Edit tour

Windows Analysis Report
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5

Overview

General Information

Sample URL:	https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5
Analysis ID:	1428724
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1072 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2352,i,14210594405034482032,7056984617740037461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 104.123.200.136
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /s/ktl5qtvf2us1megbgmjabwqaxcdy69b5 HTTP/1.1Host: app.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notes/1506503934565?s=ktl5qtvf2us1megbgmjabwqaxcdy69b5 HTTP/1.1Host: app.box.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: z=j7masphnumonh18fajjanf5art; box_visitor_id=662251b51c7c34.67511927; bv=EUG-6777; cn=59; site_preference=desktop
Source: global traffic	HTTP traffic detected: GET /p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://app.box.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/unknown HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/splitChanges?since=-1 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /app_init HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/unknown HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /analytics-events/ HTTP/1.1Host: client-log.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/2 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/662251b51c7c34.67511927 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0SplitSDKVersion: javascript-10.22.3Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42aUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: application/jsonsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-2c52fe1ff77d1ee218b536f0611d594b-13a893f4ed8bdcb8-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/splitChanges?since=-1 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/662251b51c7c34.67511927 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /split-proxy/mySegments/2 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0Sec-WebSocket-Key: /J3wj3nPJm4THVgQDajHiQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-4fd7cc0bbe77dc0f77fc604b3ea8dc4d-b1373f5858c38c47-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFS&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-e7d920b8d99ee5c85dbca0509709772e-c169ce5ef942b7b2-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5B&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFY&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Sy9W5DN2-2-8u300nbS5VrFuZ9IyYqsdcKlo
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-6fe2b4fddd1e21e36e7f36d487dca0bc-997cf4bb2e21ff56-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIYX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=oSDdrs2t-Mk9447SW1APWccMhUC_FV7EO5Uo
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-811f476b4a6bd385a3a711102ce32017-1be6c7cc10cf00ef-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQSec-WebSocket-Key: Ih8rT2cmhWVdNd34HYDQUg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-c75dee2fda321551f69d2428f7db85e6-c3a5f54d956de2d7-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN4&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYJ&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-11e06ddd05e998b3a8dccbc3e63dad45-d5f9f3b6a039f9c4-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=GXzSYyvy-5EqYVuMy_sICELSe48haLMEgkhk
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-584e153d2a6def1cdaf2bf965dd33d29-59203c46cbeb9763-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRnoX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=zYF8l6fC--7mEQlxBZ1JVfBjN1KqeoTMjQcg
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-f107575ab1fc9bedc144949765f75c7e-98ab8f7196385bc1-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtISec-WebSocket-Key: q3JpZlGJ39tbC8yiPW3DIQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-ddba8de75f933ebf182857cca96d6352-e56e74954625a0bf-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnU&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-61f6c30fab174ca0590f49a1f3574b9f-a860104660a7a6cb-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wy0&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=fuBzQldR-yl8skRxoC-vPHHpRxH62oZsNlbY
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-d0589e719fd5bc702499c8834785e6f7-321dc32ee24dd074-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4X-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=mKLDcNZh-kWUBSkTSr7UeP0Lq6i08kNXjRgE
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-ded7a2db0ff89777c514f3b9eaa872f1-e5ed11a739bcc1b1-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRISec-WebSocket-Key: SsO1y5w0b9OkiWJvAfjQcA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-7f96f6e3a2820ac4370c481e3dbd2a7e-a74e439a57e090fd-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-b3b1795d789b9f88f75abc33d037ab5d-796c25b15e119e6f-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4i&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEn&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=H0pjsP8S-aapYvZiL4A7Xvg_cuMen8RhEQHM
Source: global traffic	HTTP traffic detected: GET /analytics-events/ HTTP/1.1Host: client-log.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077 HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 2traceparent: 00-d9bd6d0857b54257ca6fcbb3021ac515-607d120236528613-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01csrf-token: 3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeaboX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=qL421Q3Y-DHbwL3Us026D-6ZnL6wd2hZ7neI
Source: global traffic	HTTP traffic detected: GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077 HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-1476386ad506d9cf6a46e75ceda94108-da20472302cdf4c8-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://notes.services.box.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64Sec-WebSocket-Key: O2NAVvhZJlaMXHv9jRuq6g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-cc7233bb282713604fad7cd9252cb43b-3cdf72d7c7a1cde5-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__r&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs4099&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /traceparent: 00-d8780f4ed13d0d9ba15b37202a71f4dd-ce9977725af31c66-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
Source: global traffic	HTTP traffic detected: GET /ep/pad/diagnosticInfo HTTP/1.1Host: notes.services.box.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=wvT7qnim-RAM13BOJK1p8eBmmXR-M1xYK0Lg

Source: unknown

DNS traffic detected: queries for: app.box.com

Source: unknown

HTTP traffic detected: POST /client_log HTTP/1.1Host: notes.services.box.comConnection: keep-aliveContent-Length: 132sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"feature-flip-user-id: 0traceparent: 00-324efed6eedef3acb1aeb3d98d460abd-967635a6636878a8-00sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: */*csrf-token: lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQkX-Requested-With: XMLHttpRequestsec-ch-ua-platform: "Windows"Origin: https://notes.services.box.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; csrf-token=lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQk; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:00 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 10Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:05 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 4Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:12 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=gCkgo1TL-53Bi6mcxFb2zTEtsKmEqH-lzVvw; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 5Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:15 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 10Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:26 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=qCCLncGd-BD2jG__VBdfo33kMbWTpSoyZNxA; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 5Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:29 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 16Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:36 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 197Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:38 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 2Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:48 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 3Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 19 Apr 2024 11:13:50 GMTContent-Type: text/html; charset=utf-8Content-Length: 15x-powered-by: Expressset-cookie: csrf-token=uGsmYeoR-4zfRhu-wJTwE1n8hI1rHeZuG9hM; Path=/; Secure; SameSite=Nonestrict-transport-security: max-age=31536000x-frame-options: ALLOW-FROM https://app.box.comcontent-security-policy: frame-ancestors https://app.box.cometag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q"x-envoy-upstream-service-time: 39Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff2
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff
Source: chromecache_86.2.dr	String found in binary or memory: https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff2

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.123.200.136:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@16/64@16/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2352,i,14210594405034482032,7056984617740037461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2352,i,14210594405034482032,7056984617740037461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5	0%	Virustotal		Browse
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff	0%	Virustotal	Browse
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff2	0%	Virustotal	Browse
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff	0%	Virustotal	Browse
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff2	0%	Virustotal	Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
notes.services.box.com	74.112.186.144	true	false	high
www.google.com	142.250.9.105	true	false	high
app.box.com	74.112.186.144	true	false	high
client-log.box.com	74.112.186.144	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
cdn01.boxcdn.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/client_log	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/app_init	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEn&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYL&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs409C&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=fzxFP2h5MktguRj0AOMI	false	high
https://app.box.com/notes/1506503934565?s=ktl5qtvf2us1megbgmjabwqaxcdy69b5	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnU&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk	false	high
https://notes.services.box.com/split-proxy/mySegments/2	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5B&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs40M-&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFY&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com	false	high
https://notes.services.box.com/split-proxy/splitChanges?since=-1	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rQC&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba	false	high
https://client-log.box.com/analytics-events/	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN4&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/ep/pad/diagnosticInfo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4i&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077	false	high
https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076	false	high
https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075	false	high
https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__r&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wy0&sid=PpSsGChryM9q1WAqAOLo	false	high
https://notes.services.box.com/split-proxy/mySegments/unknown	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs4099&sid=fzxFP2h5MktguRj0AOMI	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rQ9&sid=N_2OZOLR87QXlSdMAOLQ	false	high
https://notes.services.box.com/split-proxy/mySegments/662251b51c7c34.67511927	false	high
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYJ&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tgz&sid=kL9tPrtmLDsW6ahGAOLb	false	high
https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFS&sid=N_2OZOLR87QXlSdMAOLQ	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff2	chromecache_86.2.dr	false	0%, Virustotal, Browse	unknown
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff	chromecache_86.2.dr	false	0%, Virustotal, Browse	unknown
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff	chromecache_86.2.dr	false	0%, Virustotal, Browse	unknown
https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff2	chromecache_86.2.dr	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.112.186.144	notes.services.box.com	United States	33011	BOXNETUS	false
142.250.9.105	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.13
192.168.2.23

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428724
Start date and time:	2024-04-19 13:11:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@16/64@16/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.9.94, 142.251.15.102, 142.251.15.113, 142.251.15.138, 142.251.15.100, 142.251.15.139, 142.251.15.101, 64.233.185.84, 34.104.35.123, 104.16.144.15, 104.16.145.15, 172.217.215.95, 142.250.105.95, 64.233.176.95, 172.253.124.95, 64.233.177.95, 142.250.9.95, 74.125.138.95, 173.194.219.95, 142.251.15.95, 74.125.136.95, 64.233.185.95, 108.177.122.95, 40.127.169.103, 23.40.205.34, 23.40.205.26, 192.229.211.108, 13.85.23.206, 20.3.187.198, 142.251.15.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, cdn01.boxcdn.net.cdn.cloudflare.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2725
Entropy (8bit):	3.8165103198007064
Encrypted:	false
SSDEEP:	48:rnVP6va00CBGb+Bfrc6DHntLXutHssf6P+hCFAV7b+SN4jYjTSCDTIcQvU3KvFSa:wva00C8b+Nxt+tHssf6WhCmRbROjYjTK
MD5:	5AA45DEFD7EBE1558D1F57048DA87EE1
SHA1:	8B76F1D206C5D0FD80A370B237B1FDF55FF4E5DB
SHA-256:	4C240FFD620AD5DC2BD4DCD52F3D6E14F0C77CC4E419E6670B493DDE2302E395
SHA-512:	F5975B68A29940F72B14E5CE87A3B6CB353D12066AC70D761A6D2066889EB802D61E46DB8233C28F7A405EC8C5EAF99A3BECDF6BB6CEAECECE7A7452F3BD455F
Malicious:	false
Reputation:	low
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M7.99902 1.00208C11.865 1.00208 14.999 4.13608 14.999 8.00208C14.999 11.8681 11.865 15.0021 7.99902 15.0021C4.13302 15.0021 0.999023 11.8681 0.999023 8.00208C0.999023 4.13608 4.13302 1.00208 7.99902 1.00208ZM7.99902 2.00208C4.68502 2.00208 1.99902 4.68808 1.99902 8.00208C1.99902 11.3161 4.68502 14.0021 7.99902 14.0021C11.313 14.0021 13.999 11.3161 13.999 8.00208C13.999 4.68808 11.313 2.00208 7.99902 2.00208ZM7.76202 10.1981C7.89802 10.1981 8.02502 10.2231 8.14202 10.2721C8.25902 10.3221 8.36202 10.3891 8.45002 10.4731C8.53802 10.5571 8.60702 10.6561 8.65602 10.7701C8.70602 10.8841 8.73102 11.0061 8.73102 11.1381C8.73102 11.2711 8.70602 11.3941 8.65602 11.5101C8.60602 11.6251 8.53802 11.7251 8.45002 11.8101C8.36202 11.8941 8.26002 11.9601 8.14202 12.0071C8.02502 12.0551 7.89802 12.0791 7.76202 12.0791C7.62302 12.0791 7.49502 12.0551 7.37702 12.0071C7.26002 11.9601 7.15802 11.8941 7.

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.085055102756477
Encrypted:	false
SSDEEP:	3:x3rMl:drK
MD5:	E1B468C52D580BB0C563F7DDAC593474
SHA1:	D41AF16632A19F7BEB11A6471387F576EB3D3BA7
SHA-256:	179F1CEA3A0D7D6A99E2A7C10A0B27AE9831C71978051A3EDB0743203DA8C10A
SHA-512:	95E27DC11252999AF74B28CF6D96EDAB1AC69861A59BF72B6E2DFC63E790FA9D9D43DCC57E68622BD9DA021948F3E92EBCAA8891D32285C9EB78F82AE8CD6778
Malicious:	false
Reputation:	low
Preview:	missing_event

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	98
Entropy (8bit):	4.415445842661995
Encrypted:	false
SSDEEP:	3:YWKNeUcK/Uaf4HHDQ+qX+JLaFTgxsuzV:YWKNebq4HHDQ+quJATgxsuV
MD5:	BB98F2F2DE2293F412BF524B39A8CEBA
SHA1:	1F3103421B475438A3FC3A57CC3031DCE61F4AB6
SHA-256:	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
SHA-512:	BF4D0F3EE610EFDE7C207400F47C72D8E6C7F4A94E56AE7F3787706823D0DD1499CAD97C824B67F08FC68AF8347903A1091153C3C13803AEE940784C2C89E6AF
Malicious:	false
Reputation:	low
Preview:	{"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 84992, version 2.983
Category:	downloaded
Size (bytes):	84992
Entropy (8bit):	7.996797351733394
Encrypted:	true
SSDEEP:	1536:JEd0IY9YbGvf6ZAX2pLKOF7jJfyNRLhqcGeSi2475rwNLj5LMF1AM2QMhKZI8fh:JEdA9R6ZAGBDKpGfi2E50NL9iuVh+IC
MD5:	8B1868B7BCE455BF0DA2712EC5D1A6C8
SHA1:	576498905760A76534FEFC8A6A770B643E10AF01
SHA-256:	0ABCEFA9EF9546CAD5811B5A32F096F8B9407E43DE385227A78182C32DC3451B
SHA-512:	1D3F39EF3F6626FFC5AC2CAE218351062CFE5E14A15B7E0DDFD03DA3C3BBBBC6B3A323CB8A537CEAD70EC7725323A0E16EA1C9D58AE3979B23664627EF334448
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Regular.woff2
Preview:	wOF2......L...........K.........................?FFTM..8...b..F.`.. ..j........L../.6.$........ ..r..`..9?webf.[PD..4..+.......SE..t....M(E.\N0.j....O...cD>.P.6....n.....H.....g............%?.sk.}..$i.^.e....YqU.+....{..Bdf.$.xL...4.o...R....UG....z..){........Rc:..8MP=.&..T...oh.i.....i;n....b...w..!1'x.....l.......%....a..k........j............d........].~.IH...o.....w..i....sHB..5kVUUU...]-...$.X..UUU....]].@...Lzr!s.CJ..2...\|?.29:..7......&o.eG...=i..\:.8..uk;.46.$.....Mb....6.H..t..m...bb.....Mc....(....^.Xu...[B./..7.T..(1gdt.b3....ZtTQ..w-1.j.........9...QR.d..P.k.A.@.C....:.. +.K.AD...!."D.T?R....J..)C.`..w..21.m3..W.....vW..Q.(c.(.~...&.....t.C...;....Tn..}i....,.Q.1.b....../.....Q.....u?O.2.......\|g..o.G..R.3A.fjo...%.@O...v.$.m........\g.$m..J.n..o...L.Q..'R..W.z..tn...6.....Y.wG.....:...O....L.i.Z..f..T!.....B&j...C3TI@\.~..O9......l*.x.db.B&H...A..0....i..Z.w.v.....fV..,.2a.....z_m.Ox..r.....e(.!..S.K..@]-U.!...-.0....

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:YIHIALM+4Yn:YIJM4n
MD5:	8C814C47925E9B2FF056DFA7D3690CC8
SHA1:	4183EC6DCFA17F9BAA7A00977D01B96AC302D801
SHA-256:	2070E9EC5EA66461693A174CF782EFA1090E0CA1988968CC1115D019E7B80A95
SHA-512:	520EAFF3DB32D70ACD5F450446D46BE2BBC7EE66E6BBBB8D23F938265E001F8FBD22604EE8BD5BD2C10D5D78B3F01F9C435579DEFDD746E6A871A2D107C7E89B
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/split-proxy/mySegments/2
Preview:	{"mySegments":[]}

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	967225
Entropy (8bit):	5.042099346044734
Encrypted:	false
SSDEEP:	1536:4JOmXaXhqOmXaXAZOmXaXmZOmXBXdZOmXaXmZOmX3XTZOmXaXxZOmXfXX5ZOmXal:dx52H4bNn2GyIw
MD5:	D3AB4FDBF9E17A9C1E697A0A0888F2B4
SHA1:	DC5CE469CAF03F699714E1D25626296C1079080F
SHA-256:	5F2B7440184F478A2F84E1C45C82617AFC74C97B1EE9BA9C20EAE3DE6758A400
SHA-512:	DAEF15BBD6DAB5AF3E0FCAA7714E7B152F1B32608B85FB3D52C4BFA9BEF69F0A8A154E383C9057AB1E215564CBEB90435521247FA7A9E13016F8E47F30E38A42
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/split-proxy/splitChanges?since=-1
Preview:	{"till":1713391450549,"since":-1,"splits":[{"changeNumber":1710779623337,"trafficTypeName":"enterprise_id","name":"enterprise_hubs_search_ai","trafficAllocation":100,"trafficAllocationSeed":-1060353565,"seed":1906792415,"status":"ACTIVE","killed":false,"defaultTreatment":"off","algo":2,"conditions":[{"conditionType":"WHITELIST","matcherGroup":{"combiner":"AND","matchers":[{"keySelector":null,"matcherType":"IN_SEGMENT","negate":false,"userDefinedSegmentMatcherData":{"segmentName":"box_hubs_automated_test_enterprises"},"whitelistMatcherData":null,"unaryNumericMatcherData":null,"betweenMatcherData":null,"dependencyMatcherData":null,"booleanMatcherData":null,"stringMatcherData":null}]},"partitions":[{"treatment":"on","size":100}],"label":"whitelisted segment"},{"conditionType":"WHITELIST","matcherGroup":{"combiner":"AND","matchers":[{"keySelector":null,"matcherType":"IN_SEGMENT","negate":false,"userDefinedSegmentMatcherData":{"segmentName":"box_hubs_test_enterprises"},"whitelistMatcherData

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.415445842661995
Encrypted:	false
SSDEEP:	3:YWKNeUcK/Uaf4HHDQ+qX+JLaFTgxsuzV:YWKNebq4HHDQ+quJATgxsuV
MD5:	BB98F2F2DE2293F412BF524B39A8CEBA
SHA1:	1F3103421B475438A3FC3A57CC3031DCE61F4AB6
SHA-256:	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
SHA-512:	BF4D0F3EE610EFDE7C207400F47C72D8E6C7F4A94E56AE7F3787706823D0DD1499CAD97C824B67F08FC68AF8347903A1091153C3C13803AEE940784C2C89E6AF
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077
Preview:	{"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.323231428797621
Encrypted:	false
SSDEEP:	3:9RFFn:zFFn
MD5:	DE9219E425CC35B85E0FA0222F625269
SHA1:	676F3404E2D750681ECA701EFF3D954F1E4423B4
SHA-256:	2D857A3660E0240BAC3AE9F98E2287F46EB6AEBF724775FE130AF2A6C7DFC3C4
SHA-512:	AB9B3B066EA4FF0AF3A36B4EEBFCBB8789503C2DFC64D75E94F038CC1B57DB7F5C55F0C72D9C7910EB4D3BD133D4F8F6DF321E57660C55D2CE5648DF2A7670D8
Malicious:	false
Reputation:	low
Preview:	404 - Not Found

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.415445842661995
Encrypted:	false
SSDEEP:	3:YWKNeUcK/Uaf4HHDQ+qX+JLaFTgxsuzV:YWKNebq4HHDQ+quJATgxsuV
MD5:	BB98F2F2DE2293F412BF524B39A8CEBA
SHA1:	1F3103421B475438A3FC3A57CC3031DCE61F4AB6
SHA-256:	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
SHA-512:	BF4D0F3EE610EFDE7C207400F47C72D8E6C7F4A94E56AE7F3787706823D0DD1499CAD97C824B67F08FC68AF8347903A1091153C3C13803AEE940784C2C89E6AF
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076
Preview:	{"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFS&sid=N_2OZOLR87QXlSdMAOLQ
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	176
Entropy (8bit):	4.776656214017812
Encrypted:	false
SSDEEP:	3:7uipuVSHeSHNipuVSHeSHNipunTwUXlR12KtkR12KtjjrlR12KtkR12Ktjjrj:dpnVNipnVNipWXLQVQUXLQVQUXj
MD5:	728A552FDE1B2E387C2B30240D2BFEBC
SHA1:	83DD48BFE3AFEE68F6BDD6109F801EB367D4A76F
SHA-256:	C9350A79295E126C749B7E05F7856568B494FF778B9BB09A5C3D57DA469A1839
SHA-512:	1A381DC3AA9BB50419B11E04DC718FE1CDF2E7887C56C3BFDA2F9390A6C91B24DAE83ABBD0343A3895BEF2438B67D316B9F11B18C75DD89F6AE2B0582F938DB6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgmeckGw2zDCvBIFDUqFnlISBQ0G7bv_EgUNBu27_xIFDUqFnlISBQ0G7bv_EgUNBu27_xIFDUqFnlISOgn4byemNRej1BIFDUqFnlISBQ0G7bv_EgUNBu27_xIFDUqFnlISBQ0G7bv_EgUNBu27_xIFDUqFnlI=?alt=proto
Preview:	Cj8KBw1KhZ5SGgAKBw0G7bv/GgAKBw0G7bv/GgAKBw1KhZ5SGgAKBw0G7bv/GgAKBw0G7bv/GgAKBw1KhZ5SGgAKPwoHDUqFnlIaAAoHDQbtu/8aAAoHDQbtu/8aAAoHDUqFnlIaAAoHDQbtu/8aAAoHDQbtu/8aAAoHDUqFnlIaAA==

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	98
Entropy (8bit):	4.415445842661995
Encrypted:	false
SSDEEP:	3:YWKNeUcK/Uaf4HHDQ+qX+JLaFTgxsuzV:YWKNebq4HHDQ+quJATgxsuV
MD5:	BB98F2F2DE2293F412BF524B39A8CEBA
SHA1:	1F3103421B475438A3FC3A57CC3031DCE61F4AB6
SHA-256:	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
SHA-512:	BF4D0F3EE610EFDE7C207400F47C72D8E6C7F4A94E56AE7F3787706823D0DD1499CAD97C824B67F08FC68AF8347903A1091153C3C13803AEE940784C2C89E6AF
Malicious:	false
Reputation:	low
Preview:	{"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5191
Entropy (8bit):	7.850967457029203
Encrypted:	false
SSDEEP:	96:qSoxtszjBrdhe5JLMfUYp53OIBPYbOQBtMlt2CDXckplJF0bwQ5dx/TBZU:qSobszjBpcPLGUYp5rwy2kt2Gc6l/cw1
MD5:	2105BEE9318C22A57F94DD7FE84CF39A
SHA1:	C12BE9DD779AE740753E91A22391EEFA68457C7C
SHA-256:	948771AF40F8089DFCEF398D19228B99F70659331E0EB3C67678472683B9929F
SHA-512:	939E4D7A9EC2AD4C27A407EB3B1CD143BBE7DC3540FD8F048FD539997676B0C2D8EE0B06A64A0143D24551D6B725A0647EFAE52EEA1F236A4A81929B9CE3D805
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/_assets/img/notes_favicon-NIfakL.png
Preview:	.PNG........IHDR.............\r.f....sRGB.........IDATx...;N[A...q.....pG.-.z....HA.....%x. ...."..(......7M@J.D.@.3.H......\\|......#.I...dp..<.E.D.2X\|.#.Y9.`J0.F@.,...T.Y.ep....O..Y.Q...e....L3..AI.S..L...9.7"8. \|(... "8.6.s....].K.!.+...?'..Y93ti.d...<...fpa..........Tv\.K+.%.....{.*.....~......z%..].K......O.=.:u08..{~...N^...]..I.C....{..K.>..(.....J.......G..........I...?...~./.!.K._.....H.2..#+3C.......\.KMn.z......`T.&.!..`.....u`VN.CjOVNK./.CjO..%..aH..`^..>.M.,.AH..$.@.. ...d.H..$Y..,.I..$.@.. ...d.H..$Y..,.I..$.@.. ...d.H..$Y....e..7.x?.....-...^.......Ov...b0....F)....:.....<...GUU.q....R.)...L...L.T..R1-)]....ge/{.ZZ...Ui/-..!M.r.).......D..e...x......z...s.>...]...>./.s..J.KQ...,7'.8.w.u...I\|\|\|h.........n.k}.]9...4.jk.P...d....`U..0..6......_......K.A......o.Y..... cU5..@...~...-....U_}....o\|C....Eg..].v.-.^7PUiD..h..b.{.C.r..........p.1...(..+.Qy..t.Z.....8....V..&NB.\..B.._XL.O...f..l..Cs..^..2..=zp0.y.P.Wc39....N\.....YT...Z...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 16
Category:	downloaded
Size (bytes):	527
Entropy (8bit):	6.339979747502133
Encrypted:	false
SSDEEP:	12:HmSmdZXBb/Y4zc6fV/lEcK068K2kccOk2cOpFz3u:HlQBlV/lnK068KbLTZqFze
MD5:	078DA0AE946B8B0F93E7A519620263B4
SHA1:	A55C769A04123CDD5F0B40EADA86108222EB4C78
SHA-256:	B034AF69511E27C742248526B5E3ED0A47E862CB9CC5D18EAD972984A664F388
SHA-512:	45912472C17C689AF47794C614F3663120250595A4760CCB16845DF38A35804F124AE6C84C6A53EB149921B1D71A24644F1D055043182E52CFECFB1A90980E75
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/notes/8.2557.3/img/loading..gif
Preview:	GIF89a ............ppp.......................................!..NETSCAPE2.0.....!.......,.... .....2....0.I.......!.E.6.A..E.J...[....8.......r...!.......,.........."......)j.......}d...wZi..m.@\|MF..!.......,............J.>..A.TX\#...].....$.!.......,..........&Hj....B.PhZ,f..yC.U.U.g.~F8.k.).....$.!.......,..........:.HD..(h...X!bC...w.#U.g.RbA..........B.b...v..P...B.h..N..!.......,..........:.HD..(h...X!bC...w.#U.g.RbA..........B.b...v..P...B.h..N..!.......,..........&h.L. .Ca.phz,f..yE.U.U.g.~@8.k.).....$.;

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 84396, version 2.983
Category:	downloaded
Size (bytes):	84396
Entropy (8bit):	7.996116383259223
Encrypted:	true
SSDEEP:	1536:lhWk7aeOTww2X4owbcnRqvjFkw8cyW/fTJnh2r667bZ3fTyG/q+TBpMLB:lHdOk9ojj2a//rFoeutTyG/ZBC
MD5:	8A54EA1AEB67D07C751BD5F03068317B
SHA1:	CFBEE4F2FD7F359A2A60648BB6797CAC1FD4DA3E
SHA-256:	4230A20B841519BDBE4B0C154BAD414E017CF80B3918127D45C4F907EEA07280
SHA-512:	A3CA9E052DBB81A20C71DDD24962CE57E842134A8B30842328410DF3FCF76EED4367C3A5A1148DD11092CF0CF3E29B57040CF79D40AC6450D8234F27204D47E1
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/fonts/1.0.2/lato/Lato-Bold.woff2
Preview:	wOF2......I.......m...I;........................?FFTM..8...>..F.`.. ..j...........\|.6.$..$..(.. ..Z.....9?webf.[/0..B%.^..m.m..[..F...&...v....!.......i.V]\.l....b.a..96....H.............J...../....3.H...X.g.*.j.....v.!p4.-.I....P..i..1vTS..}..&A.Z..FT}?([..j..[.....c..@...LmwV...B.A.9$!.....z..'..C.1.....$!...uu....>......4....R&..}9.h-.T../..Iz.....W>......7..u...z~...V...~2....b.>....{~e[..HP:qT.L.o..P.hF..B...U.w.+E..o..dV>.......,.U^L....... .............Y.pN......{1T...V.....\|.&.?/Q...\|4.I.k.... .v..T...;....7B..]..\|..R_.].\|..D.:b............%.....D../.!.@......;p.%.g...w..(\|...[.9......T...y.,... .N.i..L..AVe.>..B.e.H.O!?.@/..ku.f.......w...Xg..YR.gD....i=...\.$Y.iG.......F...CN.(\|.A.{\..K5x....>i!....."....N..0.R.y...G.A..jt.Lg.ML.`......3Y{=.m$..x....%..\|f.wvU..\...R.x......_...tl.NH._.Y......2....r.).J.....R..DLo.zG.U.xj.4..~..7G=!.......X&.(.a.-........$..;._qL.,.d..i..XJ5.P.-{......J.$o@b...l.h....r..5..i..Jx@..T..I.Nt/."7.z.K>2...\

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 16
Category:	dropped
Size (bytes):	527
Entropy (8bit):	6.339979747502133
Encrypted:	false
SSDEEP:	12:HmSmdZXBb/Y4zc6fV/lEcK068K2kccOk2cOpFz3u:HlQBlV/lnK068KbLTZqFze
MD5:	078DA0AE946B8B0F93E7A519620263B4
SHA1:	A55C769A04123CDD5F0B40EADA86108222EB4C78
SHA-256:	B034AF69511E27C742248526B5E3ED0A47E862CB9CC5D18EAD972984A664F388
SHA-512:	45912472C17C689AF47794C614F3663120250595A4760CCB16845DF38A35804F124AE6C84C6A53EB149921B1D71A24644F1D055043182E52CFECFB1A90980E75
Malicious:	false
Reputation:	low
Preview:	GIF89a ............ppp.......................................!..NETSCAPE2.0.....!.......,.... .....2....0.I.......!.E.6.A..E.J...[....8.......r...!.......,.........."......)j.......}d...wZi..m.@\|MF..!.......,............J.>..A.TX\#...].....$.!.......,..........&Hj....B.PhZ,f..yC.U.U.g.~F8.k.).....$.!.......,..........:.HD..(h...X!bC...w.#U.g.RbA..........B.b...v..P...B.h..N..!.......,..........:.HD..(h...X!bC...w.#U.g.RbA..........B.b...v..P...B.h..N..!.......,..........&h.L. .Ca.phz,f..yE.U.U.g.~@8.k.).....$.;

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.824862957617357
Encrypted:	false
SSDEEP:	3:HNipuH2A2Ktjjrj:HNipb3UXj
MD5:	8672D802BB4A0493D39E73BA9D6261B7
SHA1:	0BCB6C17CBD38BC47E95785DBEEE49E799A43131
SHA-256:	C507F872DC381ABB17C9CBFF3CBC73241104CC662E5C82224AF019B6A2949ADF
SHA-512:	2461A2A174BCB23D6E9F49D6B2AA606EDF6BCE71FD787816AB863EFBB9D6241838BE49450C3254699E403C4D68F44AD6B212E75E215654FF276622C6496AC093
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkikR3f85l8ExIFDQbtu_8SBQ1KhZ5SEhcJv_fAnRQVFScSBQ0G7bv_EgUNSoWeUg==?alt=proto
Preview:	ChIKBw0G7bv/GgAKBw1KhZ5SGgAKEgoHDQbtu/8aAAoHDUqFnlIaAA==

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1577)
Category:	downloaded
Size (bytes):	1640
Entropy (8bit):	4.986070769067609
Encrypted:	false
SSDEEP:	24:095EPINr7z0h9n39ZZaWr232ifEOJrf2TIXMbBCJ3ZnWjxNBQX62XTL:m4Ar7z0n31Nxn4rf2TTbEn+NB3cL
MD5:	D788F620DAAC96866510DC0A7D9F98AD
SHA1:	8524558C1BA03E37F6E4E8F115A1B2D2D2155B68
SHA-256:	9AC94DADD1157C0CF080BE5D444EE2C50285A49863F7212D02CD94B4DE653FA5
SHA-512:	23A89F2E069A9CC1EF993587349FCD21DDF03AA3B202F28270197A93F9BFE1A4382BC05FA0A3C42EA29E685E1671B6D05EEE173BB43658762432F33E2F29A863
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/webapp_assets/js/notes-d788f620da.min.js
Preview:	"use strict";function HostPage(t,s){this._safeOrigins=s\|\|[],this._hostWindow=t,this._appWindow=null}HostPage.prototype={constructor:HostPage,init:function(){this._hostWindow.addEventListener("message",this._messageHandler.bind(this),!1),this._hostWindow.addEventListener("popstate",this._popstateHandler.bind(this),!1)},_isOriginSafe:function(t){return this._safeOrigins.indexOf(t)>=0},_postMessage:function(t){if(this._appWindow=this._appWindow\|\|this._hostWindow.document.querySelector("#service_iframe").contentWindow,this._appWindow)for(var s=0;s<this._safeOrigins.length;s++)this._appWindow.postMessage(t,this._safeOrigins[s])},_messageHandler:function(t){var s=t.origin\|\|t.originalEvent.origin;if(this._isOriginSafe(s)&&t.data&&t.data.name&&t.data.params)switch(t.data.name){case"push-history-state":this._hostWindow.history.pushState(t.data.params.state,t.data.params.title,t.data.params.url);break;case"replace-history-state":this._hostWindow.history.replaceState(t.data.params.state,t.data.pa

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65474), with no line terminators
Category:	downloaded
Size (bytes):	100119
Entropy (8bit):	4.84222786630625
Encrypted:	false
SSDEEP:	1536:KKcL5W/REDXnRBRHDM4glP+0gwQRV+oC1OJQD/9:U1W/gRBpDM4glPI+onG/9
MD5:	7E8250DB56CFF1F7D71D910DDEB6B271
SHA1:	AC55571605ED21CC10C43193C2760E7D0BB3B88D
SHA-256:	C435971B47F43114516DF13787BB311D36509AAE778898567C599814F26B8BA7
SHA-512:	58855B2BB6287BFAEB3D73511EBD0DBAF61240323B7AFF2CDE658548076C5493DDEF55E75ED75BE4B76B8598F09450446C7E7FDAD130421E2DFFE513E20ADD86
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/notes/8.2557.3/l10n/box-react-ui/en-i18n_e4fbe6bc4b044652.min.js
Preview:	window.notesReactUILocaleData={locale:"en",messages:{"be.accessStatsPermissionsError":"Sorry, you do not have permission to see the access stats for this file.","be.activityFeed.fullDateTime":"{time, date, full} at {time, time, short}","be.activityFeedItemApiError":"There was a problem loading the activity feed. Please refresh the page or try again later.","be.activitySidebar.activityFeed.annotationMissingError":"This comment no longer exists","be.activitySidebar.activityFeed.commentMissingError":"This comment no longer exists","be.activitySidebar.activityFeed.feedInlineErrorTitle":"Error","be.activitySidebar.activityFeed.hideReplies":"Hide replies","be.activitySidebar.activityFeed.reply":"Reply","be.activitySidebar.activityFeed.replyInThread":"Reply in thread","be.activitySidebar.activityFeed.showReplies":"See {repliesToLoadCount, plural, one {# reply} other {# replies}}","be.activitySidebar.activityFeed.taskMissingError":"This task no longer exists","be.activitySidebarFilter.status.a

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	5978699
Entropy (8bit):	5.6392353601079455
Encrypted:	false
SSDEEP:	98304:VvGOY03Ri+JkMAM/kt3IZJffMJNnGZSoBscq8:pGOY03RiX6/ktSfTBscq8
MD5:	C59BE778048F1A5179DF8BD741429A37
SHA1:	D1E974F439569A07D31BEDAA533B0FD64C1430BA
SHA-256:	FE6B003A9ADE80729CAFF5BAD800A95346030540C77CE6456EEFFA35FBD444A9
SHA-512:	5550BA74C397A79F70A1404A84F95339C97730ACCCFB1D532EE7263C96D256AF81BD11D7C221E929F616802F5955D3077A9C45E3D9CEA2D5500BACACDED8276D
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/notes/8.2557.3/notes/js/bundle_468e500c4384d195.min.js
Preview:	/! For license information please see bundle_468e500c4384d195.min.js.LICENSE.txt /.(()=>{var __webpack_modules__={38265:(e,t,n)=>{"use strict";n.d(t,{Z:()=>i});var r=n(52322);const i=e=>(0,r.jsx)("svg",{width:"1em",height:"1em",viewBox:"0 0 16 16",role:"img",...e,children:(0,r.jsx)("path",{fill:e.color\|\|"#909090",fillRule:"evenodd",d:"M8 1a7 7 0 1 1 0 14A7 7 0 0 1 8 1Zm0 10a1 1 0 1 0 0 2 1 1 0 0 0 0-2Zm0-8a1 1 0 0 0-1 1v5a1 1 0 0 0 2 0V4a1 1 0 0 0-1-1Z",clipRule:"evenodd"})})},86950:(e,t,n)=>{"use strict";n.d(t,{Z:()=>i});var r=n(52322);const i=e=>(0,r.jsx)("svg",{width:"1em",height:"1em",viewBox:"0 0 16 16",role:"img",...e,children:(0,r.jsx)("g",{children:(0,r.jsx)("path",{fill:e.color\|\|"#909090",fillRule:"evenodd",d:"M8 0a8 8 0 1 1 0 16A8 8 0 0 1 8 0Zm0 9.5c-1.21 0-2.293.413-3.232 1.096-.56.407-.953.817-1.168 1.104a.5.5 0 0 0 .8.6c.035-.047.114-.141.234-.267.205-.214.447-.428.722-.629.78-.567 1.665-.904 2.644-.904.979 0 1.865.337 2.644.904.275.2.517.415.722.63.12.125.199.219.234.26

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:YIHIALM+4Yn:YIJM4n
MD5:	8C814C47925E9B2FF056DFA7D3690CC8
SHA1:	4183EC6DCFA17F9BAA7A00977D01B96AC302D801
SHA-256:	2070E9EC5EA66461693A174CF782EFA1090E0CA1988968CC1115D019E7B80A95
SHA-512:	520EAFF3DB32D70ACD5F450446D46BE2BBC7EE66E6BBBB8D23F938265E001F8FBD22604EE8BD5BD2C10D5D78B3F01F9C435579DEFDD746E6A871A2D107C7E89B
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/split-proxy/mySegments/unknown
Preview:	{"mySegments":[]}

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2725
Entropy (8bit):	3.8165103198007064
Encrypted:	false
SSDEEP:	48:rnVP6va00CBGb+Bfrc6DHntLXutHssf6P+hCFAV7b+SN4jYjTSCDTIcQvU3KvFSa:wva00C8b+Nxt+tHssf6WhCmRbROjYjTK
MD5:	5AA45DEFD7EBE1558D1F57048DA87EE1
SHA1:	8B76F1D206C5D0FD80A370B237B1FDF55FF4E5DB
SHA-256:	4C240FFD620AD5DC2BD4DCD52F3D6E14F0C77CC4E419E6670B493DDE2302E395
SHA-512:	F5975B68A29940F72B14E5CE87A3B6CB353D12066AC70D761A6D2066889EB802D61E46DB8233C28F7A405EC8C5EAF99A3BECDF6BB6CEAECECE7A7452F3BD455F
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/notes/8.2557.3/img/question_badge_icon_ead41679627c7323.min.svg
Preview:	<svg width="16" height="16" viewBox="0 0 16 16" fill="none" xmlns="http://www.w3.org/2000/svg">..<path d="M7.99902 1.00208C11.865 1.00208 14.999 4.13608 14.999 8.00208C14.999 11.8681 11.865 15.0021 7.99902 15.0021C4.13302 15.0021 0.999023 11.8681 0.999023 8.00208C0.999023 4.13608 4.13302 1.00208 7.99902 1.00208ZM7.99902 2.00208C4.68502 2.00208 1.99902 4.68808 1.99902 8.00208C1.99902 11.3161 4.68502 14.0021 7.99902 14.0021C11.313 14.0021 13.999 11.3161 13.999 8.00208C13.999 4.68808 11.313 2.00208 7.99902 2.00208ZM7.76202 10.1981C7.89802 10.1981 8.02502 10.2231 8.14202 10.2721C8.25902 10.3221 8.36202 10.3891 8.45002 10.4731C8.53802 10.5571 8.60702 10.6561 8.65602 10.7701C8.70602 10.8841 8.73102 11.0061 8.73102 11.1381C8.73102 11.2711 8.70602 11.3941 8.65602 11.5101C8.60602 11.6251 8.53802 11.7251 8.45002 11.8101C8.36202 11.8941 8.26002 11.9601 8.14202 12.0071C8.02502 12.0551 7.89802 12.0791 7.76202 12.0791C7.62302 12.0791 7.49502 12.0551 7.37702 12.0071C7.26002 11.9601 7.15802 11.8941 7.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52751), with no line terminators
Category:	downloaded
Size (bytes):	52767
Entropy (8bit):	4.8137736738958505
Encrypted:	false
SSDEEP:	1536:WpQ9KDQmYm1j7xS7kmObTyQW620xdxClWCzP/XDKFjy9iwjn7nQNOSURQD2mMca5:WpQ9KDQmYm1j7xS7kmObTyQW620xdxCr
MD5:	51EEC369503CF284FDB628E0F1A21150
SHA1:	87E9B7CE8CA6DC2C3632956095D6468BB4053198
SHA-256:	8BFE7238019E3C4D87E60E2BC55E0E2D290F1BD3B8CD2D17228AF7509E06EF09
SHA-512:	7091291362DD98B9E36646458296075DF8B4F25BCCB87B52D8415A64B1223E1A22219245E4EE5FE36C6B3DBC6F5C97E361DF0221F303A990C52260A74E5D30F6
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/notes/8.2557.3/l10n/en-i18n_745c301573766e0f.min.js
Preview:	(()=>{var e,t,o;window.i18n=(e=function(e,t){var o=String(e).split("."),n=!o[1],r=Number(o[0])==e,i=r&&o[0].slice(-1),u=r&&o[0].slice(-2);return t?1==i&&11!=u?"one":2==i&&12!=u?"two":3==i&&13!=u?"few":"other":1==e&&n?"one":"other"},t=function(e,t){if(isNaN(e))throw new Error("'"+e+"' isn't a number.");return e-(t\|\|0)},o=function(e,t,o,n,r){if({}.hasOwnProperty.call(n,e))return n[e]();t&&(e-=t);var i=o(e,r);return i in n?n[i]():n.other()},{en:{"note.yes":function(e){return"Yes"},"note.no":function(e){return"No"},"note.datetime":function(e){return e.date+" at "+e.time},"note.date":function(e){return e.month+"/"+e.day+"/"+e.year},"note.date.abbreviated.noYear":function(e){return e.month+" "+e.day},"note.date.abbreviated.full":function(e){return e.month+" "+e.day+" "+e.year},"note.date.month.short.January":function(e){return"Jan"},"note.date.month.short.February":function(e){return"Feb"},"note.date.month.short.March":function(e){return"Mar"},"note.date.month.short.April":function(e){return

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	98
Entropy (8bit):	4.415445842661995
Encrypted:	false
SSDEEP:	3:YWKNeUcK/Uaf4HHDQ+qX+JLaFTgxsuzV:YWKNebq4HHDQ+quJATgxsuV
MD5:	BB98F2F2DE2293F412BF524B39A8CEBA
SHA1:	1F3103421B475438A3FC3A57CC3031DCE61F4AB6
SHA-256:	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
SHA-512:	BF4D0F3EE610EFDE7C207400F47C72D8E6C7F4A94E56AE7F3787706823D0DD1499CAD97C824B67F08FC68AF8347903A1091153C3C13803AEE940784C2C89E6AF
Malicious:	false
Reputation:	low
Preview:	{"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5191
Entropy (8bit):	7.850967457029203
Encrypted:	false
SSDEEP:	96:qSoxtszjBrdhe5JLMfUYp53OIBPYbOQBtMlt2CDXckplJF0bwQ5dx/TBZU:qSobszjBpcPLGUYp5rwy2kt2Gc6l/cw1
MD5:	2105BEE9318C22A57F94DD7FE84CF39A
SHA1:	C12BE9DD779AE740753E91A22391EEFA68457C7C
SHA-256:	948771AF40F8089DFCEF398D19228B99F70659331E0EB3C67678472683B9929F
SHA-512:	939E4D7A9EC2AD4C27A407EB3B1CD143BBE7DC3540FD8F048FD539997676B0C2D8EE0B06A64A0143D24551D6B725A0647EFAE52EEA1F236A4A81929B9CE3D805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f....sRGB.........IDATx...;N[A...q.....pG.-.z....HA.....%x. ...."..(......7M@J.D.@.3.H......\\|......#.I...dp..<.E.D.2X\|.#.Y9.`J0.F@.,...T.Y.ep....O..Y.Q...e....L3..AI.S..L...9.7"8. \|(... "8.6.s....].K.!.+...?'..Y93ti.d...<...fpa..........Tv\.K+.%.....{.*.....~......z%..].K......O.=.:u08..{~...N^...]..I.C....{..K.>..(.....J.......G..........I...?...~./.!.K._.....H.2..#+3C.......\.KMn.z......`T.&.!..`.....u`VN.CjOVNK./.CjO..%..aH..`^..>.M.,.AH..$.@.. ...d.H..$Y..,.I..$.@.. ...d.H..$Y..,.I..$.@.. ...d.H..$Y....e..7.x?.....-...^.......Ov...b0....F)....:.....<...GUU.q....R.)...L...L.T..R1-)]....ge/{.ZZ...Ui/-..!M.r.).......D..e...x......z...s.>...]...>./.s..J.KQ...,7'.8.w.u...I\|\|\|h.........n.k}.]9...4.jk.P...d....`U..0..6......_......K.A......o.Y..... cU5..@...~...-....U_}....o\|C....Eg..].v.-.^7PUiD..h..b.{.C.r..........p.1...(..+.Qy..t.Z.....8....V..&NB.\..B.._XL.O...f..l..Cs..^..2..=zp0.y.P.Wc39....N\.....YT...Z...

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	638655
Entropy (8bit):	5.032443188373257
Encrypted:	false
SSDEEP:	12288:wn8GAzVKZNaMoIlWEhGZf1ix5yMogzfEUsXyLoJviaEvCzwsn6gtYCW3HuF4ryCW:wn8GAzVKZNaMoIlWEhGZf1ix5yMogzfA
MD5:	5CF462FE841E41D831BACB15EB193459
SHA1:	AF64A3031A44AF5B78432A60B14B69D33A6C50DF
SHA-256:	C75391943BB1CAF2BA1CA658EAB5975B43A423BF450AFC279F74E683B7DC7FB7
SHA-512:	8B9801DF4559664C144810ACBAFB969BB32E38CE87095BC2CA5211C2C12B6DE5A81A289282966A49CC2B4E46F30DD78AD2F1944F9D6DBF689DEF6375DE903ABC
Malicious:	false
Reputation:	low
URL:	https://cdn01.boxcdn.net/notes/8.2557.3/notes/css/bundle_8cff5b4c8b88a8cc.min.css
Preview:	html.editor-ace-inner{cursor:text}::-moz-selection{background:rgb(71 145 255/40%)}::selection{background:rgb(71 145 255/40%)}a{cursor:pointer !important}ul,ol,li{padding:0;margin:0}ol.list-number1,ul.list-unchecked1,ul.list-checked1{margin-left:0}ol.list-number2,ul.list-unchecked2,ul.list-checked2{margin-left:1.5em}ol.list-number3,ul.list-unchecked3,ul.list-checked3{margin-left:3em}ol.list-number4,ul.list-unchecked4,ul.list-checked4{margin-left:4.5em}ol.list-number5,ul.list-unchecked5,ul.list-checked5{margin-left:6em}ol.list-number6,ul.list-unchecked6,ul.list-checked6{margin-left:7.5em}ol.list-number7,ul.list-unchecked7,ul.list-checked7{margin-left:9em}ol.list-number8,ul.list-unchecked8,ul.list-checked8{margin-left:10.5em}ul.list-bullet1,ul.list-indent1{margin-left:1.5em}ul.list-bullet2,ul.list-indent2{margin-left:3em}ul.list-bullet3,ul.list-indent3{margin-left:4.5em}ul.list-bullet4,ul.list-indent4{margin-left:6em}ul.list-bullet5,ul.list-indent5{margin-left:7.5em}ul.list-bullet6,ul.lis

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	98
Entropy (8bit):	4.415445842661995
Encrypted:	false
SSDEEP:	3:YWKNeUcK/Uaf4HHDQ+qX+JLaFTgxsuzV:YWKNebq4HHDQ+quJATgxsuV
MD5:	BB98F2F2DE2293F412BF524B39A8CEBA
SHA1:	1F3103421B475438A3FC3A57CC3031DCE61F4AB6
SHA-256:	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
SHA-512:	BF4D0F3EE610EFDE7C207400F47C72D8E6C7F4A94E56AE7F3787706823D0DD1499CAD97C824B67F08FC68AF8347903A1091153C3C13803AEE940784C2C89E6AF
Malicious:	false
Reputation:	low
Preview:	{"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.734521664779752
Encrypted:	false
SSDEEP:	3:YIHIALM+4Yn:YIJM4n
MD5:	8C814C47925E9B2FF056DFA7D3690CC8
SHA1:	4183EC6DCFA17F9BAA7A00977D01B96AC302D801
SHA-256:	2070E9EC5EA66461693A174CF782EFA1090E0CA1988968CC1115D019E7B80A95
SHA-512:	520EAFF3DB32D70ACD5F450446D46BE2BBC7EE66E6BBBB8D23F938265E001F8FBD22604EE8BD5BD2C10D5D78B3F01F9C435579DEFDD746E6A871A2D107C7E89B
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/split-proxy/mySegments/662251b51c7c34.67511927
Preview:	{"mySegments":[]}

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	4.861464353260816
Encrypted:	false
SSDEEP:	3:PSSpuVSHeSHNipuVSHoVSHNipuqfrlR12KtkR12KtjjrlR12KtVNDtkR12Ktjjrj:qSpnVNipnnNip7zLQVQUXLQAxYQUXj
MD5:	37C53670247FD656651CBB50A7116C50
SHA1:	D4F4FE0085C2E8C15EDA0955E8A0562059F0E812
SHA-256:	98DD6979DFFCC0205FE53F604C2A96542E5DD391EABF9BEA5D932C9B54566B72
SHA-512:	CE80DA79C53A20595297A75A703CD128BB7BB03D8FD6FAD139C98307023A441F1703D657F9633F0003949926AB03F541AE79FC4718176F57EE266BFA1CD684BF
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISQQla-plFxOgiSxIFDUqFnlISBQ0G7bv_EgUNBu27_xIFDUqFnlISBQ0G7bv_EgUN_5H5xRIFDQbtu_8SBQ1KhZ5SEkEJfadxAZ1JLVUSBQ1KhZ5SEgUNBu27_xIFDQbtu_8SBQ1KhZ5SEgUNBu27_xIFDf-R-cUSBQ0G7bv_EgUNSoWeUg==?alt=proto
Preview:	CkgKBw1KhZ5SGgAKBw0G7bv/GgAKBw0G7bv/GgAKBw1KhZ5SGgAKBw0G7bv/GgAKBw3/kfnFGgAKBw0G7bv/GgAKBw1KhZ5SGgAKSAoHDUqFnlIaAAoHDQbtu/8aAAoHDQbtu/8aAAoHDUqFnlIaAAoHDQbtu/8aAAoHDf+R+cUaAAoHDQbtu/8aAAoHDUqFnlIaAA==

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYJ&sid=kL9tPrtmLDsW6ahGAOLb
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.415445842661995
Encrypted:	false
SSDEEP:	3:YWKNeUcK/Uaf4HHDQ+qX+JLaFTgxsuzV:YWKNebq4HHDQ+quJATgxsuV
MD5:	BB98F2F2DE2293F412BF524B39A8CEBA
SHA1:	1F3103421B475438A3FC3A57CC3031DCE61F4AB6
SHA-256:	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
SHA-512:	BF4D0F3EE610EFDE7C207400F47C72D8E6C7F4A94E56AE7F3787706823D0DD1499CAD97C824B67F08FC68AF8347903A1091153C3C13803AEE940784C2C89E6AF
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074
Preview:	{"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	15
Entropy (8bit):	3.323231428797621
Encrypted:	false
SSDEEP:	3:9RFFn:zFFn
MD5:	DE9219E425CC35B85E0FA0222F625269
SHA1:	676F3404E2D750681ECA701EFF3D954F1E4423B4
SHA-256:	2D857A3660E0240BAC3AE9F98E2287F46EB6AEBF724775FE130AF2A6C7DFC3C4
SHA-512:	AB9B3B066EA4FF0AF3A36B4EEBFCBB8789503C2DFC64D75E94F038CC1B57DB7F5C55F0C72D9C7910EB4D3BD133D4F8F6DF321E57660C55D2CE5648DF2A7670D8
Malicious:	false
Reputation:	low
Preview:	404 - Not Found

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.180365114215879
Encrypted:	false
SSDEEP:	3:YGKhIWANmq6LFHYn:YGKhCNU4
MD5:	64E1C1EB9F4CAF0CF0E7484D7AFCEDB9
SHA1:	69E40D8C48A866A84046FD8BD17AF47FF02B79A4
SHA-256:	8ACAC48BC106C4EAE580C08071597F9DAFAB96D959DEFF65BEC44514DA907B1D
SHA-512:	F109767D57E85127D18B1AD2030A48C0EAD69F79A15C4008712407B1F62691654B74C9D6E225FFDC4A922847EABB928DC7520A656C7081B585124CF678B54E59
Malicious:	false
Reputation:	low
Preview:	{"code":1,"message":"Session ID unknown"}

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.415445842661995
Encrypted:	false
SSDEEP:	3:YWKNeUcK/Uaf4HHDQ+qX+JLaFTgxsuzV:YWKNebq4HHDQ+quJATgxsuV
MD5:	BB98F2F2DE2293F412BF524B39A8CEBA
SHA1:	1F3103421B475438A3FC3A57CC3031DCE61F4AB6
SHA-256:	8E2ADC250C641542C7A77652004F55B27929A0EF5B659AC257F347DEBFBDC511
SHA-512:	BF4D0F3EE610EFDE7C207400F47C72D8E6C7F4A94E56AE7F3787706823D0DD1499CAD97C824B67F08FC68AF8347903A1091153C3C13803AEE940784C2C89E6AF
Malicious:	false
Reputation:	low
URL:	https://notes.services.box.com/clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075
Preview:	{"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 13:12:42.747458935 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 13:12:52.355514050 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 13:12:52.679342031 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.679369926 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.679577112 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.679847956 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.679943085 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.680016041 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.680144072 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.680160999 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.680368900 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.680382013 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.908886909 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.909419060 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.909485102 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.911200047 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.911453962 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.912514925 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.912684917 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.912707090 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.912823915 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.913149118 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.913181067 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.914603949 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.914673090 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.915539026 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.915620089 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.956161976 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:52.966197968 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:52.966234922 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.012949944 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.120199919 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.120659113 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.270627022 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.270845890 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.270915031 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.278095007 CEST	49736	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.278147936 CEST	443	49736	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.286565065 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.328157902 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.595223904 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.597007990 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.597130060 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.609894991 CEST	49735	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.609915018 CEST	443	49735	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.776097059 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.776217937 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.776336908 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.776904106 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.776985884 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.995460033 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.995949030 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:53.996016979 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.999871969 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:53.999996901 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.001188040 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.001290083 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.001396894 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.044171095 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.046431065 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.046492100 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.092510939 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.540858030 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:12:54.540891886 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:12:54.540961981 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:12:54.541285992 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:12:54.541297913 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:12:54.739609003 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.742221117 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.742297888 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.742332935 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.742402077 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.742461920 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.744416952 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.749958038 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.750051975 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.750071049 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.758096933 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.758174896 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.758188963 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.765377045 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.765471935 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.765486002 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.785687923 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:12:54.785907030 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:12:54.785916090 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:12:54.787560940 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:12:54.787667036 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:12:54.788732052 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:12:54.788875103 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:12:54.809978962 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.809993982 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.841211081 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:12:54.841221094 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:12:54.844315052 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.844388008 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.844408989 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.847595930 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.847681046 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.847696066 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.854960918 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.855038881 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.855052948 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.862063885 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.862154007 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.862173080 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.869611979 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.869695902 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.869714975 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.869812965 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.869877100 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.869904995 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.877077103 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.877154112 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.877167940 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.884475946 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.884557009 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.884569883 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.887676001 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:12:54.891798973 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.891895056 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.891907930 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.898698092 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.898801088 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.898813963 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.905589104 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.905688047 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.905695915 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.905728102 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.905792952 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.905823946 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.912873030 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.912947893 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.912961006 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.919902086 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.920001030 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.920016050 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.933242083 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.933326960 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.933341026 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.933479071 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.933545113 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.933557987 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.948843956 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.948925972 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.948939085 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.951520920 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.951621056 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.951643944 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.956919909 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.956998110 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.957011938 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.961846113 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.961924076 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.961937904 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.966536045 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.966614962 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.966628075 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.971261024 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.971373081 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.971386909 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.976363897 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.976433992 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.976447105 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.980829954 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.980918884 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.980933905 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.981079102 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.981154919 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.981167078 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.985821962 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.985915899 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.985929012 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.990786076 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.990868092 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.990884066 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.995064020 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:54.995136976 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:54.995150089 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.000015974 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.000211000 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:55.000222921 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.002120972 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.002203941 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:55.002217054 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.007102966 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.007190943 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:55.007205009 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.011684895 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.011754036 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:55.011768103 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.011914968 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.011972904 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:55.011986017 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.012232065 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:55.012298107 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:55.012401104 CEST	49738	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:55.012427092 CEST	443	49738	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.219297886 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:57.219345093 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:57.219444036 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:57.222377062 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:57.222404003 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:57.453811884 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:57.453905106 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:57.483768940 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.483861923 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.483989954 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.484222889 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.484245062 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.484354019 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:57.484375954 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:57.485404015 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:57.496471882 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.496553898 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.496648073 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.499891996 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.499927044 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.535449028 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:57.704691887 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.719419003 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.743067026 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.743087053 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.743191957 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.743222952 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.744296074 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.744606972 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.748193026 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.748373032 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.765994072 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.766498089 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.766836882 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.766882896 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.766915083 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:57.766927004 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.766927004 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:57.767101049 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:58.049642086 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:58.049818993 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:58.049870968 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:58.118797064 CEST	49751	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:58.118828058 CEST	443	49751	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:58.402558088 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:58.408956051 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:58.409013987 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:58.537520885 CEST	49750	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:58.537549973 CEST	443	49750	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.038351059 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.038397074 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.038471937 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.039012909 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.039031029 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.039813995 CEST	49758	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.039846897 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.040077925 CEST	49758	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.040359020 CEST	49758	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.040374994 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.081088066 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.113521099 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.113621950 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.113698959 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.113943100 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.113967896 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.128119946 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.187361956 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.187510967 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.187617064 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.187693119 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.187715054 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.187726974 CEST	49749	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.187735081 CEST	443	49749	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.218050957 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.218132973 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.218225956 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.218549967 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.218575001 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.256441116 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.256757975 CEST	49758	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.256771088 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.257584095 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.257893085 CEST	49758	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.257975101 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.258040905 CEST	49758	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.258055925 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.258780003 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.258966923 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.258990049 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.259730101 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.260016918 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.260119915 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.260128021 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.260189056 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.305304050 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.328866005 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.329294920 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.329324961 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.330780983 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.330847979 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.434818983 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.434912920 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.436404943 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.436415911 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.436898947 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.438241959 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.484117031 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.493675947 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.493870020 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.494294882 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.494328976 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.494394064 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.540153027 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.552287102 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.624027967 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.624310970 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.624368906 CEST	49758	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.625808001 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.628546953 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.628631115 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.628638983 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.628670931 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.628715992 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.631433964 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.635175943 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.635236979 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.635251045 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.639974117 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.640054941 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.640064001 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.643796921 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.643850088 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.643858910 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.644722939 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.644793987 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.644927025 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.646775007 CEST	49758	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.646796942 CEST	443	49758	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.653819084 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.653861046 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.653898001 CEST	49760	443	192.168.2.4	104.123.200.136
Apr 19, 2024 13:12:59.653917074 CEST	443	49760	104.123.200.136	192.168.2.4
Apr 19, 2024 13:12:59.656975985 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.657002926 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.657052994 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.657383919 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.657397032 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.673023939 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.673106909 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.673116922 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.715662003 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.715672016 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.733170033 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.733258009 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.733273029 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.736896992 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.738430023 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.738440990 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.743916035 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.743979931 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.743988037 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.746001005 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.746028900 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.746294022 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.747711897 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.747730017 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.751462936 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.751534939 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.751543045 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.758698940 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.758868933 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.758928061 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.758936882 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.760354042 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.765933990 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.773266077 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.773355961 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.773364067 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.773454905 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.773660898 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.773668051 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.780647039 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.780726910 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.780735016 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.787894964 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.788022995 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.788029909 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.795366049 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.795438051 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.795445919 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.802624941 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.802692890 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.802700996 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.810030937 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.810148001 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.810156107 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.813138008 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.813848972 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.813930035 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.814157963 CEST	49759	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.814198017 CEST	443	49759	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.817095041 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.817276955 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.817286015 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.821182966 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.821322918 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.821331024 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.837752104 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.837840080 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.837848902 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.840262890 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.840322018 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.840328932 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.845524073 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.845585108 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.845592022 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.850410938 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.850487947 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.850496054 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.855101109 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.855173111 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.855182886 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.859869957 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.859957933 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.859966040 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.864682913 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.864767075 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.864775896 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.869463921 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.869539022 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.869548082 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.869657993 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.869714975 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.869729042 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.873909950 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.874031067 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.874038935 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.875334978 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.875534058 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.875544071 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.878789902 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.878866911 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.878875017 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.879221916 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.879288912 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.879800081 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.879884005 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.880027056 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.880034924 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.883739948 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.883869886 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.883928061 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.883936882 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.884815931 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.888281107 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.890261889 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.890326023 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.890338898 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.895158052 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.895212889 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.895226955 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.900048018 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.900131941 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.900146008 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.904939890 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.904993057 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.905019045 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.905035019 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.905145884 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.909459114 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.909543037 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.909655094 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.909670115 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.913446903 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.913526058 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.913538933 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.917414904 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.917475939 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.917488098 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.921224117 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.921298981 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.921313047 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.925306082 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.925376892 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.925390959 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.925501108 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.925564051 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.925576925 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.929359913 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.929449081 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.929461956 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.932977915 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.933254004 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.933542967 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.933553934 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.937071085 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.937143087 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.937161922 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.940617085 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.940680981 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.940690041 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.942475080 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.942563057 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.942572117 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.946717024 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.946784973 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.946793079 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.950464010 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.950531960 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.950541019 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.953231096 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.953286886 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.953294992 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.954164982 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.954255104 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.954344034 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.954802990 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.954840899 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.955547094 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.955598116 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.955610037 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.958465099 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.959311008 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.959323883 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.961024046 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.961076975 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.961086988 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.961096048 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.961440086 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.963768959 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.963860035 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.963998079 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.964004993 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.966233969 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.966293097 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.966342926 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.966351032 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.966593981 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.966626883 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.969228029 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.969321012 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.969330072 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.970048904 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.970202923 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.970777988 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.970860004 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.970997095 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.971012115 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.971752882 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.971812963 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.971821070 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.974131107 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.974181890 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.974189043 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.977617979 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.977662086 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.977669954 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.980276108 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.980336905 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.980345011 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.982569933 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.982629061 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.982637882 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.984950066 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.985002041 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.985012054 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.985121012 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.985285997 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.985294104 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.987482071 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.987540007 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.987550974 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.989772081 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.989805937 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.989820004 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.989829063 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.989953041 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.992029905 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.992111921 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.992161036 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.992171049 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.994414091 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.994474888 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.994482994 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.996733904 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.996807098 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.996814966 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.999008894 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:12:59.999058008 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:12:59.999066114 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.001192093 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.001235008 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.001244068 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.003359079 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.003403902 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.003412008 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.005495071 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.005578041 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.005585909 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.006597042 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.006652117 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.006659031 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.008706093 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.008754015 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.008763075 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.010927916 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.010987997 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.010996103 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.012974977 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.013035059 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.013058901 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.013067961 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.015052080 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.015095949 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.015145063 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.015152931 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.015242100 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.017107010 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.017196894 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.017296076 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.017304897 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.019164085 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.019212008 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.019220114 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.021178007 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.021224022 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.021231890 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.023179054 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.023232937 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.023241997 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.025124073 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.025165081 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.025172949 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.027072906 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.027108908 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.027156115 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.027164936 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.027200937 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.029051065 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.030916929 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.031106949 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.031116009 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.031949997 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.032011986 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.032021046 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.033797979 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.033837080 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.033871889 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.033881903 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.033929110 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.035701990 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.037481070 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.037533045 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.037542105 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.039299011 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.039336920 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.039346933 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.039355040 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.039388895 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.041126966 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.041182995 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.041309118 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.041318893 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.042967081 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.043013096 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.043020964 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.044754028 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.044826984 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.044835091 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.046406031 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.046449900 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.046458006 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.048084974 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.048134089 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.048142910 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.049758911 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.049808025 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.049815893 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.051465988 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.051604986 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.051614046 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.053147078 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.053200006 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.053210020 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.054016113 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.054065943 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.054075003 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.055697918 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.056648970 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.056659937 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.057427883 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.057549000 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.057559013 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.059076071 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.059123039 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.059134007 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.060620070 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.060738087 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.060750961 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.062139034 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.062205076 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.062216043 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.063716888 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.063780069 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.063788891 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.065186024 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.065247059 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.065256119 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.066673040 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.067198038 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.067207098 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.068187952 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.068382978 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.068392992 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.070077896 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.070858955 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.070868969 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.071012974 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.071059942 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.071068048 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.072355986 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.072402000 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.072407961 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.072419882 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.072460890 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.072468042 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.073854923 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.073982000 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.073991060 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.075862885 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.075906038 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.075925112 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.075933933 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.076124907 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.077275038 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.078686953 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.078732014 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.078739882 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.078749895 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.078783989 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.080096960 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.081372023 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.081420898 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.081475019 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.081482887 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.081796885 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.082701921 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.084064007 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.084114075 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.084119081 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.084136009 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.084180117 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.085328102 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.086946964 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.086988926 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.086996078 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.087004900 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.087038040 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.088016033 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.089178085 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.089220047 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.089226007 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.089236021 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.089413881 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.090409040 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.091676950 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.091725111 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.091732979 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.092864990 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.092911005 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.092919111 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.094747066 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.094794989 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.094835997 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.094845057 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.095118999 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.095890999 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.097101927 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.097150087 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.097201109 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.097209930 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.097249985 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.098272085 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.099481106 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.099523067 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.099529028 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.099539042 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.099637032 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.100642920 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.101795912 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.101845026 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.101859093 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.101866961 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.101905107 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.102941036 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.104162931 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.104206085 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.104219913 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.104228020 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.104283094 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.105218887 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.106632948 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.106709003 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.106758118 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.106772900 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.106851101 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.107575893 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.108537912 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.108586073 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.108589888 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.108602047 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.108709097 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.109690905 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.110738039 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.110909939 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.110918045 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.111310959 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.111356020 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.111363888 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.112489939 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.112550020 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.112557888 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.113537073 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.113604069 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.113611937 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.114680052 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.114723921 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.114732027 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.115710974 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.115797997 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.115806103 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.116806984 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.116862059 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.116877079 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.116884947 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.117186069 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.117813110 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.118881941 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.118926048 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.118937969 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.120317936 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.120364904 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.120366096 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.120381117 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.120423079 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.120434999 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.120985985 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.121035099 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.121042967 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.122034073 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.122126102 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.122133017 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.123089075 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.123142004 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.123150110 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.124084949 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.124131918 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.124139071 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.125164986 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.125216007 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.125224113 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.126580000 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.126622915 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.126631021 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.127566099 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.127614975 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.127618074 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.127630949 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.127686024 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.128565073 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.128642082 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.128688097 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.128695965 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.129606009 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.129673958 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.129682064 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.130564928 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.130621910 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.130629063 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.131544113 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.131613016 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.131620884 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.132524967 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.132586002 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.132594109 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.133472919 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.133549929 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.133558989 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.134392023 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.134438038 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.134445906 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.135310888 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.135375977 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.135382891 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.136305094 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.136364937 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.136373043 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.137197971 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.137263060 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.137274981 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.138119936 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.138181925 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.138190031 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.139027119 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.139125109 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.139132977 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.140134096 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.140177011 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.140185118 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.141279936 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.141314983 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.141326904 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.141335964 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.141366005 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.141374111 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.142153025 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.142210007 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.142218113 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.143076897 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.143138885 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.143146038 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.143923998 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.143965006 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.143971920 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.144814014 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.144862890 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.144871950 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.145678997 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.145737886 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.145745039 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.146539927 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.146596909 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.146605015 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.147424936 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.147545099 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.147556067 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.148245096 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.148289919 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.148302078 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.149070024 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.149113894 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.149122000 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.149930954 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.149981976 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.149990082 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.150782108 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.150829077 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.150836945 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.151593924 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.151638031 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.151645899 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.152396917 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.152453899 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.152461052 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.153285027 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.153343916 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.153352022 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.154134035 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.154176950 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.154185057 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.154871941 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.155014038 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.155020952 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.155782938 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.155841112 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.155848980 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.156491041 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.156553984 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.156560898 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.157325029 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.157392979 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.157401085 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.158226013 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.158283949 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.158292055 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.158930063 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.158987045 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.158994913 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.160058022 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.160111904 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.160144091 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.160152912 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.160243034 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.160849094 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.161598921 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.161644936 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.161660910 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.161674976 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.161772013 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.162341118 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.163522959 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.163566113 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.163570881 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.163588047 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.163629055 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.163916111 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.164684057 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.164729118 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.164779902 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.164788961 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.165184975 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.165445089 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.166138887 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.166177988 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.166213036 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.166222095 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.166265965 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.166273117 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.166893959 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.166934967 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.166944027 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.167756081 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.168356895 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.168394089 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.168397903 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.168417931 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.168447971 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.169177055 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.169222116 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.169233084 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.169848919 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.169897079 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.169953108 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.169964075 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.170329094 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.170357943 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.170953989 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.171076059 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.171087027 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.171366930 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.171478987 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.171488047 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.171840906 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.171905041 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.172137022 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.172178030 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.172188044 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.172570944 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.172645092 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.172777891 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.172883034 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.172892094 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.172936916 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.172944069 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.173500061 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.173551083 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.173561096 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.174176931 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.174222946 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.174232006 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.174954891 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.175005913 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.175014973 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.175669909 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.175719023 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.175726891 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.176701069 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.176749945 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.176753044 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.176767111 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.177371979 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.177408934 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.177418947 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.177573919 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.178055048 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.178853989 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.178936005 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.178991079 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.178999901 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.179066896 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.179485083 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.180196047 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.180277109 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.180282116 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.180303097 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.180352926 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.180864096 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.181534052 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.181595087 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.181603909 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.182337046 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.182416916 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.182447910 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.182456970 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.182518959 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.183119059 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.183799982 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.183868885 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.183877945 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.184429884 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.184484005 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.184493065 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.184890032 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.184941053 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.184950113 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.185575008 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.185641050 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.185648918 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.186274052 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.186325073 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.186333895 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.186834097 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.186889887 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.186897993 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.187727928 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.187799931 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.187807083 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.188266993 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.188319921 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.188327074 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.188430071 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.188504934 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.188512087 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.189296961 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.189358950 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.189366102 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.190160990 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.190223932 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.190229893 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.190306902 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.190363884 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.190371037 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.191200972 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.191251040 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.191258907 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.191833019 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.191915989 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.191958904 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.191966057 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.192118883 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.192686081 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.192842960 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.193020105 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.193027020 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.193804026 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.193861008 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.193866968 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.194677114 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.194761992 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.194766998 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.194787979 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.194830894 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.194869041 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.195637941 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.195710897 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.195719004 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.195739031 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.195786953 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.196585894 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.196728945 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.196774960 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.196783066 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.197561979 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.197618961 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.197626114 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.198417902 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.198467970 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.198474884 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.198571920 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.198720932 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.198728085 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.198822975 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.199398994 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.199445009 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.199450970 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.200292110 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.200337887 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.200345039 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.200438976 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.200486898 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.200493097 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.201225996 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.201273918 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.201287985 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.202056885 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.202101946 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.202107906 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.202203035 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.202246904 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.202253103 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.203003883 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.203059912 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.203067064 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.203844070 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.203886986 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.203892946 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.203983068 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.204047918 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.204055071 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.204763889 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.204844952 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.204878092 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.204885006 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.205401897 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.205560923 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.205705881 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.205822945 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.205830097 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.206196070 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.206310034 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.206650019 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.206690073 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.206696987 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.207355976 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.207406998 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.207412958 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.207506895 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.207562923 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.207570076 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.207741022 CEST	49763	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.207756042 CEST	443	49763	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.208604097 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.208662033 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.208669901 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.209141016 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.209197998 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.209204912 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.209371090 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.209553003 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.209559917 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.210038900 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.210083008 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.210089922 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.210865974 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.210927963 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.210935116 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.211035967 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.211086035 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.211092949 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.211779118 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.211857080 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.211863995 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.211894035 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.211956024 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.212555885 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.212711096 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.212758064 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.212764978 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.213495970 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.213543892 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.213550091 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.214248896 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.214293957 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.214301109 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.214402914 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.214447975 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.214454889 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.215187073 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.215233088 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.215240002 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.215949059 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.215998888 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.216012001 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.216131926 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.216178894 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.216185093 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.216830015 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.216916084 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.216957092 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.216964960 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.217242002 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.217586994 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.217742920 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.217796087 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.217803001 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.218471050 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.218538046 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.218544006 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.219166040 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.219219923 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.219225883 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.219321012 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.219368935 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.219376087 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.220063925 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.220129013 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.220134974 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.220810890 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.220873117 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.220880032 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.220968008 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.221043110 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.221050024 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.221581936 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.221642971 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.221648932 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.222342968 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.222402096 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.222408056 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.222501040 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.222546101 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.222553015 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.223182917 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.223238945 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.223246098 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.223949909 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.224008083 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.224019051 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.224605083 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.224656105 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.224663019 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.224757910 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.224802017 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.224808931 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.225541115 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.225598097 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.225604057 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.226145983 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.226236105 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.226285934 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.226293087 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.226617098 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.226632118 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.226638079 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.227035999 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.227092028 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.227093935 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.227119923 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.227200031 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.227864027 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.228018999 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.228148937 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.228156090 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.228552103 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.228636026 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.228688002 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.228696108 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.229233027 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.229238987 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.229352951 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.229573965 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.229581118 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.230132103 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.230187893 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.230194092 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.230746984 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.230794907 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.230804920 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.230901957 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.231050014 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.231055975 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.231537104 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.231585026 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.231595993 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.232202053 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.232245922 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.232253075 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.232369900 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.232410908 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.232418060 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.233022928 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.233071089 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.233077049 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.233712912 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.233767986 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.233773947 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.233877897 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.233925104 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.233932018 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.234580994 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.234643936 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.234649897 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.234739065 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.234786034 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.234791994 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.235747099 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.235805035 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.235810995 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.235903978 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.235986948 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.236032963 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.236041069 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.236093044 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.236537933 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.236767054 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.236849070 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.236900091 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.236907005 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.236943007 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.237512112 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.237675905 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.237720966 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.237728119 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.238476992 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.238565922 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.238614082 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.238620996 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.238715887 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.238745928 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.238753080 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.238945961 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.239394903 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.239557981 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.239604950 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.239617109 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.240374088 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.240422010 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.240428925 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.240534067 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.240586996 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.240593910 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.241302967 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.241362095 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.241368055 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.241465092 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.241520882 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.241527081 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.242177010 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.242266893 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.242314100 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.242321014 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.242482901 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.242510080 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.242516041 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.242556095 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.243123055 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.243309975 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.243360043 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.243366003 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.243994951 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.244045019 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.244051933 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.244199038 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.244251966 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.244257927 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.244962931 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.245022058 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.245028973 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.245115995 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.245163918 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.245170116 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.245909929 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.245969057 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.245975971 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.246068001 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.246150970 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.246169090 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.246176004 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.246211052 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.246754885 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.246912003 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.246959925 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.246965885 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.247653961 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.247706890 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.247714043 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.247814894 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.247864008 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.247869968 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.248519897 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.248584986 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.248590946 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.248754025 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.248816967 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.248823881 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.248847008 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.248888016 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.249485970 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.249651909 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.249733925 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.249782085 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.249789000 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.250169039 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.250257969 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.250412941 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.250495911 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.250539064 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.250546932 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.250678062 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.251194000 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.251353979 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.251440048 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.251471043 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.251478910 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.251717091 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.252156973 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.252316952 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.252376080 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.252382994 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.252954960 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.253000021 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.253005981 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.253112078 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.253211021 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.253216982 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.253748894 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.253850937 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.253900051 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.253906965 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.254030943 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.254036903 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.254637003 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.254695892 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.254703045 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.254782915 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.254838943 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.254844904 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.255383015 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.255428076 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.255446911 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.255536079 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.255579948 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.255585909 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.256150007 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.256223917 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.256230116 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.256303072 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.256349087 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.256356001 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.256941080 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.257003069 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.257009029 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.257097960 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.257271051 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.257278919 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.257808924 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.257869959 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.257875919 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.257960081 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.258058071 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.258064985 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.258599997 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.258687973 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.258694887 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.258709908 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.258754015 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.258793116 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.259458065 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.259516001 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.259522915 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.259710073 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.259835005 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.259841919 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.260222912 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.260312080 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.260329962 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.260337114 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.260373116 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.260395050 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.261084080 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.261171103 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.261230946 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.261238098 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.261817932 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.261883974 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.261889935 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.261936903 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.261941910 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.262037039 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.262146950 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.262154102 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.262641907 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.262698889 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.262705088 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.262788057 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.262914896 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.262922049 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.263494015 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.263556004 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.263561964 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.263669968 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.263716936 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.263724089 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.264225960 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.264311075 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.264365911 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.264373064 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.264584064 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.264590025 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.265098095 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.265156031 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.265162945 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.265727043 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.265774965 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.265780926 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.265855074 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.265902042 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.265918970 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.266366959 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.266415119 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.266421080 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.266501904 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.266643047 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.266694069 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.266700983 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.266861916 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.266863108 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.266999006 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.267566919 CEST	49757	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.267579079 CEST	443	49757	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.347107887 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.347203970 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.347300053 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.350872040 CEST	49764	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.350900888 CEST	443	49764	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.478051901 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.478394032 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.478569031 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.659868956 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.659964085 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.660222054 CEST	49769	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.660264015 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.660273075 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.660314083 CEST	49769	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.660897970 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.660933018 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.661308050 CEST	49769	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.661324024 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.693495989 CEST	49765	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.693561077 CEST	443	49765	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.877918959 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.878177881 CEST	49769	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.878202915 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.878770113 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.879162073 CEST	49769	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.879264116 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.879481077 CEST	49769	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.879496098 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.881186008 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.881675959 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.881727934 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.883219004 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.883651018 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.883820057 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:00.883871078 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.884147882 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:00.935465097 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:01.338982105 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:01.339152098 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:01.339401960 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:01.448420048 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:01.448749065 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:01.448828936 CEST	49769	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:02.318783045 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:02.318823099 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:02.318885088 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:02.319663048 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:02.319720030 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:02.319773912 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:02.322879076 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:02.322895050 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:02.323256969 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:02.323273897 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:02.540128946 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:02.544264078 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:02.596421003 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:02.644449949 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.026185989 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.026225090 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.026742935 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.026766062 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.027362108 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.028400898 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.030713081 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.030745983 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.030805111 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.040218115 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.040447950 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.040669918 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.041094065 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.041261911 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.041299105 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.041562080 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.041614056 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.041625023 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.041682005 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.041703939 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.041749001 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.088113070 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.112248898 CEST	49768	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.112287045 CEST	443	49768	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.113662004 CEST	49769	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.113686085 CEST	443	49769	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.173106909 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.173221111 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.173295975 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.173873901 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.173952103 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.215126991 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.215220928 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.215298891 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.215579987 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.215606928 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.216849089 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.216875076 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.216938019 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.217093945 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.217106104 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.260333061 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.260545969 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.260571003 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.264179945 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.264251947 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.264794111 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.264972925 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.266369104 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.266379118 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.346508980 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.347177029 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.347239971 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.348165989 CEST	49770	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.348184109 CEST	443	49770	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.391793966 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.392158985 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.392220974 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.392725945 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.393521070 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.393650055 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.394011974 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.402843952 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.434892893 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.435199022 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.435242891 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.436162949 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.436440945 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.436947107 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.437036991 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.437189102 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.437202930 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.437223911 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.437380075 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.441003084 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.441078901 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.441466093 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.441589117 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.441600084 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.441716909 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.451786995 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.452416897 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.452478886 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.452596903 CEST	49771	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.452613115 CEST	443	49771	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.480148077 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.508308887 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.508327961 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.609961987 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.610234976 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.610294104 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.610433102 CEST	49772	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.610449076 CEST	443	49772	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.616183996 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.616290092 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.616432905 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.617131948 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.617208004 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.618181944 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.618244886 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.618308067 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.618700981 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.618736029 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.627970934 CEST	49779	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.627990961 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.628043890 CEST	49779	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.628509045 CEST	49779	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.628524065 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.629816055 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.629905939 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.629982948 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.630177975 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.630198002 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.635190010 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.817576885 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.817756891 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.817832947 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.818279028 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.818279028 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.818341017 CEST	443	49774	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.818402052 CEST	49774	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.838581085 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.838956118 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.838984013 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.839684963 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.840171099 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.840276003 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.840457916 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.840457916 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.840490103 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.841161966 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.841248035 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.841300011 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.841516018 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.841541052 CEST	443	49775	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.841557026 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.841581106 CEST	49775	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.843384027 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.843601942 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.843631983 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.845283031 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.845814943 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.845948935 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.845963955 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.846024036 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.849111080 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.849324942 CEST	49779	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.849353075 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.850099087 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.850349903 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.850378036 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.850644112 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.850972891 CEST	49779	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.851146936 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.851248980 CEST	49779	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.851807117 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.851877928 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.852181911 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.852262020 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.852304935 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.852319002 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.896117926 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.903470993 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.903541088 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.903599977 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.903938055 CEST	49776	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.903964043 CEST	443	49776	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:03.953448057 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.953478098 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:03.953509092 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.144927025 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.197241068 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.197624922 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.197690964 CEST	49779	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.205652952 CEST	49779	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.205674887 CEST	443	49779	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.267616987 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.267900944 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.267985106 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.268146038 CEST	49780	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.268208981 CEST	443	49780	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.272429943 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.272460938 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.272535086 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.272820950 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.272840023 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.274350882 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.274408102 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.274480104 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.274645090 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.274663925 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.274830103 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.275018930 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.275207996 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.275535107 CEST	49777	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.275593042 CEST	443	49777	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.277730942 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.277781963 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.277883053 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.278280020 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.278445959 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.278481960 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.279031038 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.279213905 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.279479027 CEST	49778	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.279516935 CEST	443	49778	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.280019999 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.280126095 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.280203104 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.280678034 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.280752897 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.492577076 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.492844105 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.492852926 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.494000912 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.494357109 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.494513988 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.494518995 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.494560003 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.494576931 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.494796991 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.494831085 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.496042967 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.496664047 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.496768951 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.496783018 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.496908903 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.498266935 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.498487949 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.498522997 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.499382019 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.499692917 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.499785900 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.499824047 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.499824047 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.499867916 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.504831076 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.505170107 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.505232096 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.506823063 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.507285118 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.507285118 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.507381916 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.507536888 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.548599005 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.548679113 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.548811913 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.655689955 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.818306923 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.818646908 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.819021940 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.819443941 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:04.819485903 CEST	49783	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.819509983 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:04.819520950 CEST	443	49783	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.819556952 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:13:04.822355986 CEST	49741	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:13:04.822380066 CEST	443	49741	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:04.822638035 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.822662115 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.822890043 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.823023081 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.823029995 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.850639105 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.850939035 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.850986958 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.851146936 CEST	49782	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.851171017 CEST	443	49782	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.861614943 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.861793995 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.861941099 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.864757061 CEST	49784	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.864816904 CEST	443	49784	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.949845076 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.950119019 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.950536013 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.952055931 CEST	49781	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.952083111 CEST	443	49781	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.956759930 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.956808090 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.956837893 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.956876993 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.956909895 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.957133055 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.960865021 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.960887909 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.961333036 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.961368084 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.966555119 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.966625929 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:04.966927052 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.967277050 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:04.967304945 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.042164087 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.042913914 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.042933941 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.044204950 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.044868946 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.044868946 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.044886112 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.045037031 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.141113997 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.176033020 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.176286936 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.176347017 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.176723957 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.177319050 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.177319050 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.177409887 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.177412033 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.177455902 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.179563046 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.179749966 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.179780006 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.180499077 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.180896044 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.180896044 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.180896044 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.181056023 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.181179047 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.183185101 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.183542013 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.183587074 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.185072899 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.185327053 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.185535908 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.185626030 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.185723066 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.185723066 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.185745001 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.228122950 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.250329018 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.250339031 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.298418999 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.365748882 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.366147041 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.367017984 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.367412090 CEST	49785	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.367428064 CEST	443	49785	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.490662098 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.491358995 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.491750956 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.492589951 CEST	49787	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.492650032 CEST	443	49787	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.494729996 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.494802952 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.495104074 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.495104074 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.495178938 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.504765987 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.505044937 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.505683899 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.505830050 CEST	49786	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.505847931 CEST	443	49786	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.633660078 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.633810043 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.634730101 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.634874105 CEST	49788	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.634895086 CEST	443	49788	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.715524912 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.715815067 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.715832949 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.717348099 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.717854023 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.717854023 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:05.717878103 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.718040943 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:05.809472084 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:06.036421061 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:06.036598921 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:06.036804914 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:06.037522078 CEST	49790	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:06.037560940 CEST	443	49790	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:06.326726913 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 19, 2024 13:13:06.430478096 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 19, 2024 13:13:06.430505991 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 19, 2024 13:13:06.430551052 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 19, 2024 13:13:11.724701881 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.724797964 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.724931002 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.725205898 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.725241899 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.727258921 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.727312088 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.727370977 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.727523088 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.727545023 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.942893028 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.943171978 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.943191051 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.943692923 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.943973064 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.944062948 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.944118023 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.944133997 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.944149017 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.945054054 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.945233107 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.945291042 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.946443081 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.946790934 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.946969986 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.946974039 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:11.947072983 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:11.995924950 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.249455929 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.249773026 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.249828100 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.250334024 CEST	49796	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.250354052 CEST	443	49796	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.254072905 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.254117012 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.254214048 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.254411936 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.254426956 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.281295061 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.281611919 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.281681061 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.282582045 CEST	49795	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.282618999 CEST	443	49795	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.285911083 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.285948992 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.286020041 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.286333084 CEST	49799	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.286362886 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.286513090 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.286531925 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.286537886 CEST	49799	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.286678076 CEST	49799	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.286689997 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.471313000 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.471704960 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.471738100 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.472244024 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.472534895 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.472615957 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.472786903 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.501564026 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.501756907 CEST	49799	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.501765013 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.502310038 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.502631903 CEST	49799	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.502746105 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.502803087 CEST	49799	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.502810955 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.506253958 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.506464958 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.506524086 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.507704020 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.508064032 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.508219004 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.508230925 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.508286953 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.516140938 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.527337074 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.558039904 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.800578117 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.800864935 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.800929070 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.801752090 CEST	49797	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.801774025 CEST	443	49797	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.849131107 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.849813938 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.849888086 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.850056887 CEST	49798	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.850106955 CEST	443	49798	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.947974920 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.948157072 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.948312998 CEST	49799	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.948419094 CEST	49799	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.948429108 CEST	443	49799	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.951913118 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.951994896 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.952131033 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.952490091 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.952569008 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.952728987 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.953146935 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.953176975 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.953392029 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.953438997 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.953696966 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.953775883 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.953845978 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.954201937 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.954237938 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.954607010 CEST	49803	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.954633951 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:12.954688072 CEST	49803	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.955303907 CEST	49803	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:12.955324888 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.170644045 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.170917034 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.170973063 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.171804905 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.172257900 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.172401905 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.172605991 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.173202038 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.173446894 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.173505068 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.174345016 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.174673080 CEST	49803	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.174693108 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.175189018 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.175290108 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.175358057 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.175549030 CEST	49803	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.175646067 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.175872087 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.175964117 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.176047087 CEST	49803	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.176125050 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.176125050 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.176146984 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.176666021 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.176919937 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.176959991 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.178422928 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.178775072 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.178903103 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.178916931 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.178972960 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.216141939 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.218452930 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.218463898 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.218470097 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.220132113 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.494740963 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.494898081 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.494950056 CEST	49803	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.495402098 CEST	49803	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.495415926 CEST	443	49803	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.534234047 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.534578085 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.534650087 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.534691095 CEST	443	49801	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.534723997 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.534764051 CEST	49801	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.602686882 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.603455067 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.603573084 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.603662968 CEST	49802	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.603698969 CEST	443	49802	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.606481075 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.606530905 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.606606007 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.606792927 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.606806040 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.666913986 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.667305946 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.667388916 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.667830944 CEST	49800	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.667864084 CEST	443	49800	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.671214104 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.671255112 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.671582937 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.672163963 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.672204018 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.672265053 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.672465086 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.672481060 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.672713995 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.672733068 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.673562050 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.673590899 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.673717976 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.673882961 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.673896074 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.827140093 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.827435970 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.827497959 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.829035997 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.829380035 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.829519033 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.829533100 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.829575062 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.873435020 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.889745951 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.889942884 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.889967918 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.890531063 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.890899897 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.890959024 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.891035080 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.891040087 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.891051054 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.891206980 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.891222000 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.891725063 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.892009974 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.892079115 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.892122030 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.893419027 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.893596888 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.893610001 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.894750118 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.895056009 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.895190954 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.895216942 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.895226955 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.936044931 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.936058998 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.936064959 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:13.936069012 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:13.936074018 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.219685078 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.219815969 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.219935894 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.221136093 CEST	49806	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.221157074 CEST	443	49806	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.224210978 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.224253893 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.224531889 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.224616051 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.224927902 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.224998951 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.225325108 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.225348949 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.225562096 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.225765944 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.225781918 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.225938082 CEST	49804	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.225977898 CEST	443	49804	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.226294041 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.226310015 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.229218006 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.229357004 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.229404926 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.229625940 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.229635954 CEST	443	49807	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.229696989 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.229706049 CEST	49807	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.239708900 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.240139961 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.240200043 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.240362883 CEST	49805	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.240370989 CEST	443	49805	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.440131903 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.440409899 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.440438986 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.440793037 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.441117048 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.441174984 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.441297054 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.441297054 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.441323042 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.445682049 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.445888996 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.445913076 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.447019100 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.447328091 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.447473049 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.447473049 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.447504044 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.498548031 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.756434917 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.756547928 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.757419109 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.776350975 CEST	49808	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.776379108 CEST	443	49808	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.783277035 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.783622980 CEST	49810	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.783659935 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.783921957 CEST	49810	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.784265041 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.784344912 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.784913063 CEST	49809	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.784934044 CEST	443	49809	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:14.787496090 CEST	49810	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:14.787512064 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:15.005919933 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:15.006431103 CEST	49810	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:15.006442070 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:15.007889032 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:15.008593082 CEST	49810	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:15.008776903 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:15.008912086 CEST	49810	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:15.052155018 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:15.339725971 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:15.340008020 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:15.340109110 CEST	49810	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:15.342854023 CEST	49810	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:15.342875004 CEST	443	49810	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.592022896 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.592122078 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.592200994 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.592525005 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.592571020 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.595787048 CEST	49812	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.595837116 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.595894098 CEST	49812	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.596887112 CEST	49812	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.596905947 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.811971903 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.812577963 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.812618971 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.813359976 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.814281940 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.814395905 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.814887047 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.814924002 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.814929962 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.817029953 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.817271948 CEST	49812	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.817286968 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.818406105 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.819729090 CEST	49812	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.819811106 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.820343971 CEST	49812	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:25.820375919 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:25.856209993 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.126090050 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.126372099 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.126856089 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.127526999 CEST	49811	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.127569914 CEST	443	49811	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.132503033 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.132579088 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.132982969 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.132983923 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.133059025 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.159845114 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.160171032 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.160624027 CEST	49812	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.164947987 CEST	49812	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.164963961 CEST	443	49812	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.172485113 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.172521114 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.176706076 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.180495977 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.180514097 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.237135887 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.237180948 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.237346888 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.238500118 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.238538980 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.352462053 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.352853060 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.352910042 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.354049921 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.355251074 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.355428934 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.355482101 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.396145105 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.397320986 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.399049997 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.399642944 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.399697065 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.400404930 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.403585911 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.403748989 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.403914928 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.403940916 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.452393055 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.457396984 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.457626104 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.457685947 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.458076954 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.468864918 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.468864918 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.468903065 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.468985081 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.513005018 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.672897100 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.673172951 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.674032927 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.674552917 CEST	49813	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.674607038 CEST	443	49813	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.801112890 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.801541090 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.802011013 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.802263975 CEST	49815	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.802304983 CEST	443	49815	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.833456993 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.833841085 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.834106922 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.834106922 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.930093050 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.930125952 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.930499077 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.930499077 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.930521011 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.933794022 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.933805943 CEST	49817	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.933840036 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.933882952 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.936526060 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.936532021 CEST	49817	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.937602043 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.937616110 CEST	49817	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.937619925 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.937653065 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.944490910 CEST	49819	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.944570065 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:26.945096016 CEST	49819	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.945096016 CEST	49819	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:26.945174932 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.145968914 CEST	49814	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.145996094 CEST	443	49814	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.150121927 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.151206017 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.157401085 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.159749031 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.188720942 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.188731909 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.189059973 CEST	49817	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.189099073 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.189152956 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.189172983 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.189265966 CEST	49819	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.189305067 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.189539909 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.189841986 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.190054893 CEST	49817	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.190129042 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.190150976 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.190351963 CEST	49819	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.190474987 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.190884113 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.191071987 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.191078901 CEST	49817	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.191195965 CEST	49819	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.191251040 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.191293001 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.191298962 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.192764997 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.192833900 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.229233980 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.229460955 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.229470968 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.229681969 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.236114979 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.236123085 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.236134052 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.270901918 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.270912886 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.317915916 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.481767893 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.482075930 CEST	49817	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.482161045 CEST	443	49817	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.482223034 CEST	49817	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.559709072 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.560152054 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.560205936 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.562328100 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.562601089 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.562668085 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.570771933 CEST	49818	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.570791006 CEST	443	49818	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.571110010 CEST	49816	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.571122885 CEST	443	49816	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.611121893 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.611200094 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.611269951 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.614856958 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.614895105 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.616091967 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.616137028 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.616184950 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.616626024 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.616643906 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.620301008 CEST	49822	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.620338917 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.620392084 CEST	49822	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.621066093 CEST	49822	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.621083975 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.623754978 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.623830080 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.623902082 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.624243021 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.624283075 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.694596052 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.694869995 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.695054054 CEST	49819	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.695323944 CEST	49819	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.695363045 CEST	443	49819	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.833657026 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.833914042 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.833940983 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.835388899 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.835460901 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.835563898 CEST	49822	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.835578918 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.835810900 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.835891962 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.835989952 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.835999012 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.836031914 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.836141109 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.836155891 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.836292028 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.836318016 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.836565018 CEST	49822	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.836632013 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.836771011 CEST	49822	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.837409019 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.837723017 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.837841988 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.837846994 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.837893963 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.844033957 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.844312906 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.844371080 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.845593929 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.845870972 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.846018076 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.846031904 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.846057892 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.880188942 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:27.891279936 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:27.891297102 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.163741112 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.164062977 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.164158106 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.164416075 CEST	49820	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.164453030 CEST	443	49820	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.168004036 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.168037891 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.168198109 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.168404102 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.168422937 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.180382967 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.180679083 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.180805922 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.180895090 CEST	49821	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.180911064 CEST	443	49821	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.184856892 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.184892893 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.185189009 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.185372114 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.185393095 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.185749054 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.185823917 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.185905933 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.186114073 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.186150074 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.190284014 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.190469027 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.190617085 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.190712929 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.190725088 CEST	443	49823	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.190737963 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.190773964 CEST	49823	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.279906988 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.280801058 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.280884027 CEST	49822	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.281043053 CEST	49822	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.281059980 CEST	443	49822	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.387289047 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.388453007 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.388482094 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.389585018 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.389911890 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.390012026 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.390019894 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.390079021 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.401752949 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.402110100 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.402146101 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.402694941 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.403135061 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.403239012 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.403271914 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.404644966 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.404844046 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.404900074 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.406407118 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.406709909 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.406903028 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.406908989 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.406908989 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.407030106 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.435925007 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.448127985 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.457067013 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.457185030 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.731090069 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.731499910 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.731587887 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.732220888 CEST	49826	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.732278109 CEST	443	49826	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.740345955 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.741127968 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.741192102 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.741352081 CEST	49824	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.741369963 CEST	443	49824	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.741967916 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.742427111 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.742546082 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.742718935 CEST	49825	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.742770910 CEST	443	49825	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.746646881 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.746685028 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.746756077 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.746980906 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.746998072 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.966646910 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.967050076 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.967097044 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.968612909 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.968993902 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.969124079 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:28.969136000 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:28.969189882 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:29.019401073 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:29.296138048 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:29.296657085 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:29.297143936 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:29.298135042 CEST	49827	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:29.298152924 CEST	443	49827	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.147603989 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.147651911 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.147769928 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.148000002 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.148020983 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.148808956 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.148838997 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.148889065 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.149075031 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.149085999 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.370951891 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.372241020 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.372303963 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.372320890 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.372705936 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.372766018 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.373053074 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.373451948 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.373717070 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.373826027 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.373845100 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.373861074 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.374269962 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.374731064 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.375000954 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.375150919 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.417473078 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.680484056 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.680888891 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.680953979 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.682063103 CEST	49829	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.682079077 CEST	443	49829	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.688968897 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.689007044 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.689126015 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.689421892 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.689439058 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.708509922 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.708816051 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.708873034 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.710304976 CEST	49828	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.710326910 CEST	443	49828	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.716866016 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.716924906 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.717000008 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.717216015 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.717237949 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.719671965 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.719702959 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.719763041 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.720107079 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.720124006 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.913348913 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.935138941 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.937124014 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.961039066 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.976563931 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.982199907 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.982213974 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.982230902 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.982369900 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.982395887 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.982611895 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.982662916 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.983339071 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.983588934 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.983690023 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.983778954 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.983838081 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.983942986 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.984255075 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.984344959 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.984399080 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.984445095 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.984452963 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:35.984522104 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:35.984544039 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.028192043 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.029014111 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.032115936 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.249480963 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.249660969 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.249721050 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.250579119 CEST	49830	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.250607014 CEST	443	49830	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.347785950 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.348086119 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.348166943 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.348292112 CEST	49831	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.348330975 CEST	443	49831	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.351644039 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.351717949 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.351799965 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.352210045 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.352253914 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.352404118 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.352417946 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.352437019 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.353204966 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.353249073 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.354032993 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.354110956 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.354263067 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.354471922 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.354511976 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.355720043 CEST	49836	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.355746031 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.355798006 CEST	49836	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.356117010 CEST	49836	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.356138945 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.455574036 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.456396103 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.456645012 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.456743002 CEST	49832	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.456780910 CEST	443	49832	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.572074890 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.572305918 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.572331905 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.573066950 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.573223114 CEST	49836	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.573240042 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.573635101 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.573898077 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.573926926 CEST	49836	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.574007034 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.574805021 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.574980974 CEST	49836	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.575131893 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.575131893 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.575165987 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.575232983 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.575377941 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.575406075 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.575819969 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.575987101 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.576018095 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.576189041 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.576478004 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.576680899 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.576688051 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.576710939 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.579171896 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.579231024 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.579507113 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.579587936 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.579631090 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.579638958 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.617513895 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.617660999 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.620134115 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.622629881 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.622689009 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.672460079 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.894917011 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.895287037 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.895370007 CEST	49836	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.895648003 CEST	49836	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.895669937 CEST	443	49836	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.912518024 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.912754059 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.912981987 CEST	443	49834	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.913098097 CEST	49834	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.976509094 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.976845026 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.977046013 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.977046013 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.980356932 CEST	49837	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.980434895 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.980525017 CEST	49837	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.980794907 CEST	49837	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.980829000 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.981662989 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.981724024 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.981888056 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.982004881 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.982034922 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.993303061 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.993685007 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.994240999 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.994616032 CEST	49833	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.994652987 CEST	443	49833	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.996346951 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.996376038 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.997800112 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.997807026 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.997870922 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.997872114 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.998049021 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.998059988 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:36.998226881 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:36.998238087 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.197937012 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.198057890 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.198206902 CEST	49837	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.198237896 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.198343039 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.198393106 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.198756933 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.198848009 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.199659109 CEST	49837	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.199754953 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.200196981 CEST	49837	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.200198889 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.200226068 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.200261116 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.200273037 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.200341940 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.219377041 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.219641924 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.219652891 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.219727039 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.219918013 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.219924927 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.220228910 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.220618010 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.220738888 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.220738888 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.220752001 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.220815897 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.221127987 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.221267939 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.221267939 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.221359015 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.252243996 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.267899990 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.267899990 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.284056902 CEST	49835	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.284094095 CEST	443	49835	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.552520037 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.552812099 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.553749084 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.554095984 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.554137945 CEST	49839	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.554157972 CEST	443	49839	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.554270983 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.555008888 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.555310011 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.555344105 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.555612087 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.555612087 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.555619001 CEST	443	49840	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.555687904 CEST	49840	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.555695057 CEST	49837	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.556497097 CEST	49837	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.556530952 CEST	443	49837	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.559324026 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.559381962 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.560583115 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.560630083 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.560672045 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.560810089 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.561108112 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.561110973 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.561140060 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.561140060 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.561966896 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.561996937 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.562212944 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.562212944 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.562238932 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.786890984 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.787169933 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.787209034 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.788763046 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.789243937 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.789243937 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.789243937 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.789392948 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.789417982 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.789530993 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.789596081 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.789624929 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.789764881 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.789967060 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.789980888 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.790416956 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.790497065 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.790779114 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.790779114 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.790803909 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.791059017 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.791065931 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.791065931 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.791091919 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.791152954 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.834664106 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.834670067 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.843275070 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.847289085 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.847659111 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:37.847846031 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.848087072 CEST	49838	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:37.848120928 CEST	443	49838	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.106550932 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.107029915 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.107106924 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.107163906 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.107410908 CEST	49842	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.107453108 CEST	443	49842	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.107587099 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.107719898 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.109668970 CEST	49841	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.109714031 CEST	443	49841	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.113143921 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.113235950 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.113317013 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.113601923 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.113626957 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.123195887 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.123925924 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.123996973 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.124138117 CEST	49843	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.124155045 CEST	443	49843	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.334326982 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.334686041 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.334745884 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.336273909 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.336617947 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.336767912 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.336782932 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.336812019 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.385592937 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.656313896 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.656593084 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:38.656678915 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.657653093 CEST	49844	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:38.657715082 CEST	443	49844	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:44.977237940 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:44.977305889 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:44.977381945 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:44.978108883 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:44.978189945 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:44.978291035 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:44.979160070 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:44.979198933 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:44.979371071 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:44.979404926 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.198231936 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.198800087 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.198858976 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.199426889 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.199873924 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.200793028 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.200913906 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.201323032 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.201339006 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.201364040 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.201401949 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.201555967 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.202918053 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.203603029 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.203603029 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.203641891 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.203896999 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.204022884 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.248053074 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.248209953 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.524386883 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.524697065 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.524862051 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.526061058 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.526237965 CEST	49847	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.526297092 CEST	443	49847	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.526462078 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.527333975 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.527334929 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.530992031 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.531022072 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.531383038 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.531541109 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.531548023 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.749819040 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.750030041 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.750053883 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.750515938 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.751146078 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.751146078 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.751164913 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.751229048 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:45.791706085 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.838078022 CEST	49846	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:45.838109016 CEST	443	49846	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:46.064928055 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:46.065319061 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:46.065377951 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:46.065804005 CEST	49849	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:46.065825939 CEST	443	49849	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:46.968349934 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:46.968394041 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:46.968503952 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:46.969346046 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:46.969366074 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:46.976650953 CEST	49851	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:46.976735115 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:46.976825953 CEST	49851	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:46.977437973 CEST	49851	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:46.977475882 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.188653946 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.188909054 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.188930035 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.189510107 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.190563917 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.190649033 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.191386938 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.191420078 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.191643000 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.196855068 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.203399897 CEST	49851	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.203460932 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.204658031 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.206332922 CEST	49851	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.206516027 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.206717014 CEST	49851	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.206778049 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.236112118 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.533390045 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.533906937 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.533977032 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.534486055 CEST	49850	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.534507036 CEST	443	49850	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.540210962 CEST	49852	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.540297031 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.540389061 CEST	49852	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.540823936 CEST	49852	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.540862083 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.543926001 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.544565916 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.544650078 CEST	49851	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.547429085 CEST	49851	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.547471046 CEST	443	49851	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.551641941 CEST	49853	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.551708937 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.551786900 CEST	49853	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.552314997 CEST	49853	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.552349091 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.555747986 CEST	49854	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.555785894 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.556062937 CEST	49854	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.556507111 CEST	49854	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.556523085 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.761166096 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.761588097 CEST	49852	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.761621952 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.763117075 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.763695955 CEST	49852	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.763895035 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.765254021 CEST	49852	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.772845030 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.773267984 CEST	49854	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.773329020 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.773492098 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.773878098 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.774216890 CEST	49853	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.774276972 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.774672985 CEST	49854	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.774791002 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.774930954 CEST	49854	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.775415897 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.776067972 CEST	49853	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.776268005 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.776609898 CEST	49853	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:47.776638031 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.812114954 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:47.820142031 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.115441084 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.115933895 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.115983963 CEST	49854	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.116864920 CEST	49854	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.116902113 CEST	443	49854	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.155791998 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.156076908 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.156251907 CEST	49853	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.156332016 CEST	49853	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.156368017 CEST	443	49853	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.167099953 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.167424917 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.167489052 CEST	49852	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.168066978 CEST	49852	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.168083906 CEST	443	49852	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.336754084 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.336776972 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.336836100 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.339103937 CEST	49856	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.339157104 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.339215040 CEST	49856	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.340607882 CEST	49856	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.340642929 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.341207027 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.341219902 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.345700979 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.345777988 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.345865965 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.346210957 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.346247911 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.353240967 CEST	49858	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.353292942 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.353353977 CEST	49858	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.354022026 CEST	49858	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.354054928 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.561351061 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.561929941 CEST	49856	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.561988115 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.562338114 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.562643051 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.562726021 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.562731028 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.563036919 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.563049078 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.563186884 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.564002991 CEST	49856	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.564225912 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.564239025 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.564317942 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.564399004 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.565109968 CEST	49856	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.565927982 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.566097975 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.570703983 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.570848942 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.571281910 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.571327925 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.571469069 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.571679115 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.571696997 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.572827101 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.573194027 CEST	49858	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.573220968 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.574340105 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.576251030 CEST	49858	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.576431036 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.576668978 CEST	49858	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.612138987 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.612842083 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.616153002 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.620146990 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.888473034 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.888808966 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.888874054 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.891098022 CEST	49855	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.891109943 CEST	443	49855	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.891271114 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.892173052 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.892239094 CEST	49856	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.892301083 CEST	49856	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.892338037 CEST	443	49856	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.903223038 CEST	49859	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.903238058 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.903310061 CEST	49859	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.904987097 CEST	49859	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.904999971 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.919575930 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.920217037 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.920296907 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.920687914 CEST	49857	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.920723915 CEST	443	49857	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.926531076 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.926979065 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.927031994 CEST	49858	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.929096937 CEST	49858	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.929109097 CEST	443	49858	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.930932999 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.931014061 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.931092024 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.932003021 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.932043076 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.933984041 CEST	49861	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.934011936 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.934068918 CEST	49861	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.935141087 CEST	49861	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.935159922 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.943841934 CEST	49862	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.943885088 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:48.943937063 CEST	49862	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.944149971 CEST	49862	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:48.944165945 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.123259068 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.123563051 CEST	49859	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.123578072 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.124711037 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.125108004 CEST	49859	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.125274897 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.125391006 CEST	49859	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.151300907 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.151606083 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.151668072 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.151777983 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.152158976 CEST	49861	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.152173042 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.152633905 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.152834892 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.154639006 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.154822111 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.155308962 CEST	49861	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.155430079 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.155471087 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.155531883 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.155556917 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.155703068 CEST	49861	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.155718088 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.164186001 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.164582968 CEST	49862	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.164601088 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.165697098 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.166191101 CEST	49862	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.166359901 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.166446924 CEST	49862	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.168143034 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.196156979 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.212147951 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.468774080 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.469089031 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.469151974 CEST	49859	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.469393969 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.469496965 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.469552040 CEST	49861	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.470441103 CEST	49859	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.470453024 CEST	443	49859	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.471232891 CEST	49861	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.471256971 CEST	443	49861	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.493377924 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.493767023 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.493830919 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.493930101 CEST	49860	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.493964911 CEST	443	49860	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.752796888 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.753401041 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.753487110 CEST	49862	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.754201889 CEST	49862	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.754224062 CEST	443	49862	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.813193083 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.813258886 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.813345909 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.813568115 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.813589096 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.815326929 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.815363884 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:49.815470934 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.815669060 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:49.815687895 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.032860994 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.033200979 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.033262014 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.034425020 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.035176039 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.035403013 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.035587072 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.036030054 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.036086082 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.036272049 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.036330938 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.036364079 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.037225008 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.037698030 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.037877083 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.037902117 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.037955999 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.037975073 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.084119081 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.091681957 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.350924015 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.351195097 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.351269960 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.385571957 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.385921955 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.386001110 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.387444019 CEST	49863	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.387485981 CEST	443	49863	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.387912035 CEST	49864	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.387969971 CEST	443	49864	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.457937002 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.457976103 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.458355904 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.458865881 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.458883047 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.679864883 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.721566916 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.734206915 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.734234095 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.735781908 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.737833977 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.738008976 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:50.738020897 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.738285065 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:50.780160904 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:51.063673973 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:51.064009905 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:51.064076900 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:51.064894915 CEST	49865	443	192.168.2.4	74.112.186.144
Apr 19, 2024 13:13:51.064913034 CEST	443	49865	74.112.186.144	192.168.2.4
Apr 19, 2024 13:13:54.497880936 CEST	49867	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:13:54.497975111 CEST	443	49867	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:54.498200893 CEST	49867	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:13:54.498434067 CEST	49867	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:13:54.498459101 CEST	443	49867	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:54.719491005 CEST	443	49867	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:54.720089912 CEST	49867	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:13:54.720139980 CEST	443	49867	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:54.720916033 CEST	443	49867	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:54.723284960 CEST	49867	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:13:54.723546028 CEST	443	49867	142.250.9.105	192.168.2.4
Apr 19, 2024 13:13:54.766179085 CEST	49867	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:13:54.766669989 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 19, 2024 13:13:54.870691061 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 19, 2024 13:13:54.870744944 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 19, 2024 13:13:54.870886087 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 19, 2024 13:14:04.711539984 CEST	443	49867	142.250.9.105	192.168.2.4
Apr 19, 2024 13:14:04.711690903 CEST	443	49867	142.250.9.105	192.168.2.4
Apr 19, 2024 13:14:04.711751938 CEST	49867	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:14:07.629457951 CEST	49867	443	192.168.2.4	142.250.9.105
Apr 19, 2024 13:14:07.629538059 CEST	443	49867	142.250.9.105	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 13:12:51.636451006 CEST	53	60968	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:51.730627060 CEST	53	51849	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:52.335237980 CEST	53	50377	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:52.572812080 CEST	57823	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:52.573084116 CEST	51104	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:52.678111076 CEST	53	51104	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:52.678570986 CEST	53	57823	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:53.641976118 CEST	52883	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:53.642126083 CEST	65263	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:53.643838882 CEST	56397	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:53.644061089 CEST	51358	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:53.748711109 CEST	53	56397	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:53.775319099 CEST	53	51358	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:54.434938908 CEST	56076	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:54.435252905 CEST	62607	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:54.539815903 CEST	53	56076	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:54.539841890 CEST	53	62607	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:55.364151955 CEST	56465	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:55.364695072 CEST	50396	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:57.638412952 CEST	53	49840	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:58.992753029 CEST	49957	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:58.993159056 CEST	62782	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:59.098057985 CEST	53	49957	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:59.113086939 CEST	53	62782	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:59.537887096 CEST	61789	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:59.538175106 CEST	51293	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:59.655844927 CEST	53	51293	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:59.655934095 CEST	53	61789	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:59.833893061 CEST	52395	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:59.834301949 CEST	56714	53	192.168.2.4	1.1.1.1
Apr 19, 2024 13:12:59.939018965 CEST	53	52395	1.1.1.1	192.168.2.4
Apr 19, 2024 13:12:59.953356028 CEST	53	56714	1.1.1.1	192.168.2.4
Apr 19, 2024 13:13:06.373168945 CEST	138	138	192.168.2.4	192.168.2.255
Apr 19, 2024 13:13:09.657628059 CEST	53	63822	1.1.1.1	192.168.2.4
Apr 19, 2024 13:13:28.674221992 CEST	53	49869	1.1.1.1	192.168.2.4
Apr 19, 2024 13:13:50.515239954 CEST	53	55525	1.1.1.1	192.168.2.4
Apr 19, 2024 13:13:51.552730083 CEST	53	62845	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 13:12:52.572812080 CEST	192.168.2.4	1.1.1.1	0x9ff5	Standard query (0)	app.box.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:52.573084116 CEST	192.168.2.4	1.1.1.1	0xb7d8	Standard query (0)	app.box.com	65	IN (0x0001)	false
Apr 19, 2024 13:12:53.641976118 CEST	192.168.2.4	1.1.1.1	0x9e4c	Standard query (0)	cdn01.boxcdn.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:53.642126083 CEST	192.168.2.4	1.1.1.1	0x513b	Standard query (0)	cdn01.boxcdn.net	65	IN (0x0001)	false
Apr 19, 2024 13:12:53.643838882 CEST	192.168.2.4	1.1.1.1	0xfee6	Standard query (0)	notes.services.box.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:53.644061089 CEST	192.168.2.4	1.1.1.1	0xd7e9	Standard query (0)	notes.services.box.com	65	IN (0x0001)	false
Apr 19, 2024 13:12:54.434938908 CEST	192.168.2.4	1.1.1.1	0xd255	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:54.435252905 CEST	192.168.2.4	1.1.1.1	0x5a86	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 13:12:55.364151955 CEST	192.168.2.4	1.1.1.1	0x86e6	Standard query (0)	cdn01.boxcdn.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:55.364695072 CEST	192.168.2.4	1.1.1.1	0x6477	Standard query (0)	cdn01.boxcdn.net	65	IN (0x0001)	false
Apr 19, 2024 13:12:58.992753029 CEST	192.168.2.4	1.1.1.1	0x561e	Standard query (0)	client-log.box.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:58.993159056 CEST	192.168.2.4	1.1.1.1	0x6b86	Standard query (0)	client-log.box.com	65	IN (0x0001)	false
Apr 19, 2024 13:12:59.537887096 CEST	192.168.2.4	1.1.1.1	0x9bf3	Standard query (0)	notes.services.box.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:59.538175106 CEST	192.168.2.4	1.1.1.1	0xf0b0	Standard query (0)	notes.services.box.com	65	IN (0x0001)	false
Apr 19, 2024 13:12:59.833893061 CEST	192.168.2.4	1.1.1.1	0x222b	Standard query (0)	client-log.box.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:59.834301949 CEST	192.168.2.4	1.1.1.1	0x299f	Standard query (0)	client-log.box.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 13:12:52.678570986 CEST	1.1.1.1	192.168.2.4	0x9ff5	No error (0)	app.box.com		74.112.186.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:53.747386932 CEST	1.1.1.1	192.168.2.4	0x9e4c	No error (0)	cdn01.boxcdn.net	cdn01.boxcdn.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 13:12:53.748711109 CEST	1.1.1.1	192.168.2.4	0xfee6	No error (0)	notes.services.box.com		74.112.186.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:53.749372959 CEST	1.1.1.1	192.168.2.4	0x513b	No error (0)	cdn01.boxcdn.net	cdn01.boxcdn.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 13:12:54.539815903 CEST	1.1.1.1	192.168.2.4	0xd255	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:54.539815903 CEST	1.1.1.1	192.168.2.4	0xd255	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:54.539815903 CEST	1.1.1.1	192.168.2.4	0xd255	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:54.539815903 CEST	1.1.1.1	192.168.2.4	0xd255	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:54.539815903 CEST	1.1.1.1	192.168.2.4	0xd255	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:54.539815903 CEST	1.1.1.1	192.168.2.4	0xd255	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:54.539841890 CEST	1.1.1.1	192.168.2.4	0x5a86	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 13:12:55.469438076 CEST	1.1.1.1	192.168.2.4	0x86e6	No error (0)	cdn01.boxcdn.net	cdn01.boxcdn.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 13:12:55.470438004 CEST	1.1.1.1	192.168.2.4	0x6477	No error (0)	cdn01.boxcdn.net	cdn01.boxcdn.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 13:12:59.098057985 CEST	1.1.1.1	192.168.2.4	0x561e	No error (0)	client-log.box.com		74.112.186.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:59.655934095 CEST	1.1.1.1	192.168.2.4	0x9bf3	No error (0)	notes.services.box.com		74.112.186.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:12:59.939018965 CEST	1.1.1.1	192.168.2.4	0x222b	No error (0)	client-log.box.com		74.112.186.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:13:07.069576025 CEST	1.1.1.1	192.168.2.4	0x61d7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 13:13:07.069576025 CEST	1.1.1.1	192.168.2.4	0x61d7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:13:19.589651108 CEST	1.1.1.1	192.168.2.4	0xced7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 13:13:19.589651108 CEST	1.1.1.1	192.168.2.4	0xced7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:13:43.839184999 CEST	1.1.1.1	192.168.2.4	0xea59	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 13:13:43.839184999 CEST	1.1.1.1	192.168.2.4	0xea59	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 13:14:03.692739964 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 13:14:03.692739964 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

app.box.com

https:

notes.services.box.com

client-log.box.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:52 UTC	688	OUT	GET /s/ktl5qtvf2us1megbgmjabwqaxcdy69b5 HTTP/1.1 Host: app.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 11:12:53 UTC	1135	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 11:12:53 GMT Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow Strict-Transport-Security: max-age=31536000 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: z=j7masphnumonh18fajjanf5art; path=/; domain=.app.box.com; secure; HttpOnly Set-Cookie: z=j7masphnumonh18fajjanf5art; Path=/; Domain=.app.box.com; Secure; HttpOnly; SameSite=None Set-Cookie: box_visitor_id=662251b51c7c34.67511927; expires=Sat, 19-Apr-2025 11:12:53 GMT; Max-Age=31536000; path=/; domain=.box.com; secure; SameSite=None Set-Cookie: bv=EUG-6777; expires=Fri, 26-Apr-2024 11:12:53 GMT; Max-Age=604800; path=/; domain=.app.box.com; secure Set-Cookie: cn=59; expires=Sat, 19-Apr-2025 11:12:53 GMT; Max-Age=31536000; path=/; domain=.app.box.com; secure Set-Cookie: site_preference=desktop; path=/; domain=.box.com; secure Location: https://app.box.com/notes/1506503934565?s=ktl5qtvf2us1megbgmjabwqaxcdy69b5 Via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:53 UTC	831	OUT	GET /notes/1506503934565?s=ktl5qtvf2us1megbgmjabwqaxcdy69b5 HTTP/1.1 Host: app.box.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: z=j7masphnumonh18fajjanf5art; box_visitor_id=662251b51c7c34.67511927; bv=EUG-6777; cn=59; site_preference=desktop
2024-04-19 11:12:53 UTC	847	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:12:53 GMT Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=31536000 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: z=j7masphnumonh18fajjanf5art; Path=/; Domain=.app.box.com; Secure; HttpOnly; SameSite=None Set-Cookie: box_visitor_id=662251b51c7c34.67511927; expires=Sat, 19-Apr-2025 11:12:53 GMT; Max-Age=31536000; path=/; domain=.box.com; secure; SameSite=None Set-Cookie: site_preference=desktop; path=/; domain=.box.com; secure Set-Cookie: _notes_oauth_csrf_=1; expires=Fri, 19-Apr-2024 11:17:53 GMT; Max-Age=300; path=/; domain=.box.com; secure; HttpOnly; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:12:53 UTC	1209	IN	Data Raw: 34 62 32 0d 0a 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 73 69 67 6e 3c 2f 74 69 74 6c 65 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 5f 61 73 73 Data Ascii: 4b2 <!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="robots" content="noindex, nofollow"><title>Docusign</title><link rel="icon" href="https://cdn01.boxcdn.net/_ass
2024-04-19 11:12:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:53 UTC	898	OUT	GET /p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://app.box.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1
2024-04-19 11:12:54 UTC	852	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:12:54 GMT Content-Type: text/html; charset=utf-8 Content-Length: 82494 x-powered-by: Express set-cookie: _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; Path=/; HttpOnly; Secure; SameSite=None set-cookie: csrf-token=lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQk; Path=/; Secure; SameSite=None set-cookie: express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; Path=/; HttpOnly; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache, no-store, must-revalidate etag: W/"1423e-kdZ48WTv6bX+cuNrE7RePSggmIk" x-envoy-upstream-service-time: 426 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:12:54 UTC	1255	IN	Data Raw: 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 42 6f 78 20 4e 6f 74 65 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 09 3c 73 63 72 69 70 74 3e 0a 09 09 2f 2a 0a 09 09 20 7c 40 6c 69 63 73 74 61 72 74 20 20 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 69 73 20 74 68 65 20 65 6e 74 69 72 65 20 6c 69 63 65 6e 73 65 20 6e 6f 74 69 63 65 20 66 6f 72 20 74 68 65 0a 09 09 20 4a 61 76 61 53 63 72 69 70 74 20 63 6f 64 65 20 69 6e 20 74 68 69 73 20 70 61 67 65 2e 7c 0a 0a 09 09 20 43 6f 70 79 72 69 67 68 74 20 32 30 Data Ascii: <!doctype html><html><head><title>Box Notes</title><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" /><script>/* \|@licstart The following is the entire license notice for the JavaScript code in this page.\| Copyright 20
2024-04-19 11:12:54 UTC	1255	IN	Data Raw: 77 65 64 50 61 72 65 6e 74 42 6f 78 44 6f 6d 61 69 6e 73 22 3a 22 61 70 70 2e 62 6f 78 2e 63 6f 6d 2c 65 6e 74 2e 62 6f 78 2e 63 6f 6d 2c 61 70 70 2e 62 6f 78 65 6e 74 65 72 70 72 69 73 65 2e 6e 65 74 2c 61 70 70 2e 62 6f 78 63 6e 2e 6e 65 74 22 2c 22 62 6f 78 41 50 49 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 62 6f 78 2e 63 6f 6d 2f 32 2e 30 2f 22 2c 22 62 6f 78 53 68 61 72 65 64 4c 69 6e 6b 55 72 6c 22 3a 22 73 2f 22 2c 22 63 6c 69 65 6e 74 53 6f 63 6b 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 49 6e 66 6f 52 6f 75 74 65 22 3a 22 2f 63 6c 69 65 6e 74 53 6f 63 6b 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 49 6e 66 6f 22 2c 22 63 6c 69 65 6e 74 53 6f 63 6b 65 74 43 6f 6e 6e 65 63 74 69 6f 6e 49 6e 66 6f 46 69 72 73 74 54 69 6d 65 6f 75 74 4d 73 22 3a 33 30 Data Ascii: wedParentBoxDomains":"app.box.com,ent.box.com,app.boxenterprise.net,app.boxcn.net","boxAPIUrl":"https://api.box.com/2.0/","boxSharedLinkUrl":"s/","clientSocketConnectionInfoRoute":"/clientSocketConnectionInfo","clientSocketConnectionInfoFirstTimeoutMs":30
2024-04-19 11:12:54 UTC	723	IN	Data Raw: 6d 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 75 6d 53 61 6d 70 6c 65 52 61 74 69 6f 22 3a 30 2e 30 35 2c 22 63 6c 61 73 73 69 63 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 3b 0a 09 09 77 69 6e 64 6f 77 2e 61 73 73 65 74 42 75 6e 64 6c 65 73 20 3d 20 7b 0a 09 09 09 69 6e 6e 65 72 43 53 53 42 75 6e 64 6c 65 3a 20 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 6e 6f 74 65 73 2f 38 2e 32 35 35 37 2e 33 2f 6e 6f 74 65 73 2f 63 73 73 2f 62 75 6e 64 6c 65 5f 38 63 66 66 35 62 34 63 38 62 38 38 61 38 63 63 2e 6d 69 6e 2e 63 73 73 22 2c 0a 09 09 09 6a 73 42 75 6e 64 6c 65 3a 20 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 6e 6f 74 65 73 2f 38 2e 32 35 35 37 2e 33 2f 6e 6f 74 65 73 2f 6a 73 2f 62 75 6e Data Ascii: mEnabled":true,"rumSampleRatio":0.05,"classicMode":false};window.assetBundles = {innerCSSBundle: "https://cdn01.boxcdn.net/notes/8.2557.3/notes/css/bundle_8cff5b4c8b88a8cc.min.css",jsBundle: "https://cdn01.boxcdn.net/notes/8.2557.3/notes/js/bun
2024-04-19 11:12:54 UTC	1255	IN	Data Raw: 39 30 62 63 30 31 64 34 38 2e 6d 69 6e 2e 67 69 66 22 2c 0a 09 09 09 09 44 4f 57 4e 4c 4f 41 44 5f 45 52 52 4f 52 3a 20 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 6e 6f 74 65 73 2f 38 2e 32 35 35 37 2e 33 2f 69 6d 67 2f 69 6d 61 67 65 5f 64 6f 77 6e 6c 6f 61 64 5f 65 72 72 6f 72 5f 34 37 33 38 38 36 62 35 36 63 36 61 38 37 33 63 2e 6d 69 6e 2e 70 6e 67 22 2c 0a 09 09 09 09 44 4f 57 4e 4c 4f 41 44 5f 45 52 52 4f 52 5f 32 58 3a 20 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 6e 6f 74 65 73 2f 38 2e 32 35 35 37 2e 33 2f 69 6d 67 2f 69 6d 61 67 65 5f 64 6f 77 6e 6c 6f 61 64 5f 65 72 72 6f 72 40 32 78 5f 35 39 36 63 62 36 36 34 39 34 36 30 34 35 37 35 2e 6d 69 6e 2e 70 6e 67 22 2c 0a 09 09 09 Data Ascii: 90bc01d48.min.gif",DOWNLOAD_ERROR: "https://cdn01.boxcdn.net/notes/8.2557.3/img/image_download_error_473886b56c6a873c.min.png",DOWNLOAD_ERROR_2X: "https://cdn01.boxcdn.net/notes/8.2557.3/img/image_download_error@2x_596cb66494604575.min.png",
2024-04-19 11:12:54 UTC	1255	IN	Data Raw: 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 6e 6f 74 65 73 2f 38 2e 32 35 35 37 2e 33 2f 69 6d 67 2f 6e 65 77 5f 65 64 69 74 6f 72 5f 66 74 75 78 5f 34 5f 63 62 64 63 66 34 63 65 63 34 39 62 33 37 32 65 2e 6d 69 6e 2e 73 76 67 22 2c 0a 09 09 09 7d 2c 0a 09 09 09 4e 45 57 5f 55 53 45 52 5f 54 4f 55 52 3a 20 7b 0a 09 09 09 09 4d 41 52 49 41 5f 41 56 41 54 41 52 3a 20 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 6e 6f 74 65 73 2f 38 2e 32 35 35 37 2e 33 2f 69 6d 67 2f 61 76 61 74 61 72 31 5f 39 66 65 65 66 33 65 34 39 63 39 37 66 63 33 66 2e 6d 69 6e 2e 73 76 67 22 2c 0a 09 09 09 09 41 4d 41 4c 5f 41 56 41 54 41 52 3a 20 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 6e 6f 74 65 73 2f 38 2e 32 35 35 37 Data Ascii: .boxcdn.net/notes/8.2557.3/img/new_editor_ftux_4_cbdcf4cec49b372e.min.svg",},NEW_USER_TOUR: {MARIA_AVATAR: "https://cdn01.boxcdn.net/notes/8.2557.3/img/avatar1_9feef3e49c97fc3f.min.svg",AMAL_AVATAR: "https://cdn01.boxcdn.net/notes/8.2557
2024-04-19 11:12:54 UTC	1255	IN	Data Raw: 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 09 09 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 09 09 0a 09 09 09 76 61 72 20 6f 72 69 67 69 6e 61 6c 48 61 6e 64 6c 65 72 20 3d 20 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 3b 0a 09 09 09 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6d 73 67 2c 20 75 72 6c 2c 20 6c 69 6e 65 29 20 7b 0a 09 09 09 09 2f 2f 20 63 61 6c 6c 20 6f 72 69 67 69 6e 61 6c 20 65 72 72 6f 72 20 68 61 6e 64 6c 65 72 0a 09 09 09 09 69 66 20 28 74 79 70 65 6f 66 28 6f 72 69 67 69 6e 61 6c 48 61 6e 64 6c 65 72 29 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 6f 72 69 67 69 6e 61 6c 48 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 20 61 72 67 75 6d 65 6e Data Ascii: ript type="text/javascript">(function () {var originalHandler = window.onerror;window.onerror = function (msg, url, line) {// call original error handlerif (typeof(originalHandler) == 'function') originalHandler.call(null, argumen
2024-04-19 11:12:54 UTC	331	IN	Data Raw: 3c 64 69 76 20 69 64 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 73 73 3d 22 72 65 61 63 74 2d 75 69 22 20 64 61 74 61 2d 6d 6f 64 75 6c 65 3d 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 0a 09 0a 0a 09 0a 09 09 3c 64 69 76 20 69 64 3d 22 6c 65 66 74 2d 73 69 64 65 62 61 72 22 20 63 6c 61 73 73 3d 22 73 69 64 65 62 61 72 20 72 65 61 63 74 2d 75 69 22 20 64 61 74 61 2d 6d 6f 64 75 6c 65 3d 22 6c 65 66 74 2d 73 69 64 65 62 61 72 22 3e 3c 2f 64 69 76 3e 0a 09 09 3c 64 69 76 20 69 64 3d 22 73 65 61 72 63 68 2d 75 69 22 20 63 6c 61 73 73 3d 22 72 65 61 63 74 2d 75 69 22 20 64 61 74 61 2d 6d 6f 64 75 6c 65 3d 22 73 65 61 72 63 68 2d 75 69 22 3e 3c 2f 64 69 76 3e 0a 09 09 3c 64 Data Ascii: <div id="notifications-container" class="react-ui" data-module="notification-banner"></div><div id="left-sidebar" class="sidebar react-ui" data-module="left-sidebar"></div><div id="search-ui" class="react-ui" data-module="search-ui"></div><d
2024-04-19 11:12:54 UTC	1255	IN	Data Raw: 3e 3c 2f 64 69 76 3e 0a 09 09 3c 64 69 76 20 69 64 3d 22 74 65 6d 70 6c 61 74 65 73 2d 75 69 22 20 63 6c 61 73 73 3d 22 72 65 61 63 74 2d 75 69 22 20 64 61 74 61 2d 6d 6f 64 75 6c 65 3d 22 74 65 6d 70 6c 61 74 65 73 2d 75 69 22 3e 3c 2f 64 69 76 3e 0a 09 09 3c 64 69 76 20 69 64 3d 22 73 68 61 72 65 2d 6d 6f 64 61 6c 2d 75 69 22 20 63 6c 61 73 73 3d 22 72 65 61 63 74 2d 75 69 22 20 64 61 74 61 2d 6d 6f 64 75 6c 65 3d 22 73 68 61 72 65 2d 6d 6f 64 61 6c 2d 75 69 22 3e 3c 2f 64 69 76 3e 0a 09 0a 0a 09 3c 64 69 76 20 69 64 3d 22 74 6f 6f 6c 62 61 72 73 22 20 64 61 74 61 2d 6d 6f 64 75 6c 65 3d 22 65 64 69 74 62 61 72 22 3e 0a 0a 09 09 0a 0a 09 09 3c 64 69 76 20 69 64 3d 22 65 6d 70 74 79 62 61 72 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 22 3e 3c 2f 64 Data Ascii: ></div><div id="templates-ui" class="react-ui" data-module="templates-ui"></div><div id="share-modal-ui" class="react-ui" data-module="share-modal-ui"></div><div id="toolbars" data-module="editbar"><div id="emptybar" class="toolbar"></d
2024-04-19 11:12:54 UTC	1255	IN	Data Raw: 38 43 36 2e 39 2c 31 34 2e 34 2c 37 2c 31 34 2c 37 2e 32 2c 31 33 2e 38 4c 31 36 2e 34 2c 30 2e 39 7a 22 3e 3c 2f 70 61 74 68 3e 0a 09 09 09 09 3c 2f 73 76 67 3e 0a 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 3c 64 69 76 20 69 64 3d 22 76 69 65 77 62 61 72 52 69 67 68 74 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 62 61 72 2d 66 6c 75 73 68 2d 73 65 63 74 69 6f 6e 20 74 6f 6f 6c 62 61 72 2d 66 6c 75 73 68 2d 72 69 67 68 74 22 3e 0a 09 09 09 09 3c 61 20 69 64 3d 22 75 73 65 2d 74 65 6d 70 6c 61 74 65 2d 62 75 74 74 6f 6e 2d 76 69 65 77 62 61 72 22 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 74 69 74 6c 65 3d 22 55 73 65 20 74 68 69 73 20 54 65 6d 70 6c 61 74 65 22 20 64 61 74 61 2d 74 79 70 65 3d 22 62 75 74 74 6f 6e 2d 75 73 65 2d 74 65 6d 70 6c 61 74 65 22 Data Ascii: 8C6.9,14.4,7,14,7.2,13.8L16.4,0.9z"></path></svg></span><div id="viewbarRight" class="toolbar-flush-section toolbar-flush-right"><a id="use-template-button-viewbar" class="hidden" title="Use this Template" data-type="button-use-template"
2024-04-19 11:12:54 UTC	1255	IN	Data Raw: 30 20 4c 38 2e 39 32 39 34 31 31 37 36 2c 30 20 43 33 2e 39 39 37 38 33 33 38 32 2c 30 20 30 2c 33 2e 39 31 33 36 31 39 31 20 30 2c 38 2e 37 34 31 33 31 32 39 33 20 4c 30 2e 30 30 35 35 31 34 31 33 35 36 36 2c 39 2e 30 35 30 34 38 34 35 39 20 43 30 2e 30 38 39 38 39 32 33 32 38 35 2c 31 31 2e 34 31 33 34 35 38 34 20 31 2e 31 33 38 36 38 39 36 33 2c 31 33 2e 36 30 31 31 33 37 38 20 32 2e 38 37 39 31 32 30 38 31 2c 31 35 2e 31 37 30 34 31 37 37 20 4c 33 2e 31 30 35 38 38 32 33 35 2c 31 35 2e 33 36 36 35 36 30 31 20 4c 33 2e 31 30 35 38 38 32 33 36 2c 31 38 2e 33 35 32 35 38 38 31 20 43 33 2e 31 30 35 38 38 32 33 35 2c 31 38 2e 35 37 35 36 39 39 39 20 33 2e 31 35 32 31 36 30 31 2c 31 38 2e 37 39 36 34 31 32 32 20 33 2e 32 34 31 39 30 38 39 35 2c 31 39 2e 30 Data Ascii: 0 L8.92941176,0 C3.99783382,0 0,3.9136191 0,8.74131293 L0.00551413566,9.05048459 C0.0898923285,11.4134584 1.13868963,13.6011378 2.87912081,15.1704177 L3.10588235,15.3665601 L3.10588236,18.3525881 C3.10588235,18.5756999 3.1521601,18.7964122 3.24190895,19.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49751	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:57 UTC	1345	OUT	POST /client_log HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 132 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 0 traceparent: 00-324efed6eedef3acb1aeb3d98d460abd-967635a6636878a8-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQk X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; csrf-token=lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQk; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D
2024-04-19 11:12:57 UTC	132	OUT	Data Raw: 65 76 65 6e 74 54 79 70 65 3d 69 6e 69 74 69 61 6c 69 7a 65 5f 61 70 70 5f 73 74 61 72 74 65 64 26 64 61 74 61 25 35 42 66 69 6c 65 49 64 25 35 44 3d 31 35 30 36 35 30 33 39 33 34 35 36 35 26 64 61 74 61 25 35 42 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 25 35 44 3d 38 2e 32 35 35 37 2e 33 26 64 61 74 61 25 35 42 75 73 65 72 49 64 25 35 44 3d 30 26 6c 6f 67 41 73 4d 65 74 72 69 63 3d 74 72 75 65 Data Ascii: eventType=initialize_app_started&data%5BfileId%5D=1506503934565&data%5BclientVersion%5D=8.2557.3&data%5BuserId%5D=0&logAsMetric=true
2024-04-19 11:12:58 UTC	468	IN	HTTP/1.1 201 Created Date: Fri, 19 Apr 2024 11:12:57 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 7 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"7-rM9AyJuqT6iOan/xHh+AW+7K/T8" x-envoy-upstream-service-time: 3 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:12:58 UTC	7	IN	Data Raw: 43 72 65 61 74 65 64 Data Ascii: Created

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:57 UTC	1386	OUT	POST /app_init HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 119 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 0 traceparent: 00-f73f92a5743fbec7a5d4a8df17841db2-bc025d173b3c3877-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: application/json, text/javascript, /; q=0.01 csrf-token: lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQk X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; csrf-token=lqJkgTR9-CvXLDJxMiaaaDAiExhmrld9aSQk; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D
2024-04-19 11:12:57 UTC	119	OUT	Data Raw: 61 75 74 68 43 6f 64 65 3d 26 66 69 6c 65 49 64 3d 31 35 30 36 35 30 33 39 33 34 35 36 35 26 73 68 61 72 65 64 4c 69 6e 6b 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 70 70 2e 62 6f 78 2e 63 6f 6d 25 32 46 73 25 32 46 6b 74 6c 35 71 74 76 66 32 75 73 31 6d 65 67 62 67 6d 6a 61 62 77 71 61 78 63 64 79 36 39 62 35 26 6c 69 73 74 49 64 3d 69 6e 62 6f 78 Data Ascii: authCode=&fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&listId=inbox
2024-04-19 11:12:58 UTC	592	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:12:58 GMT Content-Type: application/json; charset=utf-8 Content-Length: 663 x-powered-by: Express set-cookie: csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"297-vW3QvoTwbJ9upeQ+QkvtfriUFJY" x-envoy-upstream-service-time: 372 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:12:58 UTC	662	IN	Data Raw: 7b 22 75 73 65 72 49 6e 66 6f 22 3a 7b 22 74 79 70 65 22 3a 22 75 73 65 72 22 2c 22 69 64 22 3a 22 32 22 2c 22 6e 61 6d 65 22 3a 22 41 6e 6f 6e 79 6d 6f 75 73 20 55 73 65 72 22 2c 22 61 76 61 74 61 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 30 31 2e 62 6f 78 63 64 6e 2e 6e 65 74 2f 6e 6f 74 65 73 2f 38 2e 32 35 35 37 2e 33 2f 69 6d 67 2f 62 6f 78 5f 75 73 65 72 5f 61 76 61 74 61 72 5f 6c 61 72 67 65 5f 62 66 38 31 32 39 35 35 63 30 63 38 38 63 34 33 2e 6d 69 6e 2e 70 6e 67 22 2c 22 68 61 73 5f 63 75 73 74 6f 6d 5f 61 76 61 74 61 72 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 61 62 6c 65 64 46 65 61 74 75 72 65 73 22 3a 5b 5d 2c 22 65 78 70 65 72 69 6d 65 6e 74 73 22 3a 7b 22 74 6f 6f 6c 74 69 70 5f 65 64 69 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 6e Data Ascii: {"userInfo":{"type":"user","id":"2","name":"Anonymous User","avatar_url":"https://cdn01.boxcdn.net/notes/8.2557.3/img/box_user_avatar_large_bf812955c0c88c43.min.png","has_custom_avatar":false},"enabledFeatures":[],"experiments":{"tooltip_edit":{"bucket":n
2024-04-19 11:12:58 UTC	1	IN	Data Raw: 7d Data Ascii: }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	104.123.200.136	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 11:12:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=104213 Date: Fri, 19 Apr 2024 11:12:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49758	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:59 UTC	1501	OUT	GET /split-proxy/mySegments/unknown HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 SplitSDKVersion: javascript-10.22.3 Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
2024-04-19 11:12:59 UTC	430	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:12:59 GMT Content-Type: application/json; charset=utf-8 Content-Length: 17 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:12:59 UTC	17	IN	Data Raw: 7b 22 6d 79 53 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d Data Ascii: {"mySegments":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49757	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:59 UTC	1504	OUT	GET /split-proxy/splitChanges?since=-1 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 SplitSDKVersion: javascript-10.22.3 Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
2024-04-19 11:12:59 UTC	438	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:12:59 GMT Content-Type: application/json; charset=utf-8 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 50 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:12:59 UTC	1255	IN	Data Raw: 65 33 39 0d 0a 7b 22 74 69 6c 6c 22 3a 31 37 31 33 33 39 31 34 35 30 35 34 39 2c 22 73 69 6e 63 65 22 3a 2d 31 2c 22 73 70 6c 69 74 73 22 3a 5b 7b 22 63 68 61 6e 67 65 4e 75 6d 62 65 72 22 3a 31 37 31 30 37 37 39 36 32 33 33 33 37 2c 22 74 72 61 66 66 69 63 54 79 70 65 4e 61 6d 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 6e 61 6d 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 68 75 62 73 5f 73 65 61 72 63 68 5f 61 69 22 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 22 3a 31 30 30 2c 22 74 72 61 66 66 69 63 41 6c 6c 6f 63 61 74 69 6f 6e 53 65 65 64 22 3a 2d 31 30 36 30 33 35 33 35 36 35 2c 22 73 65 65 64 22 3a 31 39 30 36 37 39 32 34 31 35 2c 22 73 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 6b 69 6c 6c 65 64 22 3a 66 61 6c Data Ascii: e39{"till":1713391450549,"since":-1,"splits":[{"changeNumber":1710779623337,"trafficTypeName":"enterprise_id","name":"enterprise_hubs_search_ai","trafficAllocation":100,"trafficAllocationSeed":-1060353565,"seed":1906792415,"status":"ACTIVE","killed":fal
2024-04-19 11:12:59 UTC	1255	IN	Data Raw: 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 6f 6d 62 69 6e 65 72 22 3a 22 41 4e 44 22 2c 22 6d 61 74 63 68 65 72 73 22 3a 5b 7b 22 6b 65 79 53 65 6c 65 63 74 6f 72 22 3a 7b 22 74 72 61 66 66 69 63 54 79 70 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 61 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 74 63 68 65 72 54 79 70 65 22 3a 22 41 4c 4c 5f 4b 45 59 53 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 44 65 66 69 6e 65 64 53 65 67 6d 65 6e 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 77 68 69 74 65 6c 69 73 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 75 6e 61 72 79 4e 75 6d 65 72 69 63 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 62 65 74 77 65 65 6e 4d 61 Data Ascii: "matcherGroup":{"combiner":"AND","matchers":[{"keySelector":{"trafficType":"enterprise_id","attribute":null},"matcherType":"ALL_KEYS","negate":false,"userDefinedSegmentMatcherData":null,"whitelistMatcherData":null,"unaryNumericMatcherData":null,"betweenMa
2024-04-19 11:12:59 UTC	1138	IN	Data Raw: 65 22 3a 31 30 30 7d 5d 2c 22 6c 61 62 65 6c 22 3a 22 69 6e 20 73 70 6c 69 74 20 67 78 70 5f 66 65 61 74 75 72 65 73 5f 71 31 32 34 20 74 72 65 61 74 6d 65 6e 74 20 5b 6f 66 66 5d 22 7d 2c 7b 22 63 6f 6e 64 69 74 69 6f 6e 54 79 70 65 22 3a 22 52 4f 4c 4c 4f 55 54 22 2c 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 6f 6d 62 69 6e 65 72 22 3a 22 41 4e 44 22 2c 22 6d 61 74 63 68 65 72 73 22 3a 5b 7b 22 6b 65 79 53 65 6c 65 63 74 6f 72 22 3a 7b 22 74 72 61 66 66 69 63 54 79 70 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 61 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 74 63 68 65 72 54 79 70 65 22 3a 22 41 4c 4c 5f 4b 45 59 53 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 44 65 66 69 6e 65 64 53 65 67 6d Data Ascii: e":100}],"label":"in split gxp_features_q124 treatment [off]"},{"conditionType":"ROLLOUT","matcherGroup":{"combiner":"AND","matchers":[{"keySelector":{"trafficType":"enterprise_id","attribute":null},"matcherType":"ALL_KEYS","negate":false,"userDefinedSegm
2024-04-19 11:12:59 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 65 65 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 64 65 70 65 6e 64 65 6e 63 79 4d 61 74 63 68 65 72 44 61 74 61 22 3a 7b 22 73 70 6c 69 74 22 3a 22 67 78 70 5f 66 65 61 74 75 72 65 73 5f 71 34 32 33 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 6f 66 66 22 5d 7d 2c 22 62 6f 6f 6c 65 61 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 7d 5d 7d 2c 22 70 61 72 74 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 6e 22 2c 22 73 69 7a 65 22 3a 30 7d 2c 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 73 69 7a 65 22 3a 31 30 30 7d 5d 2c 22 6c 61 62 65 6c 22 3a 22 69 6e 20 73 70 6c 69 74 20 67 78 70 5f 66 65 61 Data Ascii: 1000eenMatcherData":null,"dependencyMatcherData":{"split":"gxp_features_q423","treatments":["off"]},"booleanMatcherData":null,"stringMatcherData":null}]},"partitions":[{"treatment":"on","size":0},{"treatment":"off","size":100}],"label":"in split gxp_fea
2024-04-19 11:12:59 UTC	1255	IN	Data Raw: 4d 45 4e 54 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 44 65 66 69 6e 65 64 53 65 67 6d 65 6e 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 77 68 69 74 65 6c 69 73 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 75 6e 61 72 79 4e 75 6d 65 72 69 63 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 62 65 74 77 65 65 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 64 65 70 65 6e 64 65 6e 63 79 4d 61 74 63 68 65 72 44 61 74 61 22 3a 7b 22 73 70 6c 69 74 22 3a 22 67 78 70 5f 66 65 61 74 75 72 65 73 5f 6e 6f 5f 73 65 67 6d 65 6e 74 73 5f 71 32 32 34 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 6f 66 66 22 5d 7d 2c 22 62 6f 6f 6c 65 61 6e 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c Data Ascii: MENT","negate":false,"userDefinedSegmentMatcherData":null,"whitelistMatcherData":null,"unaryNumericMatcherData":null,"betweenMatcherData":null,"dependencyMatcherData":{"split":"gxp_features_no_segments_q224","treatments":["off"]},"booleanMatcherData":null
2024-04-19 11:12:59 UTC	1255	IN	Data Raw: 6c 74 54 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 61 6c 67 6f 22 3a 32 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 63 6f 6e 64 69 74 69 6f 6e 54 79 70 65 22 3a 22 57 48 49 54 45 4c 49 53 54 22 2c 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 6f 6d 62 69 6e 65 72 22 3a 22 41 4e 44 22 2c 22 6d 61 74 63 68 65 72 73 22 3a 5b 7b 22 6b 65 79 53 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 6d 61 74 63 68 65 72 54 79 70 65 22 3a 22 57 48 49 54 45 4c 49 53 54 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 44 65 66 69 6e 65 64 53 65 67 6d 65 6e 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 77 68 69 74 65 6c 69 73 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 7b 22 77 68 69 74 65 6c 69 73 74 22 3a 5b 22 31 36 35 Data Ascii: ltTreatment":"off","algo":2,"conditions":[{"conditionType":"WHITELIST","matcherGroup":{"combiner":"AND","matchers":[{"keySelector":null,"matcherType":"WHITELIST","negate":false,"userDefinedSegmentMatcherData":null,"whitelistMatcherData":{"whitelist":["165
2024-04-19 11:12:59 UTC	339	IN	Data Raw: 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 6f 6d 62 69 6e 65 72 22 3a 22 41 4e 44 22 2c 22 6d 61 74 63 68 65 72 73 22 3a 5b 7b 22 6b 65 79 53 65 6c 65 63 74 6f 72 22 3a 7b 22 74 72 61 66 66 69 63 54 79 70 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 61 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 74 63 68 65 72 54 79 70 65 22 3a 22 41 4c 4c 5f 4b 45 59 53 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 44 65 66 69 6e 65 64 53 65 67 6d 65 6e 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 77 68 69 74 65 6c 69 73 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 75 6e 61 72 79 4e 75 6d 65 72 69 63 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 62 65 74 77 65 65 6e 4d 61 Data Ascii: "matcherGroup":{"combiner":"AND","matchers":[{"keySelector":{"trafficType":"enterprise_id","attribute":null},"matcherType":"ALL_KEYS","negate":false,"userDefinedSegmentMatcherData":null,"whitelistMatcherData":null,"unaryNumericMatcherData":null,"betweenMa
2024-04-19 11:12:59 UTC	1255	IN	Data Raw: 65 37 34 0d 0a 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 7d 5d 7d 2c 22 70 61 72 74 69 74 69 6f 6e 73 22 3a 5b 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 6e 22 2c 22 73 69 7a 65 22 3a 31 30 30 7d 2c 7b 22 74 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 73 69 7a 65 22 3a 30 7d 5d 2c 22 6c 61 62 65 6c 22 3a 22 64 65 66 61 75 6c 74 20 72 75 6c 65 22 7d 5d 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 73 22 3a 7b 7d 2c 22 73 65 74 73 22 3a 6e 75 6c 6c 7d 2c 7b 22 63 68 61 6e 67 65 4e 75 6d 62 65 72 22 3a 31 37 30 38 33 33 38 31 32 34 35 32 38 2c 22 74 72 61 66 66 69 63 54 79 70 65 4e 61 6d 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 6e 61 6d 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 75 73 65 72 73 5f 61 6e 64 5f 67 72 6f 75 70 73 5f 75 Data Ascii: e74herData":null}]},"partitions":[{"treatment":"on","size":100},{"treatment":"off","size":0}],"label":"default rule"}],"configurations":{},"sets":null},{"changeNumber":1708338124528,"trafficTypeName":"enterprise_id","name":"enterprise_users_and_groups_u
2024-04-19 11:12:59 UTC	1255	IN	Data Raw: 69 6f 6e 54 79 70 65 22 3a 22 52 4f 4c 4c 4f 55 54 22 2c 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 6f 6d 62 69 6e 65 72 22 3a 22 41 4e 44 22 2c 22 6d 61 74 63 68 65 72 73 22 3a 5b 7b 22 6b 65 79 53 65 6c 65 63 74 6f 72 22 3a 7b 22 74 72 61 66 66 69 63 54 79 70 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 61 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 74 63 68 65 72 54 79 70 65 22 3a 22 49 4e 5f 53 50 4c 49 54 5f 54 52 45 41 54 4d 45 4e 54 22 2c 22 6e 65 67 61 74 65 22 3a 66 61 6c 73 65 2c 22 75 73 65 72 44 65 66 69 6e 65 64 53 65 67 6d 65 6e 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 77 68 69 74 65 6c 69 73 74 4d 61 74 63 68 65 72 44 61 74 61 22 3a 6e 75 6c 6c 2c 22 75 6e 61 72 79 4e 75 6d 65 72 69 Data Ascii: ionType":"ROLLOUT","matcherGroup":{"combiner":"AND","matchers":[{"keySelector":{"trafficType":"enterprise_id","attribute":null},"matcherType":"IN_SPLIT_TREATMENT","negate":false,"userDefinedSegmentMatcherData":null,"whitelistMatcherData":null,"unaryNumeri
2024-04-19 11:12:59 UTC	1197	IN	Data Raw: 32 30 34 39 2c 22 73 74 61 74 75 73 22 3a 22 41 43 54 49 56 45 22 2c 22 6b 69 6c 6c 65 64 22 3a 66 61 6c 73 65 2c 22 64 65 66 61 75 6c 74 54 72 65 61 74 6d 65 6e 74 22 3a 22 6f 66 66 22 2c 22 61 6c 67 6f 22 3a 32 2c 22 63 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 7b 22 63 6f 6e 64 69 74 69 6f 6e 54 79 70 65 22 3a 22 52 4f 4c 4c 4f 55 54 22 2c 22 6d 61 74 63 68 65 72 47 72 6f 75 70 22 3a 7b 22 63 6f 6d 62 69 6e 65 72 22 3a 22 41 4e 44 22 2c 22 6d 61 74 63 68 65 72 73 22 3a 5b 7b 22 6b 65 79 53 65 6c 65 63 74 6f 72 22 3a 7b 22 74 72 61 66 66 69 63 54 79 70 65 22 3a 22 65 6e 74 65 72 70 72 69 73 65 5f 69 64 22 2c 22 61 74 74 72 69 62 75 74 65 22 3a 6e 75 6c 6c 7d 2c 22 6d 61 74 63 68 65 72 54 79 70 65 22 3a 22 49 4e 5f 53 45 47 4d 45 4e 54 22 2c 22 6e 65 67 61 74 Data Ascii: 2049,"status":"ACTIVE","killed":false,"defaultTreatment":"off","algo":2,"conditions":[{"conditionType":"ROLLOUT","matcherGroup":{"combiner":"AND","matchers":[{"keySelector":{"trafficType":"enterprise_id","attribute":null},"matcherType":"IN_SEGMENT","negat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49760	104.123.200.136	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 11:12:59 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=104175 Date: Fri, 19 Apr 2024 11:12:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 11:12:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:59 UTC	663	OUT	POST /analytics-events/ HTTP/1.1 Host: client-log.box.com Connection: keep-alive Content-Length: 1145 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://notes.services.box.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 11:12:59 UTC	1145	OUT	Data Raw: 63 6c 69 65 6e 74 3d 63 36 65 62 33 64 37 30 39 63 35 63 33 30 63 61 38 30 63 30 33 38 31 30 38 30 62 63 63 32 35 34 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 61 36 34 30 38 35 31 66 2d 37 64 30 37 2d 34 33 38 32 2d 61 31 62 34 2d 30 62 33 63 30 39 36 65 39 62 33 63 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 25 32 32 32 25 32 32 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 35 32 35 31 37 38 30 37 33 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 35 32 35 31 37 38 30 37 31 25 32 43 25 32 32 65 76 65 6e 74 5f 74 79 70 65 25 32 32 25 33 41 25 32 32 25 32 34 69 64 Data Ascii: client=c6eb3d709c5c30ca80c0381080bcc254&e=%5B%7B%22device_id%22%3A%22a640851f-7d07-4382-a1b4-0b3c096e9b3cR%22%2C%22user_id%22%3A%222%22%2C%22timestamp%22%3A1713525178073%2C%22event_id%22%3A1%2C%22session_id%22%3A1713525178071%2C%22event_type%22%3A%22%24id
2024-04-19 11:12:59 UTC	573	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:12:59 GMT Content-Type: text/html;charset=utf-8 x-cache: MISS from prod-w4-a-web-proxy-rg89 access-control-allow-origin: * access-control-allow-methods: GET, POST strict-transport-security: max-age=31536000 trace-id: Root=1-662251bb-72bd129e0259867f50715f20 x-cache-lookup: MISS from prod-w4-a-web-proxy-rg89:3128 box-request-id: - access-control-max-age: 86400 x-envoy-upstream-service-time: 59 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:12:59 UTC	17	IN	Data Raw: 37 0d 0a 73 75 63 63 65 73 73 0d 0a 30 0d 0a 0d 0a Data Ascii: 7success0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49763	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:59 UTC	1034	OUT	GET /app_init HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
2024-04-19 11:13:00 UTC	563	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 10 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:00 UTC	14	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e Data Ascii: 404 - Not Foun
2024-04-19 11:13:00 UTC	1	IN	Data Raw: 64 Data Ascii: d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49764	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:12:59 UTC	1056	OUT	GET /split-proxy/mySegments/unknown HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=OiomcD2U-lYe1oudtF-V3hydtQSinoKuw9_Y; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
2024-04-19 11:13:00 UTC	392	IN	HTTP/1.1 401 Unauthorized Date: Fri, 19 Apr 2024 11:13:00 GMT Content-Length: 0 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 55 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49765	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:00 UTC	753	OUT	GET /analytics-events/ HTTP/1.1 Host: client-log.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=
2024-04-19 11:13:00 UTC	596	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:00 GMT Content-Type: text/html;charset=utf-8 x-cache: MISS from canary-prod-w4-a-web-proxy-g6n5 access-control-allow-origin: * access-control-allow-methods: GET, POST strict-transport-security: max-age=31536000 trace-id: Root=1-662251bc-31e391d7767ee88765c9dec8 x-cache-lookup: MISS from canary-prod-w4-a-web-proxy-g6n5:3128 box-request-id: - access-control-max-age: 86400 x-envoy-upstream-service-time: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:00 UTC	23	IN	Data Raw: 64 0d 0a 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 0d 0a 30 0d 0a 0d 0a Data Ascii: dmissing_event0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49769	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:00 UTC	1495	OUT	GET /split-proxy/mySegments/2 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 SplitSDKVersion: javascript-10.22.3 Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:01 UTC	431	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:01 GMT Content-Type: application/json; charset=utf-8 Content-Length: 17 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 248 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:01 UTC	17	IN	Data Raw: 7b 22 6d 79 53 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d Data Ascii: {"mySegments":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49768	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:00 UTC	1517	OUT	GET /split-proxy/mySegments/662251b51c7c34.67511927 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 SplitSDKVersion: javascript-10.22.3 Authorization: Bearer 3sd5ltupa3cq5t3ovm1r2kear6i4kvmeb42a User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: application/json sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:01 UTC	430	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:01 GMT Content-Type: application/json; charset=utf-8 Content-Length: 17 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 50 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:01 UTC	17	IN	Data Raw: 7b 22 6d 79 53 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d Data Ascii: {"mySegments":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49771	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1644	OUT	POST /client_log HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 502 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-7eb7fdca9b2d8c0c3832bb1692b609fc-f09e83e4197fdf31-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: 72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:03 UTC	502	OUT	Data Raw: 65 76 65 6e 74 54 79 70 65 3d 69 6e 69 74 69 61 6c 69 7a 65 5f 61 70 70 5f 66 69 6e 69 73 68 65 64 26 64 61 74 61 25 35 42 73 74 61 74 75 73 43 6f 64 65 25 35 44 3d 32 30 30 26 64 61 74 61 25 35 42 73 74 61 74 75 73 25 35 44 3d 73 75 63 63 65 73 73 26 64 61 74 61 25 35 42 64 75 72 61 74 69 6f 6e 4d 53 25 35 44 3d 33 34 34 34 26 64 61 74 61 25 35 42 69 73 4c 6f 61 64 69 6e 67 57 69 74 68 46 69 6c 65 49 64 25 35 44 3d 74 72 75 65 26 64 61 74 61 25 35 42 72 65 71 46 69 6c 65 49 64 25 35 44 3d 31 35 30 36 35 30 33 39 33 34 35 36 35 26 64 61 74 61 25 35 42 69 6e 69 74 69 61 6c 4c 69 73 74 49 64 25 35 44 3d 26 64 61 74 61 25 35 42 69 6e 69 74 69 61 6c 46 69 6c 65 49 64 25 35 44 3d 31 35 30 36 35 30 33 39 33 34 35 36 35 26 64 61 74 61 25 35 42 75 73 65 72 49 64 Data Ascii: eventType=initialize_app_finished&data%5BstatusCode%5D=200&data%5Bstatus%5D=success&data%5BdurationMS%5D=3444&data%5BisLoadingWithFileId%5D=true&data%5BreqFileId%5D=1506503934565&data%5BinitialListId%5D=&data%5BinitialFileId%5D=1506503934565&data%5BuserId
2024-04-19 11:13:03 UTC	468	IN	HTTP/1.1 201 Created Date: Fri, 19 Apr 2024 11:13:03 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 7 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"7-rM9AyJuqT6iOan/xHh+AW+7K/T8" x-envoy-upstream-service-time: 5 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:03 UTC	7	IN	Data Raw: 43 72 65 61 74 65 64 Data Ascii: Created

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49770	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1644	OUT	POST /client_log HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 571 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-f35b95f777d025ad68824559bd52c7ae-d9a3b446148126a4-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: 72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:03 UTC	571	OUT	Data Raw: 65 76 65 6e 74 54 79 70 65 3d 63 6c 69 65 6e 74 5f 61 70 70 5f 69 6e 69 74 5f 64 75 72 61 74 69 6f 6e 26 64 61 74 61 25 35 42 73 74 61 74 75 73 43 6f 64 65 25 35 44 3d 32 30 30 26 64 61 74 61 25 35 42 73 74 61 74 75 73 25 35 44 3d 73 75 63 63 65 73 73 26 64 61 74 61 25 35 42 69 73 4c 6f 61 64 69 6e 67 57 69 74 68 46 69 6c 65 49 64 25 35 44 3d 74 72 75 65 26 64 61 74 61 25 35 42 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 25 35 44 3d 38 2e 32 35 35 37 2e 33 26 64 61 74 61 25 35 42 75 73 65 72 49 64 25 35 44 3d 32 26 64 61 74 61 25 35 42 75 73 65 72 45 6e 61 62 6c 65 64 45 78 70 65 72 69 6d 65 6e 74 73 25 35 44 25 35 42 74 6f 6f 6c 74 69 70 5f 65 64 69 74 25 35 44 3d 26 64 61 74 61 25 35 42 75 73 65 72 45 6e 61 62 6c 65 64 45 78 70 65 72 69 6d 65 6e 74 73 25 35 Data Ascii: eventType=client_app_init_duration&data%5BstatusCode%5D=200&data%5Bstatus%5D=success&data%5BisLoadingWithFileId%5D=true&data%5BclientVersion%5D=8.2557.3&data%5BuserId%5D=2&data%5BuserEnabledExperiments%5D%5Btooltip_edit%5D=&data%5BuserEnabledExperiments%5
2024-04-19 11:13:03 UTC	468	IN	HTTP/1.1 201 Created Date: Fri, 19 Apr 2024 11:13:03 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 7 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"7-rM9AyJuqT6iOan/xHh+AW+7K/T8" x-envoy-upstream-service-time: 2 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:03 UTC	7	IN	Data Raw: 43 72 65 61 74 65 64 Data Ascii: Created

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49772	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1478	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-2c52fe1ff77d1ee218b536f0611d594b-13a893f4ed8bdcb8-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:03 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:03 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 1 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:03 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 4e 5f 32 4f 5a 4f 4c 52 38 37 51 58 6c 53 64 4d 41 4f 4c 51 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"N_2OZOLR87QXlSdMAOLQ","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49774	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1059	OUT	GET /split-proxy/splitChanges?since=-1 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:03 UTC	393	IN	HTTP/1.1 401 Unauthorized Date: Fri, 19 Apr 2024 11:13:03 GMT Content-Length: 0 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 101 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1072	OUT	GET /split-proxy/mySegments/662251b51c7c34.67511927 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:03 UTC	392	IN	HTTP/1.1 401 Unauthorized Date: Fri, 19 Apr 2024 11:13:03 GMT Content-Length: 0 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49776	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1050	OUT	GET /split-proxy/mySegments/2 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:03 UTC	393	IN	HTTP/1.1 401 Unauthorized Date: Fri, 19 Apr 2024 11:13:03 GMT Content-Length: 0 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 143 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49777	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5B&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-2b678c2ee4521f0067592e53234b9c91-2e99e12a0d4e7434-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:03 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-04-19 11:13:04 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:04 GMT Content-Type: text/html Content-Length: 2 cache-control: no-store x-envoy-upstream-service-time: 19 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:04 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49778	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1105	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3qPn HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:04 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:04 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 1 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:04 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 4e 55 65 65 35 33 54 53 62 51 44 59 58 64 5a 52 41 4f 4c 53 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"NUee53TSbQDYXdZRAOLS","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49779	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1284	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://notes.services.box.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0 Sec-WebSocket-Key: /J3wj3nPJm4THVgQDajHiQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-19 11:13:04 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:04 GMT Content-Type: application/json x-envoy-upstream-service-time: 17 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:04 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-19 11:13:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49780	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:03 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-4fd7cc0bbe77dc0f77fc604b3ea8dc4d-b1373f5858c38c47-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:04 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:04 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 32 cache-control: no-store x-envoy-upstream-service-time: 80 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:04 UTC	32	IN	Data Raw: 34 30 7b 22 73 69 64 22 3a 22 69 78 31 76 44 4c 44 35 55 6a 61 4a 4d 46 38 64 41 4f 4c 52 22 7d Data Ascii: 40{"sid":"ix1vDLD5UjaJMF8dAOLR"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49781	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:04 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFS&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-e7d920b8d99ee5c85dbca0509709772e-c169ce5ef942b7b2-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:04 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:04 GMT Content-Type: application/json x-envoy-upstream-service-time: 92 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:04 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49782	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:04 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5O&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:04 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:04 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 cache-control: no-store x-envoy-upstream-service-time: 36 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:04 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49783	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:04 UTC	1605	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFY&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 342 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-6f2fcfaf8060ecf8e2f2f86a07f040ba-88da888ae9b42fcf-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:04 UTC	342	OUT	Data Raw: 34 32 5b 22 6d 65 73 73 61 67 65 22 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 70 61 64 22 2c 22 74 79 70 65 22 3a 22 43 4c 49 45 4e 54 5f 52 45 41 44 59 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 32 2c 22 61 75 74 68 43 6f 64 65 22 3a 22 6e 6f 5f 61 75 74 68 5f 63 6f 64 65 22 2c 22 66 69 6c 65 49 64 22 3a 22 31 35 30 36 35 30 33 39 33 34 35 36 35 22 2c 22 73 68 61 72 65 64 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 2f 73 2f 6b 74 6c 35 71 74 76 66 32 75 73 31 6d 65 67 62 67 6d 6a 61 62 77 71 61 78 63 64 79 36 39 62 35 22 2c 22 69 73 4e 65 77 6c 79 43 72 65 61 74 65 64 42 6c 61 6e 6b 4e 6f 74 65 22 3a 66 61 6c 73 65 2c 22 6e 65 77 4e 6f 74 65 46 6f 72 6d 61 74 22 3a 22 70 61 64 22 2c 22 64 6f 4e 6f 74 Data Ascii: 42["message",{"component":"pad","type":"CLIENT_READY","protocolVersion":2,"authCode":"no_auth_code","fileId":"1506503934565","sharedLink":"https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5","isNewlyCreatedBlankNote":false,"newNoteFormat":"pad","doNot
2024-04-19 11:13:04 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:04 GMT Content-Type: text/html Content-Length: 2 cache-control: no-store x-envoy-upstream-service-time: 3 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:04 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49784	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:04 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3r5B&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:04 UTC	257	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:04 GMT x-envoy-upstream-service-time: 23 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49785	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:05 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rFY&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:05 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:05 GMT Content-Type: application/json x-envoy-upstream-service-time: 2 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:05 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49787	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:05 UTC	1656	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 1387 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-f352ee5e042092276dc95ccd0bfbdaca-00fef9e1f0e05693-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: 72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:05 UTC	1387	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 6f 63 6b 65 74 43 6f 6e 6e 65 63 74 45 72 72 6f 72 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 65 72 72 6f 72 25 32 32 25 33 41 25 32 32 46 61 69 6c 65 64 2b 74 6f Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22socketConnectError%22%2C%22payload%22%3A%7B%22error%22%3A%22Failed+to
2024-04-19 11:13:05 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:05 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=Sy9W5DN2-2-8u300nbS5VrFuZ9IyYqsdcKlo; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 2 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:05 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49786	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:05 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rQ9&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-6bc9dcbe9a7a48d3977bfefc90470fad-bd979397acee2f56-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:05 UTC	2	OUT	Data Raw: 34 31 Data Ascii: 41
2024-04-19 11:13:05 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:05 GMT Content-Type: application/json x-envoy-upstream-service-time: 1 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:05 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49788	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:05 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3rQC&sid=N_2OZOLR87QXlSdMAOLQ HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 1 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-70b84f662ea6e1e136525524e77565fe-ce7f6676f18077e0-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=72O2fEGh-y6I8YOqePn6ZLlC1szJ6hxSWAo0
2024-04-19 11:13:05 UTC	1	OUT	Data Raw: 31 Data Ascii: 1
2024-04-19 11:13:05 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:05 GMT Content-Type: application/json x-envoy-upstream-service-time: 22 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:05 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49790	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:05 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Sy9W5DN2-2-8u300nbS5VrFuZ9IyYqsdcKlo
2024-04-19 11:13:06 UTC	562	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 4 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:06 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49796	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:11 UTC	1655	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 898 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-782fa828816918070e97813063bb1523-bde2eb9f9317b3f7-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY
2024-04-19 11:13:11 UTC	898	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 72 65 63 6f 6e 6e 65 63 74 41 74 74 65 6d 70 74 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 69 73 53 74 69 6c 6c 57 72 69 74 65 54 65 6d 70 44 69 73 61 62 6c 65 64 25 Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22reconnectAttempt%22%2C%22payload%22%3A%7B%22isStillWriteTempDisabled%
2024-04-19 11:13:12 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:12 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=oSDdrs2t-Mk9447SW1APWccMhUC_FV7EO5Uo; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 2 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:12 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49795	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:11 UTC	1614	OUT	GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-6fe2b4fddd1e21e36e7f36d487dca0bc-997cf4bb2e21ff56-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 csrf-token: UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=UEe5Jljw-FuwVWHtCkYrkvylWWtfNR8SDZIY
2024-04-19 11:13:12 UTC	589	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 98 x-powered-by: Express set-cookie: csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"62-HzEDQhtHVDij/DpXzDAx3OYfSrY" x-envoy-upstream-service-time: 20 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:12 UTC	98	IN	Data Raw: 7b 22 73 6f 63 6b 65 74 52 65 73 6f 75 72 63 65 22 3a 22 31 30 30 31 2f 30 33 2f 31 2f 31 2f 73 6f 63 6b 65 74 2e 69 6f 22 2c 22 73 65 72 76 65 72 53 6f 63 6b 65 74 56 65 72 73 69 6f 6e 22 3a 22 34 2e 37 2e 32 22 2c 22 73 65 72 76 65 72 50 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 35 7d Data Ascii: {"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49797	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:12 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=oSDdrs2t-Mk9447SW1APWccMhUC_FV7EO5Uo
2024-04-19 11:13:12 UTC	562	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=gCkgo1TL-53Bi6mcxFb2zTEtsKmEqH-lzVvw; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 5 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:12 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49799	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:12 UTC	1478	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-811f476b4a6bd385a3a711102ce32017-1be6c7cc10cf00ef-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE
2024-04-19 11:13:12 UTC	316	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 85 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:12 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 6b 4c 39 74 50 72 74 6d 4c 44 73 57 36 61 68 47 41 4f 4c 62 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"kL9tPrtmLDsW6ahGAOLb","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49798	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:12 UTC	1089	OUT	GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176074 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=4zHZx9YO-p05aqZhxN7I-KIByt3weokWqenE
2024-04-19 11:13:12 UTC	589	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:12 GMT Content-Type: application/json; charset=utf-8 Content-Length: 98 x-powered-by: Express set-cookie: csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"62-HzEDQhtHVDij/DpXzDAx3OYfSrY" x-envoy-upstream-service-time: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:12 UTC	98	IN	Data Raw: 7b 22 73 6f 63 6b 65 74 52 65 73 6f 75 72 63 65 22 3a 22 31 30 30 31 2f 30 33 2f 31 2f 31 2f 73 6f 63 6b 65 74 2e 69 6f 22 2c 22 73 65 72 76 65 72 53 6f 63 6b 65 74 56 65 72 73 69 6f 6e 22 3a 22 34 2e 37 2e 32 22 2c 22 73 65 72 76 65 72 50 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 35 7d Data Ascii: {"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49801	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:13 UTC	1284	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1 Host: notes.services.box.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://notes.services.box.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ Sec-WebSocket-Key: Ih8rT2cmhWVdNd34HYDQUg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-19 11:13:13 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:13 GMT Content-Type: application/json x-envoy-upstream-service-time: 25 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:13 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-19 11:13:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49803	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:13 UTC	1105	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tCg HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:13 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:13 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 2 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:13 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 59 48 34 45 73 51 33 44 4c 6f 50 6c 57 61 51 4c 41 4f 4c 63 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"YH4EsQ3DLoPlWaQLAOLc","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49802	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:13 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN4&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-fb94025f1502da34da213bba5da6202e-e990ffa051eea984-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:13 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-04-19 11:13:13 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:13 GMT Content-Type: text/html Content-Length: 2 cache-control: no-store x-envoy-upstream-service-time: 75 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:13 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49800	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:13 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-c75dee2fda321551f69d2428f7db85e6-c3a5f54d956de2d7-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:13 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:13 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 32 cache-control: no-store x-envoy-upstream-service-time: 53 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:13 UTC	32	IN	Data Raw: 34 30 7b 22 73 69 64 22 3a 22 39 69 63 55 45 75 6b 6f 5f 2d 47 31 5f 32 6a 61 41 4f 4c 64 22 7d Data Ascii: 40{"sid":"9icUEuko_-G1_2jaAOLd"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49804	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:13 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN4&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:14 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 cache-control: no-store x-envoy-upstream-service-time: 67 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:14 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49806	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:13 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYJ&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-11e06ddd05e998b3a8dccbc3e63dad45-d5f9f3b6a039f9c4-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:14 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:14 GMT Content-Type: application/json x-envoy-upstream-service-time: 1 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:14 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49807	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:13 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tN5&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:14 UTC	256	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:14 GMT x-envoy-upstream-service-time: 9 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49805	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:13 UTC	1605	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tYL&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 342 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-44e1fc1cc1855f62df1facea1843e632-32e971d399b8dfcd-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:13 UTC	342	OUT	Data Raw: 34 32 5b 22 6d 65 73 73 61 67 65 22 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 70 61 64 22 2c 22 74 79 70 65 22 3a 22 43 4c 49 45 4e 54 5f 52 45 41 44 59 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 32 2c 22 61 75 74 68 43 6f 64 65 22 3a 22 6e 6f 5f 61 75 74 68 5f 63 6f 64 65 22 2c 22 66 69 6c 65 49 64 22 3a 22 31 35 30 36 35 30 33 39 33 34 35 36 35 22 2c 22 73 68 61 72 65 64 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 2f 73 2f 6b 74 6c 35 71 74 76 66 32 75 73 31 6d 65 67 62 67 6d 6a 61 62 77 71 61 78 63 64 79 36 39 62 35 22 2c 22 69 73 4e 65 77 6c 79 43 72 65 61 74 65 64 42 6c 61 6e 6b 4e 6f 74 65 22 3a 66 61 6c 73 65 2c 22 6e 65 77 4e 6f 74 65 46 6f 72 6d 61 74 22 3a 22 70 61 64 22 2c 22 64 6f 4e 6f 74 Data Ascii: 42["message",{"component":"pad","type":"CLIENT_READY","protocolVersion":2,"authCode":"no_auth_code","fileId":"1506503934565","sharedLink":"https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5","isNewlyCreatedBlankNote":false,"newNoteFormat":"pad","doNot
2024-04-19 11:13:14 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:14 GMT Content-Type: application/json x-envoy-upstream-service-time: 17 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:14 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49808	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:14 UTC	1656	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 1387 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-d3f6de57852504fca9bff4370bd6b198-979e7eb0d8039107-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:14 UTC	1387	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 6f 63 6b 65 74 43 6f 6e 6e 65 63 74 45 72 72 6f 72 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 65 72 72 6f 72 25 32 32 25 33 41 25 32 32 46 61 69 6c 65 64 2b 74 6f Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22socketConnectError%22%2C%22payload%22%3A%7B%22error%22%3A%22Failed+to
2024-04-19 11:13:14 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:14 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=GXzSYyvy-5EqYVuMy_sICELSe48haLMEgkhk; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 2 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:14 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49809	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:14 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3tgz&sid=kL9tPrtmLDsW6ahGAOLb HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 1 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-a82d22db76e4391138edb76323e502db-665e9646a6efc3cc-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=rEiVTGUT-3Hp4dErpATnueuReNNk3Cwq2KTQ
2024-04-19 11:13:14 UTC	1	OUT	Data Raw: 31 Data Ascii: 1
2024-04-19 11:13:14 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:14 GMT Content-Type: application/json x-envoy-upstream-service-time: 11 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:14 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49810	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:15 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=GXzSYyvy-5EqYVuMy_sICELSe48haLMEgkhk
2024-04-19 11:13:15 UTC	563	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 10 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:15 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49811	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:25 UTC	1655	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 898 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-bbf1102ad20627a8bb364b6906342d2d-c2d563d9cff97411-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno
2024-04-19 11:13:25 UTC	898	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 72 65 63 6f 6e 6e 65 63 74 41 74 74 65 6d 70 74 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 69 73 53 74 69 6c 6c 57 72 69 74 65 54 65 6d 70 44 69 73 61 62 6c 65 64 25 Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22reconnectAttempt%22%2C%22payload%22%3A%7B%22isStillWriteTempDisabled%
2024-04-19 11:13:26 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:26 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=zYF8l6fC--7mEQlxBZ1JVfBjN1KqeoTMjQcg; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 2 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:26 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49812	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:25 UTC	1614	OUT	GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-584e153d2a6def1cdaf2bf965dd33d29-59203c46cbeb9763-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 csrf-token: dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=dMS5d1wP-zQ3wfFxM1wMUrtHhe488mA9CRno
2024-04-19 11:13:26 UTC	589	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:26 GMT Content-Type: application/json; charset=utf-8 Content-Length: 98 x-powered-by: Express set-cookie: csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"62-HzEDQhtHVDij/DpXzDAx3OYfSrY" x-envoy-upstream-service-time: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:26 UTC	98	IN	Data Raw: 7b 22 73 6f 63 6b 65 74 52 65 73 6f 75 72 63 65 22 3a 22 31 30 30 31 2f 30 33 2f 31 2f 31 2f 73 6f 63 6b 65 74 2e 69 6f 22 2c 22 73 65 72 76 65 72 53 6f 63 6b 65 74 56 65 72 73 69 6f 6e 22 3a 22 34 2e 37 2e 32 22 2c 22 73 65 72 76 65 72 50 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 35 7d Data Ascii: {"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49813	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:26 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=zYF8l6fC--7mEQlxBZ1JVfBjN1KqeoTMjQcg
2024-04-19 11:13:26 UTC	562	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=qCCLncGd-BD2jG__VBdfo33kMbWTpSoyZNxA; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 5 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:26 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49814	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:26 UTC	1478	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-f107575ab1fc9bedc144949765f75c7e-98ab8f7196385bc1-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q
2024-04-19 11:13:26 UTC	316	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:26 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 14 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:26 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 50 70 53 73 47 43 68 72 79 4d 39 71 31 57 41 71 41 4f 4c 6f 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"PpSsGChryM9q1WAqAOLo","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49815	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:26 UTC	1089	OUT	GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176075 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=Kx8uvUox-o7LzybsniwSMCfZHZZ--oct6B9Q
2024-04-19 11:13:26 UTC	589	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:26 GMT Content-Type: application/json; charset=utf-8 Content-Length: 98 x-powered-by: Express set-cookie: csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"62-HzEDQhtHVDij/DpXzDAx3OYfSrY" x-envoy-upstream-service-time: 22 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:26 UTC	98	IN	Data Raw: 7b 22 73 6f 63 6b 65 74 52 65 73 6f 75 72 63 65 22 3a 22 31 30 30 31 2f 30 33 2f 31 2f 31 2f 73 6f 63 6b 65 74 2e 69 6f 22 2c 22 73 65 72 76 65 72 53 6f 63 6b 65 74 56 65 72 73 69 6f 6e 22 3a 22 34 2e 37 2e 32 22 2c 22 73 65 72 76 65 72 50 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 35 7d Data Ascii: {"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49817	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:27 UTC	1284	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://notes.services.box.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI Sec-WebSocket-Key: q3JpZlGJ39tbC8yiPW3DIQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-19 11:13:27 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:27 GMT Content-Type: application/json x-envoy-upstream-service-time: 6 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:27 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-19 11:13:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49819	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:27 UTC	1105	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wba HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:27 UTC	317	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:27 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 145 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:27 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 5a 49 79 4d 66 77 65 44 62 64 6b 5a 47 33 6a 6b 41 4f 4c 71 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"ZIyMfweDbdkZG3jkAOLq","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49816	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:27 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnU&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-36ac7a0b1c77db9ff65df054a629e0b0-5ff699112ee919f2-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:27 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-04-19 11:13:27 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:27 GMT Content-Type: text/html Content-Length: 2 cache-control: no-store x-envoy-upstream-service-time: 2 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:27 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49818	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:27 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-ddba8de75f933ebf182857cca96d6352-e56e74954625a0bf-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:27 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:27 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 32 cache-control: no-store x-envoy-upstream-service-time: 77 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:27 UTC	32	IN	Data Raw: 34 30 7b 22 73 69 64 22 3a 22 57 70 6c 61 54 34 42 73 4b 31 7a 6b 62 34 51 52 41 4f 4c 70 22 7d Data Ascii: 40{"sid":"WplaT4BsK1zkb4QRAOLp"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49820	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:27 UTC	1605	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wy0&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 342 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-7c2714671f93c31ef78b228ea8e1a9d0-47461f2e80c59802-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:27 UTC	342	OUT	Data Raw: 34 32 5b 22 6d 65 73 73 61 67 65 22 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 70 61 64 22 2c 22 74 79 70 65 22 3a 22 43 4c 49 45 4e 54 5f 52 45 41 44 59 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 32 2c 22 61 75 74 68 43 6f 64 65 22 3a 22 6e 6f 5f 61 75 74 68 5f 63 6f 64 65 22 2c 22 66 69 6c 65 49 64 22 3a 22 31 35 30 36 35 30 33 39 33 34 35 36 35 22 2c 22 73 68 61 72 65 64 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 2f 73 2f 6b 74 6c 35 71 74 76 66 32 75 73 31 6d 65 67 62 67 6d 6a 61 62 77 71 61 78 63 64 79 36 39 62 35 22 2c 22 69 73 4e 65 77 6c 79 43 72 65 61 74 65 64 42 6c 61 6e 6b 4e 6f 74 65 22 3a 66 61 6c 73 65 2c 22 6e 65 77 4e 6f 74 65 46 6f 72 6d 61 74 22 3a 22 70 61 64 22 2c 22 64 6f 4e 6f 74 Data Ascii: 42["message",{"component":"pad","type":"CLIENT_READY","protocolVersion":2,"authCode":"no_auth_code","fileId":"1506503934565","sharedLink":"https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5","isNewlyCreatedBlankNote":false,"newNoteFormat":"pad","doNot
2024-04-19 11:13:28 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:28 GMT Content-Type: text/html Content-Length: 2 cache-control: no-store x-envoy-upstream-service-time: 10 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:28 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49822	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:27 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnU&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:28 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:28 GMT Content-Type: application/json x-envoy-upstream-service-time: 58 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:28 UTC	52	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49821	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:27 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-61f6c30fab174ca0590f49a1f3574b9f-a860104660a7a6cb-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:28 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:28 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 cache-control: no-store x-envoy-upstream-service-time: 16 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:28 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49823	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:27 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wnV&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:28 UTC	257	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:28 GMT x-envoy-upstream-service-time: 14 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49824	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:28 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wy0&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:28 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:28 GMT Content-Type: application/json x-envoy-upstream-service-time: 23 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:28 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49826	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:28 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3wxZ&sid=PpSsGChryM9q1WAqAOLo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:28 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:28 GMT Content-Type: application/json x-envoy-upstream-service-time: 2 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:28 UTC	52	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49825	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:28 UTC	1655	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 591 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-9ea2973e120911e340936fe1477926ed-8f46e8e5120952e6-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=SIqy3wfU-tQlyFEfd1Vy_cr4vpJrxkzJUhtI
2024-04-19 11:13:28 UTC	591	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 6f 63 6b 65 74 44 69 73 63 6f 6e 6e 65 63 74 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 65 72 72 25 32 32 25 33 41 25 32 32 74 72 61 6e 73 70 6f 72 74 2b 63 6c 6f Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22socketDisconnect%22%2C%22payload%22%3A%7B%22err%22%3A%22transport+clo
2024-04-19 11:13:28 UTC	474	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:28 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=fuBzQldR-yl8skRxoC-vPHHpRxH62oZsNlbY; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 11 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:28 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49827	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:28 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=fuBzQldR-yl8skRxoC-vPHHpRxH62oZsNlbY
2024-04-19 11:13:29 UTC	563	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 16 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:29 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49829	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:35 UTC	1655	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 913 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-2c50576ed2567cf8d947726f33ad7cee-8e0b20e1d4c24a05-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4
2024-04-19 11:13:35 UTC	913	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 72 65 63 6f 6e 6e 65 63 74 41 74 74 65 6d 70 74 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 69 73 53 74 69 6c 6c 57 72 69 74 65 54 65 6d 70 44 69 73 61 62 6c 65 64 25 Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22reconnectAttempt%22%2C%22payload%22%3A%7B%22isStillWriteTempDisabled%
2024-04-19 11:13:35 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:35 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=mKLDcNZh-kWUBSkTSr7UeP0Lq6i08kNXjRgE; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 2 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:35 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49828	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:35 UTC	1614	OUT	GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-d0589e719fd5bc702499c8834785e6f7-321dc32ee24dd074-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 csrf-token: tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=tL6kFuEm-T8GSfkuSmr4qNRLJbKpildWgBu4
2024-04-19 11:13:35 UTC	589	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 98 x-powered-by: Express set-cookie: csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"62-HzEDQhtHVDij/DpXzDAx3OYfSrY" x-envoy-upstream-service-time: 21 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:35 UTC	98	IN	Data Raw: 7b 22 73 6f 63 6b 65 74 52 65 73 6f 75 72 63 65 22 3a 22 31 30 30 31 2f 30 33 2f 31 2f 31 2f 73 6f 63 6b 65 74 2e 69 6f 22 2c 22 73 65 72 76 65 72 53 6f 63 6b 65 74 56 65 72 73 69 6f 6e 22 3a 22 34 2e 37 2e 32 22 2c 22 73 65 72 76 65 72 50 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 35 7d Data Ascii: {"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49832	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:35 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=mKLDcNZh-kWUBSkTSr7UeP0Lq6i08kNXjRgE
2024-04-19 11:13:36 UTC	564	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 197 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:36 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49830	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:35 UTC	1089	OUT	GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176076 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4
2024-04-19 11:13:36 UTC	589	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:36 GMT Content-Type: application/json; charset=utf-8 Content-Length: 98 x-powered-by: Express set-cookie: csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"62-HzEDQhtHVDij/DpXzDAx3OYfSrY" x-envoy-upstream-service-time: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:36 UTC	98	IN	Data Raw: 7b 22 73 6f 63 6b 65 74 52 65 73 6f 75 72 63 65 22 3a 22 31 30 30 31 2f 30 33 2f 31 2f 31 2f 73 6f 63 6b 65 74 2e 69 6f 22 2c 22 73 65 72 76 65 72 53 6f 63 6b 65 74 56 65 72 73 69 6f 6e 22 3a 22 34 2e 37 2e 32 22 2c 22 73 65 72 76 65 72 50 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 35 7d Data Ascii: {"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49831	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:35 UTC	1478	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-ded7a2db0ff89777c514f3b9eaa872f1-e5ed11a739bcc1b1-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=PshyhJSg-V4FOltDvoyVO-HKqb5IqJdP9ZE4
2024-04-19 11:13:36 UTC	316	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:36 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 86 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:36 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 46 6f 4f 51 4a 47 69 42 45 70 4e 74 6e 72 67 44 41 4f 4c 7a 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"FoOQJGiBEpNtnrgDAOLz","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49836	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:36 UTC	1105	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3ywk HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
2024-04-19 11:13:36 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:36 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 2 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:36 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 76 35 43 5a 62 63 56 78 4e 62 48 34 41 6d 50 61 41 4f 4c 31 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"v5CZbcVxNbH4AmPaAOL1","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49833	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:36 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4i&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-4c70668f10f862a8fbbd27411a903633-ac3826216dc96380-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
2024-04-19 11:13:36 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-04-19 11:13:36 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:36 GMT Content-Type: text/html Content-Length: 2 cache-control: no-store x-envoy-upstream-service-time: 63 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:36 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49834	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:36 UTC	1284	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://notes.services.box.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI Sec-WebSocket-Key: SsO1y5w0b9OkiWJvAfjQcA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-19 11:13:36 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:36 GMT Content-Type: application/json x-envoy-upstream-service-time: 2 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:36 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49835	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:36 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-7f96f6e3a2820ac4370c481e3dbd2a7e-a74e439a57e090fd-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=hqHtlReD-OSJOwjtFG8PXDZtiJrpcgAajSRI
2024-04-19 11:13:36 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:36 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 32 cache-control: no-store x-envoy-upstream-service-time: 74 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:36 UTC	32	IN	Data Raw: 34 30 7b 22 73 69 64 22 3a 22 57 4d 4f 5a 7a 79 58 30 46 32 4e 71 62 41 33 65 41 4f 4c 32 22 7d Data Ascii: 40{"sid":"WMOZzyX0F2NqbA3eAOL2"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49837	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:37 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-b3b1795d789b9f88f75abc33d037ab5d-796c25b15e119e6f-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
2024-04-19 11:13:37 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 cache-control: no-store x-envoy-upstream-service-time: 22 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:37 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49838	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:37 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4j&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
2024-04-19 11:13:37 UTC	299	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:37 GMT Content-Type: application/json x-envoy-upstream-service-time: 157 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:37 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49840	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:37 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3z4i&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
2024-04-19 11:13:37 UTC	257	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:37 GMT x-envoy-upstream-service-time: 14 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49839	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:37 UTC	1605	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEn&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 342 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-09a317a0d578af4f1e73e1e422189a6a-5fa0cdf35a01cbd8-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
2024-04-19 11:13:37 UTC	342	OUT	Data Raw: 34 32 5b 22 6d 65 73 73 61 67 65 22 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 70 61 64 22 2c 22 74 79 70 65 22 3a 22 43 4c 49 45 4e 54 5f 52 45 41 44 59 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 32 2c 22 61 75 74 68 43 6f 64 65 22 3a 22 6e 6f 5f 61 75 74 68 5f 63 6f 64 65 22 2c 22 66 69 6c 65 49 64 22 3a 22 31 35 30 36 35 30 33 39 33 34 35 36 35 22 2c 22 73 68 61 72 65 64 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 2f 73 2f 6b 74 6c 35 71 74 76 66 32 75 73 31 6d 65 67 62 67 6d 6a 61 62 77 71 61 78 63 64 79 36 39 62 35 22 2c 22 69 73 4e 65 77 6c 79 43 72 65 61 74 65 64 42 6c 61 6e 6b 4e 6f 74 65 22 3a 66 61 6c 73 65 2c 22 6e 65 77 4e 6f 74 65 46 6f 72 6d 61 74 22 3a 22 70 61 64 22 2c 22 64 6f 4e 6f 74 Data Ascii: 42["message",{"component":"pad","type":"CLIENT_READY","protocolVersion":2,"authCode":"no_auth_code","fileId":"1506503934565","sharedLink":"https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5","isNewlyCreatedBlankNote":false,"newNoteFormat":"pad","doNot
2024-04-19 11:13:37 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:37 GMT Content-Type: text/html Content-Length: 2 cache-control: no-store x-envoy-upstream-service-time: 12 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:37 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49842	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:37 UTC	1655	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 591 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-23cc21468fc1c65650b43f3360124967-ff12aa24e4ae436c-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
2024-04-19 11:13:37 UTC	591	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 6f 63 6b 65 74 44 69 73 63 6f 6e 6e 65 63 74 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 65 72 72 25 32 32 25 33 41 25 32 32 74 72 61 6e 73 70 6f 72 74 2b 63 6c 6f Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22socketDisconnect%22%2C%22payload%22%3A%7B%22err%22%3A%22transport+clo
2024-04-19 11:13:38 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:38 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=H0pjsP8S-aapYvZiL4A7Xvg_cuMen8RhEQHM; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 3 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:38 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49841	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:37 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEn&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
2024-04-19 11:13:38 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:38 GMT Content-Type: application/json x-envoy-upstream-service-time: 2 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:38 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49843	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:37 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3zEW&sid=FoOQJGiBEpNtnrgDAOLz HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=iLoOB6JL-ckWjELqJkkXnq-p8MBHJvkxAMxQ
2024-04-19 11:13:38 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:38 GMT Content-Type: application/json x-envoy-upstream-service-time: 1 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:38 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49844	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:38 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MTc4MDczLCJldmVudElkIjowLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6MX0=; csrf-token=H0pjsP8S-aapYvZiL4A7Xvg_cuMen8RhEQHM
2024-04-19 11:13:38 UTC	562	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 2 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:38 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49847	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:45 UTC	1644	OUT	POST /client_log HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 327 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-a222c84a827926b9477a3fa81fb500e1-5f85658462e971b7-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: 3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
2024-04-19 11:13:45 UTC	327	OUT	Data Raw: 65 76 65 6e 74 54 79 70 65 3d 68 61 72 64 5f 72 65 63 6f 6e 6e 65 63 74 5f 62 61 6e 6e 65 72 5f 73 68 6f 77 6e 26 64 61 74 61 25 35 42 64 69 73 63 6f 6e 6e 65 63 74 52 65 61 73 6f 6e 25 35 44 3d 67 65 6e 65 72 61 6c 4e 6f 6e 43 6c 69 65 6e 74 44 69 73 63 6f 6e 6e 65 63 74 26 64 61 74 61 25 35 42 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 25 35 44 3d 38 2e 32 35 35 37 2e 33 26 64 61 74 61 25 35 42 75 73 65 72 49 64 25 35 44 3d 32 26 64 61 74 61 25 35 42 75 73 65 72 45 6e 61 62 6c 65 64 45 78 70 65 72 69 6d 65 6e 74 73 25 35 44 25 35 42 74 6f 6f 6c 74 69 70 5f 65 64 69 74 25 35 44 3d 26 64 61 74 61 25 35 42 75 73 65 72 45 6e 61 62 6c 65 64 45 78 70 65 72 69 6d 65 6e 74 73 25 35 44 25 35 42 74 6f 6f 6c 74 69 70 5f 63 6f 6d 6d 65 6e 74 25 35 44 3d 26 64 61 74 61 Data Ascii: eventType=hard_reconnect_banner_shown&data%5BdisconnectReason%5D=generalNonClientDisconnect&data%5BclientVersion%5D=8.2557.3&data%5BuserId%5D=2&data%5BuserEnabledExperiments%5D%5Btooltip_edit%5D=&data%5BuserEnabledExperiments%5D%5Btooltip_comment%5D=&data
2024-04-19 11:13:45 UTC	468	IN	HTTP/1.1 201 Created Date: Fri, 19 Apr 2024 11:13:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 7 x-powered-by: Express strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"7-rM9AyJuqT6iOan/xHh+AW+7K/T8" x-envoy-upstream-service-time: 3 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:45 UTC	7	IN	Data Raw: 43 72 65 61 74 65 64 Data Ascii: Created

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49846	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:45 UTC	663	OUT	POST /analytics-events/ HTTP/1.1 Host: client-log.box.com Connection: keep-alive Content-Length: 1454 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://notes.services.box.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 11:13:45 UTC	1454	OUT	Data Raw: 63 6c 69 65 6e 74 3d 63 36 65 62 33 64 37 30 39 63 35 63 33 30 63 61 38 30 63 30 33 38 31 30 38 30 62 63 63 32 35 34 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 61 36 34 30 38 35 31 66 2d 37 64 30 37 2d 34 33 38 32 2d 61 31 62 34 2d 30 62 33 63 30 39 36 65 39 62 33 63 52 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 25 32 32 32 25 32 32 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 31 33 35 32 35 32 32 34 31 35 35 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 31 33 35 32 35 31 37 38 30 37 31 25 32 43 25 32 32 65 76 65 6e 74 5f 74 79 70 65 25 32 32 25 33 41 25 32 32 65 72 72 6f 72 Data Ascii: client=c6eb3d709c5c30ca80c0381080bcc254&e=%5B%7B%22device_id%22%3A%22a640851f-7d07-4382-a1b4-0b3c096e9b3cR%22%2C%22user_id%22%3A%222%22%2C%22timestamp%22%3A1713525224155%2C%22event_id%22%3A1%2C%22session_id%22%3A1713525178071%2C%22event_type%22%3A%22error
2024-04-19 11:13:45 UTC	587	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:45 GMT Content-Type: text/html;charset=utf-8 x-cache: MISS from canary-prod-w4-a-web-proxy-g6n5 access-control-allow-origin: * access-control-allow-methods: GET, POST strict-transport-security: max-age=31536000 trace-id: Root=1-662251e9-73f22fd64d5af751524c2be7 x-cache-lookup: MISS from canary-prod-w4-a-web-proxy-g6n5:3128 box-request-id: - access-control-max-age: 86400 x-envoy-upstream-service-time: 65 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:45 UTC	17	IN	Data Raw: 37 0d 0a 73 75 63 63 65 73 73 0d 0a 30 0d 0a 0d 0a Data Ascii: 7success0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49849	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:45 UTC	753	OUT	GET /analytics-events/ HTTP/1.1 Host: client-log.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
2024-04-19 11:13:46 UTC	582	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:45 GMT Content-Type: text/html;charset=utf-8 x-cache: MISS from prod-w4-a-web-proxy-rg89 access-control-allow-origin: * access-control-allow-methods: GET, POST strict-transport-security: max-age=31536000 trace-id: Root=1-662251e9-737565a821245f687cf64561 x-cache-lookup: MISS from prod-w4-a-web-proxy-rg89:3128 box-request-id: - access-control-max-age: 86400 x-envoy-upstream-service-time: 48 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:46 UTC	18	IN	Data Raw: 64 0d 0a 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 0d 0a Data Ascii: dmissing_event
2024-04-19 11:13:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49850	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:47 UTC	1655	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 957 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-037d278e49044f769cbb51e5c2b5661f-4239af7466605825-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: 3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
2024-04-19 11:13:47 UTC	957	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 72 65 63 6f 6e 6e 65 63 74 41 74 74 65 6d 70 74 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 69 73 53 74 69 6c 6c 57 72 69 74 65 54 65 6d 70 44 69 73 61 62 6c 65 64 25 Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22reconnectAttempt%22%2C%22payload%22%3A%7B%22isStillWriteTempDisabled%
2024-04-19 11:13:47 UTC	474	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:47 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=qL421Q3Y-DHbwL3Us026D-6ZnL6wd2hZ7neI; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 30 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:47 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49851	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:47 UTC	1614	OUT	GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-d9bd6d0857b54257ca6fcbb3021ac515-607d120236528613-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 csrf-token: 3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; csrf-token=3Wu2iKGy-W-93XiZRMiNvygiw91wu2xkeabo; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=
2024-04-19 11:13:47 UTC	589	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 98 x-powered-by: Express set-cookie: csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"62-HzEDQhtHVDij/DpXzDAx3OYfSrY" x-envoy-upstream-service-time: 25 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:47 UTC	98	IN	Data Raw: 7b 22 73 6f 63 6b 65 74 52 65 73 6f 75 72 63 65 22 3a 22 31 30 30 31 2f 30 33 2f 31 2f 31 2f 73 6f 63 6b 65 74 2e 69 6f 22 2c 22 73 65 72 76 65 72 53 6f 63 6b 65 74 56 65 72 73 69 6f 6e 22 3a 22 34 2e 37 2e 32 22 2c 22 73 65 72 76 65 72 50 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 35 7d Data Ascii: {"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49852	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:47 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=qL421Q3Y-DHbwL3Us026D-6ZnL6wd2hZ7neI
2024-04-19 11:13:48 UTC	562	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:48 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 3 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:48 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49854	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:47 UTC	1089	OUT	GET /clientSocketConnectionInfo?fileId=1506503934565&_=1713525176077 HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8
2024-04-19 11:13:48 UTC	589	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:48 GMT Content-Type: application/json; charset=utf-8 Content-Length: 98 x-powered-by: Express set-cookie: csrf-token=ibODzqAW-TwsA5rZGVFqs86W6w-5vDtM6WBc; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com cache-control: no-cache etag: W/"62-HzEDQhtHVDij/DpXzDAx3OYfSrY" x-envoy-upstream-service-time: 26 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:48 UTC	98	IN	Data Raw: 7b 22 73 6f 63 6b 65 74 52 65 73 6f 75 72 63 65 22 3a 22 31 30 30 31 2f 30 33 2f 31 2f 31 2f 73 6f 63 6b 65 74 2e 69 6f 22 2c 22 73 65 72 76 65 72 53 6f 63 6b 65 74 56 65 72 73 69 6f 6e 22 3a 22 34 2e 37 2e 32 22 2c 22 73 65 72 76 65 72 50 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 35 7d Data Ascii: {"socketResource":"1001/03/1/1/socket.io","serverSocketVersion":"4.7.2","serverProtocolVersion":5}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49853	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:47 UTC	1478	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-1476386ad506d9cf6a46e75ceda94108-da20472302cdf4c8-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=Kra6tEN3-UknRPd-jNPRyeLYyeWWtvFEFzN8
2024-04-19 11:13:48 UTC	316	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:48 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 37 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:48 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 66 7a 78 46 50 32 68 35 4d 6b 74 67 75 52 6a 30 41 4f 4d 49 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"fzxFP2h5MktguRj0AOMI","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49856	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:48 UTC	1284	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=websocket&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1 Host: notes.services.box.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://notes.services.box.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64 Sec-WebSocket-Key: O2NAVvhZJlaMXHv9jRuq6g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-19 11:13:48 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:48 GMT Content-Type: application/json x-envoy-upstream-service-time: 2 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:48 UTC	40	IN	Data Raw: 32 32 0d 0a 7b 22 63 6f 64 65 22 3a 33 2c 22 6d 65 73 73 61 67 65 22 3a 22 42 61 64 20 72 65 71 75 65 73 74 22 7d 0d 0a Data Ascii: 22{"code":3,"message":"Bad request"}
2024-04-19 11:13:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49855	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:48 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__r&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-9cdfd871067ff52d263d8c68731c30dc-ee40e757acc97147-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:48 UTC	2	OUT	Data Raw: 34 30 Data Ascii: 40
2024-04-19 11:13:48 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:48 GMT Content-Type: text/html Content-Length: 2 cache-control: no-store x-envoy-upstream-service-time: 1 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:48 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49857	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:48 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-cc7233bb282713604fad7cd9252cb43b-3cdf72d7c7a1cde5-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:48 UTC	315	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:48 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 32 cache-control: no-store x-envoy-upstream-service-time: 25 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:48 UTC	32	IN	Data Raw: 34 30 7b 22 73 69 64 22 3a 22 6f 35 36 62 39 32 65 77 4f 46 6c 68 6f 6f 52 30 41 4f 4d 4a 22 7d Data Ascii: 40{"sid":"o56b92ewOFlhooR0AOMJ"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49858	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:48 UTC	1105	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3_ph HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:48 UTC	316	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:48 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 117 cache-control: no-store x-envoy-upstream-service-time: 23 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:48 UTC	117	IN	Data Raw: 30 7b 22 73 69 64 22 3a 22 47 4a 4a 51 4f 46 4a 52 74 47 45 67 79 5a 76 54 41 4f 4d 4b 22 2c 22 75 70 67 72 61 64 65 73 22 3a 5b 22 77 65 62 73 6f 63 6b 65 74 22 5d 2c 22 70 69 6e 67 49 6e 74 65 72 76 61 6c 22 3a 37 30 30 30 2c 22 70 69 6e 67 54 69 6d 65 6f 75 74 22 3a 31 35 30 30 30 2c 22 6d 61 78 50 61 79 6c 6f 61 64 22 3a 35 30 30 30 30 30 30 7d Data Ascii: 0{"sid":"GJJQOFJRtGEgyZvTAOMK","upgrades":["websocket"],"pingInterval":7000,"pingTimeout":15000,"maxPayload":5000000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49859	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:49 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__r&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:49 UTC	314	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:49 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 cache-control: no-store x-envoy-upstream-service-time: 30 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:49 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49860	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:49 UTC	1605	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs409C&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 342 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-326ea024fd5c2b8ab1632b2bfc06df4f-3c441c15e89292ba-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:49 UTC	342	OUT	Data Raw: 34 32 5b 22 6d 65 73 73 61 67 65 22 2c 7b 22 63 6f 6d 70 6f 6e 65 6e 74 22 3a 22 70 61 64 22 2c 22 74 79 70 65 22 3a 22 43 4c 49 45 4e 54 5f 52 45 41 44 59 22 2c 22 70 72 6f 74 6f 63 6f 6c 56 65 72 73 69 6f 6e 22 3a 32 2c 22 61 75 74 68 43 6f 64 65 22 3a 22 6e 6f 5f 61 75 74 68 5f 63 6f 64 65 22 2c 22 66 69 6c 65 49 64 22 3a 22 31 35 30 36 35 30 33 39 33 34 35 36 35 22 2c 22 73 68 61 72 65 64 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 62 6f 78 2e 63 6f 6d 2f 73 2f 6b 74 6c 35 71 74 76 66 32 75 73 31 6d 65 67 62 67 6d 6a 61 62 77 71 61 78 63 64 79 36 39 62 35 22 2c 22 69 73 4e 65 77 6c 79 43 72 65 61 74 65 64 42 6c 61 6e 6b 4e 6f 74 65 22 3a 66 61 6c 73 65 2c 22 6e 65 77 4e 6f 74 65 46 6f 72 6d 61 74 22 3a 22 70 61 64 22 2c 22 64 6f 4e 6f 74 Data Ascii: 42["message",{"component":"pad","type":"CLIENT_READY","protocolVersion":2,"authCode":"no_auth_code","fileId":"1506503934565","sharedLink":"https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5","isNewlyCreatedBlankNote":false,"newNoteFormat":"pad","doNot
2024-04-19 11:13:49 UTC	298	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:49 GMT Content-Type: application/json x-envoy-upstream-service-time: 15 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:49 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49861	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:49 UTC	1503	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs4099&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1 Host: notes.services.box.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / traceparent: 00-d8780f4ed13d0d9ba15b37202a71f4dd-ce9977725af31c66-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:49 UTC	256	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:49 GMT x-envoy-upstream-service-time: 3 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49862	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:49 UTC	1130	OUT	GET /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs3__v&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:49 UTC	299	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:49 GMT Content-Type: application/json x-envoy-upstream-service-time: 175 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:49 UTC	47	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}
2024-04-19 11:13:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49863	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:50 UTC	1656	OUT	POST /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 1387 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" feature-flip-user-id: 2 traceparent: 00-5ab406fa140f8ab26db36f38303ea0b3-c1faea29c1ddff5c-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / csrf-token: CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64 X-Requested-With: XMLHttpRequest sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:50 UTC	1387	OUT	Data Raw: 64 69 61 67 6e 6f 73 74 69 63 49 6e 66 6f 3d 25 37 42 25 32 32 75 73 65 72 41 67 65 6e 74 25 32 32 25 33 41 25 32 32 4d 6f 7a 69 6c 6c 61 25 32 46 35 2e 30 2b 28 57 69 6e 64 6f 77 73 2b 4e 54 2b 31 30 2e 30 25 33 42 2b 57 69 6e 36 34 25 33 42 2b 78 36 34 29 2b 41 70 70 6c 65 57 65 62 4b 69 74 25 32 46 35 33 37 2e 33 36 2b 28 4b 48 54 4d 4c 25 32 43 2b 6c 69 6b 65 2b 47 65 63 6b 6f 29 2b 43 68 72 6f 6d 65 25 32 46 31 31 37 2e 30 2e 30 2e 30 2b 53 61 66 61 72 69 25 32 46 35 33 37 2e 33 36 25 32 32 25 32 43 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 73 6f 63 6b 65 74 43 6f 6e 6e 65 63 74 45 72 72 6f 72 25 32 32 25 32 43 25 32 32 70 61 79 6c 6f 61 64 25 32 32 25 33 41 25 37 42 25 32 32 65 72 72 6f 72 25 32 32 25 33 41 25 32 32 46 61 69 6c 65 64 2b 74 6f Data Ascii: diagnosticInfo=%7B%22userAgent%22%3A%22Mozilla%2F5.0+(Windows+NT+10.0%3B+Win64%3B+x64)+AppleWebKit%2F537.36+(KHTML%2C+like+Gecko)+Chrome%2F117.0.0.0+Safari%2F537.36%22%2C%22type%22%3A%22socketConnectError%22%2C%22payload%22%3A%7B%22error%22%3A%22Failed+to
2024-04-19 11:13:50 UTC	473	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 11:13:50 GMT Content-Length: 2 x-powered-by: Express set-cookie: csrf-token=wvT7qnim-RAM13BOJK1p8eBmmXR-M1xYK0Lg; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com x-envoy-upstream-service-time: 3 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:50 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49864	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:50 UTC	1603	OUT	POST /1001/03/1/1/socket.io/?clientVersion=8.2557.3&EIO=4&transport=polling&t=Oxs40M-&sid=fzxFP2h5MktguRj0AOMI HTTP/1.1 Host: notes.services.box.com Connection: keep-alive Content-Length: 1 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-type: text/plain;charset=UTF-8 traceparent: 00-d9267e039dd4d089091b71e67a4e58e9-7e0d273d0ccc8bf4-00 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://notes.services.box.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://notes.services.box.com/p/note?fileId=1506503934565&sharedLink=https%3A%2F%2Fapp.box.com%2Fs%2Fktl5qtvf2us1megbgmjabwqaxcdy69b5&hostname=app.box.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=CA4WoV8W-SCG7lJhhJJ7McjFaKRqugez9L64
2024-04-19 11:13:50 UTC	1	OUT	Data Raw: 31 Data Ascii: 1
2024-04-19 11:13:50 UTC	297	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 11:13:50 GMT Content-Type: application/json x-envoy-upstream-service-time: 9 Strict-Transport-Security: max-age=31536000 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-19 11:13:50 UTC	52	IN	Data Raw: 32 39 0d 0a 7b 22 63 6f 64 65 22 3a 31 2c 22 6d 65 73 73 61 67 65 22 3a 22 53 65 73 73 69 6f 6e 20 49 44 20 75 6e 6b 6e 6f 77 6e 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 29{"code":1,"message":"Session ID unknown"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49865	74.112.186.144	443	1072	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 11:13:50 UTC	1047	OUT	GET /ep/pad/diagnosticInfo HTTP/1.1 Host: notes.services.box.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: box_visitor_id=662251b51c7c34.67511927; site_preference=desktop; _notes_oauth_csrf_=1; _csrf=FSVBKkCkp0-ioXYaz6lvKfxI; express_sid=s%3AEXNOELla1MyIctG9Gw3YCGBOFVPdr85n.sqwEjOOS%2F3uhOqHgZaav1Hkwd5q%2FMzLmJqUJ7ocFnp8; _splunk_rum_sid=%7B%22id%22%3A%22751399c965716485a7b6fb69cb42f2f8%22%2C%22startTime%22%3A1713525176493%7D; amplitude_id_c6eb3d709c5c30ca80c0381080bcc254box.com=eyJkZXZpY2VJZCI6ImE2NDA4NTFmLTdkMDctNDM4Mi1hMWI0LTBiM2MwOTZlOWIzY1IiLCJ1c2VySWQiOiIyIiwib3B0T3V0IjpmYWxzZSwic2Vzc2lvbklkIjoxNzEzNTI1MTc4MDcxLCJsYXN0RXZlbnRUaW1lIjoxNzEzNTI1MjI0MTU1LCJldmVudElkIjoxLCJpZGVudGlmeUlkIjoxLCJzZXF1ZW5jZU51bWJlciI6Mn0=; csrf-token=wvT7qnim-RAM13BOJK1p8eBmmXR-M1xYK0Lg
2024-04-19 11:13:51 UTC	563	IN	HTTP/1.1 404 Not Found Date: Fri, 19 Apr 2024 11:13:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 15 x-powered-by: Express set-cookie: csrf-token=uGsmYeoR-4zfRhu-wJTwE1n8hI1rHeZuG9hM; Path=/; Secure; SameSite=None strict-transport-security: max-age=31536000 x-frame-options: ALLOW-FROM https://app.box.com content-security-policy: frame-ancestors https://app.box.com etag: W/"f-Z280BOLXUGgeynAe/z2VTx5EI7Q" x-envoy-upstream-service-time: 39 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 11:13:51 UTC	15	IN	Data Raw: 34 30 34 20 2d 20 4e 6f 74 20 46 6f 75 6e 64 Data Ascii: 404 - Not Found

Target ID:	0
Start time:	13:12:46
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:12:48
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2352,i,14210594405034482032,7056984617740037461,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:12:51
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Windows Analysis Report
https://app.box.com/s/ktl5qtvf2us1megbgmjabwqaxcdy69b5