nothing works

[jatika]

we are on a windows 2012 domain, trying to access file shares on a 2008 R2 server...

attached is the output. ive tried several combinations on the config. at one point, if i used a local admin account on the file server im trying to mount, i got it working.

i'm confused if this will work on a domain environment with windows authentication.

thanks!

NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE56: false background.js:6531 Use LMv1 and NTLMv1 because LMCompatibilityLevel=0 background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7300 0000 0018 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0900 0008 0200 ................ 0CFF 0000 0004 4132 0001 0000 0000 00AA ......A2........ 0000 0000 0054 0000 80E7 004E 544C 4D53 .....T.....NTLMS 5350 0003 0000 0018 0018 0040 0000 0018 SP.........@.... 0018 0058 0000 0010 0010 0070 0000 001A ...X.......p.... 001A 0080 0000 0010 0010 009A 0000 0000 ................ 0000 0000 0000 0001 0200 001B 89D5 A974 ...............t A0A3 B837 1D22 DFC5 7831 0B4A B922 E518 ...7."..x1.J.".. 7BDD 8ECB ACCA D217 5460 5C00 04BF B21E {.......T`..... 62FD 544E 1A98 F2F3 6AAE 2E66 006F 0078 b.TN....j..f.o.x 0072 006F 0061 0063 0068 0061 0064 006D .r.o.a.c.h.a.d.m 0069 006E 0069 0073 0074 0072 0061 0074 .i.n.i.s.t.r.a.t 006F 0072 0046 0053 0050 005F 0043 0049 .o.r.F.S.P..C.I 0046 0053 0000 4300 6800 7200 6F00 6D00 .F.S..C.h.r.o.m. 6500 4F00 5300 0000 4600 6900 6C00 6500 e.O.S...F.i.l.e. 2000 5300 7900 7300 7400 6500 6D00 2000 .S.y.s.t.e.m. . 6600 6F00 7200 2000 4300 4900 4600 5300 f.o.r. .C.I.F.S. 0000 ..

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 35 background.js:6524 FF53 4D42 736D 0000 C098 43C8 0000 0000 .SMBsm....C..... 0000 0000 0000 0000 0000 0900 0008 0200 ................ 0000 00 ...

background.js:6517 Object background.js:6517 Client#login background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7200 0000 0018 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 0A00 0000 0000 ................ 000C 0002 4E54 204C 4D20 302E 3132 00 ....NT LM 0.12.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 205 background.js:6524 FF53 4D42 7200 0000 0098 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 0A00 0000 0000 ................ 1100 0003 3200 0100 0441 0000 0000 0100 ....2....A...... 0000 0000 FCE3 0180 8B04 B28B C931 D101 .............1.. 2C01 0088 00DC 62C3 0C05 A10C 4AAA B54C ,.....b.....J..L 1832 E641 6C60 7606 062B 0601 0505 02A0 .2.Al`v..+...... 6C30 6AA0 3C30 3A06 0A2B 0601 0401 8237 l0j.<0:..+.....7 0202 1E06 092A 8648 82F7 1201 0202 0609 ......H........ 2A86 4886 F712 0102 0206 0A2A 8648 86F7 .H........_.H.. 1201 0202 0306 0A2B 0601 0401 8237 0202 .......+.....7.. 0AA3 2A30 28A0 261B 246E 6F74 5F64 6566 ..0(.&.$not_def 696E 6564 5F69 6E5F 5246 4334 3137 3840 ined_in_RFC4178@ 706C 6561 7365 5F69 676E 6F72 65 please_ignore

background.js:6531 Negotiated with SMB1/CIFS background.js:6531 CAP_EXTENDED_SECURITY: true background.js:6531 CAP_COMPRESSED_DATA: false background.js:6531 CAP_BULK_TRANSFER: false background.js:6531 CAP_UNIX: false background.js:6531 CAP_LARGE_WRITEX: true background.js:6531 CAP_LARGE_READX: true background.js:6531 CAP_INFOLEVEL_PASSTHROUGH: true background.js:6531 CAP_DFS: false background.js:6531 CAP_NT_FIND: true background.js:6531 CAP_LOCK_AND_READ: true background.js:6531 CAP_LEVEL_II_OPLOCKS: true background.js:6531 CAP_STATUS32: true background.js:6531 CAP_RPC_REMOTE_APIS: true background.js:6531 CAP_NT_SMBS: true background.js:6531 CAP_LARGE_FILES: true background.js:6531 CAP_UNICODE: true background.js:6531 CAP_MPX_MODE: false background.js:6531 CAP_RAW_MODE: false background.js:6531 NEGOTIATE_SECURITY_SIGNATURES_REQUIRED: 0 background.js:6531 NEGOTIATE_SECURITY_SIGNATURES_ENABLED: 0 background.js:6531 NEGOTIATE_SECURITY_CHALLENGE_RESPONSE: 1 background.js:6531 NEGOTIATE_SECURITY_USERLEVEL: 1 background.js:6524 Header background.js:6524 NegotiateProtocolResponse background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7300 0000 0018 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0A00 0000 0100 ................ 0CFF 0000 0004 4132 0001 0000 0000 0029 ......A2.......) 0000 0000 0054 0000 8065 004E 544C 4D53 .....T...e.NTLMS 5350 0001 0000 0015 B208 2001 0001 0020 SP........ .... 0000 0008 0008 0021 0000 003F 4653 505F .......!...?FSP 4349 4653 4300 6800 7200 6F00 6D00 6500 CIFSC.h.r.o.m.e. 4F00 5300 0000 4600 6900 6C00 6500 2000 O.S...F.i.l.e. . 5300 7900 7300 7400 6500 6D00 2000 6600 S.y.s.t.e.m. .f. 6F00 7200 2000 4300 4900 4600 5300 0000 o.r. .C.I.F.S...

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 471 background.js:6524 FF53 4D42 7316 0000 C098 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0A00 0008 0100 ................ 04FF 00D7 0100 00FC 00AC 014E 544C 4D53 ...........NTLMS 5350 0002 0000 0010 0010 0038 0000 0015 SP.........8.... 8289 226D 4493 736B F5EA EF00 0000 0000 .."mD.sk........ 0000 00B4 00B4 0048 0000 0006 01B1 1D00 .......H........ 0000 0F46 004F 0058 0052 004F 0041 0043 ...F.O.X.R.O.A.C 0048 0002 0010 0046 004F 0058 0052 004F .H.....F.O.X.R.O 0041 0043 0048 0001 0018 0058 0041 004E .A.C.H.....X.A.N 0044 002D 0043 004F 0052 0050 002D 0030 .D.-.C.O.R.P.-.0 0031 0004 001A 0066 006F 0078 0072 006F .1.....f.o.x.r.o 0061 0063 0068 002E 0063 006F 0072 0070 .a.c.h...c.o.r.p 0003 0034 0078 0061 006E 0064 002D 0063 ...4.x.a.n.d.-.c 006F 0072 0070 002D 0030 0031 002E 0066 .o.r.p.-.0.1...f 006F 0078 0072 006F 0061 0063 0068 002E .o.x.r.o.a.c.h.. 0063 006F 0072 0070 0005 001A 0066 006F .c.o.r.p.....f.o 0078 0072 006F 0061 0063 0068 002E 0063 .x.r.o.a.c.h...c 006F 0072 0070 0007 0008 00AE 28B9 8BC9 .o.r.p......(... 31D1 0100 0000 0000 5700 6900 6E00 6400 1.......W.i.n.d. 6F00 7700 7300 2000 5300 6500 7200 7600 o.w.s. .S.e.r.v. 6500 7200 2000 3200 3000 3000 3800 2000 e.r. .2.0.0.8. . 5200 3200 2000 5300 7400 6100 6E00 6400 R.2. .S.t.a.n.d. 6100 7200 6400 2000 3700 3600 3000 3100 a.r.d. .7.6.0.1. 2000 5300 6500 7200 7600 6900 6300 6500 .S.e.r.v.i.c.e. 2000 5000 6100 6300 6B00 2000 3100 0000 .P.a.c.k. .1... 5700 6900 6E00 6400 6F00 7700 7300 2000 W.i.n.d.o.w.s. . 5300 6500 7200 7600 6500 7200 2000 3200 S.e.r.v.e.r. .2. 3000 3000 3800 2000 5200 3200 2000 5300 0.0.8. .R.2. .S. 7400 6100 6E00 6400 6100 7200 6400 2000 t.a.n.d.a.r.d. . 3600 2E00 3100 00 6...1..

background.js:6524 Header background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE56: false background.js:6531 Use LMv1 and NTLMv1 because LMCompatibilityLevel=0 background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7300 0000 0018 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0A00 0008 0200 ................ 0CFF 0000 0004 4132 0001 0000 0000 00AA ......A2........ 0000 0000 0054 0000 80E7 004E 544C 4D53 .....T.....NTLMS 5350 0003 0000 0018 0018 0040 0000 0018 SP.........@.... 0018 0058 0000 0010 0010 0070 0000 001A ...X.......p.... 001A 0080 0000 0010 0010 009A 0000 0000 ................ 0000 0000 0000 0001 0200 0013 8275 1A19 .............u.. 527C 35E5 468E 0E3F 8EB4 DDA9 ADAA 0ABC R|5.F..?........ B8C7 0EB3 FE19 6825 4C06 FA29 852A 017F ......h%L..).*.. 38FB 281E 89D9 1772 37E5 7B66 006F 0078 8.(....r7.{f.o.x 0072 006F 0061 0063 0068 0061 0064 006D .r.o.a.c.h.a.d.m 0069 006E 0069 0073 0074 0072 0061 0074 .i.n.i.s.t.r.a.t 006F 0072 0046 0053 0050 005F 0043 0049 .o.r.F.S.P..C.I 0046 0053 0000 4300 6800 7200 6F00 6D00 .F.S..C.h.r.o.m. 6500 4F00 5300 0000 4600 6900 6C00 6500 e.O.S...F.i.l.e. 2000 5300 7900 7300 7400 6500 6D00 2000 .S.y.s.t.e.m. . 6600 6F00 7200 2000 4300 4900 4600 5300 f.o.r. .C.I.F.S. 0000 ..

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 35 background.js:6524 FF53 4D42 736D 0000 C098 43C8 0000 0000 .SMBsm....C..... 0000 0000 0000 0000 0000 0A00 0008 0200 ................ 0000 00 ...

background.js:6517 Object background.js:6517 Client#login background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7200 0000 0018 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 0B00 0000 0000 ................ 000C 0002 4E54 204C 4D20 302E 3132 00 ....NT LM 0.12.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 205 background.js:6524 FF53 4D42 7200 0000 0098 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 0B00 0000 0000 ................ 1100 0003 3200 0100 0441 0000 0000 0100 ....2....A...... 0000 0000 FCE3 0180 C297 3D94 C931 D101 ..........=..1.. 2C01 0088 00DC 62C3 0C05 A10C 4AAA B54C ,.....b.....J..L 1832 E641 6C60 7606 062B 0601 0505 02A0 .2.Al`v..+...... 6C30 6AA0 3C30 3A06 0A2B 0601 0401 8237 l0j.<0:..+.....7 0202 1E06 092A 8648 82F7 1201 0202 0609 ......H........ 2A86 4886 F712 0102 0206 0A2A 8648 86F7 .H........_.H.. 1201 0202 0306 0A2B 0601 0401 8237 0202 .......+.....7.. 0AA3 2A30 28A0 261B 246E 6F74 5F64 6566 ..0(.&.$not_def 696E 6564 5F69 6E5F 5246 4334 3137 3840 ined_in_RFC4178@ 706C 6561 7365 5F69 676E 6F72 65 please_ignore

background.js:6531 Negotiated with SMB1/CIFS background.js:6531 CAP_EXTENDED_SECURITY: true background.js:6531 CAP_COMPRESSED_DATA: false background.js:6531 CAP_BULK_TRANSFER: false background.js:6531 CAP_UNIX: false background.js:6531 CAP_LARGE_WRITEX: true background.js:6531 CAP_LARGE_READX: true background.js:6531 CAP_INFOLEVEL_PASSTHROUGH: true background.js:6531 CAP_DFS: false background.js:6531 CAP_NT_FIND: true background.js:6531 CAP_LOCK_AND_READ: true background.js:6531 CAP_LEVEL_II_OPLOCKS: true background.js:6531 CAP_STATUS32: true background.js:6531 CAP_RPC_REMOTE_APIS: true background.js:6531 CAP_NT_SMBS: true background.js:6531 CAP_LARGE_FILES: true background.js:6531 CAP_UNICODE: true background.js:6531 CAP_MPX_MODE: false background.js:6531 CAP_RAW_MODE: false background.js:6531 NEGOTIATE_SECURITY_SIGNATURES_REQUIRED: 0 background.js:6531 NEGOTIATE_SECURITY_SIGNATURES_ENABLED: 0 background.js:6531 NEGOTIATE_SECURITY_CHALLENGE_RESPONSE: 1 background.js:6531 NEGOTIATE_SECURITY_USERLEVEL: 1 background.js:6524 Header background.js:6524 NegotiateProtocolResponse background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7300 0000 0018 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0B00 0000 0100 ................ 0CFF 0000 0004 4132 0001 0000 0000 0029 ......A2.......) 0000 0000 0054 0000 8065 004E 544C 4D53 .....T...e.NTLMS 5350 0001 0000 0015 B208 2001 0001 0020 SP........ .... 0000 0008 0008 0021 0000 003F 4653 505F .......!...?FSP 4349 4653 4300 6800 7200 6F00 6D00 6500 CIFSC.h.r.o.m.e. 4F00 5300 0000 4600 6900 6C00 6500 2000 O.S...F.i.l.e. . 5300 7900 7300 7400 6500 6D00 2000 6600 S.y.s.t.e.m. .f. 6F00 7200 2000 4300 4900 4600 5300 0000 o.r. .C.I.F.S...

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 471 background.js:6524 FF53 4D42 7316 0000 C098 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0B00 0008 0100 ................ 04FF 00D7 0100 00FC 00AC 014E 544C 4D53 ...........NTLMS 5350 0002 0000 0010 0010 0038 0000 0015 SP.........8.... 8289 2274 20B2 372A 811F 8900 0000 0000 .."t .7*........ 0000 00B4 00B4 0048 0000 0006 01B1 1D00 .......H........ 0000 0F46 004F 0058 0052 004F 0041 0043 ...F.O.X.R.O.A.C 0048 0002 0010 0046 004F 0058 0052 004F .H.....F.O.X.R.O 0041 0043 0048 0001 0018 0058 0041 004E .A.C.H.....X.A.N 0044 002D 0043 004F 0052 0050 002D 0030 .D.-.C.O.R.P.-.0 0031 0004 001A 0066 006F 0078 0072 006F .1.....f.o.x.r.o 0061 0063 0068 002E 0063 006F 0072 0070 .a.c.h...c.o.r.p 0003 0034 0078 0061 006E 0064 002D 0063 ...4.x.a.n.d.-.c 006F 0072 0070 002D 0030 0031 002E 0066 .o.r.p.-.0.1...f 006F 0078 0072 006F 0061 0063 0068 002E .o.x.r.o.a.c.h.. 0063 006F 0072 0070 0005 001A 0066 006F .c.o.r.p.....f.o 0078 0072 006F 0061 0063 0068 002E 0063 .x.r.o.a.c.h...c 006F 0072 0070 0007 0008 0046 1D47 94C9 .o.r.p.....F.G.. 31D1 0100 0000 0000 5700 6900 6E00 6400 1.......W.i.n.d. 6F00 7700 7300 2000 5300 6500 7200 7600 o.w.s. .S.e.r.v. 6500 7200 2000 3200 3000 3000 3800 2000 e.r. .2.0.0.8. . 5200 3200 2000 5300 7400 6100 6E00 6400 R.2. .S.t.a.n.d. 6100 7200 6400 2000 3700 3600 3000 3100 a.r.d. .7.6.0.1. 2000 5300 6500 7200 7600 6900 6300 6500 .S.e.r.v.i.c.e. 2000 5000 6100 6300 6B00 2000 3100 0000 .P.a.c.k. .1... 5700 6900 6E00 6400 6F00 7700 7300 2000 W.i.n.d.o.w.s. . 5300 6500 7200 7600 6500 7200 2000 3200 S.e.r.v.e.r. .2. 3000 3000 3800 2000 5200 3200 2000 5300 0.0.8. .R.2. .S. 7400 6100 6E00 6400 6100 7200 6400 2000 t.a.n.d.a.r.d. . 3600 2E00 3100 00 6...1..

background.js:6524 Header background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE56: false background.js:6531 Use LMv1 and NTLMv1 because LMCompatibilityLevel=0 background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7300 0000 0018 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0B00 0008 0200 ................ 0CFF 0000 0004 4132 0001 0000 0000 00C2 ......A2........ 0000 0000 0054 0000 80FF 004E 544C 4D53 .....T.....NTLMS 5350 0003 0000 0018 0018 0040 0000 0018 SP.........@.... 0018 0058 0000 0010 0010 0070 0000 0032 ...X.......p...2 0032 0080 0000 0010 0010 00B2 0000 0000 .2.............. 0000 0000 0000 0001 0200 0060 E600 96C3 ...........`.... 0F69 21EA 9A52 C0D7 FFC3 EF36 C736 36AB .i!..R.....6.66. 93F5 51D5 3451 CADF EAC4 3F83 5037 B10C ..Q.4Q....?.P7.. BC42 C2B3 A775 11B8 4868 F466 006F 0078 .B...u..Hh.f.o.x 0072 006F 0061 0063 0068 0031 0030 002E .r.o.a.c.h.1.0.. 0032 0031 002E 0031 002E 0031 0032 0030 .2.1...1...1.2.0 005C 0061 0064 006D 0069 006E 0069 0073 ..a.d.m.i.n.i.s 0074 0072 0061 0074 006F 0072 0046 0053 .t.r.a.t.o.r.F.S 0050 005F 0043 0049 0046 0053 0000 4300 .P..C.I.F.S..C. 6800 7200 6F00 6D00 6500 4F00 5300 0000 h.r.o.m.e.O.S... 4600 6900 6C00 6500 2000 5300 7900 7300 F.i.l.e. .S.y.s. 7400 6500 6D00 2000 6600 6F00 7200 2000 t.e.m. .f.o.r. . 4300 4900 4600 5300 0000 C.I.F.S...

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 35 background.js:6524 FF53 4D42 736D 0000 C098 43C8 0000 0000 .SMBsm....C..... 0000 0000 0000 0000 0000 0B00 0008 0200 ................ 0000 00 ...

background.js:6517 Object background.js:6517 Client#login background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7200 0000 0018 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 0C00 0000 0000 ................ 000C 0002 4E54 204C 4D20 302E 3132 00 ....NT LM 0.12.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 205 background.js:6524 FF53 4D42 7200 0000 0098 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 0C00 0000 0000 ................ 1100 0003 3200 0100 0441 0000 0000 0100 ....2....A...... 0000 0000 FCE3 0180 4C6E 1E96 C931 D101 ........Ln...1.. 2C01 0088 00DC 62C3 0C05 A10C 4AAA B54C ,.....b.....J..L 1832 E641 6C60 7606 062B 0601 0505 02A0 .2.Al`v..+...... 6C30 6AA0 3C30 3A06 0A2B 0601 0401 8237 l0j.<0:..+.....7 0202 1E06 092A 8648 82F7 1201 0202 0609 ......H........ 2A86 4886 F712 0102 0206 0A2A 8648 86F7 .H........_.H.. 1201 0202 0306 0A2B 0601 0401 8237 0202 .......+.....7.. 0AA3 2A30 28A0 261B 246E 6F74 5F64 6566 ..0(.&.$not_def 696E 6564 5F69 6E5F 5246 4334 3137 3840 ined_in_RFC4178@ 706C 6561 7365 5F69 676E 6F72 65 please_ignore

background.js:6531 Negotiated with SMB1/CIFS background.js:6531 CAP_EXTENDED_SECURITY: true background.js:6531 CAP_COMPRESSED_DATA: false background.js:6531 CAP_BULK_TRANSFER: false background.js:6531 CAP_UNIX: false background.js:6531 CAP_LARGE_WRITEX: true background.js:6531 CAP_LARGE_READX: true background.js:6531 CAP_INFOLEVEL_PASSTHROUGH: true background.js:6531 CAP_DFS: false background.js:6531 CAP_NT_FIND: true background.js:6531 CAP_LOCK_AND_READ: true background.js:6531 CAP_LEVEL_II_OPLOCKS: true background.js:6531 CAP_STATUS32: true background.js:6531 CAP_RPC_REMOTE_APIS: true background.js:6531 CAP_NT_SMBS: true background.js:6531 CAP_LARGE_FILES: true background.js:6531 CAP_UNICODE: true background.js:6531 CAP_MPX_MODE: false background.js:6531 CAP_RAW_MODE: false background.js:6531 NEGOTIATE_SECURITY_SIGNATURES_REQUIRED: 0 background.js:6531 NEGOTIATE_SECURITY_SIGNATURES_ENABLED: 0 background.js:6531 NEGOTIATE_SECURITY_CHALLENGE_RESPONSE: 1 background.js:6531 NEGOTIATE_SECURITY_USERLEVEL: 1 background.js:6524 Header background.js:6524 NegotiateProtocolResponse background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7300 0000 0018 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0C00 0000 0100 ................ 0CFF 0000 0004 4132 0001 0000 0000 0029 ......A2.......) 0000 0000 0054 0000 8065 004E 544C 4D53 .....T...e.NTLMS 5350 0001 0000 0015 B208 2001 0001 0020 SP........ .... 0000 0008 0008 0021 0000 003F 4653 505F .......!...?FSP 4349 4653 4300 6800 7200 6F00 6D00 6500 CIFSC.h.r.o.m.e. 4F00 5300 0000 4600 6900 6C00 6500 2000 O.S...F.i.l.e. . 5300 7900 7300 7400 6500 6D00 2000 6600 S.y.s.t.e.m. .f. 6F00 7200 2000 4300 4900 4600 5300 0000 o.r. .C.I.F.S...

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 471 background.js:6524 FF53 4D42 7316 0000 C098 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0C00 0008 0100 ................ 04FF 00D7 0100 00FC 00AC 014E 544C 4D53 ...........NTLMS 5350 0002 0000 0010 0010 0038 0000 0015 SP.........8.... 8289 22D4 7DF1 7EA9 6B89 5100 0000 0000 ..".}.~.k.Q..... 0000 00B4 00B4 0048 0000 0006 01B1 1D00 .......H........ 0000 0F46 004F 0058 0052 004F 0041 0043 ...F.O.X.R.O.A.C 0048 0002 0010 0046 004F 0058 0052 004F .H.....F.O.X.R.O 0041 0043 0048 0001 0018 0058 0041 004E .A.C.H.....X.A.N 0044 002D 0043 004F 0052 0050 002D 0030 .D.-.C.O.R.P.-.0 0031 0004 001A 0066 006F 0078 0072 006F .1.....f.o.x.r.o 0061 0063 0068 002E 0063 006F 0072 0070 .a.c.h...c.o.r.p 0003 0034 0078 0061 006E 0064 002D 0063 ...4.x.a.n.d.-.c 006F 0072 0070 002D 0030 0031 002E 0066 .o.r.p.-.0.1...f 006F 0078 0072 006F 0061 0063 0068 002E .o.x.r.o.a.c.h.. 0063 006F 0072 0070 0005 001A 0066 006F .c.o.r.p.....f.o 0078 0072 006F 0061 0063 0068 002E 0063 .x.r.o.a.c.h...c 006F 0072 0070 0007 0008 006F 9225 96C9 .o.r.p.....o.%.. 31D1 0100 0000 0000 5700 6900 6E00 6400 1.......W.i.n.d. 6F00 7700 7300 2000 5300 6500 7200 7600 o.w.s. .S.e.r.v. 6500 7200 2000 3200 3000 3000 3800 2000 e.r. .2.0.0.8. . 5200 3200 2000 5300 7400 6100 6E00 6400 R.2. .S.t.a.n.d. 6100 7200 6400 2000 3700 3600 3000 3100 a.r.d. .7.6.0.1. 2000 5300 6500 7200 7600 6900 6300 6500 .S.e.r.v.i.c.e. 2000 5000 6100 6300 6B00 2000 3100 0000 .P.a.c.k. .1... 5700 6900 6E00 6400 6F00 7700 7300 2000 W.i.n.d.o.w.s. . 5300 6500 7200 7600 6500 7200 2000 3200 S.e.r.v.e.r. .2. 3000 3000 3800 2000 5200 3200 2000 5300 0.0.8. .R.2. .S. 7400 6100 6E00 6400 6100 7200 6400 2000 t.a.n.d.a.r.d. . 3600 2E00 3100 00 6...1..

background.js:6524 Header background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE56: false background.js:6531 Use LMv1 and NTLMv1 because LMCompatibilityLevel=0 background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7300 0000 0018 43C8 0000 0000 .SMBs.....C..... 0000 0000 0000 0000 0000 0C00 0008 0200 ................ 0CFF 0000 0004 4132 0001 0000 0000 00C2 ......A2........ 0000 0000 0054 0000 80FF 004E 544C 4D53 .....T.....NTLMS 5350 0003 0000 0018 0018 0040 0000 0018 SP.........@.... 0018 0058 0000 0010 0010 0070 0000 0032 ...X.......p...2 0032 0080 0000 0010 0010 00B2 0000 0000 .2.............. 0000 0000 0000 0001 0200 0026 0395 BCBA ...........&.... BC51 9CAB BA15 CB4D 4248 144A D955 4858 .Q.....MBH.J.UHX 7053 CD80 D332 BB01 0D2F AF1B 6D77 C91A pS...2.../..mw.. 0F3A 1307 1C14 7008 F050 6B66 006F 0078 .:....p..Pkf.o.x 0072 006F 0061 0063 0068 0031 0030 002E .r.o.a.c.h.1.0.. 0032 0031 002E 0031 002E 0031 0032 0030 .2.1...1...1.2.0 005C 0061 0064 006D 0069 006E 0069 0073 ..a.d.m.i.n.i.s 0074 0072 0061 0074 006F 0072 0046 0053 .t.r.a.t.o.r.F.S 0050 005F 0043 0049 0046 0053 0000 4300 .P..C.I.F.S..C. 6800 7200 6F00 6D00 6500 4F00 5300 0000 h.r.o.m.e.O.S... 4600 6900 6C00 6500 2000 5300 7900 7300 F.i.l.e. .S.y.s. 7400 6500 6D00 2000 6600 6F00 7200 2000 t.e.m. .f.o.r. . 4300 4900 4600 5300 0000 C.I.F.S...

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 35 background.js:6524 FF53 4D42 736D 0000 C098 43C8 0000 0000 .SMBsm....C..... 0000 0000 0000 0000 0000 0C00 0008 0200 ................ 0000 00 ...

background.js:6517 Object background.js:6517 Object background.js:6517 Object background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:19638 /E:\ background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:19638 /E:\ background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:19638 /E:\ background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB1/CIFS background.js:6531 CAP_EXTENDED_SECURITY: true background.js:6531 CAP_COMPRESSED_DATA: false background.js:6531 CAP_BULK_TRANSFER: false background.js:6531 CAP_UNIX: false background.js:6531 CAP_LARGE_WRITEX: true background.js:6531 CAP_LARGE_READX: true background.js:6531 CAP_INFOLEVEL_PASSTHROUGH: true background.js:6531 CAP_DFS: false background.js:6531 CAP_NT_FIND: true background.js:6531 CAP_LOCK_AND_READ: true background.js:6531 CAP_LEVEL_II_OPLOCKS: true background.js:6531 CAP_STATUS32: true background.js:6531 CAP_RPC_REMOTE_APIS: true background.js:6531 CAP_NT_SMBS: true background.js:6531 CAP_LARGE_FILES: true background.js:6531 CAP_UNICODE: true background.js:6531 CAP_MPX_MODE: false background.js:6531 CAP_RAW_MODE: false background.js:6531 NEGOTIATE_SECURITY_SIGNATURES_REQUIRED: 0 background.js:6531 NEGOTIATE_SECURITY_SIGNATURES_ENABLED: 0 background.js:6531 NEGOTIATE_SECURITY_CHALLENGE_RESPONSE: 1 background.js:6531 NEGOTIATE_SECURITY_USER_LEVEL: 1 background.js:6524 Header background.js:6524 NegotiateProtocolResponse background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:6524 Header background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupAndxRequest background.js:6524 Packet background.js:19638 /E:\ background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE_56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6517 Object background.js:6517 Client#login background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7200 0000 0018 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 1600 0000 0000 ................ 0022 0002 4E54 204C 4D20 302E 3132 0002 ."..NT LM 0.12.. 534D 4220 322E 3030 3200 0253 4D42 2032 SMB 2.002..SMB 2 2E3F 3F3F 00 .???.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 248 background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0100 .SMB@........... 0100 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 4100 0100 FF02 0000 DC62 C30C 05A1 0C4A A........b.....J AAB5 4C18 32E6 416C 0700 0000 0000 1000 ..L.2.Al........ 0000 1000 0000 1000 08B7 3717 CA31 D101 ..........7..1.. CA83 BBAC EB1D D101 8000 7800 0000 0000 ..........x..... 6076 0606 2B06 0105 0502 A06C 306A A03C `v..+......l0j.< 303A 060A 2B06 0104 0182 3702 021E 0609 0:..+.....7..... 2A86 4882 F712 0102 0206 092A 8648 86F7 .H.........H.. 1201 0202 060A 2A86 4886 F712 0102 0203 .......H....... 060A 2B06 0104 0182 3702 020A A32A 3028 ..+.....7...._0( A026 1B24 6E6F 745F 6465 6669 6E65 645F .&.$notdefined 696E 5F52 4643 3431 3738 4070 6C65 6173 in_RFC4178@pleas 655F 6967 6E6F 7265 e_ignore

background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0000 .SMB@........... 0000 0000 0000 0000 0100 0000 0000 0000 ................ 5F24 0000 0000 0000 0000 0000 0000 0000 _$.............. 0000 0000 0000 0000 0000 0000 0000 0000 ................ 2400 0200 0100 0000 0000 0000 4824 687C $...........H$h| ABEE B371 930E 7294 FEF8 FA99 0000 0000 ...q..r......... 0000 0000 0202 1002 ........

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 248 background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0100 .SMB@........... 0100 0000 0000 0000 0100 0000 0000 0000 ................ 5F24 0000 0000 0000 0000 0000 0000 0000 $.............. 0000 0000 0000 0000 0000 0000 0000 0000 ................ 4100 0100 1002 0000 DC62 C30C 05A1 0C4A A........b.....J AAB5 4C18 32E6 416C 0700 0000 0000 1000 ..L.2.Al........ 0000 1000 0000 1000 CA79 3C17 CA31 D101 .........y<..1.. CA83 BBAC EB1D D101 8000 7800 0000 0000 ..........x..... 6076 0606 2B06 0105 0502 A06C 306A A03C `v..+......l0j.< 303A 060A 2B06 0104 0182 3702 021E 0609 0:..+.....7..... 2A86 4882 F712 0102 0206 092A 8648 86F7 .H.........H.. 1201 0202 060A 2A86 4886 F712 0102 0203 ......_.H....... 060A 2B06 0104 0182 3702 020A A32A 3028 ..+.....7...._0( A026 1B24 6E6F 745F 6465 6669 6E65 645F .&.$notdefined 696E 5F52 4643 3431 3738 4070 6C65 6173 in_RFC4178@pleas 655F 6967 6E6F 7265 e_ignore

background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0100 0000 0000 0100 0100 .SMB@........... 0000 0000 0000 0000 0200 0000 0000 0000 ................ 5F24 0000 0000 0000 0000 0000 0000 0000 _$.............. 0000 0000 0000 0000 0000 0000 0000 0000 ................ 1900 0001 0100 0000 0000 0000 5800 4B00 ............X.K. 0000 0000 0000 0000 6049 0606 2B06 0105 ........`I..+... 0502 A03F 303D A00E 300C 060A 2B06 0104 ...?0=..0...+... 0182 3702 020A A22B 0429 4E54 4C4D 5353 ..7....+.)NTLMSS 5000 0100 0000 15B2 0820 0100 0100 2000 P........ .... . 0000 0800 0800 2100 0000 3F46 5350 5F43 ......!...?FSP_C 4946 53 IFS

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 357 background.js:6524 FE53 4D42 4000 0100 1600 00C0 0100 0100 .SMB@........... 0100 0000 0000 0000 0200 0000 0000 0000 ................ 5F24 0000 0000 0000 1103 0084 0604 0000 $.............. 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0900 0000 4800 1D01 A182 0119 3082 0115 ....H.......0... A003 0A01 01A1 0C06 0A2B 0601 0401 8237 .........+.....7 0202 0AA2 81FF 0481 FC4E 544C 4D53 5350 .........NTLMSSP 0002 0000 0010 0010 0038 0000 0015 8289 .........8...... 2248 3803 5D07 6097 9F00 0000 0000 0000 "H8.].`......... 00B4 00B4 0048 0000 0006 01B1 1D00 0000 .....H.......... 0F46 004F 0058 0052 004F 0041 0043 0048 .F.O.X.R.O.A.C.H 0002 0010 0046 004F 0058 0052 004F 0041 .....F.O.X.R.O.A 0043 0048 0001 0018 0058 0041 004E 0044 .C.H.....X.A.N.D 002D 0043 004F 0052 0050 002D 0030 0031 .-.C.O.R.P.-.0.1 0004 001A 0066 006F 0078 0072 006F 0061 .....f.o.x.r.o.a 0063 0068 002E 0063 006F 0072 0070 0003 .c.h...c.o.r.p.. 0034 0078 0061 006E 0064 002D 0063 006F .4.x.a.n.d.-.c.o 0072 0070 002D 0030 0031 002E 0066 006F .r.p.-.0.1...f.o 0078 0072 006F 0061 0063 0068 002E 0063 .x.r.o.a.c.h...c 006F 0072 0070 0005 001A 0066 006F 0078 .o.r.p.....f.o.x 0072 006F 0061 0063 0068 002E 0063 006F .r.o.a.c.h...c.o 0072 0070 0007 0008 008C 3C41 17CA 31D1 .r.p......<A..1. 0100 0000 00 .....

background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0100 0000 0000 0100 0100 .SMB@........... 0000 0000 0000 0000 0300 0000 0000 0000 ................ 5F24 0000 0000 0000 1103 0084 0604 0000 $.............. 0000 0000 0000 0000 0000 0000 0000 0000 ................ 1900 0001 0100 0000 0000 0000 5800 9001 ............X... 0000 0000 0000 0000 A182 018C 3082 0188 ............0... A282 0184 0482 0180 4E54 4C4D 5353 5000 ........NTLMSSP. 0300 0000 1800 1800 4000 0000 E400 E400 ........@....... 5800 0000 1A00 1A00 3C01 0000 1A00 1A00 X.......<....... 5601 0000 1000 1000 7001 0000 0000 0000 V.......p....... 0000 0000 0102 0000 D072 22FB A524 D93F .........r"..$.? D586 9FE6 F0BC F723 6D49 5D5D 69DC 06B6 .......#mI]]i... ADB0 9E3A DFEF E2C3 D5DE 29EA AAA9 F62A ...:......)....* 0101 0000 0000 0000 5017 EA16 CA31 D101 ........P....1.. B84A BFFD C103 0000 0000 0000 0200 1000 .J.............. 4600 4F00 5800 5200 4F00 4100 4300 4800 F.O.X.R.O.A.C.H. 0100 1800 5800 4100 4E00 4400 2D00 4300 ....X.A.N.D.-.C. 4F00 5200 5000 2D00 3000 3100 0400 1A00 O.R.P.-.0.1..... 6600 6F00 7800 7200 6F00 6100 6300 6800 f.o.x.r.o.a.c.h. 2E00 6300 6F00 7200 7000 0300 3400 7800 ..c.o.r.p...4.x. 6100 6E00 6400 2D00 6300 6F00 7200 7000 a.n.d.-.c.o.r.p. 2D00 3000 3100 2E00 6600 6F00 7800 7200 -.0.1...f.o.x.r. 6F00 6100 6300 6800 2E00 6300 6F00 7200 o.a.c.h...c.o.r. 7000 0500 1A00 6600 6F00 7800 7200 6F00 p.....f.o.x.r.o. 6100 6300 6800 2E00 6300 6F00 7200 7000 a.c.h...c.o.r.p. 0700 0800 8C3C 4117 CA31 D101 0000 0000 .....<A..1...... 0000 0000 6600 6F00 7800 7200 6F00 6100 ....f.o.x.r.o.a. 6300 6800 2E00 6300 6F00 7200 7000 6100 c.h...c.o.r.p.a. 6E00 6400 7200 6500 7700 6300 6C00 6100 n.d.r.e.w.c.l.a. 7000 6800 6100 6D00 4600 5300 5000 5F00 p.h.a.m.F.S.P._. 4300 4900 4600 5300 C.I.F.S.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 73 background.js:6524 FE53 4D42 4000 0100 6D00 00C0 0100 0100 .SMB@...m....... 0100 0000 0000 0000 0300 0000 0000 0000 ................ 5F24 0000 0000 0000 1103 0084 0604 0000 $.............. 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0900 0000 0000 0000 00 .........

background.js:6517 Object background.js:19638 /E: background.js:6517 Client#login background.js:6524 connect background.js:6524 Header background.js:6524 NegotiateProtocolRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FF53 4D42 7200 0000 0018 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 1700 0000 0000 ................ 0022 0002 4E54 204C 4D20 302E 3132 0002 ."..NT LM 0.12.. 534D 4220 322E 3030 3200 0253 4D42 2032 SMB 2.002..SMB 2 2E3F 3F3F 00 .???.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 248 background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0100 .SMB@........... 0100 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 4100 0100 FF02 0000 DC62 C30C 05A1 0C4A A........b.....J AAB5 4C18 32E6 416C 0700 0000 0000 1000 ..L.2.Al........ 0000 1000 0000 1000 97A6 357F D931 D101 ..........5..1.. CA83 BBAC EB1D D101 8000 7800 0000 0000 ..........x..... 6076 0606 2B06 0105 0502 A06C 306A A03C `v..+......l0j.< 303A 060A 2B06 0104 0182 3702 021E 0609 0:..+.....7..... 2A86 4882 F712 0102 0206 092A 8648 86F7 .H.........H.. 1201 0202 060A 2A86 4886 F712 0102 0203 .......H....... 060A 2B06 0104 0182 3702 020A A32A 3028 ..+.....7...._0( A026 1B24 6E6F 745F 6465 6669 6E65 645F .&.$notdefined 696E 5F52 4643 3431 3738 4070 6C65 6173 in_RFC4178@pleas 655F 6967 6E6F 7265 e_ignore

background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header background.js:6524 Header background.js:6524 NegotiateRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0000 .SMB@........... 0000 0000 0000 0000 0100 0000 0000 0000 ................ 151C 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 2400 0200 0100 0000 0000 0000 0C71 41F8 $............qA. 0791 4E7F 6A2F 927E C75B 54FC 0000 0000 ..N.j/.~.[T..... 0000 0000 0202 1002 ........

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 248 background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0100 .SMB@........... 0100 0000 0000 0000 0100 0000 0000 0000 ................ 151C 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 4100 0100 1002 0000 DC62 C30C 05A1 0C4A A........b.....J AAB5 4C18 32E6 416C 0700 0000 0000 1000 ..L.2.Al........ 0000 1000 0000 1000 BACA 3C7F D931 D101 ..........<..1.. CA83 BBAC EB1D D101 8000 7800 0000 0000 ..........x..... 6076 0606 2B06 0105 0502 A06C 306A A03C `v..+......l0j.< 303A 060A 2B06 0104 0182 3702 021E 0609 0:..+.....7..... 2A86 4882 F712 0102 0206 092A 8648 86F7 .H.........H.. 1201 0202 060A 2A86 4886 F712 0102 0203 .......H....... 060A 2B06 0104 0182 3702 020A A32A 3028 ..+.....7...._0( A026 1B24 6E6F 745F 6465 6669 6E65 645F .&.$notdefined 696E 5F52 4643 3431 3738 4070 6C65 6173 in_RFC4178@pleas 655F 6967 6E6F 7265 e_ignore

background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header background.js:6524 NegotiateResponse background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0100 0000 0000 0100 0100 .SMB@........... 0000 0000 0000 0000 0200 0000 0000 0000 ................ 151C 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 1900 0001 0100 0000 0000 0000 5800 4B00 ............X.K. 0000 0000 0000 0000 6049 0606 2B06 0105 ........`I..+... 0502 A03F 303D A00E 300C 060A 2B06 0104 ...?0=..0...+... 0182 3702 020A A22B 0429 4E54 4C4D 5353 ..7....+.)NTLMSS 5000 0100 0000 15B2 0820 0100 0100 2000 P........ .... . 0000 0800 0800 2100 0000 3F46 5350 5F43 ......!...?FSP_C 4946 53 IFS

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 357 background.js:6524 FE53 4D42 4000 0100 1600 00C0 0100 0100 .SMB@........... 0100 0000 0000 0000 0200 0000 0000 0000 ................ 151C 0000 0000 0000 1D05 0000 0A04 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0900 0000 4800 1D01 A182 0119 3082 0115 ....H.......0... A003 0A01 01A1 0C06 0A2B 0601 0401 8237 .........+.....7 0202 0AA2 81FF 0481 FC4E 544C 4D53 5350 .........NTLMSSP 0002 0000 0010 0010 0038 0000 0015 8289 .........8...... 22F7 E06F F125 A4D9 EB00 0000 0000 0000 "..o.%.......... 00B4 00B4 0048 0000 0006 01B1 1D00 0000 .....H.......... 0F46 004F 0058 0052 004F 0041 0043 0048 .F.O.X.R.O.A.C.H 0002 0010 0046 004F 0058 0052 004F 0041 .....F.O.X.R.O.A 0043 0048 0001 0018 0058 0041 004E 0044 .C.H.....X.A.N.D 002D 0043 004F 0052 0050 002D 0030 0031 .-.C.O.R.P.-.0.1 0004 001A 0066 006F 0078 0072 006F 0061 .....f.o.x.r.o.a 0063 0068 002E 0063 006F 0072 0070 0003 .c.h...c.o.r.p.. 0034 0078 0061 006E 0064 002D 0063 006F .4.x.a.n.d.-.c.o 0072 0070 002D 0030 0031 002E 0066 006F .r.p.-.0.1...f.o 0078 0072 006F 0061 0063 0068 002E 0063 .x.r.o.a.c.h...c 006F 0072 0070 0005 001A 0066 006F 0078 .o.r.p.....f.o.x 0072 006F 0061 0063 0068 002E 0063 006F .r.o.a.c.h...c.o 0072 0070 0007 0008 007C 8D41 7FD9 31D1 .r.p.....|.A..1. 0100 0000 00 .....

background.js:6524 Header background.js:6524 Asn1Obj background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header background.js:6524 SessionSetupRequest background.js:6524 Packet background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0100 0000 0000 0100 0100 .SMB@........... 0000 0000 0000 0000 0300 0000 0000 0000 ................ 151C 0000 0000 0000 1D05 0000 0A04 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 1900 0001 0100 0000 0000 0000 5800 9001 ............X... 0000 0000 0000 0000 A182 018C 3082 0188 ............0... A282 0184 0482 0180 4E54 4C4D 5353 5000 ........NTLMSSP. 0300 0000 1800 1800 4000 0000 E400 E400 ........@....... 5800 0000 1A00 1A00 3C01 0000 1A00 1A00 X.......<....... 5601 0000 1000 1000 7001 0000 0000 0000 V.......p....... 0000 0000 0102 0000 FCD3 2CE8 882F 2973 ..........,../)s 8DC6 3CD2 0302 5028 6BAE 5966 9503 E65A ..<...P(k.Yf...Z 49C1 0DE2 04B7 9F65 0380 CB44 6982 25B5 I......e...Di.%. 0101 0000 0000 0000 700A E77E D931 D101 ........p..~.1.. B26A 780F BB00 0000 0000 0000 0200 1000 .jx............. 4600 4F00 5800 5200 4F00 4100 4300 4800 F.O.X.R.O.A.C.H. 0100 1800 5800 4100 4E00 4400 2D00 4300 ....X.A.N.D.-.C. 4F00 5200 5000 2D00 3000 3100 0400 1A00 O.R.P.-.0.1..... 6600 6F00 7800 7200 6F00 6100 6300 6800 f.o.x.r.o.a.c.h. 2E00 6300 6F00 7200 7000 0300 3400 7800 ..c.o.r.p...4.x. 6100 6E00 6400 2D00 6300 6F00 7200 7000 a.n.d.-.c.o.r.p. 2D00 3000 3100 2E00 6600 6F00 7800 7200 -.0.1...f.o.x.r. 6F00 6100 6300 6800 2E00 6300 6F00 7200 o.a.c.h...c.o.r. 7000 0500 1A00 6600 6F00 7800 7200 6F00 p.....f.o.x.r.o. 6100 6300 6800 2E00 6300 6F00 7200 7000 a.c.h...c.o.r.p. 0700 0800 7C8D 417F D931 D101 0000 0000 ....|.A..1...... 0000 0000 6600 6F00 7800 7200 6F00 6100 ....f.o.x.r.o.a. 6300 6800 2E00 6300 6F00 7200 7000 6100 c.h...c.o.r.p.a. 6E00 6400 7200 6500 7700 6300 6C00 6100 n.d.r.e.w.c.l.a. 7000 6800 6100 6D00 4600 5300 5000 5F00 p.h.a.m.F.S.P.. 4300 4900 4600 5300 C.I.F.S.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 73 background.js:6524 FE53 4D42 4000 0100 6D00 00C0 0100 0100 .SMB@...m....... 0100 0000 0000 0000 0300 0000 0000 0000 ................ 151C 0000 0000 0000 1D05 0000 0A04 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0900 0000 0000 0000 00 .........

661 console messages are not shown. background.js:6517 Object {serverName: "10.21.1.120", serverPort: "445", username: "x", password: domainName: "xh.corp" x.corp"…} background.js:19638 /E: background.js:6517 Client#login background.js:6524 connect background.js:6524 Header {types: Types, protocol: "SMB", command: 114, errorClass: 0, errorCode: 0…} background.js:6524 NegotiateProtocolRequest {types: Types, dialects: Array[0], dialects: Array[3]} background.js:6524 Packet {types: Types, data: ArrayBuffer, dataLength: 69, packetHelper_: PacketHelper} background.js:6517 writePacket background.js:6524 FF53 4D42 7200 0000 0018 43C8 0000 0000 .SMBr.....C..... 0000 0000 0000 0000 0000 1800 0000 0000 ................ 0022 0002 4E54 204C 4D20 302E 3132 0002 ."..NT LM 0.12.. 534D 4220 322E 3030 3200 0253 4D42 2032 SMB 2.002..SMB 2 2E3F 3F3F 00 .???.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 248 background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0100 .SMB@........... 0100 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 4100 0100 FF02 0000 DC62 C30C 05A1 0C4A A........b.....J AAB5 4C18 32E6 416C 0700 0000 0000 1000 ..L.2.Al........ 0000 1000 0000 1000 DC29 47B9 D931 D101 .........)G..1.. CA83 BBAC EB1D D101 8000 7800 0000 0000 ..........x..... 6076 0606 2B06 0105 0502 A06C 306A A03C `v..+......l0j.< 303A 060A 2B06 0104 0182 3702 021E 0609 0:..+.....7..... 2A86 4882 F712 0102 0206 092A 8648 86F7 .H.........H.. 1201 0202 060A 2A86 4886 F712 0102 0203 .......H....... 060A 2B06 0104 0182 3702 020A A32A 3028 ..+.....7...._0( A026 1B24 6E6F 745F 6465 6669 6E65 645F .&.$notdefined 696E 5F52 4643 3431 3738 4070 6C65 6173 in_RFC4178@pleas 655F 6967 6E6F 7265 e_ignore

background.js:6531 Negotiated with SMB2 background.js:6524 Asn1Obj {tag: 96, value: null, children: Array[2]} background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:14754 Header {types: Types, protocol: "SMB", structureSize: 64, creditCharge: 0, channelSequence: 0…} background.js:6524 Header {types: Types, protocol: "SMB", structureSize: 64, creditCharge: 0, channelSequence: 0…} background.js:6524 NegotiateRequest {types: Types, clientGuid: Uint8Array[16]} background.js:6524 Packet {types: Types, data: ArrayBuffer, dataLength: 104, packetHelper_: PacketHelper} background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0000 .SMB@........... 0000 0000 0000 0000 0100 0000 0000 0000 ................ A898 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 2400 0200 0100 0000 0000 0000 E7BC EA5A $..............Z 8440 BBE9 19A2 0BBD 5269 3EE1 0000 0000 .@......Ri>..... 0000 0000 0202 1002 ........

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 readPacketSize - 2 background.js:6517 readPacket: 248 background.js:6524 FE53 4D42 4000 0000 0000 0000 0000 0100 .SMB@........... 0100 0000 0000 0000 0100 0000 0000 0000 ................ A898 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 4100 0100 1002 0000 DC62 C30C 05A1 0C4A A........b.....J AAB5 4C18 32E6 416C 0700 0000 0000 1000 ..L.2.Al........ 0000 1000 0000 1000 60AF 50B9 D931 D101 .........P..1.. CA83 BBAC EB1D D101 8000 7800 0000 0000 ..........x..... 6076 0606 2B06 0105 0502 A06C 306A A03Cv..+......l0j.< 303A 060A 2B06 0104 0182 3702 021E 0609 0:..+.....7..... 2A86 4882 F712 0102 0206 092A 8648 86F7 .H.........H.. 1201 0202 060A 2A86 4886 F712 0102 0203 .......H....... 060A 2B06 0104 0182 3702 020A A32A 3028 ..+.....7...._0( A026 1B24 6E6F 745F 6465 6669 6E65 645F .&.$notdefined 696E 5F52 4643 3431 3738 4070 6C65 6173 in_RFC4178@pleas 655F 6967 6E6F 7265 e_ignore

background.js:6524 Header {types: Types, protocol: "SMB", structureSize: 64, creditCharge: 0, channelSequence: 0…} background.js:6524 Asn1Obj {tag: 96, value: null, children: Array[2]} background.js:6531 SPNEGO = true background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.30 background.js:6531 Supported mechType: 1.2.840.6144018.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2 background.js:6531 Supported mechType: 1.2.840.14532626.1.2.2.3 background.js:6531 Supported mechType: 1.3.6.1.4.1.311.2.2.10 background.js:6524 Header {types: Types, protocol: "SMB", structureSize: 64, creditCharge: 0, channelSequence: 0…} background.js:6524 NegotiateResponse {types: Types, structureSize: 65, securityMode: 1, dialectRevision: 528, serverGuid: "�b��J��L2�Al"…} background.js:6524 Header {types: Types, protocol: "SMB", structureSize: 64, creditCharge: 1, channelSequence: 0…} background.js:6524 SessionSetupRequest {types: Types, flags: 0, securityMode: 1, capabilities: 1, channel: 0…} background.js:6524 Packet {types: Types, data: ArrayBuffer, dataLength: 163, packetHelper: PacketHelper} background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0100 0000 0000 0100 0100 .SMB@........... 0000 0000 0000 0000 0200 0000 0000 0000 ................ A898 0000 0000 0000 0000 0000 0000 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 1900 0001 0100 0000 0000 0000 5800 4B00 ............X.K. 0000 0000 0000 0000 6049 0606 2B06 0105 ........`I..+... 0502 A03F 303D A00E 300C 060A 2B06 0104 ...?0=..0...+... 0182 3702 020A A22B 0429 4E54 4C4D 5353 ..7....+.)NTLMSS 5000 0100 0000 15B2 0820 0100 0100 2000 P........ .... . 0000 0800 0800 2100 0000 3F46 5350 5F43 ......!...?FSP_C 4946 53 IFS

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 357 background.js:6524 FE53 4D42 4000 0100 1600 00C0 0100 0100 .SMB@........... 0100 0000 0000 0000 0200 0000 0000 0000 ................ A898 0000 0000 0000 8109 00B8 0504 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0900 0000 4800 1D01 A182 0119 3082 0115 ....H.......0... A003 0A01 01A1 0C06 0A2B 0601 0401 8237 .........+.....7 0202 0AA2 81FF 0481 FC4E 544C 4D53 5350 .........NTLMSSP 0002 0000 0010 0010 0038 0000 0015 8289 .........8...... 22AA CC7E 0A95 6D2E E700 0000 0000 0000 "..~..m......... 00B4 00B4 0048 0000 0006 01B1 1D00 0000 .....H.......... 0F46 004F 0058 0052 004F 0041 0043 0048 .F.O.X.R.O.A.C.H 0002 0010 0046 004F 0058 0052 004F 0041 .....F.O.X.R.O.A 0043 0048 0001 0018 0058 0041 004E 0044 .C.H.....X.A.N.D 002D 0043 004F 0052 0050 002D 0030 0031 .-.C.O.R.P.-.0.1 0004 001A 0066 006F 0078 0072 006F 0061 .....f.o.x.r.o.a 0063 0068 002E 0063 006F 0072 0070 0003 .c.h...c.o.r.p.. 0034 0078 0061 006E 0064 002D 0063 006F .4.x.a.n.d.-.c.o 0072 0070 002D 0030 0031 002E 0066 006F .r.p.-.0.1...f.o 0078 0072 006F 0061 0063 0068 002E 0063 .x.r.o.a.c.h...c 006F 0072 0070 0005 001A 0066 006F 0078 .o.r.p.....f.o.x 0072 006F 0061 0063 0068 002E 0063 006F .r.o.a.c.h...c.o 0072 0070 0007 0008 0045 965C B9D9 31D1 .r.p.....E...1. 0100 0000 00 .....

background.js:6524 Header {types: Types, protocol: "SMB", structureSize: 64, creditCharge: 1, channelSequence: 22…} background.js:6524 Asn1Obj {tag: 161, value: null, children: Array[1]} background.js:6531 Response OID = 1.3.6.1.4.1.311.2.2.10 background.js:6531 NTLMSSP_NEGOTIATE_UNICODE: true background.js:6531 NTLMSSP_NEGOTIATE_OEM: false background.js:6531 NTLMSSP_REQUEST_TARGET: true background.js:6531 NTLMSSP_NEGOTIATE_SIGN: true background.js:6531 NTLMSSP_NEGOTIATE_SEAL: false background.js:6531 NTLMSSP_NEGOTIATE_DATAGRAM_STYLE: false background.js:6531 NTLMSSP_NEGOTIATE_LM_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_NETWARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM: true background.js:6531 NTLMSSP_NEGOTIATE_OEM_DOMAIN_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_OEM_WORKSTATION_SUPPLIED: false background.js:6531 NTLMSSP_NEGOTIATE_LOCAL_CALL: false background.js:6531 NTLMSSP_NEGOTIATE_ALWAYS_SIGN: true background.js:6531 NTLMSSP_TARGET_TYPE_DOMAIN: true background.js:6531 NTLMSSP_TARGET_TYPE_SERVER: false background.js:6531 NTLMSSP_TARGET_TYPE_SHARE: false background.js:6531 NTLMSSP_NEGOTIATE_NTLM2_KEY: true background.js:6531 NTLMSSP_REQUEST_INIT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_ACCEPT_RESPONSE: false background.js:6531 NTLMSSP_REQUEST_NON_NT_SESSION_KEY: false background.js:6531 NTLMSSP_NEGOTIATE_TARGET_INFO: true background.js:6531 NTLMSSP_NEGOTIATE_128: true background.js:6531 NTLMSSP_NEGOTIATE_KEY_EXCH: false background.js:6531 NTLMSSP_NEGOTIATE56: false background.js:6531 Use LMv2 and NTLMv2 because LMCompatibilityLevel=5 background.js:6524 Header {types: Types, protocol: "SMB", structureSize: 64, creditCharge: 1, channelSequence: 0…} background.js:6524 SessionSetupRequest {types: Types, flags: 0, securityMode: 1, capabilities: 1, channel: 0…} background.js:6524 Packet {types: Types, data: ArrayBuffer, dataLength: 488, packetHelper: PacketHelper} background.js:6517 writePacket background.js:6524 FE53 4D42 4000 0100 0000 0000 0100 0100 .SMB@........... 0000 0000 0000 0000 0300 0000 0000 0000 ................ A898 0000 0000 0000 8109 00B8 0504 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 1900 0001 0100 0000 0000 0000 5800 9001 ............X... 0000 0000 0000 0000 A182 018C 3082 0188 ............0... A282 0184 0482 0180 4E54 4C4D 5353 5000 ........NTLMSSP. 0300 0000 1800 1800 4000 0000 E400 E400 ........@....... 5800 0000 1A00 1A00 3C01 0000 1A00 1A00 X.......<....... 5601 0000 1000 1000 7001 0000 0000 0000 V.......p....... 0000 0000 0102 0000 BCF1 117C 6382 B37A ...........|c..z 5CEC 4CA7 8310 2933 3052 BFCA 2A1F F5C5 .L...)30R..*... A1A8 DFD6 353E 1E74 7889 EA3E 0027 1174 ....5>.tx..>.'.t 0101 0000 0000 0000 A0C0 0CB9 D931 D101 .............1.. 4AB3 DBE2 1105 0000 0000 0000 0200 1000 J............... 4600 4F00 5800 5200 4F00 4100 4300 4800 F.O.X.R.O.A.C.H. 0100 1800 5800 4100 4E00 4400 2D00 4300 ....X.A.N.D.-.C. 4F00 5200 5000 2D00 3000 3100 0400 1A00 O.R.P.-.0.1..... 6600 6F00 7800 7200 6F00 6100 6300 6800 f.o.x.r.o.a.c.h. 2E00 6300 6F00 7200 7000 0300 3400 7800 ..c.o.r.p...4.x. 6100 6E00 6400 2D00 6300 6F00 7200 7000 a.n.d.-.c.o.r.p. 2D00 3000 3100 2E00 6600 6F00 7800 7200 -.0.1...f.o.x.r. 6F00 6100 6300 6800 2E00 6300 6F00 7200 o.a.c.h...c.o.r. 7000 0500 1A00 6600 6F00 7800 7200 6F00 p.....f.o.x.r.o. 6100 6300 6800 2E00 6300 6F00 7200 7000 a.c.h...c.o.r.p. 0700 0800 4596 5CB9 D931 D101 0000 0000 ....E...1...... 0000 0000 6600 6F00 7800 7200 6F00 6100 ....f.o.x.r.o.a. 6300 6800 2E00 6300 6F00 7200 7000 6100 c.h...c.o.r.p.a. 6E00 6400 7200 6500 7700 6300 6C00 6100 n.d.r.e.w.c.l.a. 7000 6800 6100 6D00 4600 5300 5000 5F00 p.h.a.m.F.S.P.. 4300 4900 4600 5300 C.I.F.S.

background.js:6517 readPacket background.js:6517 _readPacketSize background.js:6517 _readPacketSize - 2 background.js:6517 readPacket: 73 background.js:6524 FE53 4D42 4000 0100 6D00 00C0 0100 0100 .SMB@...m....... 0100 0000 0000 0000 0300 0000 0000 0000 ................ A898 0000 0000 0000 8109 00B8 0504 0000 ................ 0000 0000 0000 0000 0000 0000 0000 0000 ................ 0900 0000 0000 0000 00 .........