" 333333333333333333333333333333"""""""""""""""""""""""""
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUU
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 Data Ascii: UUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDU
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: DDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDD
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 Data Ascii:
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 e0 00 00 00 00 00 00 00 28 00 00 00 48 00 00 00 90 00 00 00 01 00 04 00 00 00 00 00 80 0d 00 00 00 00 00 00 00 Data Ascii: (H
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 00 00 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 Data Ascii: """33333333333333333"""""""""""""""""33333333333333333"""""""""""""""""33333333333333333UUUUUUUUUUUUUUUUU
2025-06-10 17:09:32 UTC	1460	IN	Data Raw: 44 44 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 00 00 00 3c 00 00 00 00 00 00 00 00 Data Ascii: DD<<<<<<<<<<<<<<<<<<<<<
2025-06-10 17:09:32 UTC	436	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 host: aadcdn.msauth.net user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:32 UTC	780	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:32 GMT content-type: image/svg+xml content-length: 673 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 9ce1d7ae-e01e-0026-6072-d6fcf1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170932Z-17bbbb86b5bd2vrlhC1TEBhass0000000ddg00000000eax7 x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:32 UTC	437	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 host: aadcdn.msauth.net user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:32 UTC	781	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:32 GMT content-type: image/svg+xml content-length: 1435 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 0b9e1f1a-f01e-003a-3b42-d9ae91000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170932Z-17bbbb86b5bd2vrlhC1TEBhass0000000ddg00000000eax8 x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:33 UTC	437	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 host: aadcdn.msauth.net user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:33 UTC	780	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:33 GMT content-type: image/svg+xml content-length: 621 cache-control: public, max-age=31536000 content-encoding: gzip last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: aab7e348-501e-001c-7554-d9e689000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170933Z-17bbbb86b5bd2vrlhC1TEBhass0000000ddg00000000eb1c x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:44 UTC	442	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 host: aadcdn.msauth.net user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:44 UTC	736	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:44 GMT content-type: image/gif content-length: 2672 cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 2fbd0257-801e-006d-4151-d900a2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170944Z-17bbbb86b5bd2vrlhC1TEBhass0000000ddg00000000ebv2 x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes
2025-06-10 17:09:44 UTC	436	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 host: aadcdn.msauth.net user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=1, i
2025-06-10 17:09:44 UTC	736	IN	HTTP/1.1 200 OK date: Tue, 10 Jun 2025 17:09:44 GMT content-type: image/gif content-length: 3620 cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: 2266bfa6-c01e-0058-633f-d924a4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20250610T170944Z-17bbbb86b5bd2vrlhC1TEBhass0000000ddg00000000ebv3 x-fd-int-roxy-purgeid: 0 x-cache-info: L1_T2 x-cache: TCP_HIT accept-ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.24	49721	20.190.152.20	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:44 UTC	1460	OUT	GET /common/GetCredentialType?mkt=en-US HTTP/1.1 host: login.microsoftonline.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: / sec-fetch-site: none sec-fetch-mode: cors sec-fetch-dest: empty sec-fetch-storage-access: active accept-encoding: identity accept-language: en-US,en;q=0.9 cookie: esctx-71YInml3DZE=AQABCQEAAABVrSpeuWamRam2jAF1XRQEWRDa3Ner4X-GaKw_n7FSlUA5yIaKwaEj6P2C_XLbt7JFnV5fNIRm9fqHD-8wxBxjl6CP_HtMxcLqdPcJVZ-PPVB9kD00IZ40vFUZ5Hcp5NmTfcLb9gQJHb2Dx31ZSGQksmhldnwRAqhpS5An1iyCXCAA cookie: x-ms-gateway-slice=estsfd cookie: stsservicecookie=estsfd cookie: AADSSO=NA\|NoExtension cookie: SSOCOOKIEPULLED=1 cookie: buid=1.AW4AiouGFGqTN0SBmP2fpPaVSAMAAAAAAPEPzgAAAAAAAABuAABuAA.AQABGgEAAABVrSpeuWamRam2jAF1XRQE3I5pqbIRmN026x6Cl0C8kUKvut9vA7uVnkDN3sWDbQ12vmHYFuPJCjTHUAeNq-H03lSYL6tLIe9dYTJ-dW9-yZWmHA48SzzL9oIqsXtpfjggAA cookie: esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEX8rqiRqlioAsqp0V9WEXetaiodOk9YfETe9sv7KlBl1x-ec5Ka1pWb9ahO5m7-NpDVXj7chr1TEY5nIVaJNuEKEsMfE64rf2i0r0m8F2z8wH6rQHpVrjVvUelvXpUpeK8e1S8fj5EpQWH5QbB6TDfR6sUKIVZTMpkeR4rsgYLfsgAA cookie: esctx-m77HPvFtk=AQABCQEAAABVrSpeuWamRam2jAF1XRQEoz7x4jdzc2MvCyNSDFY347a2XdVFM5WwGiJyHMl9pbzMDLWrbHGnpdmoEHx99cnfBIkNkaZ4RxBB1c5UQ436ALrQoGh5AlbjRV3CBoKOSUnnihlRbPWPu5FICEQK8d2llKD0V_w2SAahwC1rNzKcLiAA cookie: fpc=AsEr7rtG_vJGmnZ5g8rTo0GEDnIxAQAAAMld2t8OAAAA cookie: MicrosoftApplicationsTeleme
2025-06-10 17:09:44 UTC	87	OUT	Data Raw: 74 72 79 44 65 76 69 63 65 49 64 3d 61 34 62 35 33 32 33 36 2d 62 34 30 34 2d 34 35 32 39 2d 62 32 61 31 2d 35 64 37 34 66 31 32 66 30 66 36 62 0d 0a 63 6f 6f 6b 69 65 3a 20 62 72 63 61 70 3d 30 0d 0a 70 72 69 6f 72 69 74 79 3a 20 75 3d 31 2c 20 69 0d 0a 0d 0a Data Ascii: tryDeviceId=a4b53236-b404-4529-b2a1-5d74f12f0f6bcookie: brcap=0priority: u=1, i
2025-06-10 17:09:44 UTC	1460	IN	HTTP/1.1 200 OK cache-control: no-store, no-cache pragma: no-cache content-type: application/json; charset=utf-8 expires: -1 strict-transport-security: max-age=31536000; includeSubDomains x-content-type-options: nosniff p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 72ea4dca-545b-450f-bb7a-610c09306600 x-ms-ests-server: 2.1.20899.4 - SCUS ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+bno"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-security-policy-report-only: object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-cKKxCZ5U6hgw_F7-NoDaDg' 'unsafe-inline' 'unsafe-eval' https://.msauth.net https://.msftauth.net https://.msftauthimages.net https://.msauthimages.net https://.msidentity.com https://.microsoftonline-p.com https://.microsoftazuread-sso.com https://.azureedge.net https://.outlook.com https://.office.com https://.office365.com https://.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All x-xss-protection: 0 set-cookie: fpc=AsEr7rtG_vJGmnZ5g8rTo0GEDnIxAQAAAMld2t8OAAAA; expires=Thu, 10-Jul-2025 17:09:44 GMT; path=/; secure; HttpOnly; SameSite=None set-cookie: x-ms-gateway-slice=estsfd; path=/; secure; sa
2025-06-10 17:09:44 UTC	83	IN	Data Raw: 6d 65 73 69 74 65 3d 6e 6f 6e 65 3b 20 68 74 74 70 6f 6e 6c 79 0d 0a 64 61 74 65 3a 20 54 75 65 2c 20 31 30 20 4a 75 6e 20 32 30 32 35 20 31 37 3a 30 39 3a 34 33 20 47 4d 54 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 31 36 34 0d 0a 0d 0a Data Ascii: mesite=none; httponlydate: Tue, 10 Jun 2025 17:09:43 GMTcontent-length: 164
2025-06-10 17:09:44 UTC	164	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 62 62 37 35 66 65 33 32 2d 33 35 33 31 2d 34 62 65 32 2d 61 63 30 30 2d 36 36 62 31 62 64 62 34 31 36 31 63 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 35 2d 30 36 2d 31 30 20 31 37 3a 30 39 3a 34 34 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d Data Ascii: {"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"bb75fe32-3531-4be2-ac00-66b1bdb4161c","timestamp":"2025-06-10 17:09:44Z","message":"AADSTS900561"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.24	49724	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:09:55 UTC	312	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.22631.4169/0?CH=902&L=en-US&P=&PT=0x30&WUA=1220.2407.15022.0&MK=1CocMgeHrKELNWb&MD=TMrlDezF HTTP/1.1 host: slscr.update.microsoft.com accept: / user-agent: Windows-Update-Agent/1220.2407.15022.0 Client-Protocol/2.80 accept-encoding: identity
2025-06-10 17:09:55 UTC	558	IN	HTTP/1.1 200 OK content-type: application/octet-stream date: Tue, 10 Jun 2025 17:09:55 GMT cache-control: no-cache etag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" expires: -1 last-modified: Mon, 01 Jan 0001 00:00:00 GMT pragma: no-cache content-length: 25457 slsversion: 2.0 ms-correlationid: 33565d3f-ffb9-4edc-a9f0-d35ff343cdb3 ms-requestid: a523f2ca-4581-48dd-ac34-5c7d0234c781 ms-cv: oxpTM4fTMkW2fHBi.0 x-content-type-options: nosniff x-microsoft-slsclientcache: 2160 content-disposition: attachment; filename=environment.cab
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: 89 44 0a e5 cc e4 0a 83 eb f0 ea 99 d9 9a 92 ab 9e fe bd e2 4d 11 4b fc cf 1d 3b c7 8f 5d 95 0a ba 6c cf 14 d8 50 d9 e1 10 db 0a 07 0a 8d 2f bc e5 14 27 0b dc db 88 1f 46 70 fc 46 50 b0 55 8f ec 58 39 0d 66 b7 a4 4c 1b 55 e5 46 a0 1f c4 e2 a3 f3 81 a3 03 64 7a 71 b7 1e b0 75 3d 20 f0 54 bf e8 d8 e7 e4 de e5 52 cc 60 d9 fd 68 96 32 4c ed 44 80 13 3e 34 39 e2 79 c5 a1 4c ca 88 fb 8e 5c 32 d2 d3 5d 47 8a 86 46 e4 17 ab c7 8f 32 20 06 9e f5 19 b9 0d b7 48 b5 b6 6d 0c 04 f1 88 52 9f 6f 0d 6c 35 48 1a 25 d0 60 b2 5f 57 26 ef 36 df 93 e0 42 75 e0 26 b4 90 bb 37 3e 3d 22 5e 95 d1 05 db df 24 23 a6 c7 3a 4f 5c 6a 2a 15 3f 7b 3e 56 a3 40 a5 ee 74 fe 0a f7 f0 d1 87 29 83 a9 19 11 15 f9 07 cf bc be 40 71 f5 f5 0d 40 f6 16 5c d0 ee 68 2b af c3 fa 89 4e 12 9f 12 c8 9d Data Ascii: DMK;]lP/'FpFPUX9fLUFdzqu= TR`h2LD>49yL\2]GF2 HmRol5H%`_W&6Bu&7>="^$#:O\j*?{>V@t)@q@\h+N
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: 32 d5 5c fe d4 64 ee b2 de d3 5c 0e 47 db 3a 0b 36 a2 63 d0 3d 86 63 35 3c fd a8 1e 2b 12 ba 21 21 4c 42 a1 d6 03 ea b4 41 5f f2 57 1c fd 9d 1b 02 59 3d 4a 37 da 43 0b 52 bb 74 bc 5c 68 f5 4d bb d7 c6 22 55 b4 d2 5e 4c db 42 dd bd 49 fc 75 23 69 b0 12 d1 a1 62 70 25 ff 94 38 f3 c7 46 27 72 80 53 64 2d 93 4e 68 4a 24 4a fb d6 2b aa 5a e5 bc 8f 24 8f 4a 44 8d b8 d2 1f e1 d6 32 36 ca f5 03 8c 5f 7d ba 91 39 87 37 62 0c 1b ef 22 7b ee c6 8e be f9 88 ee f9 19 de 81 88 35 bb c8 54 7e d6 62 e2 a0 fd 6b f8 c3 0d fd 61 f7 32 2f 5c 2a 59 d6 b3 bd b9 58 70 c6 f5 45 d6 f4 8d e1 59 f7 b2 e8 5d fa 16 a6 17 96 29 fa 8d 0b 63 05 a9 57 42 82 9d 0a 0d 42 6f 43 aa 94 14 63 a0 46 25 0b ed 89 0d ea f0 b4 4f 32 03 56 12 a4 47 1f 58 f4 a9 ed 7b e3 63 d6 ef fc 2c 5a d6 6b 4e 1a Data Ascii: 2\d\G:6c=c5<+!!LBA_WY=J7CRt\hM"U^LBIu#ibp%8F'rSd-NhJ$J+Z$JD26_}97b"{5T~bka2/\*YXpEY])cWBBoCcF%O2VGX{c,ZkN
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: 79 9d d3 6f 63 bf f6 9b 25 dd a5 76 9c b4 e5 c7 a1 c1 59 e6 14 8e 05 ad 81 f2 b7 43 bc 04 9c 4b 8c b3 19 d6 f7 c7 7a bd bb 26 d5 4d dd f7 17 b8 16 f8 31 b4 5a 16 4c f1 bc 3d cb dd 36 a7 84 e7 7e fc bd 6f 92 f0 79 c9 50 a2 04 d3 15 3b 24 84 57 b9 81 71 f9 6d a4 25 56 23 25 2c d1 db 31 c4 4b b9 4e c3 57 ee 06 6d 5c 96 a1 5c f6 ea e9 c1 35 00 87 7f 02 54 7e a6 db 8a 8f d8 9a 08 cb bf a5 ef 60 7f db 8c c0 b6 f2 03 00 09 00 89 42 8a 88 8b 89 6d 66 04 c4 b6 8b a2 9b c5 bf 58 35 ff 9e a6 2a 60 22 bb e9 4d 19 2e cd fa 6a 9d 2a 71 e9 43 00 3a ce 09 63 48 f1 28 87 18 82 3b bb 36 77 da 41 63 9f 65 6b f3 73 eb db 27 ab 0f da 0b 98 bf a1 31 e0 41 20 59 e4 19 f6 c6 33 75 13 51 45 9e b6 06 4c cb 00 25 f2 05 ab b0 60 43 45 d2 01 ad 1a 49 c2 0a 85 91 d8 c2 7e 4f c0 84 1b Data Ascii: yoc%vYCKz&M1ZL=6~oyP;$Wqm%V#%,1KNWm\\5T~`BmfX5`"M.jqC:cH(;6wAceks'1A Y3uQEL%`CEI~O
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: cb 8f a2 6f 7b 46 4e 3b 6b 1e 14 e0 6e 37 0d a7 78 17 7a b0 18 c2 3c c9 22 72 80 60 11 21 f9 5c ae 95 4d a8 75 ca 5a 5b e3 40 1b 03 34 3b 10 8f 30 2f a0 3d 5f 32 97 46 73 d0 a3 dd e6 ce d5 fe 4f 8a d6 cc c1 91 4f 8e fa d7 3b 70 61 f2 ee e1 9c ed c9 d1 be 2a 21 2a 77 c3 1b ae e4 9c 58 ec 36 9f 26 7a c2 ca b9 8a 5b bf 73 e0 b1 a0 c3 0b 87 8e 11 87 a9 24 bc 71 78 cf 2c bd 60 a6 72 c5 b1 11 94 dc bb 29 02 5d 33 ec 8a 4b fc a4 31 bb 41 88 99 75 f2 20 e1 73 24 0e 06 46 c8 b0 85 2d 99 8d fd 6b 7d ac 5f 0d d0 77 26 ce 70 50 14 b0 77 67 e6 8c ec bb 04 ca 2f 92 63 53 de 07 9c f5 78 2e ea 9b 49 71 be 0b 1f db 27 2f cc 6c e4 95 f7 d0 b9 e3 9e 95 f7 71 ed 64 af 2a 00 3b be 63 02 18 29 12 db 07 60 7b 00 6c 27 80 2d 43 50 ff 4c b4 01 6c 12 80 0d cc f6 ff 3b 12 0b 74 af Data Ascii: o{FN;kn7xz<"r`!\MuZ[@4;0/=_2FsOO;pa!wX6&z[s$qx,`r)]3K1Au s$F-k}_w&pPwg/cSx.Iq'/lqd*;c)`{l'-CPLl;t
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: e6 9b e8 46 31 67 c2 37 e4 ad 5e df 7f 29 d2 67 d5 d9 24 1e c7 fa 18 c6 06 29 72 c9 eb ed 90 de cb dd 41 2b ef 37 4d f7 21 a0 90 0f 3e 51 29 66 d4 2e 69 2f b7 ef 13 19 ec 70 06 8e aa 0f c0 51 75 ff 80 4e 37 80 75 75 df a3 d3 d7 c0 aa bc 3f 01 9d be b7 3b cc c8 28 0c bf 0c 2a 72 e1 16 90 9b dd 6b 66 08 1c eb e1 a8 cd 0c 78 5f 47 73 ad e9 a5 e6 26 3a 5d ed 38 0e fc 80 4e 4b 0a 89 88 88 fd 37 a1 d3 52 92 2a 4a 82 8a e2 48 65 41 65 71 51 e4 ff 0e 9d ee b0 f4 e9 e0 d8 15 97 d8 bc c5 ed 1d 7f 63 74 1a f5 3d 3a 8d fa 7b a3 d3 ff d6 19 fd 2e e6 d3 ea d3 ce 34 ff 86 49 de 9d d1 45 54 5d d6 10 76 6f af 4f 05 dc 08 47 71 56 fc 31 50 d0 21 2c f1 66 8e 26 de b5 f9 49 0e ef a5 d8 76 03 df 57 6d 9e 48 34 de ac a3 e0 ae 73 e6 07 49 d7 42 0b 86 88 af 77 24 11 65 21 7d 90 Data Ascii: F1g7^)g$)rA+7M!>Q)f.i/pQuN7uu?;(rkfx_Gs&:]8NK7RJHeAeqQct=:{.4IET]voOGqV1P!,f&IvWmH4sIBw$e!}
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: 4a b7 95 33 6d 0f 0b 71 63 e0 31 d4 62 a3 61 4b 33 d6 43 9d 5c e8 ec ff 00 30 82 41 16 06 09 2a 86 48 86 f7 0d 01 07 02 a0 82 41 07 30 82 41 03 02 01 01 31 0f 30 0d 06 09 60 86 48 01 65 03 04 02 01 05 00 30 81 9d 06 0a 2b 06 01 04 01 82 37 02 01 04 a0 81 8e 30 81 8b 30 56 06 0a 2b 06 01 04 01 82 37 02 01 1c a1 48 04 10 a6 b5 86 d5 b4 a1 24 66 ae 05 a2 17 da 8e 60 d6 04 34 31 32 30 30 06 0a 2b 06 01 04 01 82 37 02 05 01 31 22 04 20 d4 0e 08 f3 86 1b 33 f7 18 4c 86 47 86 30 61 fe 25 ad 7f 3d 59 eb 27 11 20 ce b7 59 a6 05 cc 0a 30 31 30 0d 06 09 60 86 48 01 65 03 04 02 01 05 00 04 20 af c5 89 25 6a b9 96 18 a0 23 32 33 2a a0 73 6a e6 00 51 d6 d5 aa 7f 2a 0a 2b f4 7d cd 72 6e 7f a0 82 0d 23 30 82 06 16 30 82 03 fe a0 03 02 01 02 02 13 33 00 00 00 46 45 cc b4 Data Ascii: J3mqc1baK3C\0AHA0A10`He0+700V+7H$f`41200+71" 3LG0a%=Y' Y010`He %j#23sjQ*+}rn#003FE
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: 6d bf 87 5e 94 58 9e bd 9b 36 b5 e7 5a 29 16 b7 3c 19 9d 1d 11 a4 e8 f4 c5 03 ae 7d 6a 79 30 88 56 2d 79 00 e9 37 4c 9c 56 e1 76 ba c7 cf f2 94 66 c4 27 47 c9 a7 d0 89 b6 69 a7 4e c6 c3 fd 05 49 14 6d fe 26 28 0b b9 38 c3 9a a6 d9 d7 78 af 9a d0 77 ce d3 e1 3a 9a 39 df a7 1c 51 43 2f fb 79 4c 3f 87 de 21 7c 1d d0 e8 2e 60 3d 5d bc b7 d6 b4 0e 34 53 c6 8a 86 a6 fa e6 3c 3b f2 aa 95 11 37 07 41 45 51 42 2f 86 9c 7c 62 20 8a e9 9e 83 c3 9b 94 ea 09 9e 09 2e e2 c8 0e 87 1e 18 53 a8 12 5e c8 b3 ea 81 22 0a 93 3e e1 93 9f 34 02 39 ff 3f 87 4e 6b b2 da 0a d2 78 40 7b 4f 09 72 04 5b 50 fb 26 8f 00 f9 97 b1 2e 01 8a 48 1d 25 92 88 b7 10 c2 04 94 85 be df c3 8a 7c 16 9d 57 2e d7 a5 71 9b fc 68 fc 9a 6c b2 1a d8 71 89 48 f8 a6 90 6f ef aa c2 37 66 62 59 57 aa f0 fb Data Ascii: m^X6Z)<}jy0V-y7LVvf'GiNIm&(8xw:9QC/yL?!\|.`=]4S<;7AEQB/\|b .S^">49?Nkx@{Or[P&.H%\|W.qhlqHo7fbYW
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: 32 30 31 31 5f 30 33 5f 32 32 2e 63 72 6c 30 5e 06 08 2b 06 01 05 05 07 01 01 04 52 30 50 30 4e 06 08 2b 06 01 05 05 07 30 02 86 42 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 70 6b 69 2f 63 65 72 74 73 2f 4d 69 63 52 6f 6f 43 65 72 41 75 74 32 30 31 31 5f 32 30 31 31 5f 30 33 5f 32 32 2e 63 72 74 30 1f 06 03 55 1d 25 04 18 30 16 06 08 2b 06 01 05 05 07 03 03 06 0a 2b 06 01 04 01 82 37 4c 06 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 02 01 00 8c b9 61 38 aa 05 68 bb d3 e5 5e df fe 32 a5 53 e3 64 f9 9e 2f 13 f6 ac cb f9 07 51 b6 f5 54 79 d8 8f 9c bf a9 f6 b1 43 9a 72 3c a3 26 ab ac 83 7e f1 d8 3b d5 b5 0f e4 ec fd d7 fc 15 92 9a e2 9b d8 e0 70 c7 6b a3 cd ee cd 9a 38 95 4d 26 35 75 50 8f f6 9f 18 45 ad fb 67 00 f9 Data Ascii: 2011_03_22.crl0^+R0P0N+0Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0U%0++7L0*Ha8h^2Sd/QTyCr<&~;pk8M&5uPEg
2025-06-10 17:09:55 UTC	1460	IN	Data Raw: 7b 46 7a 4a 51 99 cd 02 06 5c c9 e8 a4 3c fe 18 13 32 30 31 39 30 35 31 36 31 39 35 38 32 39 2e 37 30 32 5a 30 04 80 02 01 f4 a0 81 d0 a4 81 cd 30 81 ca 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 25 30 23 06 03 55 04 0b 13 1c 4d 69 63 72 6f 73 6f 66 74 20 41 6d 65 72 69 63 61 20 4f 70 65 72 61 74 69 6f 6e 73 31 26 30 24 06 03 55 04 0b 13 1d 54 68 61 6c 65 73 20 54 53 53 20 45 53 4e 3a 38 41 38 32 2d 45 33 34 46 2d 39 44 44 41 31 25 30 23 06 03 55 04 03 13 1c 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 53 65 72 76 69 63 65 a0 82 Data Ascii: {FzJQ\<20190516195829.702Z0010UUS10UWashington10URedmond10UMicrosoft Corporation1%0#UMicrosoft America Operations1&0$UThales TSS ESN:8A82-E34F-9DDA1%0#UMicrosoft Time-Stamp Service

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.24	49727	23.200.0.195	443	2132	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-06-10 17:10:15 UTC	420	OUT	OPTIONS /api/report?catId=GW+estsfd+bno HTTP/1.1 host: identity.nel.measure.office.net origin: https://login.microsoftonline.com access-control-request-method: POST access-control-request-headers: content-type user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=4, i
2025-06-10 17:10:15 UTC	300	IN	HTTP/1.1 200 OK content-type: text/html content-length: 7 date: Tue, 10 Jun 2025 17:10:15 GMT access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: * access-control-allow-methods: GET, OPTIONS, POST access-control-allow-origin: *
2025-06-10 17:10:15 UTC	7	IN	Data Raw: 4f 50 54 49 4f 4e 53 Data Ascii: OPTIONS
2025-06-10 17:10:15 UTC	396	OUT	POST /api/report?catId=GW+estsfd+bno HTTP/1.1 host: identity.nel.measure.office.net content-length: 1130 content-type: application/reports+json origin: https://login.microsoftonline.com user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept-encoding: identity accept-language: en-US,en;q=0.9 priority: u=4, i
2025-06-10 17:10:15 UTC	1130	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 35 33 31 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 38 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 31 34 38 36 38 62 38 61 2d 39 33 36 61 2d 34 34 33 37 2d 38 31 39 38 2d 66 64 39 66 61 34 66 36 39 35 34 38 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 72 65 73 70 Data Ascii: [{"age":45314,"body":{"elapsed_time":188,"method":"GET","phase":"application","protocol":"h2","referrer":"https://login.microsoftonline.com/14868b8a-936a-4437-8198-fd9fa4f69548/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&resp
2025-06-10 17:10:15 UTC	380	IN	HTTP/1.1 429 Too Many Requests content-length: 0 x-ms-middleware-request-id: 00000000-0000-0000-0000-000000000000 request-context: appId=cid-v1:41ca65cb-08a6-4a29-94ab-18b081ee8b8b date: Tue, 10 Jun 2025 17:10:15 GMT access-control-allow-credentials: false access-control-allow-methods: * access-control-allow-methods: GET, OPTIONS, POST access-control-allow-origin: *

Target ID:	0
Start time:	13:09:03
Start date:	10/06/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff728600000
File size:	3'384'928 bytes
MD5 hash:	DBE43C1D0092437B88CFF7BD9ABC336C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:09:04
Start date:	10/06/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1948,i,14049268193459184991,7695379603295095455,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=1756 /prefetch:11
Imagebase:	0x7ff728600000
File size:	3'384'928 bytes
MD5 hash:	DBE43C1D0092437B88CFF7BD9ABC336C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	5
Start time:	13:09:09
Start date:	10/06/2025
Path:	C:\Windows\System32\appidpolicyconverter.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\appidpolicyconverter.exe"
Imagebase:	0x7ff635200000
File size:	155'648 bytes
MD5 hash:	6567D9CF2545FAAC60974D9D682700D4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	13:09:09
Start date:	10/06/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff788700000
File size:	1'040'384 bytes
MD5 hash:	9698384842DA735D80D278A427A229AB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	13:09:11
Start date:	10/06/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9"
Imagebase:	0x7ff728600000
File size:	3'384'928 bytes
MD5 hash:	DBE43C1D0092437B88CFF7BD9ABC336C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9

Overview

General Information

Detection

Signatures

Classification

Process Tree

AI Reasoning

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
https://goldstonemanagment-my.sharepoint.com/:o:/g/personal/sandrar_goldstonem_com/EsXLH__K8yxCuPDU0eDeoNIBDxttVTtWa08L1PYp5Mzc_w?e=5%3a0J1yd6&at=9