Edit tour

macOS Analysis Report
ot-test-app-darwin-x64-1.0.1.zip

Overview

General Information

Sample name:	ot-test-app-darwin-x64-1.0.1.zip
Analysis ID:	1430400
MD5:	a620217c7f0feae15053a8978d56b203
SHA1:	1ed14d9429ffd779a4c7af86677d0784e99b68db
SHA256:	bdee2a21d9ab1d86cd1e3d1e10ddfc8a19e03d241c4ce5911d976283307d5532
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false

Signatures

App bundle contains hidden files/directories

Reads hardware related sysctl values

Reads process information of other processes

Reads the sysctl safe boot value (probably to check if the system is in safe boot mode)

Reads the systems OS release and/or type

Reads the systems hostname

Writes HTML files containing JavaScript to disk

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1430400
Start date and time:	2024-04-23 16:07:59 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultmacfilecookbook.jbs
Analysis system description:	Virtual Machine, Mojave (Office 16 16.27, Java 11.0.2+9, Adobe Reader 2019.010.20099)
macOS major version:	10.14
CPU architecture:	x86_64
Analysis Mode:	default
Sample name:	ot-test-app-darwin-x64-1.0.1.zip
Detection:	CLEAN
Classification:	clean3.macZIP@0/41@5/0

Warnings

Excluded IPs from analysis (whitelisted): 17.253.83.200, 17.253.83.204, 23.3.85.176, 142.250.189.10, 142.250.189.14, 172.217.14.67, 172.217.12.136, 17.253.83.205, 17.57.21.63, 17.253.83.198, 17.253.83.196, 23.3.84.26
Excluded domains from analysis (whitelisted): mesu-cdn.apple.com.akadns.net, e11408.d.akamaiedge.net, fonts.googleapis.com, updates.cdn-apple.com.akadns.net, fonts.gstatic.com, e673.dsce9.akamaiedge.net, db._dns-sd._udp.0.11.168.192.in-addr.arpa, lcdn-locator-usms11.apple.com.akadns.net, help-ar.apple.com.edgekey.net, lb._dns-sd._udp.0.11.168.192.in-addr.arpa, mesu-cdn.origin-apple.com.akadns.net, b._dns-sd._udp.0.11.168.192.in-addr.arpa, lcdn-locator.apple.com.akadns.net, help.origin-apple.com.akadns.net, www.googletagmanager.com, lcdn-locator.apple.com, mesu.g.aaplimg.com, updates.g.aaplimg.com, itunes.apple.com.edgekey.net, help.apple.com, mesu.apple.com, init.itunes.apple.com, init-cdn.itunes-apple.com.akadns.net, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ot-test-app-darwin-x64-1.0.1.zip

Runtime Messages

Command:	open "/Users/bernard/Desktop/unpack/ot-test-app.app"
PID:	624
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:
Standard Error:

Process Tree

System is macvm-mojave

xpcproxy New Fork (PID: 612, Parent: 1)

nsurlstoraged (MD5: 321b0a40e24b45f0af49ba42742b3f64) Arguments: /usr/libexec/nsurlstoraged --privileged

mono-sgen32 New Fork (PID: 621, Parent: 537)

open (MD5: 34bd93241fa5d2aee225941b1ca14fa4) Arguments: /usr/bin/open -b com.apple.Finder /Users/bernard/Desktop/unpack

mono-sgen32 New Fork (PID: 624, Parent: 537)

open (MD5: 34bd93241fa5d2aee225941b1ca14fa4) Arguments: /usr/bin/open /Users/bernard/Desktop/unpack/ot-test-app.app

xpcproxy New Fork (PID: 625, Parent: 1)

ot-test-app (MD5: 4a43bafb4af0a038a7f430417bcc1b6e) Arguments: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app

ot-test-app Helper New Fork (PID: 627, Parent: 625)

ot-test-app Helper New Fork (PID: 628, Parent: 625)

ot-test-app Helper New Fork (PID: 629, Parent: 625)

xpcproxy New Fork (PID: 626, Parent: 1)

gamecontrollerd (MD5: 16ce481450ab82ba0dd811f76b6cf293) Arguments: /usr/libexec/gamecontrollerd

xpcproxy New Fork (PID: 661, Parent: 1)

eficheck (MD5: 328beb81a2263449258057506bb4987f) Arguments: /usr/libexec/firmwarecheckers/eficheck/eficheck --integrity-check-daemon

cleanup

Yara Signatures

⊘No yara matches

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 151.101.67.6:443 -> 192.168.11.12:49348 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.248.193.20:443 -> 192.168.11.12:49349 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.67.6:443 -> 192.168.11.12:49352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49399 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49400 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49404 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49405 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49406 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49407 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49408 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49416 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49417 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49418 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49419 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.16
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.16
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.17
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.17
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.17
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.193.20
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /session/new?mobile=1 HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8Accept-Encoding: gzip, deflate, brAccept-Language: en-GB
Source: global traffic	HTTP traffic detected: GET /assets/application-mobile-7ad2940818d75a843437e99a696611a0.css HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: text/css,/;q=0.1Referer: https://sandbox.optiturn.com/session/new?mobile=1Accept-Encoding: gzip, deflate, brAccept-Language: en-GBCookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
Source: global traffic	HTTP traffic detected: GET /assets/sessions/new-1b275320ca2943fe0ec5714da5973003.css HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: text/css,/;q=0.1Referer: https://sandbox.optiturn.com/session/new?mobile=1Accept-Encoding: gzip, deflate, brAccept-Language: en-GBCookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
Source: global traffic	HTTP traffic detected: GET /assets/sessions/new-2e9c6041dec9b53028870dc87a91c0c3.js HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: /Referer: https://sandbox.optiturn.com/session/new?mobile=1Accept-Encoding: gzip, deflate, brAccept-Language: en-GBCookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
Source: global traffic	HTTP traffic detected: GET /assets/jquery-1.12.2.min-fixed.js HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: /Referer: https://sandbox.optiturn.com/session/new?mobile=1Accept-Encoding: gzip, deflate, brAccept-Language: en-GBCookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
Source: global traffic	HTTP traffic detected: GET /assets/application-mobile-c8b0069e758f0bcce97f62ce5be9b20c.js HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: /Referer: https://sandbox.optiturn.com/session/new?mobile=1Accept-Encoding: gzip, deflate, brAccept-Language: en-GBCookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
Source: global traffic	HTTP traffic detected: GET /v6.5/honeybadger.min.js HTTP/1.1Host: js.honeybadger.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: /Referer: https://sandbox.optiturn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB
Source: global traffic	HTTP traffic detected: GET /assets/optoro-kite-logo-gray.svg HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: image/webp,image/apng,image/,/*;q=0.8Referer: https://sandbox.optiturn.com/assets/application-mobile-7ad2940818d75a843437e99a696611a0.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GBCookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
Source: global traffic	HTTP traffic detected: GET /images/spinner.gif HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: image/webp,image/apng,image/,/*;q=0.8Referer: https://sandbox.optiturn.com/assets/application-mobile-7ad2940818d75a843437e99a696611a0.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GBCookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
Source: global traffic	HTTP traffic detected: GET /images/mobile-optiturn-logo-2x.png HTTP/1.1Host: sandbox.optiturn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36Accept: image/webp,image/apng,image/,/*;q=0.8Referer: https://sandbox.optiturn.com/assets/application-mobile-7ad2940818d75a843437e99a696611a0.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-GBCookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903

Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: var url = 'http://www.youtube.com/embed/' + equals www.youtube.com (Youtube)
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: sandbox.optiturn.com

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)

Reads from socket in process: data

Jump to behavior

Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://127.0.0.1
Source: fbcc112b005136fb_0.266.dr	String found in binary or memory: http://bassistance.de/jquery-plugins/jquery-plugin-validation/
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://crbug.com/26312
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://creativecommons.org/ns#
Source: ot-test-app, 00000625.00000266.1.0000000110246000.000000011026f000.r--.sdmp	String found in binary or memory: http://crl.apple.com/codesigning.crl0
Source: fbcc112b005136fb_0.266.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/Article
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/BlogPosting
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/Corporation
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/EducationalOrganization
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/GovernmentOrganization
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/ImageObject
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/NGO
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/NewsArticle
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/Organization
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/Person
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/ScholarlyArticle
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://schema.org/TechArticle
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
Source: ot-test-app, 00000625.00000266.1.0000000110246000.000000011026f000.r--.sdmp, Info.plist	String found in binary or memory: http://www.apple.com/DTDs/PropertyList-1.0.dtd
Source: ot-test-app, 00000625.00000266.1.0000000110246000.000000011026f000.r--.sdmp	String found in binary or memory: http://www.apple.com/appleca/root.crl0
Source: ot-test-app, 00000625.00000266.1.0000000110246000.000000011026f000.r--.sdmp	String found in binary or memory: http://www.apple.com/certificateauthority0
Source: fbcc112b005136fb_0.266.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://www.html5rocks.com/en/tutorials/canvas/hidpi/
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://www.inkscape.org/)
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://www.inkscape.org/namespaces/inkscape
Source: fbcc112b005136fb_0.266.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: ot-test-app, 00000625.00000266.1.000000010dc91000.000000010e66b000.r--.sdmp	String found in binary or memory: http://www.unicode.org/copyright.html
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: http://www.youtube.com/embed/
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=559258
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=28885
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://chrome-devtools-frontend.appspot.com
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://chromedevtools.github.io/devtools-protocol/tot/$
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://crbug.com/740629)
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://crbug.com/852872):
Source: 64a158b52d8d7f13_0.266.dr	String found in binary or memory: https://csp.withgoogle.com/csp/apps-themes
Source: 64a158b52d8d7f13_0.266.dr	String found in binary or memory: https://csp.withgoogle.com/csp/apps-themesCross-Origin-Resource-Policy:
Source: 64a158b52d8d7f13_0.266.dr	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developer.chrome.com/devtools/docs/remote-debugging#port-forwarding
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/chrome-developer-tools/docs/remote-debugging
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/fundamentals/accessibility/accessible-styles#color_and_contrast
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/fundamentals/engage-and-retain/web-app-manifest/?utm_source=devtoo
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/fundamentals/performance/rendering/
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/fundamentals/performance/user-centric-performance-metrics#user-cen
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/tools/chrome-devtools/
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/tools/chrome-devtools/evaluate-performance/
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/tools/chrome-devtools/progressive-web-apps#opaque-responses
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/tools/chrome-devtools/sources?utm_source=devtools&utm_campaign=201
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/tools/lighthouse/
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://developers.google.com/web/tools/lighthouse/)
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLSchz2FdcQ-rRllzl8BbhWaTRRY-12BpPjW6Hr9e1-BpCA083w/viewform
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: 2f577e369a332ade_0.266.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto&display=swap/
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2)
Source: 64a158b52d8d7f13_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2wOF2
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu0SC55K5gw.woff2)
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu0SC55K5gw.woff2)
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu0SC55K5gw.woff2)
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu0SC55K5gw.woff2)
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu0SC55K5gw.woff2)
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu0SC55K5gw.woff2)
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu0SC55K5gw.woff2)
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu0SC55K5gw.woff2)
Source: 72153b705d2b0ca1_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu0SC55K5gw.woff2)
Source: 2f577e369a332ade_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKKTU1Kvnz.woff2)
Source: 2f577e369a332ade_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2)
Source: 2f577e369a332ade_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2)
Source: 2f577e369a332ade_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2)
Source: 2f577e369a332ade_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKKTU1Kvnz.woff2)
Source: 2f577e369a332ade_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKKTU1Kvnz.woff2)
Source: 2f577e369a332ade_0.266.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKKTU1Kvnz.woff2)
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://github.com/GoogleChrome/devtools-docs/issues/53
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://github.com/GoogleChrome/lighthouse/issues/new?
Source: ot-test-app, 00000625.00000266.1.000000010bcdd000.000000010bcf9000.r-x.sdmp	String found in binary or memory: https://github.com/Squirrel/Squirrel.Mac/issues/182
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://github.com/WICG/webpackage
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://github.com/google/closure-compiler/issues/544
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://goo.gl/ZcZixP
Source: 402c5ed80cf90429_0.266.dr, 63fcd95fbcfe52d8_0.266.dr	String found in binary or memory: https://js.honeybadger.io/v6.5/honeybadger.min.js
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://nodejs.org/en/docs/inspector/
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://nodejs.org/static/images/logos/nodejs-new-pantone-black.png
Source: 402c5ed80cf90429_0.266.dr, f6a4b760a9c11ff3_0.266.dr, da20b6cbeff987ad_0.266.dr, d90671bec5e9eb37_0.266.dr	String found in binary or memory: https://optiturn.com/
Source: 55278cefcf389f81_0.266.dr	String found in binary or memory: https://optiturn.com/?
Source: a0a94bbe1c33ff23_0.266.dr	String found in binary or memory: https://optiturn.com/i
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: a0a94bbe1c33ff23_0.266.dr	String found in binary or memory: https://sandbox.optiturn.com/assets/application-mobile-c8b0069e758f0bcce97f62ce5be9b20c.js
Source: f6a4b760a9c11ff3_0.266.dr	String found in binary or memory: https://sandbox.optiturn.com/assets/jquery-1.12.2.min-fixed.js
Source: b542690c1b3a7038_0.266.dr	String found in binary or memory: https://sandbox.optiturn.com/assets/optoro-kite-logo-gray.svg
Source: eea7151f88f29c03_0.266.dr	String found in binary or memory: https://sandbox.optiturn.com/assets/sessions/new-1b275320ca2943fe0ec5714da5973003.css.reveal-if-acti
Source: 55278cefcf389f81_0.266.dr, 0be797289528155c_0.266.dr	String found in binary or memory: https://sandbox.optiturn.com/assets/sessions/new-2e9c6041dec9b53028870dc87a91c0c3.js
Source: 9e8725181fa08ea9_0.266.dr	String found in binary or memory: https://sandbox.optiturn.com/images/mobile-optiturn-logo-2x.png
Source: 2dfde53b7dad7403_0.266.dr	String found in binary or memory: https://sandbox.optiturn.com/images/spinner.gifGIF89ax
Source: 63fcd95fbcfe52d8_0.266.dr	String found in binary or memory: https://sandbox.optiturn.com/session/new?mobile=1
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://support.google.com/chrome/?p=datasaver
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://tagassistant.google.com/
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://td.doubleclick.net
Source: ot-test-app, 00000625.00000266.1.0000000110246000.000000011026f000.r--.sdmp	String found in binary or memory: https://www.apple.com/appleca/0
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	String found in binary or memory: https://www.chromestatus.com/feature/5629709824032768
Source: d90671bec5e9eb37_0.266.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js(function()
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://www.google.com
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://www.googleadservices.com
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://www.googletagmanager.com
Source: 2940195bd9870d6e_0.266.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-1ZXEF3YNKF&cx=c&_slc=1
Source: a8afd1f866157e03_0.266.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 49351 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49347
Source: unknown	Network traffic detected: HTTP traffic on port 49406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49419
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49416
Source: unknown	Network traffic detected: HTTP traffic on port 49327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49370
Source: unknown	Network traffic detected: HTTP traffic on port 49371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49408
Source: unknown	Network traffic detected: HTTP traffic on port 49360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49327
Source: unknown	Network traffic detected: HTTP traffic on port 49364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49404
Source: unknown	Network traffic detected: HTTP traffic on port 49399 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49367
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49400
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49364
Source: unknown	Network traffic detected: HTTP traffic on port 49408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49360
Source: unknown	Network traffic detected: HTTP traffic on port 49363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49399
Source: unknown	Network traffic detected: HTTP traffic on port 49405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49351
Source: unknown	Network traffic detected: HTTP traffic on port 49416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49349

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Writes from socket in process: data	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	Writes from socket in process: data	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Writes from socket in process: data	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Writes from socket in process: data	Jump to behavior

Source: unknown	HTTPS traffic detected: 151.101.67.6:443 -> 192.168.11.12:49348 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 17.248.193.20:443 -> 192.168.11.12:49349 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.67.6:443 -> 192.168.11.12:49352 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49399 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49400 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49404 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49405 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49406 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49407 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49408 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49416 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49417 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49418 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.3.6:443 -> 192.168.11.12:49419 version: TLS 1.2

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)

HTML file containing JavaScript created: /Users/bernard/Library/Application Support/ot-test-app/Cache/63fcd95fbcfe52d8_0

Jump to dropped file

Source: classification engine

Classification label: clean3.macZIP@0/41@5/0

Source: extracted file from submission: ot-test-app.app/Contents/MacOS/ot-test-app

Mach-O header: load_dylib -> /System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

Source: extracted file from submission: ot-test-app.app/Contents/MacOS/ot-test-app

Mach-O header: load_dylib -> /System/Library/Frameworks/Security.framework/Versions/A/Security

Source: extracted file from submission: ot-test-app.app/Contents/MacOS/ot-test-app

Mach-O header: load_dylib -> /System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Random device file read: /dev/urandom	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Random device file read: /dev/urandom	Jump to behavior
Source: /usr/libexec/firmwarecheckers/eficheck/eficheck (PID: 661)	Random device file read: /dev/random	Jump to behavior

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)

AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist

Jump to behavior

Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/.gitignore
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/dist/.renderer-index-template.html
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/elements/.keep
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/debug/.coveralls.yml
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/debug/.eslintrc
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/debug/.npmignore
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/debug/.travis.yml
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/.eslintrc
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/.jsfmtrc
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/.npmignore
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/.travis.yml
Source: archive file from ZIP submission	Hidden file : ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/.eslintrc.json

Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	Binary or memory string: url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAFwklEQVR4XuVb208cVRgftYm+eYkv3hofjMY3fdPEGB/8E4wmJkoL0pLWWIha8GnbIixFWrvEitxauRQpsLDLZUHALnR3Z8ultaa4zOyKxoTEB6NpKrNnZ84wx/Ptw6SlLOzlnNmZcJJfstmZPXN+33znfNcVeA5CyAOhNbI/KunviTJ2i7LuE+P6zbCs/SVKGgpL2iYAPsN3cA3uicRxvZjQ311MGM8JDhtA+sGIrL1JSTSLcbxGSZGCIOHf6DyeqKS9AXPblri4YjwRies1lPjvmciwEAZ9RnXoT/K4bYgvS+RJSrqRqrICBKxAOK5tiDJuAKEXjXgwSPbRt3GMEr8NBIoCWftXlPWPBwh5yFLyUdl4mRJYoiB2AH0R18KrxkuWkKcPK4VTGwjYCektKOslXFVelPF5IGBngPVhviWCf5BHREkfAwJOAPgSsGZm5COSPm0ScI4QpmDtBau9+eadiZGCtoO5550MGZ/Lj3xcLzMJOByRhP5Bznaer6mz3kQuxIwXs9/3/J0c6yHp0azMI7i3PAkEf8Wk66pGzoyr5NRwCpD+3B3SyBy9xtljPLJrYMPLt59dwcQ9qpIDrUnyYcv2OEivNdB7rqxgXkHUPztGkhDV8SB/OaqR8nYEJLPC4Q5EBq5hXp5iXcZ4nkdI2xfRyIHvgFhugN/0iRoHIWj/UQfpse32fg1r8oGbmJSZKp87ytqSJPAL5uElfn5fGotHJqemHwGRgvBFP+JgFnHinvQa5PBYkx9ewkCACXxLmL0QEtrrdx9+zawfcHpUZSaAxjGVvUmU8VkzdW1mbxmisgcxE0BVD+JgEbAkwIC8PQ9zU9rGgrx5GPLxC1aNpwUoWvCYvCSj6cvLJPLyCd6BkNfNY/JDHey2wKFOxMk9xrUCpI94TF79AzsB1FxGvGIDrwD1OB6TfzPNzgp8O63yihBvCFCU5DH5zC1MDjI4ByBAmuUXHK0LPBMfZyYK14KzkyrPRElSgPI0rweEJB1seN7kP+1FdJFcM0WbXAUAmKVb4ZOu3IVQ2Y1M1ecqACtyf5DpOTmcypo8ZInmYtiSXKF5CFoB7yImrqEUHGz3kQbP8QS95s0Q+PA6BE0zaCVgX/uXMSQ80vBfx+nvirCO66YjtCch6UMQCtfvRfKmKwzdWHuRvBkMQSvaXhXAfMx4SoAB3VeWSFzWyfQtnE5x9Ysa6Qmlkf48sozT7nPEMguAY3cVQrGHOVmK8Z8xab+iknpfilT1IjB/Wfn+cG+dP0XagyqZuMHLLOImUwDQhMjqDUMRxE0XX3GBXThc0YnonCoZiGJ4Bhs3Pa69dk9aHPKChbi7nikVFgoEuAIE2/yjSn4qwE0OyzgOudCthZHqnF3cGIaIz1RtKwGeI0SK86t5aepnwtYBRUPowMySPKijqebFxJGLiAwu5KIN2p3lNfJoppaYhizIw8FmJj3tAFhL55yatfOzY8MztJ/uRL47rJESIGAzwJouRbRdLJP2t1kYzQTovd2puaHczPbaD1BWn4vtWBQ9LOw2oI0kHNcXMqg+ELAxMm8Fyimc9f8NoPEY8mVbJgH7bncBQE1y254AMWG8kGOPoF6ydSKX1/4COOVNbacB7+fZGY6bHS8AcHnzHXAeQMLEsQKQ9UHY94V3isv6lMMEAMFYIBA3HmbWMQ6Nx04RALx5JuS3bgdqBa7aXQANfiXI9T9Ebl/qfFnrhmE34rCm0/6kR7BiNE/ityt7lDt2IV/Vm7z99Qx+S7ByuAjZV+dDfeVtxdOG8g5l80tfqttU+WKgZRI97/KiMKigdequGCeH0bwnaDwr2GWcm0nurx1Rx45e3NB4ET96QVFrh5P+llnjGVv/ebppQv3INYSWYcEFk/5eSbkG0WJTAJWaaSwnwRNQX20YRU0nhlDoeF9qvbI7qVR0KHppqwKJjDTgM3x3rEtRjl9C63Cvewx91TiuvsKbwP/OVp2D40M/7QAAAABJRU5ErkJggg==) 1x,
Source: ot-test-app, 00000625.00000266.1.000000010c2a4000.000000010c2aa000.r--.sdmp	Binary or memory string: framework.vmnet
Source: ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	Binary or memory string: <img id="offline-resources-1x" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABNEAAABEBAMAAABdZr6uAAAAGFBMVEUAAAD////a2tr/9/e6urpTU1P39/e5ubkY2m5RAAAAAXRSTlMAQObYZgAACRdJREFUeAHt3cFuo0gQBuDCvWiu1IG7lSdAQtxzmAcAWbVvkJzntq+/cfPDFHGB29gdcNK/Zj3tKgIJ+bYBJ2boeyUlJSUl40kKCsnh5UiBYWuTGHARUkDquhrHrq7pagOxGy8vL8ujqwvQkFciyqU9P7ZEItKSfMQXc/80l34kJIJFcqFcsNxt4TExqxFSyiQdXQl2czA1tjZZ9J6kCyggTuREQxqR6moDsRv4/NdKo8NUGkB5VAJB8OXhQVquRj9NWiafUlzd+uHo9zoFhYWNTXYD8iKoACqjFSfQtdRwNSHTBsgcL0bnQNEQ1UBHj7Q0grReENE4k1H/xDe8r3YcCVHe3g5NEI5bRQR54JSGdNe2fsC3I560AoVsrTTUqwVphjmtCLE6n9fxz2+iiRvBSFppMYmRz3nUhktL0m46VWMRtqQVgJUR8adC1kFaWfjCOmkOI0savBhTGkYBkxph9Psjr8pN/vfA2epj5nDapmrrpMkYjl8lGRNNmr11JQ27ep20rAOsssiEp4XSF/xJWl9YAFVXq6Qd6T5pGBtzmkcGadRfJkCa7/rBvdL4Bj18S5UtacwPlfbvnDRCmT8fNI5AhyWZrDCz+lglrZTCb5vPw25a0NJ8YV6ak1OANFejgUDXJbQjRirgZVE7YPSqpMHS4EswGhegXNX2Jq3sLGmoPkzaW6C0w9F8sSOCtOKKNBSrJWkOH1pFl9bCDaa0QVoupjQ0tjt6bijtPeToiR2ucpw9RqJ8Sa2AtGwqTRVwOH2AtKbCCA2DF0aQhpEKdC1cHrz2J/stpLWkLkAvpOnG1tI2OHq+f+QN2hakYT7TeTneKi3rIK0slLRpgX2B75bm5GRKO9Ld0tSk9oeI8un5l4i0HhSJ4AHEziM8w+tpP+iK4IPYOR9/vV2RRpc5YjlLGguk6ebUEaShcF1aXf0F5SpIQ2Mbab/oz69AaUna+zCnvS9JOxxfDGuHL5XW0wGo5lRBGhqKoC3N1RfQjhhBGkY6kKZe1tXUMKdFyLeUhiPnv4vSXojsbwQWY3uf4PE+aXgxw8sariQdnk8aIDgjrZHq8dJ+/Uc3JEl7uyptLvdLk2vSnFcyyqpsabphSjsPHi7tv4/8oclxUKTFKBf/H8Z6mbG0uCTGxl71ub+6gTSZl8Y+16AJ97ko4697pGlQtXJT2Y1FaXBivrBxxGgaOpgveeADMacFSkvSZDtp2ZNLw7Wn9pPLOJT8rxmaBrrM8cUy7+/WDwiZY1R1lLMI0uytL0DT4cUypImazajU0jDEo6yV5qqvkuavPS0bkCZJ2rbSugywCsoGWCiM0sr10hrPqv6qOS26tHfx0jJWhxkiFo5SJSFEK/MtK1hDcas0e+vz4T4yBM/JLI/SCkjrxt+R46EwSCv6+hpptf8j8hXSxp97SvAZl20yN5bEmncqLeMhhSGNx2worWPqpXExSOvGwiiNGLPeemkVVfGlLemiNr8+pxlXB6TKLUEacznuTCI4iVAl9aUoaX2bFS81LDvmQtljU9oYSDO3jtx7EMXJGSayggjDYigoaYRZb0lavSTtRO7kpdXxpL2+vv5QaeOHScespSGCMOufRvm8xZeGCQxbHqV1PBQAb5TGxbI0H1vaqa4IL7JJPGn//O5xzJ1xBUojkdaURiJnaYLvHQIncaokYrzCwaIWBq/JsFP2xJQm70iPwNx6ODXgnC2rszMlTRdKLa2gBWluWRpRfGn+d26JRMTWFfB6GgJoekkQlp1KK2UcG9JkDKRNE19axj0s4nIqDQWQkxBp1ARIoyb+nBZf2uR7x3ASqUoioqDRKO0iXamkXYSXpVlbD5eGsF3n4PdG+dJ1aW5ZmvNzGhaKeJ4WOzGlJWlFiDRqFqU1H43q/CBRrz2/Rhqiz+cjVUkmoT4wYaZjk1qANBXmYGn2R7AqB0vrWBWGS8waoGrpHyoih4YpzcmpkVpOrq6j/YQ9SXt2aTSRhgDTMCZCEw0QvJBG5AabEaTRBtLIhyNVLWnL1Loi4/JuaRQWnn2ZlxGi+6VVTo0hTTegzpAGm1tIS9LsuyXsThqcgEqjxl4anrhGc7SlVRHeRxA9BgmOXCVTmk0N0miBGs/dAYbXSQtYdp00aAIVB2d1BWmqgRaGWhoa30Max66SCW29NPOuVsbWt5cGRHWtJzGkUQ0QxFBLQyPCu/A2oMbRq2RKM6l1cGNTYx+aC6+UxhRJGtX13zfb4UqSENUAQQyVtKjvYU/S9iYt/l2tFMHm+0gzru3jV0lDs6jh5VoMCqLP1JjHQdhX9XhpxFwMB+6wwop7DblaSwu7AwyGGhpILdwBZhtpSVq8rLqrFa4Wot3VahNqzHGriAHNa5q+tNGnQFdTY2Ik9KsKDQvTzqThdC3anfp+sDTmsuM5aR2z8I+S5pt1Ffnuo/GjjlwswhxaZRzYdJWD1gBqdCmtxC8IeWkGG2w1WI7aenCY9ifNNVKpRoQ7Kv8saRlDWpGVWLe51TA6OJ3D1gV5TmmkpUW6S3z86DNhFg6v4sA2pRa4hl7ZpTR/f4uC5qQxETM4r/uq4ie+tAj5YdIoG6VN1o1AWh9K0p5XGuMhrGqEmUPXQEKWNGYuu4LmpAHYTdKYkrTZJGmILS08Iknabo+ewqFVO4FrIBE8GAfQInDVK7+q7aU5DapabFjSKtp7krScto1zHlTjrVT972qfLhrk0DCkofHMGd8ZHlo1s7SGgOAMbWHV4RExtr5xmkbGqcudBDOUbvQE0XBamm7ET5L23HGu/khFAHXOpwYIwldFbnwXnmqEJCXFaStNpRuK4Lnh8M9+NpWrdSMoKS
Source: ot-test-app, 00000625.00000266.1.000000010c2a4000.000000010c2aa000.r--.sdmp	Binary or memory string: framework.vmnet$
Source: ot-test-app, 00000625.00000266.1.000000010be23000.000000010c0a5000.r-x.sdmp	Binary or memory string: VMware Screen Codec / VMware Video

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)

Sysctl read request: kern.safeboot (1.66)

Jump to behavior

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Sysctl read request: hw.ncpu (6.3)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Sysctl read request: hw.availcpu (6.25)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	Sysctl read request: hw.ncpu (6.3)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Sysctl read request: hw.availcpu (6.25)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Sysctl read request: hw.ncpu (6.3)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Sysctl read request: hw.availcpu (6.25)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Sysctl read request: hw.ncpu (6.3)	Jump to behavior

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Sysctl requested: kern.proc.pid (1.14.1) only found for 1.14.1.628 -> queries PID 628			Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Sysctl requested: kern.proc.pid (1.14.1) only found for 1.14.1.629 -> queries PID 629			Jump to behavior

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Sysctl requested: kern.ostype (1.1)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Sysctl requested: kern.osrelease (1.2)	Jump to behavior

Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	Sysctl requested: kern.hostname (1.10)	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	Sysctl requested: kern.hostname (1.10)	Jump to behavior

Source: /usr/bin/open (PID: 621)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /usr/bin/open (PID: 624)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app (PID: 625)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 627)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 628)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior
Source: /Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper (PID: 629)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	2 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Hidden Files and Directories	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	41 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	1 System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Shell
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://crbug.com/740629)	0%	Avira URL Cloud	safe
http://crbug.com/26312	0%	Avira URL Cloud	safe
http://127.0.0.1	0%	Avira URL Cloud	safe
https://cct.google/taggy/agent.js	0%	Avira URL Cloud	safe
https://chromedevtools.github.io/devtools-protocol/tot/$	0%	Avira URL Cloud	safe
https://www.google.%/ads/ga-audiences	0%	Avira URL Cloud	safe
https://chrome-devtools-frontend.appspot.com	0%	Avira URL Cloud	safe
https://csp.withgoogle.com/csp/report-to/apps-themes	0%	Avira URL Cloud	safe
https://crbug.com/852872):	0%	Avira URL Cloud	safe
https://csp.withgoogle.com/csp/apps-themesCross-Origin-Resource-Policy:	0%	Avira URL Cloud	safe
https://csp.withgoogle.com/csp/apps-themes	0%	Avira URL Cloud	safe
https://www.merchant-center-analytics.goog	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
honeybadger-js.b-cdn.net	143.244.49.177	true	false	high
apis.apple.map.fastly.net	151.101.131.6	true	false	unknown
sandbox.optiturn.com	34.120.41.26	true	false	high
js.honeybadger.io	unknown	unknown	false	high
updates.cdn-apple.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://sandbox.optiturn.com/assets/application-mobile-7ad2940818d75a843437e99a696611a0.css	false	high
https://sandbox.optiturn.com/assets/optoro-kite-logo-gray.svg	false	high
https://sandbox.optiturn.com/session/new?mobile=1	false	high
https://sandbox.optiturn.com/assets/sessions/new-1b275320ca2943fe0ec5714da5973003.css	false	high
https://sandbox.optiturn.com/assets/sessions/new-2e9c6041dec9b53028870dc87a91c0c3.js	false	high
https://sandbox.optiturn.com/images/spinner.gif	false	high
https://sandbox.optiturn.com/images/mobile-optiturn-logo-2x.png	false	high
https://sandbox.optiturn.com/assets/jquery-1.12.2.min-fixed.js	false	high
https://js.honeybadger.io/v6.5/honeybadger.min.js	false	high
https://sandbox.optiturn.com/assets/application-mobile-c8b0069e758f0bcce97f62ce5be9b20c.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schema.org/NewsArticle	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://stats.g.doubleclick.net/g/collect	a8afd1f866157e03_0.266.dr	false		high
http://crbug.com/26312	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false	Avira URL Cloud: safe	unknown
https://optiturn.com/i	a0a94bbe1c33ff23_0.266.dr	false		high
http://schema.org/Corporation	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://chromedevtools.github.io/devtools-protocol/tot/$	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false	Avira URL Cloud: safe	unknown
http://schema.org/TechArticle	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://www.inkscape.org/)	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://www.unicode.org/copyright.html	ot-test-app, 00000625.00000266.1.000000010dc91000.000000010e66b000.r--.sdmp	false		high
https://csp.withgoogle.com/csp/apps-themesCross-Origin-Resource-Policy:	64a158b52d8d7f13_0.266.dr	false	Avira URL Cloud: safe	unknown
http://schema.org/GovernmentOrganization	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developers.google.com/web/tools/lighthouse/	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://csp.withgoogle.com/csp/report-to/apps-themes	64a158b52d8d7f13_0.266.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/web/fundamentals/accessibility/accessible-styles#color_and_contrast	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://ampcid.google.com/v1/publisher:getClientId	2940195bd9870d6e_0.266.dr	false		high
https://developers.google.com/web/tools/chrome-devtools/	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://support.google.com/chrome/?p=datasaver	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://docs.jquery.com/Plugins/Validation	fbcc112b005136fb_0.266.dr	false		high
https://github.com/WICG/webpackage	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://schema.org/Article	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://www.google.com	a8afd1f866157e03_0.266.dr	false		high
http://www.opensource.org/licenses/mit-license.php	fbcc112b005136fb_0.266.dr	false		high
http://www.youtube.com/embed/	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://docs.google.com/forms/d/e/1FAIpQLSchz2FdcQ-rRllzl8BbhWaTRRY-12BpPjW6Hr9e1-BpCA083w/viewform	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://www.html5rocks.com/en/tutorials/canvas/hidpi/	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developers.google.com/chrome-developer-tools/docs/remote-debugging	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://github.com/Squirrel/Squirrel.Mac/issues/182	ot-test-app, 00000625.00000266.1.000000010bcdd000.000000010bcf9000.r-x.sdmp	false		high
https://stats.g.doubleclick.net/j/collect	2940195bd9870d6e_0.266.dr	false		high
https://crbug.com/852872):	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false	Avira URL Cloud: safe	unknown
https://nodejs.org/static/images/logos/nodejs-new-pantone-black.png	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://schema.org/BlogPosting	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developers.google.com/web/fundamentals/engage-and-retain/web-app-manifest/?utm_source=devtoo	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://schema.org/EducationalOrganization	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://github.com/GoogleChrome/devtools-docs/issues/53	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://chrome-devtools-frontend.appspot.com	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false	Avira URL Cloud: safe	unknown
http://schema.org/Person	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=559258	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://sandbox.optiturn.com/assets/sessions/new-1b275320ca2943fe0ec5714da5973003.css.reveal-if-acti	eea7151f88f29c03_0.266.dr	false		high
https://sandbox.optiturn.com/images/spinner.gifGIF89ax	2dfde53b7dad7403_0.266.dr	false		high
https://developers.google.com/web/tools/chrome-devtools/sources?utm_source=devtools&utm_campaign=201	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developers.google.com/web/fundamentals/performance/rendering/	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://tagassistant.google.com/	2940195bd9870d6e_0.266.dr	false		high
http://schema.org/NGO	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://adservice.google.com/pagead/regclk	a8afd1f866157e03_0.266.dr	false		high
http://127.0.0.1	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false	Avira URL Cloud: safe	unknown
https://optiturn.com/	402c5ed80cf90429_0.266.dr, f6a4b760a9c11ff3_0.266.dr, da20b6cbeff987ad_0.266.dr, d90671bec5e9eb37_0.266.dr	false		high
http://schema.org/ImageObject	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developers.google.com/web/tools/chrome-devtools/evaluate-performance/	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://cct.google/taggy/agent.js	a8afd1f866157e03_0.266.dr	false	Avira URL Cloud: safe	unknown
https://github.com/GoogleChrome/lighthouse/issues/new?	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://creativecommons.org/ns#	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developers.google.com/web/fundamentals/performance/user-centric-performance-metrics#user-cen	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://crbug.com/740629)	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false	Avira URL Cloud: safe	unknown
http://schema.org/ScholarlyArticle	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developers.google.com/web/tools/lighthouse/)	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://nodejs.org/en/docs/inspector/	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://www.chromestatus.com/feature/5629709824032768	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://www.google.com/ads/ga-audiences	2940195bd9870d6e_0.266.dr	false		high
http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://www.google.%/ads/ga-audiences	2940195bd9870d6e_0.266.dr	false	Avira URL Cloud: safe	low
https://td.doubleclick.net	a8afd1f866157e03_0.266.dr	false		high
https://optiturn.com/?	55278cefcf389f81_0.266.dr	false		high
https://www.merchant-center-analytics.goog	a8afd1f866157e03_0.266.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect?v=2&	a8afd1f866157e03_0.266.dr	false		high
http://www.gnu.org/licenses/gpl.html	fbcc112b005136fb_0.266.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=28885	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://csp.withgoogle.com/csp/apps-themes	64a158b52d8d7f13_0.266.dr	false	Avira URL Cloud: safe	unknown
https://github.com/google/closure-compiler/issues/544	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developers.google.com/web/tools/chrome-devtools/progressive-web-apps#opaque-responses	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://schema.org/Organization	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
https://developer.chrome.com/devtools/docs/remote-debugging#port-forwarding	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://www.inkscape.org/namespaces/inkscape	ot-test-app, 00000625.00000266.1.000000010f5cb000.000000010fddc000.r--.sdmp	false		high
http://bassistance.de/jquery-plugins/jquery-plugin-validation/	fbcc112b005136fb_0.266.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.3.6	unknown	United States	54113	FASTLYUS	false
34.120.41.26	sandbox.optiturn.com	United States	15169	GOOGLEUS	false
151.101.67.6	unknown	United States	54113	FASTLYUS	false
143.244.49.177	honeybadger-js.b-cdn.net	United States	174	COGENT-174US	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
151.101.3.6	https://cloudflare-ipfs.com/ipfs/bafybeiagiq7tdzbkrrgr6pdgcm3qpbokwry3qqk2gedyazwwolhwfy4suy/nodex.html#	Get hash	malicious	Unknown	Browse
	Calendly.dmg	Get hash	malicious	Unknown	Browse
	89.kk	Get hash	malicious	Unknown	Browse
	Arc12645415	Get hash	malicious	Unknown	Browse
	SME.dmg	Get hash	malicious	Unknown	Browse
	https://pub.marq.com/Downloadiiii-Fileee/	Get hash	malicious	Unknown	Browse
	todoist-setup.dmg	Get hash	malicious	Unknown	Browse
	http://marketplace-item-details-98756222.zya.me	Get hash	malicious	Unknown	Browse
	Diogenes	Get hash	malicious	Unknown	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:c139e8bc-e6cf-46e4-b94b-c8b5dea21199	Get hash	malicious	Unknown	Browse
151.101.67.6	https://cloudflare-ipfs.com/ipfs/bafybeiagiq7tdzbkrrgr6pdgcm3qpbokwry3qqk2gedyazwwolhwfy4suy/nodex.html#	Get hash	malicious	Unknown	Browse
	malw_sampl	Get hash	malicious	Unknown	Browse
	Arc12645415	Get hash	malicious	Unknown	Browse
	3MVd1q7ygy.macho	Get hash	malicious	Unknown	Browse
	https://www.flazio.com/server.html	Get hash	malicious	Unknown	Browse
	http://marketplace-item-details-98756222.zya.me	Get hash	malicious	Unknown	Browse
	ztfzDO15sO.dmg	Get hash	malicious	AMOS Stealer	Browse
	http://api.statisticsong.com/	Get hash	malicious	Unknown	Browse
143.244.49.177	http://nhstrusthelpdesk6269.brizy.site	Get hash	malicious	Unknown	Browse
	https://rolexz.b-cdn.net/Wi0n0MntyEr00170887/index.html	Get hash	malicious	Unknown	Browse
	https://gaggle.email/member/r7bN5ojI/details?utm_source=emailfooter&utm_medium=email&utm_campaign=membershiplink	Get hash	malicious	Unknown	Browse
	https://c2dco906.caspio.com/dp/6124d0005c66e4f1e83e456fae4e	Get hash	malicious	HTMLPhisher	Browse
	https://komposty.cz/.dps/index/myaccount/	Get hash	malicious	Unknown	Browse
	https://hukolposnas.nimbusweb.me/share/9322636/bmq83ii4sk1mq3heoygy	Get hash	malicious	Unknown	Browse
	https://brayanmatflyn-ncoincglaunc-ojorgetoolzaquipto.nimbusweb.me/share/9327446/od6s9kxb1dih0crodg3n	Get hash	malicious	Unknown	Browse
	https://indd.adobe.com/view/186f21cf-5e39-4f90-836d-e03f056dc975	Get hash	malicious	Unknown	Browse
	http://bigjollypolitics.com	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
apis.apple.map.fastly.net	https://cloudflare-ipfs.com/ipfs/bafybeiagiq7tdzbkrrgr6pdgcm3qpbokwry3qqk2gedyazwwolhwfy4suy/nodex.html#	Get hash	malicious	Unknown	Browse	151.101.3.6
	Calendly.dmg	Get hash	malicious	Unknown	Browse	151.101.131.6
	malw_sampl	Get hash	malicious	Unknown	Browse	151.101.131.6
	89.kk	Get hash	malicious	Unknown	Browse	151.101.3.6
	Arc12645415	Get hash	malicious	Unknown	Browse	151.101.131.6
	SME.dmg	Get hash	malicious	Unknown	Browse	151.101.3.6
	3MVd1q7ygy.macho	Get hash	malicious	Unknown	Browse	151.101.131.6
	https://www.flazio.com/server.html	Get hash	malicious	Unknown	Browse	151.101.3.6
	https://pub.marq.com/Downloadiiii-Fileee/	Get hash	malicious	Unknown	Browse	151.101.3.6
	todoist-setup.dmg	Get hash	malicious	Unknown	Browse	151.101.131.6

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://main-bvxea6i-qhygy63sspp2a.ca-1.platformsh.site/sample-page/	Get hash	malicious	HTMLPhisher	Browse	151.101.192.238
	https://www.msn.com/en-us/autos/enthusiasts/what-s-the-difference-between-a-shelby-mustang-and-a-regular-mustang/ar-AA1ntM5Z?ocid=entnewsntp&pc=U531&cvid=8b8aa9e3e14d4164a6a2181020104694&ei=36	Get hash	malicious	Unknown	Browse	151.101.129.44
	https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	Integraconnect Play Now 484 484 6292.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://t.co/RAl1Y5bY2b	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://tinyurl.com/5n6fprxt	Get hash	malicious	Unknown	Browse	151.101.65.229
	HSBC_PAYMENT.jar	Get hash	malicious	STRRAT	Browse	199.232.192.209
	HSBC_PAYMENT.jar	Get hash	malicious	STRRAT	Browse	199.232.192.209
	https://url.avanan.click/v2/___https:/novafr-my.sharepoint.com/:b:/g/personal/mfranco_nova-fr_org/EZPaIwPkDApNno6rWIAO20YB4ByiRCAe_VGScx-2iiONBw?e=magUuY/___.YXAzOmVuLW1kYTphOm86ZDA4MDI5MGVhZTA1MzJiMWZlYTg0YjE1OWE2NmVhNjc6NjplYTNkOjc2NzNkYWE0NTMzNWVhMjkxM2VjMGU1NGMyNDY3ZjVhNmJhNjU0MTk1ZmRjMzUzM2QxODAyNDVjY2E1Y2M1ODY6aDpU	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://myidealwedding.com.au	Get hash	malicious	BitRAT, HTMLPhisher	Browse	151.101.52.193
COGENT-174US	1mHUcsxKG6.elf	Get hash	malicious	Mirai	Browse	216.28.163.232
	wMPum9KAnI.elf	Get hash	malicious	Mirai	Browse	149.2.20.210
	sora.x86.elf	Get hash	malicious	Mirai	Browse	38.151.122.130
	sora.arm7.elf	Get hash	malicious	Mirai	Browse	38.16.79.215
	BitTorrent-7.6.exe	Get hash	malicious	Unknown	Browse	149.36.192.5
	YKLjlQEZKY.elf	Get hash	malicious	Mirai	Browse	149.52.168.135
	CxBkzmVHaR.elf	Get hash	malicious	Mirai	Browse	206.232.91.71
	jdsfl.arm.elf	Get hash	malicious	Mirai	Browse	149.44.241.35
	jdsfl.x86.elf	Get hash	malicious	Mirai	Browse	149.44.241.29
	SecuriteInfo.com.Win32.RATX-gen.9491.24773.exe	Get hash	malicious	Remcos, DBatLoader	Browse	198.16.88.186
FASTLYUS	https://main-bvxea6i-qhygy63sspp2a.ca-1.platformsh.site/sample-page/	Get hash	malicious	HTMLPhisher	Browse	151.101.192.238
	https://www.msn.com/en-us/autos/enthusiasts/what-s-the-difference-between-a-shelby-mustang-and-a-regular-mustang/ar-AA1ntM5Z?ocid=entnewsntp&pc=U531&cvid=8b8aa9e3e14d4164a6a2181020104694&ei=36	Get hash	malicious	Unknown	Browse	151.101.129.44
	https://netorgft3546691-my.sharepoint.com/:b:/g/personal/nicole_felthaus_mmclippers_com/EfUF1hXkwfZNuGJhx43KV34BvAUaxh5xTDD3cQCuhCEK1w?e=yOS03G	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	Integraconnect Play Now 484 484 6292.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	http://t.co/RAl1Y5bY2b	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://tinyurl.com/5n6fprxt	Get hash	malicious	Unknown	Browse	151.101.65.229
	HSBC_PAYMENT.jar	Get hash	malicious	STRRAT	Browse	199.232.192.209
	HSBC_PAYMENT.jar	Get hash	malicious	STRRAT	Browse	199.232.192.209
	https://url.avanan.click/v2/___https:/novafr-my.sharepoint.com/:b:/g/personal/mfranco_nova-fr_org/EZPaIwPkDApNno6rWIAO20YB4ByiRCAe_VGScx-2iiONBw?e=magUuY/___.YXAzOmVuLW1kYTphOm86ZDA4MDI5MGVhZTA1MzJiMWZlYTg0YjE1OWE2NmVhNjc6NjplYTNkOjc2NzNkYWE0NTMzNWVhMjkxM2VjMGU1NGMyNDY3ZjVhNmJhNjU0MTk1ZmRjMzUzM2QxODAyNDVjY2E1Y2M1ODY6aDpU	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	http://myidealwedding.com.au	Get hash	malicious	BitRAT, HTMLPhisher	Browse	151.101.52.193

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
5c118da645babe52f060d0754256a73c	https://cloudflare-ipfs.com/ipfs/bafybeiagiq7tdzbkrrgr6pdgcm3qpbokwry3qqk2gedyazwwolhwfy4suy/nodex.html#	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	Calendly.dmg	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	malw_sampl	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	89.kk	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	Arc12645415	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	SME.dmg	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	3MVd1q7ygy.macho	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	https://www.flazio.com/server.html	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	https://pub.marq.com/Downloadiiii-Fileee/	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20
	todoist-setup.dmg	Get hash	malicious	Unknown	Browse	151.101.3.6 151.101.67.6 17.248.193.20

Dropped Files

⊘No context

Created / dropped Files

/Users/bernard/Library/Application Support/ot-test-app/.com.electron.ot-test-app.qSVAxM

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.619434150836742
Encrypted:	false
SSDEEP:	3:YLbkVKJq0nMb1KKqk1Yn:YHkVKJTnMRKXk1Yn
MD5:	78BFCECB05ED1904EDCE3B60CB5C7E62
SHA1:	BF77A7461DE9D41D12AA88FBA056BA758793D9CE
SHA-256:	C257F929CFF0E4380BF08D9F36F310753F7B1CCB5CB2AB811B52760DD8CB9572
SHA-512:	2420DFF6EB853F5E1856CDAB99561A896EA0743FCFF3E04B37CB87EDDF063770608A30C6FFB0319E5D353B0132C5F8135B7082488E425666B2C22B753A6A4D73
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"net":{"network_qualities":{"CAESABiAgICA+P////8B":"3G"}}}

/Users/bernard/Library/Application Support/ot-test-app/000001.dbtmp

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Reputation:	high, very likely benign file
Preview:	MANIFEST-000001.

/Users/bernard/Library/Application Support/ot-test-app/000002.dbtmp

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Xv:1qIF/
MD5:	206702161F94C5CD39FADD03F4014D98
SHA1:	BD8BFC144FB5326D21BD1531523D9FB50E1B600A
SHA-256:	1005A525006F148C86EFCBFB36C6EAC091B311532448010F70F7DE9A68007167
SHA-512:	0AF09F26941B11991C750D1A2B525C39A8970900E98CBA96FD1B55DBF93FEE79E18B8AAB258F48B4F7BDA40D059629BC7770D84371235CDB1352A4F17F80E145
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MANIFEST-000002.

/Users/bernard/Library/Application Support/ot-test-app/Cache/0be797289528155c_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	5572
Entropy (8bit):	7.10878016700329
Encrypted:	false
SSDEEP:	96:y23Ayg+MWMQ7ijm5kJqzNUcUCxizuhwW0HbT1jkwbtQXKie:yEAy9MQ7iGLzmcUSt6JZbtMKie
MD5:	7DD3B13A79886C86DA85B3DEACC606BA
SHA1:	4C0342F040659EE77AD1956F417542F868963487
SHA-256:	E0376608158347143004AEE3FDA95273D8AF866D01077687089DADFD1BE133A2
SHA-512:	FB31925AC8A0193566A1142F9BC936A03723B3B2F1D2B26153E97D9023441CE737826C8A0BB128CEC3C0E5455B96D6A4DEB39EDC35A127D968D60C8DEC334BE3
Malicious:	false
Reputation:	low
Preview:	0\r..m......T..........https://sandbox.optiturn.com/assets/sessions/new-2e9c6041dec9b53028870dc87a91c0c3.js"use strict";function authUser(){var e=document.getElementById("login").value;postData("/identity_providers",e).then(function(t){if(t.redirect_url){var n=document.getElementById("sso-redirect-form");n.action=t.redirect_url,n.elements.login_hint.value=e,n.submit()}else displayPasswordFlow()})["catch"](function(e){displayPasswordFlow()})}function displayPasswordFlow(){window.passwordFlow=!0,document.querySelector("#login-form input[name='commit']").value="Log In",document.querySelector(".password-area").classList.add("show"),document.querySelector("#password").required=!0;var e=document.querySelector(".loading-overlay");e&&(e.style.display="none")}function postData(e,t){var n=new XMLHttpRequest;return new Promise(function(o,s){n.onreadystatechange=function(){if(4===n.readyState)if(n.status>=200&&n.status<300){var e=JSON.parse(n.responseText);o(e)}else s({status:n.status,statusText:

/Users/bernard/Library/Application Support/ot-test-app/Cache/2940195bd9870d6e_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	57117
Entropy (8bit):	5.8112025751787675
Encrypted:	false
SSDEEP:	768:7HzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsUNuX:naMKH125hYiM8O9dNoVJ3N48yVUX
MD5:	9F51611BA3EF583AD06F57F8B0E1272E
SHA1:	747F82E23D7A0FF9C13856569C8D9098DB2E24C8
SHA-256:	45F073743CB2253E8856B889232C88FD75EB2841089BCAD2CA9DCD47EF868C95
SHA-512:	0E4DB533FBFDB67C917ECD648585FA10F8EDF71A8ED0D67F4ECF01D997B37E4DF684FC4616AD6FFE1CE2EBCA340A47A4DC55BA45342C207D6F44A30152014207
Malicious:	false
Reputation:	low
Preview:	0\r..m......-....l......https://www.google-analytics.com/analytics.js(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=functi

/Users/bernard/Library/Application Support/ot-test-app/Cache/2dfde53b7dad7403_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	13563
Entropy (8bit):	7.853190436477596
Encrypted:	false
SSDEEP:	192:7iLQ8LjM8dC/YMiulVZlPpevpRfy3BRdVtPcKlexOAg2Y7iGLzmcUSt6JZbtMKiI:SX/M8kmu1lB4Rfy3TRcnzxGLzHKJtRiI
MD5:	A798296F84DAB3F6CC16E444868FAD0B
SHA1:	46015DEF6F305AACE0F5A30998185F51ADC43E91
SHA-256:	AB088D46801F8AD95CC627282C20A1843A23C81D2E61ECA116C70C84C0376852
SHA-512:	18054CFD1C12FB9BC172CB7E3A9DCA2BE25A7A09BAEE6F9722ED1A9FC952EBA0F0FB6FD2F879415886B550AC7B972D6B2B70CA78AFC1771B618C37C10E8150AF
Malicious:	false
Reputation:	low
Preview:	0\r..m....../...l.......https://sandbox.optiturn.com/images/spinner.gifGIF89ax...............%........{.........................................+.....%................e...........n..S.....>......................<..2..c.............C.............d.......t.........I.....k..x..Z..Q............z........Y........p......R.....3....j......................\..2..T....._..B.._......7..C....c.....A.........M....m.....J..D..H...K....]..>..2..J...!..NETSCAPE2.0.....!.......,....x...@........................................"........$....'.................&.....9...>...+...h...........q....a....;.....x..H.....I.".2..9t.&"V.)....X.I.8~.hI.H.."..A...........-........I.$/..%h$zCg.}tb.>K)...uY.$U.j....Q.....I7Qd-.\|.VR..m.....".!;N1`.;.G^.\|.mt.8p............bl..d......2P..V.y.h+E...6.%E.......c../.J..L...Xo.....qclN....w..d.7u..80.....)b.!._.'.'A<.nP._.......O...d......-}.g...[....\|....^p.7.I-...P{56.p...W-..W..]F.w..$^..zW.q...w.1.].,.W..2N....

/Users/bernard/Library/Application Support/ot-test-app/Cache/2f577e369a332ade_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	6591
Entropy (8bit):	7.005598506783228
Encrypted:	false
SSDEEP:	192:ENL6NBNWNU3FN/NGYN+01mcAmRyQPOAJZbtMUb:CLAXcSrVVr1hAQhJtnb
MD5:	3212F74C5BAA85CA238144CCBA180E98
SHA1:	B84BB32CE44A22058DBADD80D19AD2B8E3A0EC0F
SHA-256:	E70DCD9251F4B5846E7A23EBAFEB3458D91A3A69EA9BF37C1CD0CE7F7CA3D6AA
SHA-512:	186417AF9C5E945D94011AAE38222AE95502AAFB56258C0630EDC2B0621487459947B3372FFA903252B78C2ED9C9A3786D34BCF79F1D00AAC55605757AB3E441
Malicious:	false
Reputation:	low
Preview:	0\r..m......;...?.......https://fonts.googleapis.com/css?family=Roboto&display=swap/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKKTU1Kvnz.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. fo

/Users/bernard/Library/Application Support/ot-test-app/Cache/478ad7214b5adf30_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	44717
Entropy (8bit):	5.67482465253032
Encrypted:	false
SSDEEP:	768:YZTVt6TEBShE3AlvEjuanTHlTLTVrNeWfJtY:Y1Ggn4
MD5:	42EF25DAB6983E46187B7C7396B7E596
SHA1:	9C305907096252E172EC3D0B7886D7C3E08D417E
SHA-256:	C7FC65610BF391F5D758638143859032F1D6C670ED38FA474B7D5160F5537187
SHA-512:	D0E9885B4F2B86643BA4BFD4CC70600D8E8D5187E6F741E949FA37CD0E05401F310B18A52A183379F2E4790A8688486F663F86C72E9A46F9930D66FB21977000
Malicious:	false
Reputation:	low
Preview:	0\r..m......1...6-......https://js.honeybadger.io/v6.5/honeybadger.min.js!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Honeybadger=t()}(this,(function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function n(e){var t=e.default;if("function"==typeof t){var n=function(){return t.apply(this,arguments)};n.prototype=t.prototype}else n={};return Object.defineProperty(n,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var r=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,r.get?r:{enumerable:!0,get:function(){return e[t]}})})),n}var r={},o={},i={},a={},c="<unknown>";var u=/^\sat (.?) ?\(((?:file\|https?\|blob\|chr

/Users/bernard/Library/Application Support/ot-test-app/Cache/62577db59fc9ecfa_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	186595
Entropy (8bit):	5.143679733382432
Encrypted:	false
SSDEEP:	3072:EE8wDrK8wDr3o8wDr3R8wDrR8wDrM8wDrd:EE8wDrK8wDr3o8wDr3R8wDrR8wDrM8wl
MD5:	0BDD4B11DB0C24911B3D8227566DB62D
SHA1:	0C2D686530FC9127933FC914A650AB390130712A
SHA-256:	53AB9EC95BA0F41A8DC2D91E87935CAF24156E54688CF5938BD5A1AE01EE7AE2
SHA-512:	4D152C2641A4B43AB0CB84CDB4CF911F4EA163C236BB21FB0FE0D745382C6BCB6886A4D0E3738B0A5C6B1C9F308B50F634315B90D23041D2625C1D75574B8ECD
Malicious:	false
Reputation:	low
Preview:	0\r..m......[...8.WO....https://sandbox.optiturn.com/assets/application-mobile-7ad2940818d75a843437e99a696611a0.css@font-face{font-family:'optiturn-ico-font';src:url("/fonts/optiturn-ico-font.eot");src:url("/fonts/optiturn-ico-font.eot?#iefix") format("embedded-opentype"),url("/fonts/optiturn-ico-font.ttf") format("truetype"),url("/fonts/optiturn-ico-font.woff") format("woff"),url("/fonts/optiturn-ico-font.svg#optiturn-ico-font") format("svg");font-weight:normal;font-style:normal}.alert,.check,.redo,.notice.error:before,.failure:before,.success:before,[class*="icon-"]{font-family:'optiturn-ico-font';speak:none;font-style:normal;font-weight:normal;font-variant:normal;text-transform:none;line-height:1;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.icon-home:before{content:"\e000"}.icon-image:before{content:"\e601"}.icon-connection:before{content:"\e602"}.icon-file:before{content:"\e007"}.icon-profile:before{content:"\e604"}.icon-file2:before{content:"\e605"}.icon-f

/Users/bernard/Library/Application Support/ot-test-app/Cache/63fcd95fbcfe52d8_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	9135
Entropy (8bit):	6.657507006583499
Encrypted:	false
SSDEEP:	192:xPQnSzcE0sbOvM+r4l7iGLzmcUSt6JZbtMKiX:xPQnSzyr4YGLzHKJtRiX
MD5:	69DEA866911DA7064DD402C965C0D104
SHA1:	351315FF1AFD1A6D810CA69222652AD88F690BC3
SHA-256:	4A6E0F28D084E9528B6F364E9B64F3FFFC86373E5565167DF73769E2039794B2
SHA-512:	EDC67EEF251A106F5A5CF41A7DBEAD4634563CB164EB18A0F9E399EEF4C04C1F2C1B965A0810F55394922E1AFD25B79D63949999589673D2A0D13BE358B58053
Malicious:	false
Reputation:	low
Preview:	0\r..m......1....u.I....https://sandbox.optiturn.com/session/new?mobile=1<!DOCTYPE html>.<html>.<head>.<title>Optiturn</title>.<meta content='width=device-width, initial-scale=1, user-scalable=no' name='viewport'>.<meta content='yes' name='apple-touch-fullscreen'>.<meta content='yes' name='apple-mobile-web-app-capable'>.<meta content='black' name='apple-mobile-web-app-status-bar-style'>.<meta content='telephone=no' name='format-detection'>.<link href="/assets/application-mobile-7ad2940818d75a843437e99a696611a0.css" media="screen" rel="stylesheet" type="text/css" />.<link href="/assets/sessions/new-1b275320ca2943fe0ec5714da5973003.css" media="screen" rel="stylesheet" type="text/css" />.<script src="/assets/sessions/new-2e9c6041dec9b53028870dc87a91c0c3.js" type="text/javascript"></script>.<link href='https://fonts.googleapis.com/css?family=Open+Sans:400,700,600' rel='stylesheet' type='text/css'>.<script src='https://js.honeybadger.io/v6.5/honeybadger.min.js'></script>.<script>. //<![CDA

/Users/bernard/Library/Application Support/ot-test-app/Cache/64a158b52d8d7f13_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	47114
Entropy (8bit):	7.989419741842164
Encrypted:	false
SSDEEP:	768:8oIRQr5NXCsUpkVogfiLDUPt7VmGFlxfISxIPTyJYmh/v551Jt4:8NYGfkVoGmQt1FrfISxIPGDhHm
MD5:	3F13A14703AC382949C0A7F730C1DC1E
SHA1:	FD8D71F017756DEA1CCC769916BACB993D2FFA0B
SHA-256:	FA25EDFB247E2CCB56CAEBBEAC446695716DE8D50A2517739EA9E9E826DCFF9B
SHA-512:	819C7095D1867A3E3CC3E246152397E108CCA7529DB34CE25424C31D1A466CB3533BB64A3F2DE0EBCA6C866A1452C8668A7EE836D1B9F7371D8A9A01BBB64CFA
Malicious:	false
Preview:	0\r..m......^.....].....https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2wOF2.......<......................................O..B..h?HVAR.x.`?STAT.$'...0/V..... .o..2.0..6.6.$..`. ..~...[..Q.6.Z......7`&....)@...<.!l...4.......2..Cz..D....(.+.....@.u.E~Fge^...;....].8,Qr.....5.p.....H.S.a74.+..@w<..9K.o]X_.......e....2n..d..."..O,.^....E..u>!.s.6m;.-So..T.z.........c.9.G.p.@.U.......G.sD.h.,lB..1.(;...L..q.;..t.......:...i..\...}@...;.?.....4m.C...1.".".$.....MJ...0.Q.......P...A.z......{.uw..24}:...C i.)...S!.l.'7...>1.)...,........Y../u5......ow^.t+.BQ....m.2..@D...}iw.i.U..@...l..us.4.......sF<B!..R1.$4\q...}....m.I..O.)...q..W.qY.Y....W...=1Y.1i...'. !!.q....G\...I.y8.I..r......./c...Y.eI..O.v..}...:5...{=...lx.f.6gl.=.M...(.."......(FaTl.T.X..j........U...w....c..@........3i.J.mg..V.[@.....i.%..D.....c.;...6D.Z#uB........J....._qS......g.UZ...5..Z_.s%.LK:.......Q.A.0..jn..8j..&y.-...(...F.s.\|.c...

/Users/bernard/Library/Application Support/ot-test-app/Cache/72153b705d2b0ca1_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	21209
Entropy (8bit):	6.086536231688832
Encrypted:	false
SSDEEP:	192:u/BAWzM1MKguy2JbqGIwYRAzqCBuopMPMsguyIJbqGIwY7uzMNBZL+MsMPguyrJU:uZWfq9uolq9RjQq9XBhAQhJtnf
MD5:	140D05B4F9C61911BB5AD87152DF89E8
SHA1:	8B34DDC76C4A0B35A2308156E51A725F94432638
SHA-256:	E36AE3748D05F0243626F68857E09374302AD1F10328F58A68E0FB2C5EB4BC9D
SHA-512:	706D9A0C9F039796C1E5159B1F3EA90530ECDCB736126EE7E1BE7C5152FEF6FAC1C8066252B3083255859BA8D59A67D3209FEADD99AD3D5D8784C1E91FA92698
Malicious:	false
Preview:	0\r..m......=...s.0x....https://fonts.googleapis.com/css?family=Open+Sans:400,700,600/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu0SC55K5gw.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu0SC55K5gw.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu0SC55K5gw.woff2) format('woff2');. u

/Users/bernard/Library/Application Support/ot-test-app/Cache/9e8725181fa08ea9_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	5239
Entropy (8bit):	7.532195096422342
Encrypted:	false
SSDEEP:	96:mxgPlmHDkJDHu1uH7ijm5kJqzNUcUCxizuhwW0HbT1jkwbtQXKiiR:mmEYJiu7iGLzmcUSt6JZbtMKiiR
MD5:	AF529F214C6D2F01FA85ECF3E44C6025
SHA1:	2C940CE3CCF772B9D198592B1493EF0377A76A78
SHA-256:	FEF17816FF57F9D0604B5E32FF94B8635264A5FAE90510EDD6F297B2AA98EF2A
SHA-512:	D89F66A066732A231F18AE78767E28E0F70B381047DBE30CC8BB135E72CC7A05D15901C9C75DF957CCDA4C0C972BE93D230A4014A44E4B8B695C9C8E8D99F41C
Malicious:	false
Preview:	0\r..m......?...%..0....https://sandbox.optiturn.com/images/mobile-optiturn-logo-2x.png.PNG........IHDR...X...p......j.o...wIDATx....JTQ...=3..(....F..E]ZO.M.MQ.]G......>C.f.h:./`...?ei.8.]...k...9k....g....g...9!.(.&.. [..V.8.;..7...>O..s.e..D....;9X..5...o1qM.C..f...i.\..P..\s.P..%.)`(..5..`(t....0....U...nr......Y..........yR..0.....^-.+.q.Zp.\|X.......wC ...U....-..%-..\|.......q}........f...]..e-........oh.s9q..k....s;..=.....<.....p_k.....d.{....KX......W.7...g.R7\.0[......\|....O#._z.?..l.....gF.mp..T,.5..K.%=.....K.~.a..........56lm.&........^3.{...w...K.....wH;....s.:.qM.....de............J..6#.......p........R.2)1.3._.}...8.....y..,cI..........W`.'...7n..p. `..r..=jhS..3.....B.......T.C..4....b..:]H1..E1..d..8....g.GE.#..".k.\|.......W...p.\|.C.....x..=W../+=..x....[.9.-....nK.n..sm.......].aA..\...X.[u\<.....Zp...~.a.g....Y..^.i....]...{J...).L.p.....U..[.Z.."t.7..`...,...B......R....kA.;.,...l.....`9.q..@...h...p.}.Zb.g.

/Users/bernard/Library/Application Support/ot-test-app/Cache/a8afd1f866157e03_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	258702
Entropy (8bit):	5.653796945610866
Encrypted:	false
SSDEEP:	3072:HHVRAZVNSNcMzszFeIiS8ljCBPIrTWRvYElfh6St2nBsLqzycXDeltzvsXHh9E:nTAFMgzFeuDLfh6St+aqzycXDelJsXk
MD5:	02CABF8F83D803B87187DE23ED98506B
SHA1:	1E116E8874E48FBCE72A7C31E5EB5348DF60B824
SHA-256:	C746F4E2AF1E6052C5D0F4D93B283D6CFAC8C6ECC7DD4F7A06EBEA611D290616
SHA-512:	84DB48070F35E584A25CC8E76F974D63A7C42EF14ED2FDE070BD206F32F9F24CB0EC02CF4FE0A17A69142C0A5632CEE875058F32B829E35083644775ED0B4246
Malicious:	false
Preview:	0\r..m......D....4.x....https://www.googletagmanager.com/gtag/js?id=G-1ZXEF3YNKF&cx=c&_slc=1.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","optiturn\\.com"],"tag_id":18},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,

/Users/bernard/Library/Application Support/ot-test-app/Cache/b542690c1b3a7038_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	7081
Entropy (8bit):	6.811719828881318
Encrypted:	false
SSDEEP:	96:dvfAYyfMo3bkWEWrwKU+WAULJ3Jog7ijm5kJqzNUcUCxizuhwW0HbT1jkwbtQXKt:9yUWkvxt+bmB7iGLzmcUSt6JZbtMKiEx
MD5:	E8F0EFE666E2249EBC8443EA6F25158C
SHA1:	3683326487901954CDB60C2FED7F5C8D1280E4BB
SHA-256:	AA6F73399D36AF77277824CCBC420BD3F92A109FD68DB09B5258ADDE5D9B3F44
SHA-512:	EDEAE1CFCEB31265805E80FCB22718BA70B46CE058022C5CF16D8B918D480AF6A2AA55B6C58B5E045C23FB210A599053FB8306D66E012AECC5DD956A9EDC220A
Malicious:	false
Preview:	0\r..m......=...qZ.q....https://sandbox.optiturn.com/assets/optoro-kite-logo-gray.svg<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 526 239" style="enable-background:new 0 0 526 239;" xml:space="preserve">.<style type="text/css">...st0{fill:#999999;}...st1{fill:none;}.</style>.<title>optoro-logo-ko</title>.<g>..<path class="st0" d="M323,161c-0.6,0-1-0.4-1-1v-38.7c0-7.1,2.2-12.6,6.5-16.5S339,99,346.8,99c4.1-0.2,8.2,0.5,12,2...c2.8,1.2,4.2,3.1,4.2,5.7c0,1.2-0.4,2.5-1,3.5c-0.5,0.8-1.3,1.3-2.2,1.3c-0.3,0-0.6-0.1-0.9-0.2c-0.9-0.3-1.8-0.6-2.8-0.9...c-2.3-0.6-4.7-0.9-7.1-0.9c-9.9,0-14.9,5.3-14.9,15.7V160c0,0.6-0.4,1-1,1h-10H323z M234.2,160.4c1.9-0.4,3.7-0.9,5.5-1.6...c1.4-0.5,2.8-1.2,4.1-2c1.1-0.7,1.5-2.2,0.8-3.3l-2.2-3.7c-0.4-0.7-1.1-1.2-1.9-1.3h-0.3c-0.3,0-0.7,0.1-1,

/Users/bernard/Library/Application Support/ot-test-app/Cache/eea7151f88f29c03_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	4820
Entropy (8bit):	7.256907415517946
Encrypted:	false
SSDEEP:	96:vO6AgRTE87ijm5kJqzNUcUCxizuhwW0HbT1jkwbtQXKip:W+hE87iGLzmcUSt6JZbtMKip
MD5:	0C169C2CC287CFA68DED4574768BC0F7
SHA1:	6855F65E32C6E0CFF3D91DBC368A57AD0327495C
SHA-256:	E21B582462DE171C58EE408931156B252611A959386183A04D0994887078EEDD
SHA-512:	5E2FD6D4A738F7A443221DBF86883357963854E70A85B9E962D56F9A06900807D792CE835B9D3FB485138B4D42ABAF6DE948EFB388ECDB6AD629052D67E7AF9F
Malicious:	false
Preview:	0\r..m......U...>.......https://sandbox.optiturn.com/assets/sessions/new-1b275320ca2943fe0ec5714da5973003.css.reveal-if-active{opacity:0;max-height:0;overflow:hidden;font-size:16px;transform:scale(0.8);transition:0.8s}.reveal-if-active.show{opacity:1;max-height:100px;transform:scale(1);overflow:visible}.logon-terms{position:absolute;bottom:0;padding-bottom:15px}.password-area{opacity:0;visibility:hidden;margin-left:100%}.password-area.show{margin-left:0%;visibility:visible;opacity:1;animation:display_password 1s cubic-bezier(0.83, 0.67)}@keyframes display_password{from{margin-left:12%}to{margin-left:0%}}.......E.}.0bZu/...5bZu/.>...HTTP/1.1 200 OK.Last-Modified: Mon, 22 Apr 2024 15:47:24 GMT.Content-Type: text/css.Date: Tue, 23 Apr 2024 14:09:21 GMT.Cache-Control: private.X-Rack-Cache: miss.Vary: Origin.Content-Length: 503.Via: 1.1 google.Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'se

/Users/bernard/Library/Application Support/ot-test-app/Cache/fb27a8b3cedb4d00_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	102281
Entropy (8bit):	5.472364777509251
Encrypted:	false
SSDEEP:	1536:RcEeXPF2CiCQvZy6pH+/1foZxdnuYpDUv5hFw/bjsdGhHMsCc3cBHQB3bOjMviu1:RQynaWTnMsCHILOQvqhk37
MD5:	125A60AC437BDA60FCBF66D57EE9FF8F
SHA1:	E144F390B3AE929C1E0E3251673C527C3FF79F9E
SHA-256:	DB33E2B3BDE72E29B4C0D8B514CF42DD60EBE78D332F4144042596B44473FDDE
SHA-512:	01D269C326AF98A928F8FE64EEC1785578A518ACCFE327A43C28B12BB769542A26F5E9B7BBB2F5A7DD1C02416A5A825D2CCC9A11E9E03065A3852B1216A8CEBB
Malicious:	false
Preview:	0\r..m......>...$......https://sandbox.optiturn.com/assets/jquery-1.12.2.min-fixed.js!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){function n(e){var t=!!e&&"length"in e&&e.length,n=pe.type(e);return"function"===n\|\|pe.isWindow(e)?!1:"array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e}function r(e,t,n){if(pe.isFunction(t))return pe.grep(e,function(e,r){return!!t.call(e,r,e)!==n});if(t.nodeType)return pe.grep(e,function(e){return e===t!==n});if("string"==typeof t){if(Ce.test(t))return pe.filter(t,e,n);t=pe.filter(t,e)}return pe.grep(e,function(e){return pe.inArray(e,t)>-1!==n})}function i(e,t){do e=e[t];while(e&&1!==e.nodeType);return e}function o(e){var t={};return pe.each(e.match(De)\|\|[],function(e,n){t[n]=!0}),t}function a(){re.addEventListener?(re.removeEventListener

/Users/bernard/Library/Application Support/ot-test-app/Cache/fbcc112b005136fb_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	275073
Entropy (8bit):	5.371708413223329
Encrypted:	false
SSDEEP:	3072:iDqlBvFs/auzCHHzU8o6jHF9UNxZN/ahnLnk0VDxHF9e:IKFlu0o6jsxZNqnjkYD9e
MD5:	9B9292F19CD9730B5916E090742393C8
SHA1:	374B25E505CBDC9A0D9800DE4794006C0785A68F
SHA-256:	FB8F6F74794F53D319D02E8671AB802D2F710DEEE3348FCF9F11A0FA3A35CE02
SHA-512:	CE28E34ACC49AFBD453A6DA08EAC18156D045E0547FE839098E3E8536E86EC0E37C119E054E37F6D168F5E5804D1DE3C44D80180C5790A3CDDA8E6E2D0FD8B44
Malicious:	false
Preview:	0\r..m......Z...`D......https://sandbox.optiturn.com/assets/application-mobile-c8b0069e758f0bcce97f62ce5be9b20c.js(function(){function e(t,n,r){if(t===n)return 0!==t\|\|1/t==1/n;if(null==t\|\|null==n)return t===n;if(t._chain&&(t=t._wrapped),n._chain&&(n=n._wrapped),t.isEqual&&w.isFunction(t.isEqual))return t.isEqual(n);if(n.isEqual&&w.isFunction(n.isEqual))return n.isEqual(t);var i=c.call(t);if(i!=c.call(n))return!1;switch(i){case"[object String]":return t==String(n);case"[object Number]":return t!=+t?n!=+n:0==t?1/t==1/n:t==+n;case"[object Date]":case"[object Boolean]":return+t==+n;case"[object RegExp]":return t.source==n.source&&t.global==n.global&&t.multiline==n.multiline&&t.ignoreCase==n.ignoreCase}if("object"!=typeof t\|\|"object"!=typeof n)return!1;for(var o=r.length;o--;)if(r[o]==t)return!0;r.push(t);var o=0,a=!0;if("[object Array]"==i){if(o=t.length,a=o==n.length)for(;o--&&(a=o in t==o in n&&e(t[o],n[o],r)););}else{if("constructor"in t!="constructor"in n\|\|t.constructor!=n.constructor)

/Users/bernard/Library/Application Support/ot-test-app/Cache/index

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

/Users/bernard/Library/Application Support/ot-test-app/Cache/index-dir/temp-index

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	456
Entropy (8bit):	4.937827696398026
Encrypted:	false
SSDEEP:	6:CjgFzFEQ/TtI8/f34vYoYsf4RH/sMEWnNiVYNNxhqcy437GWIan/A/dF:jFJJIefyYoYN/REW0qN7qDdk/A/j
MD5:	9D1D6D45548BDE19BAE3E215CCA16469
SHA1:	130AB88AB8E51045394C8E14463E003D88D81F3F
SHA-256:	A28260B2DBF211C5CE53D3FBE383EE108659B24D8D0B52712BF846EC3F8F1198
SHA-512:	2C053AD15D91F73622E7D51D51F8371D13F9F7587B89F0EED0BD087C4D9E9EA2A2F6A3A0502656080B9C129CE5FA405B8D2DBEDC1A956324FF90E2B54C50C1CE
Malicious:	false
Preview:	(...<q..oy retne.........................f.bZu/.......#?oy retne.........................~.f.....ibZu/............-.X.d.(KbZu/.........8p:..iB..(KbZu/..........t.};..-.(KbZu/..6.......6Q.+...@.;bZu/..4.......*3.6~W/.a.bZu/...........+]p;.r..,bZu/..T.......M...'.@.;bZu/.........0.ZK!.G..,bZu/.........\.(.(.....,bZu/.........n...[.@).(KbZu/..................,bZu/.............}Wb@.;bZu/..............%...(KbZu/..........R.._..c.a.bZu/..%......-._bZu/.

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/402c5ed80cf90429_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	204
Entropy (8bit):	5.599479460841026
Encrypted:	false
SSDEEP:	3:m+l21tddA8RzYGmAj5Xgck5tLLuFvD3qILGGpbQpVZC6vbgpgVueg/z4m1TK5ktS:mTY96taf/0iGp07NvbgpgV2/1TK6t
MD5:	4E6FD7F35EEBAA484E0D862CB6677B4B
SHA1:	E01F09C070D83C80C7ADD20C614D74BB1273DD8A
SHA-256:	F505BC3B6FF48BFFC533D384E4867845CFD3BC1FC29642FCBFB455D82DEAC3E3
SHA-512:	9658C102A094D30AFC6152064207CB7A12E6F561BE6B1B2B53F4D73C5B42ECE1A6D89F14D8632D1B0EC7DAAA1293371D51C9B83599C11A8456B1FCEB17D8630C
Malicious:	false
Preview:	0\r..m......L...Z..p...._keyhttps://js.honeybadger.io/v6.5/honeybadger.min.js .https://optiturn.com/.x7bZu/........u..MD...A.........=yJ>...o...K}1.....C...A..Eo...................A..Eo......W...........

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/55278cefcf389f81_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	239
Entropy (8bit):	5.673878019398389
Encrypted:	false
SSDEEP:	6:mPY8hGEhr6KofLNtiGHacfS74vw41TK6tI:66Kq/1acfS74
MD5:	899C5B856771DE746044C705E81FFF05
SHA1:	5446330B68AED417C4BE328E45BA67E395F8F1FF
SHA-256:	C2D7B2F7FB54CE5E7345C380FE39FD6E79DED7D310E80AFD1E86AC07DBF07D83
SHA-512:	F972EF429FDAC028B10B84A8E5316C183A968E29AF4E0B67DD52D6376B1558EB5F14C942CEC7B755C976B4ED4BF97750A96AC887EB7E0C1BF0BC23E0E541A993
Malicious:	false
Preview:	0\r..m......o....C.W...._keyhttps://sandbox.optiturn.com/assets/sessions/new-2e9c6041dec9b53028870dc87a91c0c3.js .https://optiturn.com/?.5bZu/........u..LD...A.z..!........5....5F21..f}....A..Eo...................A..Eo......m-..........

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/a0a94bbe1c33ff23_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	245
Entropy (8bit):	5.6878807769121655
Encrypted:	false
SSDEEP:	6:moRPY8hGEh3dokZg8rVtiGMvcOM8yJvQ1TK6tN:tR9xW8rLWcJh8
MD5:	50BC03A570888F8D838BE81A18561C9E
SHA1:	3983DCE6EC1B63AAB2E2BE436C1773300C8AF756
SHA-256:	D250BBD634198980DE97FF5582CD3322087B48D3F0B544FAE44659B43CF603A9
SHA-512:	3B87448C914A3720B01BE8791D729B055531BFEE139078866F2D47FE315C81824C87CC1A7661B7BC04116DF3DAEA33783409BD431CA9522E3C033CF8F5C9014D
Malicious:	false
Preview:	0\r..m......u....y.v...._keyhttps://sandbox.optiturn.com/assets/application-mobile-c8b0069e758f0bcce97f62ce5be9b20c.js .https://optiturn.com/i.5bZu/........uj.VD...A......{&...0.LsDS4..e..&.....A..Eo...................A..Eo......E.lG........

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/d90671bec5e9eb37_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.642065398729599
Encrypted:	false
SSDEEP:	3:m+lozYC8RzYrSLLiMIwJJS3qILGGzEHnbQ9411NTRC1HuXS6ihMm1TK5ktkh:mEPYGL+MIwJJiiGQU2dwNv1TK6tkh
MD5:	C5ACA62D3327C7487525A0CEC49729E0
SHA1:	F51C3028149E6B9370BEE7D8E8ED6FCF5E3EF280
SHA-256:	70E17B7B3673246E27B14E78E4F2B3E0C35CECB56D679334268A423FFB381D45
SHA-512:	6F2F1ECDD0EBBFCDB430C2932AA159A554B7F5BCD7FE2402E09FFB8263BA6A18EBAA87B24AA71A7CFA858B30753300492B7F07F82021163DC1D927936BFB3760
Malicious:	false
Preview:	0\r..m......H..........._keyhttps://www.google-analytics.com/analytics.js .https://optiturn.com/.LObZu/........u)Y.D...A1...Q.tAJU.p...~T......h.1.W....A..Eo...................A..Eo......D..&........

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/da20b6cbeff987ad_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	223
Entropy (8bit):	5.690743109316957
Encrypted:	false
SSDEEP:	6:mYLFYGLSmXZCe76OOVTiGSRcUtwqjL8h1TK6tw9/:FLFL7MVT6cUt7L8R+
MD5:	E6D2736249902C27E14CDE85896D36CF
SHA1:	F290505BC26949E4D80B7B111331A818C9B327A4
SHA-256:	03AC0C31CA6D849B8DBD8B265E6ED8902FA7997D4129A80C3B0EA8FB585CD082
SHA-512:	EC4F60200B01898F99D917625C7E0815B358CCEA03177855BC29535BB4E635956E38E376C2891DBC6777F1591B9D25A59CF7806013725BA63F7152B548E99283
Malicious:	false
Preview:	0\r..m......_....Q=....._keyhttps://www.googletagmanager.com/gtag/js?id=G-1ZXEF3YNKF&cx=c&_slc=1 .https://optiturn.com/.}mbZu/........u.nGE...A.1.;}Iko(.!.EY.e.>m.......I.F.v..A..Eo...................A..Eo......uJ.c........

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/f6a4b760a9c11ff3_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.655145895463441
Encrypted:	false
SSDEEP:	3:m+lzkjtla8RzYxYdLKIRQbLGGEhCWx6k3qILGG/MTQomrKykXdXwSv5QqUm1TK5C:maEVY8hGEhCnAiG0coICgC+U1TK6tn/
MD5:	905666A92589D3875EDD678494AFA352
SHA1:	77A0DC62F92087816A4A0919CEA41DAD2BBAFAAF
SHA-256:	0E60524D336F88618CFBB99615AE43684F3E32DF376E1E273888964C67A330A5
SHA-512:	5E520683EBB1C4C296CDF17EC7F4CA7E790575752CC0C15F26931E9B172C6A3DD1F8FC59300420B693070394310CE2A0F14927E4E355FB6E48215503B3FBD8EB
Malicious:	false
Preview:	0\r..m......Y...r.:....._keyhttps://sandbox.optiturn.com/assets/jquery-1.12.2.min-fixed.js .https://optiturn.com/..5bZu/........u..RD...A.H...@A.8..2J.D..?...^).2..).....A..Eo...................A..Eo..................

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/index

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.1431558784658327
Encrypted:	false
SSDEEP:	3:m+l:m
MD5:	54CB446F628B2EA4A5BCE5769910512E
SHA1:	C27CA848427FE87F5CF4D0E0E3CD57151B0D820D
SHA-256:	FBCFE23A2ECB82B7100C50811691DDE0A33AA3DA8D176BE9882A9DB485DC0F2D
SHA-512:	8F6ED2E91AED9BD415789B1DBE591E7EAB29F3F1B48FDFA5E864D7BF4AE554ACC5D82B4097A770DABC228523253623E4296C5023CF48252E1B94382C43123CB0
Malicious:	false
Preview:	0\r..m..................

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/index-dir/temp-index

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	240
Entropy (8bit):	4.386742135604926
Encrypted:	false
SSDEEP:	3:afaEMdbd/DFQR0e1glFl01xk/BvCQDefvxAC/QMNMf3/eueJqnPfQKln:af1cbd/ZieqC/Bahv+CHG3/euHng+n
MD5:	9FCFBDBA0C6DC4BF23BDF8D133363307
SHA1:	FA74BCFA5AB94B6C5BC2DF3ADA789C99066F97AA
SHA-256:	2A7039A5A43920EF7679873477DF88EBFC514674EA674BCC56301BA2B5D41B07
SHA-512:	D0910FCE3A067E23F5E4136755C91FDF1208A6A6CEFDCB4341FD3AF56D77A9ACCA9489FB3FE900D5005A2DE714695447AFC85E1C90F36EB9AAA34B457AF912C4
Malicious:	false
Preview:	(....!..oy retne.........................x.bZu/.......g>oy retne............................. .@.xbZu/...........8..'U@.;bZu/.............`...@.;bZu/.........7...q..(KbZu/.........#.3..K..@.;bZu/.........)....^,@@.;bZu/..........zbZu/.

/Users/bernard/Library/Application Support/ot-test-app/Cookies

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	SQLite 3.x database, last written using SQLite version 3027001, file counter 1, database pages 3, cookie 0x1, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	36864
Entropy (8bit):	0.7427147424264905
Encrypted:	false
SSDEEP:	48:TZWfSU1+PqAw5OpE+xJZF7Uaww5OpE+xJZF7UlJJ4YDO72rS:9WfUQNcnNcMJmS2
MD5:	AEA890F7029CB449F58D22006D8CA275
SHA1:	FEA547525BEFBFEDC5F539F53E0BAECC849E8064
SHA-256:	FA83DB868B2BB69A05744C011B88D88A0593380ECB7CD0C6DB396499410341C6
SHA-512:	8548A58F11F84E993F03ACA78BE2FB57A5B94F8A9DC518C60546A054261E754B3663EA4EBAA468324BD09CEE4F737AB2977E12F28C80021AF879CA1F1E439B6A
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................09......g..g..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Users/bernard/Library/Application Support/ot-test-app/Cookies-journal

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	17988
Entropy (8bit):	0.624722367253704
Encrypted:	false
SSDEEP:	24:O+t/OqLiuWfKI6UwZoqLUwnZXaFpEA3xbNmCF06Uw2t8:OM2qZWfSUWoqAw5OpE+xJZF7Upt8
MD5:	79AFEA6B0F5E471847DD365031944ED2
SHA1:	5A833EE7E3A90DE61E1CD527864130510AAB1683
SHA-256:	F5EDE7C9FDC84375015BBA473C89CD1BB6BC8398695C58E0A40E2C8D13AB0A6D
SHA-512:	371AA503B0618E9A162C60753270E2E479078F1A7C7B436B3BA0A7A3198BB6ACEBBCAC97B0F1AA3605D6B74D16A27C9FEFB8FDF827339948FC4BABC2D6DB85D0
Malicious:	false
Preview:	............d."..................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... .c...................<.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Users/bernard/Library/Application Support/ot-test-app/GPUCache/data_0

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	FoxPro FPT, blocks size 512, next free block index 3284796609, field type 0
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.01057775872642915
Encrypted:	false
SSDEEP:	3:MsFl:/F
MD5:	CF89D16BB9107C631DAABF0C0EE58EFB
SHA1:	3AE5D3A7CF1F94A56E42F9A58D90A0B9616AE74B
SHA-256:	D6A5FE39CD672781B256E0E3102F7022635F1D4BB7CFCC90A80FFFE4D0F3877E
SHA-512:	8CB5B059C8105EB91E74A7D5952437AAA1ADA89763C5843E7B0F1B93D9EBE15ED40F287C652229291FAC02D712CF7FF5ECECEF276BA0D7DDC35558A3EC3F77B0
Malicious:	false
Preview:	............$...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Users/bernard/Library/Application Support/ot-test-app/GPUCache/data_1

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	8488
Entropy (8bit):	0.021636603977504016
Encrypted:	false
SSDEEP:	3:MsEllllkXl6E:/M/66
MD5:	16C8E059885DEB6902766CB6CD8EDAAE
SHA1:	EEC7CA81A9B975BD6A396A75A8363437C55BE779
SHA-256:	AC13860C69F1AC63FEAB5E926599A8E99D5552300EC097EB755D11768F427A03
SHA-512:	33DA3D4FDF70CCFB24478A23D3606B7A7C918A46869995EA52FD7487D458426A858B40EA1C6DCB3BD5388C93DED89B335B43B858BCF73DB42E126C495702A774
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Users/bernard/Library/Application Support/ot-test-app/GPUCache/data_2

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.011852361981932763
Encrypted:	false
SSDEEP:	3:MsHlDll:/H
MD5:	0962291D6D367570BEE5454721C17E11
SHA1:	59D10A893EF321A706A9255176761366115BEDCB
SHA-256:	EC1702806F4CC7C42A82FC2B38E89835FDE7C64BB32060E0823C9077CA92EFB7
SHA-512:	F555E961B69E09628EAF9C61F465871E6984CD4D31014F954BB747351DAD9CEA6D17C1DB4BCA2C1EB7F187CB5F3C0518748C339C8B43BBD1DBD94AEAA16F58ED
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Users/bernard/Library/Application Support/ot-test-app/GPUCache/data_3

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.012340643231932763
Encrypted:	false
SSDEEP:	3:MsGl3ll:/y
MD5:	41876349CB12D6DB992F1309F22DF3F0
SHA1:	5CF26B3420FC0302CD0A71E8D029739B8765BE27
SHA-256:	E09F42C398D688DCE168570291F1F92D079987DEDA3099A34ADB9E8C0522B30C
SHA-512:	E9A4FC1F7CB6AE2901F8E02354A92C4AAA7A53C640DCF692DB42A27A5ACC2A3BFB25A0DE0EB08AB53983132016E7D43132EA4292E439BB636AAFD53FB6EF907E
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

/Users/bernard/Library/Application Support/ot-test-app/GPUCache/index

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	data
Category:	dropped
Size (bytes):	368
Entropy (8bit):	0.3457230943472962
Encrypted:	false
SSDEEP:	3:LsFl0lJK3:LsFK03
MD5:	AB62B3EA277FD9252832BB4004CC773C
SHA1:	5951CF8720B0EF5ED78F17C9C5701A489FA11554
SHA-256:	976D22932B19DFA0DEC5ABF404F783EA3C6B1B26111F96E2BF9EE19136E735B4
SHA-512:	37212B6DF0ACACDAB4AFAF21BD228A278337A924A3C5C8ACE7790B495897078C1343FA4EB45C724333F9C72F9F5B312E76CD98DAAFA125A153CAF8D9B9CE6F86
Malicious:	false
Preview:	........................................}..bZu/.................................................................................................................................................................................................................................................................................................................................

/Users/bernard/Library/Application Support/ot-test-app/LOG

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	ASCII text
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.289760053836067
Encrypted:	false
SSDEEP:	3:tR+Nfj18bsA7WFv:sfKbs0g
MD5:	A95274A6B01E2BACDC47ED22916C8AD6
SHA1:	E83B86BEE76995775E92BB477C3F6662611E25FD
SHA-256:	12703611FE60F4A08A140208AC35472023865F78B059B984EB31814266E522A9
SHA-512:	99A9BE1D643EAF9F97F7FDF9AB41AE8C1EE66D98BCF2FD28241D9C7E7C98C659B5D640007FCCC1A916B8CAD4F7545204B2020A31328BB67A75BA863C7671B0C4
Malicious:	false
Preview:	2024/04/23-16:09:17.813 9803 Delete type=3 #1.

/Users/bernard/Library/Application Support/ot-test-app/MANIFEST-000001

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

/Users/bernard/Library/Application Support/ot-test-app/MANIFEST-000002

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	MPEG-4 LOAS
Category:	dropped
Size (bytes):	50
Entropy (8bit):	4.948758439731456
Encrypted:	false
SSDEEP:	3:Ukk/vxQRDKIVqU0blS:oO7iblS
MD5:	22BF0E81636B1B45051B138F48B3D148
SHA1:	56755D203579AB356E5620CE7E85519AD69D614A
SHA-256:	E292F241DAAFC3DF90F3E2D339C61C6E2787A0D0739AAC764E1EA9BB8544EE97
SHA-512:	A4CF1F5C74E0DF85DDA8750BE9070E24E19B8BE15C6F22F0C234EF8423EF9CA3DB22BA9EF777D64C33E8FD49FADA6FCCA26C1A14BA18E8472370533A1C65D8D0
Malicious:	false
Preview:	V........leveldb.BytewiseComparator...............

/dev/null

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	ASCII text
Category:	dropped
Size (bytes):	66
Entropy (8bit):	4.727820589213287
Encrypted:	false
SSDEEP:	3:tRJTf4Q02KRIhhUbQfRlKVJ1WOv:hS2EKRlKVmA
MD5:	52DA13081F282F1DA83FCE71D6899BAC
SHA1:	15FD2AE9EA01B934FA85C01DB540164883446139
SHA-256:	D1B7A6F55380B53AF3C70B371AA8A269D2E75628758ADBA36E50991C026D97F7
SHA-512:	EF67ED16E89E47E64F093184447A89D710E70F039E37D8270CCFFE4338543FC8E866D2864E9EC54C96687FE5B05CF106A68A6F345245693098BA81041719A5BF
Malicious:	false
Preview:	2024-04-23 16:09:16.477 ot-test-app[625:4971] ApplePersistence=NO.

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/C/mds/mdsDirectory.db_

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	48908
Entropy (8bit):	3.533814637805397
Encrypted:	false
SSDEEP:	384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGB5pBfbouR6/chQOnGqwc2U+v+h/:8MdGleOhpBouRwchQOnGqwc2U+v+h/
MD5:	0E4A0D1CEB2AF6F0F8D0167CE77BE2D3
SHA1:	414BA4C1DC5FC8BF53D550E296FD6F5AD669918C
SHA-256:	CCA093BCFC65E25DD77C849866E110DF72526DFFBE29D76E11E29C7D888A4030
SHA-512:	1DC5282D27C49A4B6F921BA5DFC88B8C1D32289DF00DD866F9AC6669A5A8D99AFEDA614BFFC7CF61A44375AE73E09CD52606B443B63636977C9CD2EF4FA68A20
Malicious:	false
Preview:	kych...........................`...X...p..S0..SX..Th..T...T...[...^h...........L...X...............T...........d...................t...............t...........<...............P...........0...........$...p...........l...........X.......@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...D.......................!...%@.......MDS_CDSADIR_CSSM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_KRMM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_EMM_RECORDTYPE.....L.......................!...%@......"MDS_CDSADIR_EMM_PRIMARY_RECORDTYPE.....H.......................!...%@.......MDS_CDSADIR_COMMON_RECORDTYPE......L.......................!...%@......"MDS_CDSADIR_CSP_PRIMARY_RECORDTYPE.....P.......................!...%@......%MDS_CDSADIR_CSP_CAPABILITY_R

/private/var/folders/t9/r5v5jljx0rb04g1yc95c7hw40000gp/C/mds/mdsObject.db_

Download File

Process:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	4404
Entropy (8bit):	3.5110922853353324
Encrypted:	false
SSDEEP:	24:mFkXs98w/mBr53CEb9ujBbCYoVeA7uBEUMy733Ka2VCneWHrUZRJkWnJI4FNMOQS:m6Xsh+CLjL3Pe3T5FFEfEn8xiYuuSsS
MD5:	D3A1859E6EC593505CC882E6DEF48FC8
SHA1:	F8E6728E3E9DE477A75706FAA95CEAD9CE13CB32
SHA-256:	3EBAFA97782204A4A1D75CFEC22E15FCDEAB45B65BAB3B3E65508707E034A16C
SHA-512:	EA2A749B105759EA33408186B417359DEFFB4A3A5ED0533CB26B459C16BB3524D67EDE5C9CF0D5098921C0C0A9313FB9C2672F1E5BA48810EDA548FA3209E818
Malicious:	false
Preview:	kych.......................................d...................0...............0...p...........@...@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...@.......................!...%@.......MDS_OBJECT_RECORDTYPE..............h........... ...`........... ...@.......................-...1...5...9...=@..............................X...............P................... ...p...........l...........d...........P...........H...........,...............h...........P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................RelationName.......P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................AttributeID........X....

Static File Info

General

File type:	Zip archive data, at least v1.0 to extract, compression method=store
Entropy (8bit):	7.997419469638833
TrID:	Mac OS X Application Bundle (12004/1) 59.99% ZIP compressed archive (8000/1) 39.98% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.03%
File name:	ot-test-app-darwin-x64-1.0.1.zip
File size:	59'837'138 bytes
MD5:	a620217c7f0feae15053a8978d56b203
SHA1:	1ed14d9429ffd779a4c7af86677d0784e99b68db
SHA256:	bdee2a21d9ab1d86cd1e3d1e10ddfc8a19e03d241c4ce5911d976283307d5532
SHA512:	abc85042157f7183e84b7368d4c3115fc998c5d7022cdb41cc43fcefa8d4700818580a72a108852cb686b5959b65b2d636bf23b00cc5919a5eafdd7d15618255
SSDEEP:	1572864:GS+t+THw4BOkLtv0r4kw9MGTjWaovhNM8ph1lcH4Hh:GSHTPkkZK4kw9MGTKaovhNM+6i
TLSH:	92D73331A3FD232AD52D52BFF044219140E5D68BF543B15A2B84436B8FF7AA2E27075E
File Content Preview:	PK........\|{.P................ot-test-app.app/UT...<..^@..^ux.............PK........}{.P................ot-test-app.app/Contents/UT...>..^@..^ux.............PK.........{.P................ot-test-app.app/Contents/MacOS/UT...@..^@..^ux.............PK.......

Archive ZIP

Archived Files

File Path	File Attributes	File Size
ot-test-app.app	D	bytes
ot-test-app.app/Contents	D	bytes
ot-test-app.app/Contents/Frameworks	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Electron Framework		35 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Libraries		26 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Resources		26 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Electron Framework		108'506'472 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Libraries/libffmpeg.dylib		2'899'924 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/Info.plist		887 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/MainMenu.nib		2'108 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/am.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/am.lproj/locale.pak		108'326 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ar.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ar.lproj/locale.pak		108'767 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/bg.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/bg.lproj/locale.pak		118'585 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/bn.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/bn.lproj/locale.pak		155'532 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ca.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ca.lproj/locale.pak		76'439 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/chrome_100_percent.pak		145'409 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/chrome_200_percent.pak		242'676 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/crashpad_handler		764'256 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/cs.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/cs.lproj/locale.pak		78'573 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/da.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/da.lproj/locale.pak		70'605 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/de.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/de.lproj/locale.pak		76'129 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/el.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/el.lproj/locale.pak		132'166 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/en.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/en.lproj/locale.pak		64'062 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/en_GB.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/en_GB.lproj/locale.pak		63'336 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/es.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/es.lproj/locale.pak		76'703 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/es_419.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/es_419.lproj/locale.pak		74'506 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/et.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/et.lproj/locale.pak		68'152 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/fa.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/fa.lproj/locale.pak		105'972 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/fi.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/fi.lproj/locale.pak		70'074 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/fil.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/fil.lproj/locale.pak		77'459 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/fr.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/fr.lproj/locale.pak		82'388 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/gu.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/gu.lproj/locale.pak		147'443 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/he.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/he.lproj/locale.pak		91'631 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/hi.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/hi.lproj/locale.pak		150'377 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/hr.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/hr.lproj/locale.pak		74'371 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/hu.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/hu.lproj/locale.pak		78'100 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/icudtl.dat		10'326'688 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/id.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/id.lproj/locale.pak		68'022 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/it.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/it.lproj/locale.pak		74'241 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ja.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ja.lproj/locale.pak		90'196 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/kn.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/kn.lproj/locale.pak		169'644 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ko.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ko.lproj/locale.pak		75'546 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/lt.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/lt.lproj/locale.pak		80'705 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/lv.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/lv.lproj/locale.pak		79'632 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ml.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ml.lproj/locale.pak		180'673 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/mr.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/mr.lproj/locale.pak		151'366 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ms.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ms.lproj/locale.pak		69'131 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/natives_blob.bin		83'328 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/nb.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/nb.lproj/locale.pak		68'960 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/nl.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/nl.lproj/locale.pak		72'435 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/pl.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/pl.lproj/locale.pak		77'818 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/pt_BR.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/pt_BR.lproj/locale.pak		74'381 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/pt_PT.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/pt_PT.lproj/locale.pak		74'388 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/resources.pak		8'455'286 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ro.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ro.lproj/locale.pak		76'872 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ru.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ru.lproj/locale.pak		119'867 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sk.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sk.lproj/locale.pak		79'391 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sl.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sl.lproj/locale.pak		75'468 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sr.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sr.lproj/locale.pak		114'198 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sv.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sv.lproj/locale.pak		68'723 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sw.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/sw.lproj/locale.pak		70'119 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ta.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/ta.lproj/locale.pak		173'955 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/te.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/te.lproj/locale.pak		162'579 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/th.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/th.lproj/locale.pak		139'578 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/tr.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/tr.lproj/locale.pak		72'741 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/uk.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/uk.lproj/locale.pak		121'858 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/v8_context_snapshot.bin		688'952 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/vi.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/vi.lproj/locale.pak		84'310 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/zh_CN.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/zh_CN.lproj/locale.pak		63'384 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/zh_TW.lproj	D	bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/A/Resources/zh_TW.lproj/locale.pak		63'528 bytes
ot-test-app.app/Contents/Frameworks/Electron Framework.framework/Versions/Current		1 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework	D	bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Headers		24 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Mantle		23 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Modules		24 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Resources		26 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions	D	bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A	D	bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers	D	bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/MTLJSONAdapter.h		7'164 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/MTLManagedObjectAdapter.h		9'394 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/MTLModel+NSCoding.h		5'521 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/MTLModel.h		5'561 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/MTLValueTransformer.h		991 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/Mantle.h		832 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/NSArray+MTLManipulationAdditions.h		873 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/NSDictionary+MTLManipulationAdditions.h		807 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/NSObject+MTLComparisonAdditions.h		406 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/NSValueTransformer+MTLInversionAdditions.h		553 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Headers/NSValueTransformer+MTLPredefinedTransformerAdditions.h		4'027 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Mantle		154'436 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Modules	D	bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Modules/module.modulemap		93 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Resources	D	bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/A/Resources/Info.plist		1'223 bytes
ot-test-app.app/Contents/Frameworks/Mantle.framework/Versions/Current		1 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework	D	bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Headers		24 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Modules		24 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/ReactiveCocoa		30 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Resources		26 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions	D	bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A	D	bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers	D	bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/EXTKeyPathCoding.h		2'388 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/EXTScope.h		4'192 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSArray+RACSequenceAdditions.h		486 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSControl+RACCommandSupport.h		560 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSControl+RACTextSignalSupport.h		568 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSData+RACSupport.h		536 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSDictionary+RACSequenceAdditions.h		1'046 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSEnumerator+RACSequenceAdditions.h		479 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSFileHandle+RACSupport.h		384 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSIndexSet+RACSequenceAdditions.h		523 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSNotificationCenter+RACSupport.h		419 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSObject+RACAppKitBindings.h		1'726 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSObject+RACDeallocating.h		1'022 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSObject+RACLifting.h		2'648 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSObject+RACPropertySubscribing.h		5'040 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSObject+RACSelectorSignal.h		3'596 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSOrderedSet+RACSequenceAdditions.h		496 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSSet+RACSequenceAdditions.h		482 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSString+RACSequenceAdditions.h		547 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSString+RACSupport.h		608 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSText+RACSignalSupport.h		400 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSURLConnection+RACSupport.h		730 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/NSUserDefaults+RACSupport.h		817 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACBacktrace.h		2'865 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACBehaviorSubject.h		517 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACChannel.h		2'728 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACCommand.h		5'202 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACCompoundDisposable.h		1'695 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACDisposable.h		941 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACEvent.h		1'609 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACGroupedSignal.h		427 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACKVOChannel.h		4'244 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACMulticastConnection.h		1'767 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACQueueScheduler+Subclass.h		1'081 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACQueueScheduler.h		521 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACReplaySubject.h		656 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACScheduler+Subclass.h		939 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACScheduler.h		6'797 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACScopedDisposable.h		486 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACSequence.h		6'339 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACSerialDisposable.h		1'651 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACSignal+Operations.h		32'673 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACSignal.h		9'669 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACStream.h		13'511 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACSubject.h		548 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACSubscriber.h		1'668 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACSubscriptingAssignmentTrampoline.h		2'041 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACTargetQueueScheduler.h		706 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACTestScheduler.h		1'300 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACTuple.h		5'579 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/RACUnit.h		390 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/ReactiveCocoa.h		3'932 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Headers/metamacros.h		30'543 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Modules	D	bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Modules/module.modulemap		107 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/ReactiveCocoa		868'188 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Resources	D	bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/A/Resources/Info.plist		1'354 bytes
ot-test-app.app/Contents/Frameworks/ReactiveCocoa.framework/Versions/Current		1 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework	D	bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Headers		24 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Modules		24 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Resources		26 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Squirrel		25 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions	D	bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A	D	bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Headers	D	bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Headers/NSBundle+SQRLVersionExtensions.h		560 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Headers/NSProcessInfo+SQRLVersionExtensions.h		424 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Headers/SQRLDownloadedUpdate.h		963 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Headers/SQRLUpdate.h		972 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Headers/SQRLUpdater.h		8'236 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Headers/Squirrel.h		587 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Modules	D	bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Modules/module.modulemap		97 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Resources	D	bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Resources/Info.plist		1'322 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Resources/ShipIt		743'784 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/A/Squirrel		247'520 bytes
ot-test-app.app/Contents/Frameworks/Squirrel.framework/Versions/Current		1 bytes
ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app	D	bytes
ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents	D	bytes
ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/Info.plist		1'013 bytes
ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS	D	bytes
ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper		253'712 bytes
ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/PkgInfo		8 bytes
ot-test-app.app/Contents/Info.plist		1'561 bytes
ot-test-app.app/Contents/MacOS	D	bytes
ot-test-app.app/Contents/MacOS/ot-test-app		186'044 bytes
ot-test-app.app/Contents/PkgInfo		8 bytes
ot-test-app.app/Contents/Resources	D	bytes
ot-test-app.app/Contents/Resources/am.lproj	D	bytes
ot-test-app.app/Contents/Resources/app	D	bytes
ot-test-app.app/Contents/Resources/app/.DS_Store		6'148 bytes
ot-test-app.app/Contents/Resources/app/.gitignore		46 bytes
ot-test-app.app/Contents/Resources/app/dist	D	bytes
ot-test-app.app/Contents/Resources/app/dist/.renderer-index-template.html		230 bytes
ot-test-app.app/Contents/Resources/app/dist/main	D	bytes
ot-test-app.app/Contents/Resources/app/dist/main/main.js		133'722 bytes
ot-test-app.app/Contents/Resources/app/dist/main/main.js.map		5'209 bytes
ot-test-app.app/Contents/Resources/app/dist/main/static	D	bytes
ot-test-app.app/Contents/Resources/app/dist/main/static/index.html		1'883 bytes
ot-test-app.app/Contents/Resources/app/dist/renderer	D	bytes
ot-test-app.app/Contents/Resources/app/dist/renderer/index.html		288 bytes
ot-test-app.app/Contents/Resources/app/dist/renderer/renderer.js		1'020 bytes
ot-test-app.app/Contents/Resources/app/dist/renderer/renderer.js.map		1'535 bytes
ot-test-app.app/Contents/Resources/app/forge.config.js		666 bytes
ot-test-app.app/Contents/Resources/app/node_modules	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@babel	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@electron	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@electron-forge	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/README.md		1'368 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/dist	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/dist/index.html		12'194 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/dist/otis.css		129'313 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/dist/otis.js		3'720 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/package.json		2'646 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis.scss		347 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/_components.scss		bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/_elements.scss		21 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/_modules.scss		bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/_scaffolding.scss		96 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/_templates.scss		33 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/elements	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/elements/.keep		bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/scaffolding	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/scaffolding/_bootstrap.scss		1'340 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/scaffolding/_bootstrap_custom.scss		1'517 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/scaffolding/_mixins.scss		55 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/scaffolding/_utilities.scss		567 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/scaffolding/mixins	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/scaffolding/mixins/_bem.scss		1'468 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@optoro/otis/src/otis/scaffolding/mixins/_visible-pseudo.scss		220 bytes
ot-test-app.app/Contents/Resources/app/node_modules/@posthtml	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@sindresorhus	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@szmarczak	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@types	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@webassemblyjs	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/@xtuc	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/LICENSE		1'153 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/README.md		12'155 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap-grid.css		64'548 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap-grid.css.map		151'749 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap-grid.min.css		48'488 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap-grid.min.css.map		108'539 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap-reboot.css		4'897 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap-reboot.css.map		76'483 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap-reboot.min.css		4'021 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap-reboot.min.css.map		32'461 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap.css		192'348 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap.css.map		492'048 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap.min.css		155'758 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/css/bootstrap.min.css.map		625'953 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js/bootstrap.bundle.js		222'911 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js/bootstrap.bundle.js.map		402'249 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js/bootstrap.bundle.min.js		78'635 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js/bootstrap.bundle.min.js.map		311'949 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js/bootstrap.js		131'637 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js/bootstrap.js.map		250'568 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js/bootstrap.min.js		58'072 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/dist/js/bootstrap.min.js.map		190'253 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/alert.js		5'529 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/alert.js.map		8'141 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/button.js		5'664 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/button.js.map		9'099 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/carousel.js		20'195 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/carousel.js.map		36'040 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/collapse.js		13'194 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/collapse.js.map		22'833 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/dropdown.js		18'197 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/dropdown.js.map		31'704 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/index.js		913 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/index.js.map		2'214 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/modal.js		20'018 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/modal.js.map		35'369 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/popover.js		7'416 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/popover.js.map		8'950 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/scrollspy.js		11'657 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/scrollspy.js.map		19'305 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/tab.js		8'182 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/tab.js.map		14'583 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/toast.js		7'679 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/toast.js.map		10'927 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/tooltip.js		26'511 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/tooltip.js.map		49'591 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/util.js		5'869 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/dist/util.js.map		10'060 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/alert.js		3'877 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/button.js		4'404 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/carousel.js		16'517 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/collapse.js		10'403 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/dropdown.js		15'041 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/index.js		1'400 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/modal.js		16'336 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/popover.js		4'374 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/scrollspy.js		8'908 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/tab.js		6'664 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/toast.js		5'029 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/tools	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/tools/sanitizer.js		3'361 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/tooltip.js		19'036 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/js/src/util.js		4'715 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/package.json		11'982 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_alert.scss		1'148 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_badge.scss		1'119 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_breadcrumb.scss		1'278 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_button-group.scss		3'624 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_buttons.scss		2'547 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_card.scss		5'872 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_carousel.scss		4'756 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_close.scss		956 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_code.scss		1'013 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_custom-forms.scss		14'866 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_dropdown.scss		4'363 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_forms.scss		8'816 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_functions.scss		2'719 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_grid.scss		1'016 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_images.scss		1'153 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_input-group.scss		5'855 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_jumbotron.scss		405 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_list-group.scss		3'752 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_media.scss		83 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_mixins.scss		1'059 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_modal.scss		5'930 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_nav.scss		2'069 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_navbar.scss		6'415 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_pagination.scss		1'740 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_popover.scss		4'797 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_print.scss		3'001 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_progress.scss		1'068 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_reboot.scss		11'187 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_root.scss		572 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_spinners.scss		1'051 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_tables.scss		3'520 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_toasts.scss		990 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_tooltip.scss		2'512 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_transitions.scss		261 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_type.scss		2'244 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_utilities.scss		502 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/_variables.scss		47'781 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/bootstrap-grid.scss		572 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/bootstrap-reboot.scss		411 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/bootstrap.scss		920 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_alert.scss		242 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_background-variant.scss		474 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_badge.scss		318 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_border-radius.scss		1'340 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_box-shadow.scss		532 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_breakpoints.scss		4'482 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_buttons.scss		3'369 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_caret.scss		1'406 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_clearfix.scss		93 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_deprecate.scss		613 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_float.scss		386 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_forms.scss		4'912 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_gradients.scss		2'050 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_grid-framework.scss		1'828 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_grid.scss		1'568 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_hover.scss		749 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_image.scss		1'159 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_list-group.scss		431 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_lists.scss		168 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_nav-divider.scss		261 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_pagination.scss		462 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_reset-text.scss		479 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_resize.scss		202 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_screen-reader.scss		733 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_size.scss		148 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_table-row.scss		792 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_text-emphasis.scss		364 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_text-hide.scss		326 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_text-truncate.scss		168 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_transition.scss		364 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/mixins/_visibility.scss		189 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_align.scss		420 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_background.scss		397 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_borders.scss		1'765 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_clearfix.scss		37 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_display.scss		519 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_embed.scss		846 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_flex.scss		2'769 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_float.scss		376 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_overflow.scss		133 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_position.scss		484 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_screenreaders.scss		115 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_shadows.scss		249 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_sizing.scss		498 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_spacing.scss		2'101 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_stretched-link.scss		431 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_text.scss		2'010 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/utilities/_visibility.scss		174 bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/vendor	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/bootstrap/scss/vendor/_rfs.scss		6'473 bytes
ot-test-app.app/Contents/Resources/app/node_modules/buffer-from	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/buffer-from/LICENSE		1'078 bytes
ot-test-app.app/Contents/Resources/app/node_modules/buffer-from/index.js		1'595 bytes
ot-test-app.app/Contents/Resources/app/node_modules/buffer-from/package.json		1'487 bytes
ot-test-app.app/Contents/Resources/app/node_modules/buffer-from/readme.md		1'990 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/.coveralls.yml		46 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/.eslintrc		180 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/.npmignore		72 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/.travis.yml		140 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/CHANGELOG.md		11'707 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/LICENSE		1'107 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/Makefile		1'059 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/README.md		17'918 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/component.json		321 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/karma.conf.js		1'736 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/node.js		40 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/package.json		2'438 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/src	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/src/browser.js		4'734 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/src/debug.js		4'394 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/src/index.js		263 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/src/inspector-log.js		373 bytes
ot-test-app.app/Contents/Resources/app/node_modules/debug/src/node.js		6'015 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/.eslintrc		35 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/.jsfmtrc		5'492 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/.npmignore		30 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/.travis.yml		103 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/LICENSE		10'255 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/README.md		832 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/appveyor.yml		287 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/index.js		1'027 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/package.json		1'926 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/test	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/test/index.test.js		250 bytes
ot-test-app.app/Contents/Resources/app/node_modules/electron-squirrel-startup/test/mocha.opts		bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/AUTHORS.txt		11'945 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/LICENSE.txt		1'095 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/README.md		2'054 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/bower.json		190 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/dist	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/dist/core.js		9'165 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/dist/jquery.js		280'364 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/dist/jquery.min.js		88'145 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/dist/jquery.min.map		136'397 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/dist/jquery.slim.js		227'022 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/dist/jquery.slim.min.js		71'037 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/dist/jquery.slim.min.map		108'757 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/external	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/external/sizzle	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/external/sizzle/LICENSE.txt		1'605 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/external/sizzle/dist	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/external/sizzle/dist/sizzle.js		65'666 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/external/sizzle/dist/sizzle.min.js		19'841 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/external/sizzle/dist/sizzle.min.map		30'740 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/package.json		3'668 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/.eslintrc.json		156 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax.js		22'463 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/jsonp.js		2'748 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/load.js		1'904 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/parseXML.js		559 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/script.js		1'637 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/var	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/var/location.js		67 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/var/nonce.js		62 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/var/rquery.js		60 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/ajax/xhr.js		4'339 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/attributes	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/attributes.js		217 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/attributes/attr.js		3'271 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/attributes/classes.js		4'447 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/attributes/prop.js		3'004 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/attributes/support.js		786 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/attributes/val.js		4'249 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/callbacks.js		5'552 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core.js		9'165 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/DOMEval.js		1'160 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/access.js		1'311 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/camelCase.js		545 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/init.js		3'337 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/isAttached.js		789 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/nodeName.js		178 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/parseHTML.js		1'604 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/ready-no-deferred.js		2'264 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/ready.js		2'097 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/readyException.js		168 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/stripAndCollapse.js		362 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/support.js		631 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/toType.js		379 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/var	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/core/var/rsingleTag.js		244 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css.js		13'828 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/addGetHookIf.js		530 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/adjustCSS.js		2'002 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/curCSS.js		1'656 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/finalPropName.js		870 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/hiddenVisibleSelectors.js		317 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/showHide.js		2'304 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/support.js		3'070 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/var	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/var/cssExpand.js		88 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/var/getStyles.js		401 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/var/isHiddenWithinTree.js		1'284 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/var/rboxStyle.js		123 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/var/rnumnonpx.js		131 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/css/var/swap.js		520 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/data	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/data.js		4'321 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/data/Data.js		3'952 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/data/var	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/data/var/acceptData.js		318 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/data/var/dataPriv.js		84 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/data/var/dataUser.js		84 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/deferred	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/deferred.js		10'997 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/deferred/exceptionHook.js		640 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/deprecated.js		2'467 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/dimensions.js		1'751 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/effects	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/effects.js		17'455 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/effects/Tween.js		3'292 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/effects/animatedSelector.js		244 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/event	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/event.js		24'516 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/event/ajax.js		346 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/event/alias.js		649 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/event/focusin.js		1'512 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/event/support.js		133 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/event/trigger.js		5'407 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/exports	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/exports/amd.js		1'024 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/exports/global.js		608 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/jquery.js		622 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation.js		12'643 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/_evalUrl.js		676 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/buildFragment.js		2'486 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/getAll.js		650 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/setGlobalEval.js		381 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/support.js		1'034 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/var	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/var/rscriptType.js		92 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/var/rtagName.js		304 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/manipulation/wrapMap.js		798 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/offset.js		6'868 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/queue	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/queue.js		3'091 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/queue/delay.js		636 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/selector-native.js		6'394 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/selector-sizzle.js		411 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/selector.js		66 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/serialize.js		3'241 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/traversing	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/traversing.js		4'500 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/traversing/findFilter.js		2'352 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/traversing/var	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/traversing/var/dir.js		371 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/traversing/var/rneedsContext.js		128 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/traversing/var/siblings.js		218 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/ObjectFunctionString.js		110 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/arr.js		54 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/class2type.js		82 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/concat.js		81 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/document.js		67 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/documentElement.js		105 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/fnToString.js		92 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/getProto.js		73 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/hasOwn.js		110 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/indexOf.js		82 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/isFunction.js		428 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/isWindow.js		126 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/pnum.js		100 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/push.js		79 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/rcheckableType.js		79 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/rcssNum.js		136 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/rnothtmlwhite.js		202 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/slice.js		80 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/support.js		117 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/var/toString.js		104 bytes
ot-test-app.app/Contents/Resources/app/node_modules/jquery/src/wrap.js		1'477 bytes
ot-test-app.app/Contents/Resources/app/node_modules/ms	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/ms/index.js		2'764 bytes
ot-test-app.app/Contents/Resources/app/node_modules/ms/license.md		1'077 bytes
ot-test-app.app/Contents/Resources/app/node_modules/ms/package.json		1'557 bytes
ot-test-app.app/Contents/Resources/app/node_modules/ms/readme.md		1'721 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/README.md		11'127 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm/popper-utils.js		35'140 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm/popper-utils.js.map		61'038 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm/popper-utils.min.js		10'567 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm/popper-utils.min.js.map		53'337 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm/popper.js		88'063 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm/popper.js.map		140'043 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm/popper.min.js		21'127 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/esm/popper.min.js.map		124'740 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/popper-utils.js		33'466 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/popper-utils.js.map		60'776 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/popper-utils.min.js		10'116 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/popper-utils.min.js.map		53'150 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/popper.js		84'440 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/popper.js.map		139'374 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/popper.min.js		19'824 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/popper.min.js.map		124'553 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/popper-utils.js		36'242 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/popper-utils.js.map		61'080 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/popper-utils.min.js		10'730 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/popper-utils.min.js.map		53'187 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/popper.js		88'317 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/popper.js.map		140'053 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/popper.min.js		21'162 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/popper.min.js.map		123'313 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/dist/umd/poppper.js.flow		3'426 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/index.d.ts		4'680 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/index.js.flow		3'426 bytes
ot-test-app.app/Contents/Resources/app/node_modules/popper.js/package.json		2'434 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map-support	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map-support/LICENSE.md		1'079 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map-support/README.md		9'459 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map-support/browser-source-map-support.js		53'013 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map-support/package.json		1'805 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map-support/register.js		25 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map-support/source-map-support.js		18'155 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/CHANGELOG.md		7'884 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/LICENSE		1'526 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/README.md		24'072 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/dist	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/dist/source-map.debug.js		272'874 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/dist/source-map.js		106'973 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/dist/source-map.min.js		27'111 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/dist/source-map.min.js.map		257'409 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib	D	bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/array-set.js		3'197 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/base64-vlq.js		4'714 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/base64.js		1'540 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/binary-search.js		4'249 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/mapping-list.js		2'339 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/quick-sort.js		3'616 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/source-map-consumer.js		40'562 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/source-map-generator.js		14'356 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/source-node.js		13'808 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/lib/util.js		12'950 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/package.json		5'057 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/source-map.d.ts		3'060 bytes
ot-test-app.app/Contents/Resources/app/node_modules/source-map/source-map.js		405 bytes
ot-test-app.app/Contents/Resources/app/package-lock.json		532'160 bytes
ot-test-app.app/Contents/Resources/app/package.json		1'240 bytes
ot-test-app.app/Contents/Resources/app/src	D	bytes
ot-test-app.app/Contents/Resources/app/src/main	D	bytes
ot-test-app.app/Contents/Resources/app/src/main/index.js		4'646 bytes
ot-test-app.app/Contents/Resources/app/src/renderer	D	bytes
ot-test-app.app/Contents/Resources/app/src/renderer/index.js		23 bytes
ot-test-app.app/Contents/Resources/app/static	D	bytes
ot-test-app.app/Contents/Resources/app/static/.DS_Store		6'148 bytes
ot-test-app.app/Contents/Resources/app/static/icon-prod.icns		24'480 bytes
ot-test-app.app/Contents/Resources/app/static/icon-prod.ico		4'286 bytes
ot-test-app.app/Contents/Resources/app/static/icon-prod.png		6'187 bytes
ot-test-app.app/Contents/Resources/app/static/icon-qa.icns		25'909 bytes
ot-test-app.app/Contents/Resources/app/static/icon-qa.ico		4'286 bytes
ot-test-app.app/Contents/Resources/app/static/icon-qa.png		7'470 bytes
ot-test-app.app/Contents/Resources/app/static/index.html		1'883 bytes
ot-test-app.app/Contents/Resources/app/static/spinner.gif		9'284 bytes
ot-test-app.app/Contents/Resources/app/webpack.additions.js		274 bytes
ot-test-app.app/Contents/Resources/app/yarn.lock		294'420 bytes
ot-test-app.app/Contents/Resources/ar.lproj	D	bytes
ot-test-app.app/Contents/Resources/bg.lproj	D	bytes
ot-test-app.app/Contents/Resources/bn.lproj	D	bytes
ot-test-app.app/Contents/Resources/ca.lproj	D	bytes
ot-test-app.app/Contents/Resources/cs.lproj	D	bytes
ot-test-app.app/Contents/Resources/da.lproj	D	bytes
ot-test-app.app/Contents/Resources/de.lproj	D	bytes
ot-test-app.app/Contents/Resources/el.lproj	D	bytes
ot-test-app.app/Contents/Resources/electron.asar		296'572 bytes
ot-test-app.app/Contents/Resources/electron.icns		25'909 bytes
ot-test-app.app/Contents/Resources/en.lproj	D	bytes
ot-test-app.app/Contents/Resources/en_GB.lproj	D	bytes
ot-test-app.app/Contents/Resources/es.lproj	D	bytes
ot-test-app.app/Contents/Resources/es_419.lproj	D	bytes
ot-test-app.app/Contents/Resources/et.lproj	D	bytes
ot-test-app.app/Contents/Resources/fa.lproj	D	bytes
ot-test-app.app/Contents/Resources/fi.lproj	D	bytes
ot-test-app.app/Contents/Resources/fil.lproj	D	bytes
ot-test-app.app/Contents/Resources/fr.lproj	D	bytes
ot-test-app.app/Contents/Resources/gu.lproj	D	bytes
ot-test-app.app/Contents/Resources/he.lproj	D	bytes
ot-test-app.app/Contents/Resources/hi.lproj	D	bytes
ot-test-app.app/Contents/Resources/hr.lproj	D	bytes
ot-test-app.app/Contents/Resources/hu.lproj	D	bytes
ot-test-app.app/Contents/Resources/id.lproj	D	bytes
ot-test-app.app/Contents/Resources/it.lproj	D	bytes
ot-test-app.app/Contents/Resources/ja.lproj	D	bytes
ot-test-app.app/Contents/Resources/kn.lproj	D	bytes
ot-test-app.app/Contents/Resources/ko.lproj	D	bytes
ot-test-app.app/Contents/Resources/lt.lproj	D	bytes
ot-test-app.app/Contents/Resources/lv.lproj	D	bytes
ot-test-app.app/Contents/Resources/ml.lproj	D	bytes
ot-test-app.app/Contents/Resources/mr.lproj	D	bytes
ot-test-app.app/Contents/Resources/ms.lproj	D	bytes
ot-test-app.app/Contents/Resources/nb.lproj	D	bytes
ot-test-app.app/Contents/Resources/nl.lproj	D	bytes
ot-test-app.app/Contents/Resources/pl.lproj	D	bytes
ot-test-app.app/Contents/Resources/pt_BR.lproj	D	bytes
ot-test-app.app/Contents/Resources/pt_PT.lproj	D	bytes
ot-test-app.app/Contents/Resources/ro.lproj	D	bytes
ot-test-app.app/Contents/Resources/ru.lproj	D	bytes
ot-test-app.app/Contents/Resources/sk.lproj	D	bytes
ot-test-app.app/Contents/Resources/sl.lproj	D	bytes
ot-test-app.app/Contents/Resources/sr.lproj	D	bytes
ot-test-app.app/Contents/Resources/sv.lproj	D	bytes
ot-test-app.app/Contents/Resources/sw.lproj	D	bytes
ot-test-app.app/Contents/Resources/ta.lproj	D	bytes
ot-test-app.app/Contents/Resources/te.lproj	D	bytes
ot-test-app.app/Contents/Resources/th.lproj	D	bytes
ot-test-app.app/Contents/Resources/tr.lproj	D	bytes
ot-test-app.app/Contents/Resources/uk.lproj	D	bytes
ot-test-app.app/Contents/Resources/vi.lproj	D	bytes
ot-test-app.app/Contents/Resources/zh_CN.lproj	D	bytes
ot-test-app.app/Contents/Resources/zh_TW.lproj	D	bytes

Extracted Files

ot-test-app.app/Contents/Info.plist

File path:	ot-test-app.app/Contents/Info.plist
File size:	1'561 bytes
File type:	XML 1.0 document, ASCII text

Plist Content

{"BuildMachineOSBuild": "16F73", "CFBundleDisplayName": "ot-test-app", "CFBundleExecutable": "ot-test-app", "CFBundleIconFile": "electron.icns", "CFBundleIdentifier": "com.electron.ot-test-app", "CFBundleInfoDictionaryVersion": "6.0", "CFBundleName": "ot-test-app", "CFBundlePackageType": "APPL", "CFBundleShortVersionString": "1.0.1", "CFBundleVersion": "1.0.1", "DTCompiler": "com.apple.compilers.llvm.clang.1_0", "DTSDKBuild": "10.12", "DTSDKName": "macosx10.12", "DTXcode": "0833", "DTXcodeBuild": "8E3004b", "LSApplicationCategoryType": "public.app-category.developer-tools", "LSMinimumSystemVersion": "10.10.0", "NSHighResolutionCapable": true, "NSMainNibFile": "MainMenu", "NSPrincipalClass": "AtomApplication", "NSSupportsAutomaticGraphicsSwitching": true}

ot-test-app.app/Contents/MacOS/ot-test-app

File path:	ot-test-app.app/Contents/MacOS/ot-test-app
File size:	186'044 bytes
File type:	Mach-O 64-bit x86_64 executable, flags:<NOUNDEFS\|DYLDLINK\|TWOLEVEL\|PIE>

Static Mach Info

General Information for header 1
Endian:	little-endian
Size:	64-bit
Architecture:	x86_64
Filetype:	execute
Nbr. of load commands:	22
Entry point:	0x1000018C0

segment_64 load command - aggregated: 4

Name	Value
segname	__PAGEZERO
vmaddr	0x0
vmsize	0x100000000
fileoff	0x0
filesize	0x0
maxprot	0x0
initprot	0x0
nsects	0
flags	0x0

Name

Value

segname

__TEXT

vmaddr

0x100000000

vmsize

0x29000

fileoff

0x0

filesize

0x29000

maxprot

0x7

initprot

0x5

nsects

flags

0x0

Datas

sectname	segname	addr	size	offset	entropy	align	reloff	nreloc	flags
__text	__TEXT	0x1000018C0	0x23BB1	0x18C0	6.26771263	4	0x0	0	0x80000400
__stubs	__TEXT	0x100025472	0x1C2	0x25472	3.40537256	1	0x0	0	0x80000400
__stub_helper	__TEXT	0x100025634	0x2FE	0x25634	4.32375239	2	0x0	0	0x80000400
__const	__TEXT	0x100025940	0x117E	0x25940	4.26181670	4	0x0	0	0x0
__cstring	__TEXT	0x100026ABE	0x592	0x26ABE	4.75042526	0	0x0	0	0x0
__gcc_except_tab	__TEXT	0x100027050	0x14FC	0x27050	5.61933681	2	0x0	0	0x0
__unwind_info	__TEXT	0x10002854C	0xAAC	0x2854C	5.22026803	2	0x0	0	0x0

Name

Value

segname

__DATA

vmaddr

0x100029000

vmsize

0x4000

fileoff

0x29000

filesize

0x3000

maxprot

0x7

initprot

0x3

nsects

flags

0x0

Datas

sectname	segname	addr	size	offset	entropy	align	reloff	nreloc	flags
__got	__DATA	0x100029000	0x38	0x29000	0.51408947	3	0x0	0	0x0
__nl_symbol_ptr	__DATA	0x100029038	0x10	0x29038	-0.00000000	3	0x0	0	0x0
__la_symbol_ptr	__DATA	0x100029048	0x258	0x29048	2.95749455	3	0x0	0	0x0
__mod_init_func	__DATA	0x1000292A0	0x8	0x292A0	1.54879494	3	0x0	0	0x0
__const	__DATA	0x1000292A8	0x1C80	0x292A8	2.96496633	3	0x0	0	0x0
__data	__DATA	0x10002AF28	0x288	0x2AF28	0.47547509	3	0x0	0	0x0
__bss	__DATA	0x10002B1B0	0x14A0	0x0	0.00000000	4	0x0	0	0x0
__common	__DATA	0x10002C650	0x5A8	0x0	0.00000000	4	0x0	0	0x0

Name	Value
segname	__LINKEDIT
vmaddr	0x10002D000
vmsize	0x16BC
fileoff	0x2C000
filesize	0x16BC
maxprot	0x7
initprot	0x1
nsects	0
flags	0x0

dyld_info_only load command - aggregated: 1

Name	Value
rebase_off	180224
rebase_size	288
bind_off	180512
bind_size	144
weak_bind_off	0
weak_bind_size	0
lazy_bind_off	180656
lazy_bind_size	1488
export_off	182144
export_size	32

symtab load command - aggregated: 1

Name	Value
symoff	182984
nsyms	83
stroff	184948
strsize	1096

dysymtab load command - aggregated: 1

Name	Value
ilocalsym	0
nlocalsym	1
iextdefsym	1
nextdefsym	1
iundefsym	2
nundefsym	81
tocoff	0
ntoc	0
modtaboff	0
nmodtab	0
extrefsymoff	0
nextrefsyms	0
indirectsymoff	184312
nindirectsyms	159
extreloff	0
nextrel	0
locreloff	0
nlocrel	0

load_dylinker load command - aggregated: 1

Name	Value

uuid load command - aggregated: 1

Name	Value
uuid	3788637b-0a53-3737-b3b6-c827abf3e314

version_min_macosx load command - aggregated: 1

Name	Value
version	10.10.0
sdk	10.12.0

source_version load command - aggregated: 1

Name	Value
path	0.0.0.0.0

main load command - aggregated: 1

Name	Value

load_dylib load command - aggregated: 7

Name

Value

compatibility_version

1.0.0

current_version

22.0.0

timestamp

1970-01-01

Datas

/System/Library/Frameworks/Cocoa.framework/Versions/A/Cocoa

Name

Value

compatibility_version

300.0.0

current_version

1349.63.0

timestamp

1970-01-01

Datas

/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation

Name

Value

compatibility_version

1.0.0

current_version

275.0.0

timestamp

1970-01-01

Datas

/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit

Name

Value

compatibility_version

1.0.0

current_version

57740.51.2

timestamp

1970-01-01

Datas

/System/Library/Frameworks/Security.framework/Versions/A/Security

Name

Value

compatibility_version

1.0.0

current_version

888.51.1

timestamp

1970-01-01

Datas

/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration

Name

Value

compatibility_version

0.0.0

current_version

0.0.0

timestamp

1970-01-01

Datas

@rpath/Electron Framework.framework/Electron Framework

Name

Value

compatibility_version

1.0.0

current_version

1238.50.2

timestamp

1970-01-01

Datas

/usr/lib/libSystem.B.dylib

rpath load command - aggregated: 1

Name	Value
path	@executable_path/../Frameworks

function_starts load command - aggregated: 1

Name	Value
dataoff	182176
datasize	752

data_in_code load command - aggregated: 1

Name	Value
dataoff	182928
datasize	56

Symbols

Name	Category	Origin	Segment Name	Bind Address	Library Name
__mh_execute_header	EXTERNAL	LC_SYMTAB
radr://5614542	LOCAL	LC_SYMTAB
_AtomInitializeICUandStartNode	UNDEFINED	LC_SYMTAB	__DATA	0x100029048	@rpath/Electron Framework.framework/Electron Framework
_AtomMain	UNDEFINED	LC_SYMTAB	__DATA	0x100029050	@rpath/Electron Framework.framework/Electron Framework
__DefaultRuneLocale	UNDEFINED	LC_SYMTAB	__DATA	0x100029000	/usr/lib/libSystem.B.dylib
__Unwind_DeleteException	UNDEFINED	LC_SYMTAB	__DATA	0x100029058	/usr/lib/libSystem.B.dylib
__Unwind_GetIP	UNDEFINED	LC_SYMTAB	__DATA	0x100029060	/usr/lib/libSystem.B.dylib
__Unwind_GetLanguageSpecificData	UNDEFINED	LC_SYMTAB	__DATA	0x100029068	/usr/lib/libSystem.B.dylib
__Unwind_GetRegionStart	UNDEFINED	LC_SYMTAB	__DATA	0x100029070	/usr/lib/libSystem.B.dylib
__Unwind_RaiseException	UNDEFINED	LC_SYMTAB	__DATA	0x100029078	/usr/lib/libSystem.B.dylib
__Unwind_Resume	UNDEFINED	LC_SYMTAB	__DATA	0x100029080	/usr/lib/libSystem.B.dylib
__Unwind_SetGR	UNDEFINED	LC_SYMTAB	__DATA	0x100029088	/usr/lib/libSystem.B.dylib
__Unwind_SetIP	UNDEFINED	LC_SYMTAB	__DATA	0x100029090	/usr/lib/libSystem.B.dylib
____mb_cur_max_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029098	/usr/lib/libSystem.B.dylib
___bzero	UNDEFINED	LC_SYMTAB	__DATA	0x1000290A0	/usr/lib/libSystem.B.dylib
___cxa_atexit	UNDEFINED	LC_SYMTAB	__DATA	0x1000290A8	/usr/lib/libSystem.B.dylib
___error	UNDEFINED	LC_SYMTAB	__DATA	0x1000290B0	/usr/lib/libSystem.B.dylib
___maskrune_l	UNDEFINED	LC_SYMTAB	__DATA	0x1000290B8	/usr/lib/libSystem.B.dylib
___stack_chk_fail	UNDEFINED	LC_SYMTAB	__DATA	0x1000290C0	/usr/lib/libSystem.B.dylib
___stack_chk_guard	UNDEFINED	LC_SYMTAB	__DATA	0x100029010	/usr/lib/libSystem.B.dylib
___stderrp	UNDEFINED	LC_SYMTAB	__DATA	0x100029018	/usr/lib/libSystem.B.dylib
___stdinp	UNDEFINED	LC_SYMTAB	__DATA	0x100029020	/usr/lib/libSystem.B.dylib
___stdoutp	UNDEFINED	LC_SYMTAB	__DATA	0x100029028	/usr/lib/libSystem.B.dylib
_abort	UNDEFINED	LC_SYMTAB	__DATA	0x1000290C8	/usr/lib/libSystem.B.dylib
_asprintf_l	UNDEFINED	LC_SYMTAB	__DATA	0x1000290D0	/usr/lib/libSystem.B.dylib
_calloc	UNDEFINED	LC_SYMTAB	__DATA	0x1000290D8	/usr/lib/libSystem.B.dylib
_catclose	UNDEFINED	LC_SYMTAB	__DATA	0x1000290E0	/usr/lib/libSystem.B.dylib
_catgets	UNDEFINED	LC_SYMTAB	__DATA	0x1000290E8	/usr/lib/libSystem.B.dylib
_catopen	UNDEFINED	LC_SYMTAB	__DATA	0x1000290F0	/usr/lib/libSystem.B.dylib
_dlopen	UNDEFINED	LC_SYMTAB	__DATA	0x1000290F8	/usr/lib/libSystem.B.dylib
_dlsym	UNDEFINED	LC_SYMTAB	__DATA	0x100029100	/usr/lib/libSystem.B.dylib
_fflush	UNDEFINED	LC_SYMTAB	__DATA	0x100029108	/usr/lib/libSystem.B.dylib
_fputc	UNDEFINED	LC_SYMTAB	__DATA	0x100029110	/usr/lib/libSystem.B.dylib
_free	UNDEFINED	LC_SYMTAB	__DATA	0x100029118	/usr/lib/libSystem.B.dylib
_freelocale	UNDEFINED	LC_SYMTAB	__DATA	0x100029120	/usr/lib/libSystem.B.dylib
_freopen	UNDEFINED	LC_SYMTAB	__DATA	0x100029128	/usr/lib/libSystem.B.dylib
_fstat$INODE64	UNDEFINED	LC_SYMTAB	__DATA	0x100029130	/usr/lib/libSystem.B.dylib
_fwrite	UNDEFINED	LC_SYMTAB	__DATA	0x100029138	/usr/lib/libSystem.B.dylib
_getc	UNDEFINED	LC_SYMTAB	__DATA	0x100029140	/usr/lib/libSystem.B.dylib
_getenv	UNDEFINED	LC_SYMTAB	__DATA	0x100029148	/usr/lib/libSystem.B.dylib
_malloc	UNDEFINED	LC_SYMTAB	__DATA	0x100029150	/usr/lib/libSystem.B.dylib
_mbrlen_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029158	/usr/lib/libSystem.B.dylib
_mbrtowc_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029160	/usr/lib/libSystem.B.dylib
_mbsnrtowcs_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029168	/usr/lib/libSystem.B.dylib
_mbsrtowcs_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029170	/usr/lib/libSystem.B.dylib
_mbtowc_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029178	/usr/lib/libSystem.B.dylib
_memcpy	UNDEFINED	LC_SYMTAB	__DATA	0x100029180	/usr/lib/libSystem.B.dylib
_memmove	UNDEFINED	LC_SYMTAB	__DATA	0x100029188	/usr/lib/libSystem.B.dylib
_memset	UNDEFINED	LC_SYMTAB	__DATA	0x100029190	/usr/lib/libSystem.B.dylib
_posix_memalign	UNDEFINED	LC_SYMTAB	__DATA	0x100029198	/usr/lib/libSystem.B.dylib
_pthread_cond_broadcast	UNDEFINED	LC_SYMTAB	__DATA	0x1000291A0	/usr/lib/libSystem.B.dylib
_pthread_cond_wait	UNDEFINED	LC_SYMTAB	__DATA	0x1000291A8	/usr/lib/libSystem.B.dylib
_pthread_getspecific	UNDEFINED	LC_SYMTAB	__DATA	0x1000291B0	/usr/lib/libSystem.B.dylib
_pthread_key_create	UNDEFINED	LC_SYMTAB	__DATA	0x1000291B8	/usr/lib/libSystem.B.dylib
_pthread_mach_thread_np	UNDEFINED	LC_SYMTAB	__DATA	0x1000291C0	/usr/lib/libSystem.B.dylib
_pthread_mutex_lock	UNDEFINED	LC_SYMTAB	__DATA	0x1000291C8	/usr/lib/libSystem.B.dylib
_pthread_mutex_unlock	UNDEFINED	LC_SYMTAB	__DATA	0x1000291D0	/usr/lib/libSystem.B.dylib
_pthread_once	UNDEFINED	LC_SYMTAB	__DATA	0x1000291D8	/usr/lib/libSystem.B.dylib
_pthread_self	UNDEFINED	LC_SYMTAB	__DATA	0x1000291E0	/usr/lib/libSystem.B.dylib
_pthread_setspecific	UNDEFINED	LC_SYMTAB	__DATA	0x1000291E8	/usr/lib/libSystem.B.dylib
_realloc	UNDEFINED	LC_SYMTAB	__DATA	0x1000291F0	/usr/lib/libSystem.B.dylib
_snprintf	UNDEFINED	LC_SYMTAB	__DATA	0x1000291F8	/usr/lib/libSystem.B.dylib
_snprintf_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029200	/usr/lib/libSystem.B.dylib
_sscanf	UNDEFINED	LC_SYMTAB	__DATA	0x100029208	/usr/lib/libSystem.B.dylib
_sscanf_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029210	/usr/lib/libSystem.B.dylib
_strcmp	UNDEFINED	LC_SYMTAB	__DATA	0x100029218	/usr/lib/libSystem.B.dylib
_strerror_r	UNDEFINED	LC_SYMTAB	__DATA	0x100029220	/usr/lib/libSystem.B.dylib
_strftime_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029228	/usr/lib/libSystem.B.dylib
_strlen	UNDEFINED	LC_SYMTAB	__DATA	0x100029230	/usr/lib/libSystem.B.dylib
_strtod_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029238	/usr/lib/libSystem.B.dylib
_strtof_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029240	/usr/lib/libSystem.B.dylib
_strtold_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029248	/usr/lib/libSystem.B.dylib
_strtoll_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029250	/usr/lib/libSystem.B.dylib
_strtoull_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029258	/usr/lib/libSystem.B.dylib
_ungetc	UNDEFINED	LC_SYMTAB	__DATA	0x100029260	/usr/lib/libSystem.B.dylib
_vfprintf	UNDEFINED	LC_SYMTAB	__DATA	0x100029268	/usr/lib/libSystem.B.dylib
_wcrtomb_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029270	/usr/lib/libSystem.B.dylib
_wcslen	UNDEFINED	LC_SYMTAB	__DATA	0x100029278	/usr/lib/libSystem.B.dylib
_wcsnrtombs_l	UNDEFINED	LC_SYMTAB	__DATA	0x100029280	/usr/lib/libSystem.B.dylib
_wmemcpy	UNDEFINED	LC_SYMTAB	__DATA	0x100029288	/usr/lib/libSystem.B.dylib
_wmemmove	UNDEFINED	LC_SYMTAB	__DATA	0x100029290	/usr/lib/libSystem.B.dylib
_wmemset	UNDEFINED	LC_SYMTAB	__DATA	0x100029298	/usr/lib/libSystem.B.dylib
dyld_stub_binder	UNDEFINED	LC_SYMTAB	__DATA	0x100029038	/usr/lib/libSystem.B.dylib

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 16:09:02.136034012 CEST	443	49347	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.136104107 CEST	443	49347	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.136756897 CEST	49347	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.157346964 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.158118963 CEST	49348	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.158849955 CEST	49348	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.309389114 CEST	49351	443	192.168.11.12	17.248.193.16
Apr 23, 2024 16:09:02.323246956 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.324641943 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.325130939 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.325222015 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.325319052 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.325333118 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.325342894 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.325445890 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:02.327076912 CEST	49348	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.327167988 CEST	49348	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.327167988 CEST	49348	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.328407049 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:02.329576015 CEST	49348	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.337230921 CEST	49348	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.350784063 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.501605988 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.501663923 CEST	443	49348	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.504138947 CEST	49348	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.515132904 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.515737057 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.517282963 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.576006889 CEST	443	49351	17.248.193.16	192.168.11.12
Apr 23, 2024 16:09:02.576738119 CEST	49351	443	192.168.11.12	17.248.193.16
Apr 23, 2024 16:09:02.595437050 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.595601082 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.595751047 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.595763922 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.595773935 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.596045971 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.596141100 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.596276999 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:02.596380949 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:02.596653938 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:02.596735954 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:02.635106087 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:02.681674004 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.683413982 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.683521986 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.683597088 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.683686018 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.683696032 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.686537981 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.686537981 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.686558008 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.688483000 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.708796978 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.873186111 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.873203039 CEST	443	49352	151.101.67.6	192.168.11.12
Apr 23, 2024 16:09:02.874366045 CEST	49352	443	192.168.11.12	151.101.67.6
Apr 23, 2024 16:09:02.902023077 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.902173996 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.902302980 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:02.904040098 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:02.904325008 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.051975012 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.052221060 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.052432060 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.052656889 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.053035975 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.319161892 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.319392920 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.319405079 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.319634914 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.320285082 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.324402094 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.329171896 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.338483095 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.343061924 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.347846985 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.348660946 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.349989891 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.357294083 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.366632938 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.367732048 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.369986057 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.375977993 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.385339022 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.386135101 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.389141083 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.394759893 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.404126883 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.413541079 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.414288044 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.422873020 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.423831940 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.432329893 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.441704035 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.445082903 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.451050043 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.460453987 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.461615086 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.469809055 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.589112043 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.591435909 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.596115112 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.596868038 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:03.610174894 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.614798069 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:03.615513086 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:04.456788063 CEST	49327	443	192.168.11.12	17.248.193.17
Apr 23, 2024 16:09:04.457865000 CEST	49327	443	192.168.11.12	17.248.193.17
Apr 23, 2024 16:09:04.720557928 CEST	443	49327	17.248.193.17	192.168.11.12
Apr 23, 2024 16:09:04.721138000 CEST	443	49327	17.248.193.17	192.168.11.12
Apr 23, 2024 16:09:04.721317053 CEST	49327	443	192.168.11.12	17.248.193.17
Apr 23, 2024 16:09:04.724000931 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:04.991092920 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:06.227158070 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:06.231239080 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:06.494205952 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:06.494714022 CEST	49349	443	192.168.11.12	17.248.193.20
Apr 23, 2024 16:09:06.498600006 CEST	443	49349	17.248.193.20	192.168.11.12
Apr 23, 2024 16:09:18.091064930 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:18.091090918 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:18.091790915 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:18.093137980 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:18.093156099 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:18.421061039 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:18.421979904 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:18.427398920 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:18.427408934 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:18.429167032 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:18.429863930 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:18.429965973 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:18.430277109 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:19.396066904 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:19.396219015 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:19.397263050 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:19.397277117 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:19.397975922 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:19.398248911 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:19.440185070 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.187057972 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.187146902 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.187191963 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.187931061 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.187931061 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.187942028 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.188452959 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.188544035 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.198101044 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.198739052 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.198753119 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.199282885 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.201494932 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.201545000 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.202065945 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.202156067 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.203665018 CEST	49360	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.203680038 CEST	443	49360	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.442567110 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.442605019 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.443367004 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.444273949 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.444288969 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.445199966 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.445697069 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.445712090 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.446290016 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.449120045 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.449132919 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.449987888 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.450006008 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.450193882 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.450202942 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.452455044 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.452472925 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.453001976 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.454452038 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.454463005 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.458487988 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.458507061 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.459162951 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.459832907 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.459844112 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.622864962 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.622895956 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:20.623488903 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.624197960 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.624212980 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:20.771667957 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.772377014 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.773029089 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.773036957 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.773655891 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.774049997 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.774166107 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.774478912 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.774919033 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.775484085 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.776040077 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.776129007 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.776518106 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.776527882 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.776662111 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.777097940 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.777106047 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.777421951 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.777579069 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.777662992 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.778214931 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.778274059 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.778274059 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.778546095 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.778656006 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.779251099 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.780536890 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.780632019 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.781122923 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.781133890 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.781620979 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.781702995 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.781836987 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.782248020 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.782651901 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.783076048 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.783085108 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.783241034 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.784409046 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.784419060 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.784682989 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.785067081 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.785280943 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.785330057 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.785366058 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.785903931 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.786086082 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.786619902 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.787412882 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.787517071 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.787902117 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.788156033 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.788162947 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.788705111 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.789032936 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.789136887 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.789239883 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.789685965 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.789695978 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.790220976 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.790473938 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.790729046 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.824237108 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.832215071 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.832727909 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.832746029 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.835930109 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:20.835947037 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.836185932 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.836193085 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:20.950515985 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:20.951159954 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.951499939 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.951508999 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:20.952475071 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:20.953095913 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.953248978 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.953406096 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.965240002 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.965403080 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:20.965562105 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.965926886 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:20.965938091 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:20.966470003 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.148545027 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.148588896 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.148653984 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.148689032 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.148798943 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.150382042 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.150398016 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.150573015 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.150573015 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.150899887 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.151173115 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.151752949 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.151799917 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.151866913 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.151956081 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.151976109 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.152435064 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.152524948 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.152654886 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.152915001 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.153409004 CEST	49363	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.153424025 CEST	443	49363	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.154630899 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.154680014 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.154777050 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.154804945 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.154853106 CEST	49364	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.154866934 CEST	443	49364	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.155281067 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.155289888 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.155502081 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.155592918 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.156126022 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.158607006 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.158665895 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.158734083 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.159265995 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.159452915 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.159471035 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.159483910 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.159662008 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.160216093 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.160216093 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.160226107 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.160831928 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.161201000 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.164659023 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.165436029 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.165638924 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.166361094 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.166373014 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.167094946 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.170269012 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.170608044 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.171372890 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.171385050 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.171550035 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.171561003 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.172076941 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.172370911 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.176924944 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.177504063 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.177517891 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.178400040 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.181305885 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.181807995 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.182076931 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.182087898 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.182415962 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.182426929 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.182750940 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.183084965 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.184264898 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.185133934 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.185144901 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.186007023 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.192429066 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.192837954 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.193115950 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.193128109 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.193469048 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.193741083 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.195377111 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.195440054 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.196131945 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.196144104 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.196743965 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.267462015 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.268949032 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.278526068 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.280184984 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.280280113 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.280603886 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.307435036 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.307506084 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.309272051 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.309294939 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.309972048 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.312927961 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.313437939 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.313566923 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.313721895 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.313734055 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.314368963 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.314378977 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.314546108 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.314914942 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.317568064 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.318424940 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.318435907 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.318984032 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.319463015 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.319713116 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.319722891 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.320331097 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.323095083 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.323781967 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.323792934 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.324026108 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.324090004 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.324769020 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.324949026 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.324959993 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.325617075 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.330127954 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.331178904 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.331190109 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.332452059 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.334264040 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.335042000 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.335053921 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.335388899 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.336457014 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.336680889 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.336692095 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.337301970 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.341263056 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.341368914 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.341901064 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.341917992 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.342564106 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.345366955 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.346098900 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.346112967 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.346535921 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.346718073 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.347893953 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.347909927 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.349416018 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.350440979 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.350445986 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.350509882 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.351785898 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.351798058 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.351953030 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.352232933 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.352278948 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.352345943 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.352411032 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.352411032 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.352420092 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.352576971 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.354248047 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.354262114 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.354422092 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.355990887 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.356374025 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.356992960 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.357006073 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.357367992 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.357443094 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.358136892 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.358329058 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.358340025 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.359060049 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.359658003 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.360007048 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.360359907 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.363470078 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.364357948 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.364375114 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.365029097 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.367502928 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.368164062 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.368181944 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.368556976 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.368990898 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.369359970 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.369370937 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.370127916 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.374584913 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.375232935 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.375248909 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.375818014 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.378081083 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.378639936 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.378654003 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.379314899 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.379754066 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.380372047 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.380383015 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.381139040 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.385664940 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.386758089 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.386770010 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.387639999 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.387818098 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.388422012 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.388432026 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.389198065 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.389863014 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.390640974 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.390651941 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.391645908 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.396392107 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.397279978 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.397279978 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.397294044 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.397960901 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.397970915 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.398129940 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.398583889 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.400002003 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.400639057 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.400649071 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.401551008 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.406979084 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.407067060 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.407219887 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.407763958 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.407776117 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.407944918 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.407949924 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.408680916 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.408927917 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.410253048 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.410321951 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.411205053 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.411221027 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.411919117 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.416610003 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.417254925 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.417267084 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.417907000 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.418097973 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.418679953 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.418687105 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.419320107 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.420372963 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.421113968 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.421123981 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.421905041 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.426187038 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.426852942 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.426862955 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.427639961 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.428673983 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.428723097 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.429615974 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.429626942 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.430161953 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.430459976 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.431189060 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.431199074 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.431889057 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.435833931 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.436649084 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.439482927 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.440642118 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.440664053 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.440768957 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.442042112 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.442051888 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.442327023 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.442337990 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.442949057 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.443170071 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.444896936 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.444947958 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.445642948 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.445657015 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.446512938 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.466336966 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.468084097 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.468099117 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.468903065 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.470678091 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.470724106 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.471385956 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.471396923 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.472002983 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.472379923 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.473206043 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.473217010 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.474172115 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.476495028 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.476665020 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.477391958 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.477404118 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.477456093 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.477466106 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.478266001 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.478432894 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.479187012 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.479907990 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.479918003 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.480410099 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.480624914 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.481256008 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.481266022 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.481924057 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.484574080 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.485220909 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.485230923 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.485919952 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.486881018 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.487482071 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.487492085 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.488095045 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.488110065 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.488255978 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.488437891 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.488714933 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.488905907 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.489098072 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.489626884 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.489636898 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.490111113 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.490196943 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.490288973 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.490417957 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.490511894 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.490521908 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.490612984 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.491101980 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.492203951 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.492965937 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.492975950 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.493746042 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.494587898 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.495567083 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.495570898 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.495582104 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.496356010 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.496366024 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.496526957 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.496978045 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.499386072 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.500051022 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.500061035 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.500999928 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.501761913 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.502511978 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.502522945 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.502798080 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.502841949 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.503423929 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.503664970 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.503674984 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.504232883 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.506644011 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.507358074 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.507368088 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.508222103 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.508982897 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.509080887 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.509684086 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.509695053 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.509993076 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.510205984 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.510205984 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.510287046 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.510680914 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.510689974 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.510909081 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.511163950 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.511259079 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.511305094 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.511837006 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.512238026 CEST	49368	443	192.168.11.12	143.244.49.177
Apr 23, 2024 16:09:21.512253046 CEST	443	49368	143.244.49.177	192.168.11.12
Apr 23, 2024 16:09:21.513853073 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.514508009 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.514519930 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.515105009 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.516268969 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.516928911 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.516938925 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.517113924 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.517640114 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.517734051 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.517744064 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.518493891 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.521003008 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.521127939 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.522191048 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.522202015 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.522588015 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.523443937 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.524352074 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.524375916 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.524404049 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.524451971 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.528165102 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.528919935 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.529141903 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.529141903 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.529154062 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.529159069 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.529835939 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.529925108 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.530055046 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.530662060 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.531514883 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.532147884 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.532157898 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.532319069 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.532319069 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.532330036 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.533071995 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.533241034 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.535393000 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.536075115 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.536084890 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.536530018 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.537219048 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.537889957 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.538599014 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.538742065 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.538801908 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.539551973 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.539562941 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.540218115 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.540484905 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.541615963 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.542344093 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.542354107 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.542629004 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.543395042 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.543565035 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.543575048 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.544352055 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.546039104 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.546104908 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.546679974 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.546694994 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.547380924 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.548784971 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.549374104 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.549385071 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.549844980 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.550031900 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.550692081 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.553123951 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.553397894 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.553819895 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.554044008 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.554054022 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.554730892 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.555944920 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.556689978 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.556904078 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.556915045 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.557446957 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.557456970 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.557616949 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.557975054 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.560599089 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.561243057 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.561254025 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.561960936 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.563185930 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.563889980 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.563904047 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.563914061 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.564610004 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.564620972 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.564779997 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.565347910 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.567795992 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.567837954 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.568496943 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.568507910 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.569072008 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.570425034 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.571085930 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.571346998 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.571357965 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.571891069 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.571901083 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.572060108 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.572638035 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.574973106 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.575582027 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.575592995 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.576647997 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.577727079 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.578277111 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.578507900 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.578521967 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.579413891 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.579426050 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.579751968 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.580374956 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.582180023 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.582874060 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.582887888 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.583652020 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.584953070 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.585534096 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.585578918 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.585767031 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.585781097 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.586308956 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.586322069 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.586468935 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.586875916 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.587682009 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.589251995 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.589893103 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.589906931 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.590854883 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.591835022 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.592719078 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.593301058 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.593312979 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.593641043 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.593650103 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.594355106 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.594522953 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.596354961 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.597225904 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.597239017 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.597821951 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.598763943 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.599343061 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.599354029 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.599797964 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.600188971 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.600409031 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.600416899 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.601279974 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.603071928 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.603827953 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.603837967 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.604387045 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.605379105 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.605959892 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.605969906 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.606636047 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.606820107 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.607337952 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.607345104 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.607975006 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.609869003 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.609980106 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.610551119 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.610641003 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.610925913 CEST	49366	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.610943079 CEST	443	49366	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.611731052 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.612344027 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.612354994 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.613162041 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.613445997 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.614423037 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.614433050 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.615202904 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.618155003 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.618869066 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.618880033 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.619636059 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.620162964 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.620819092 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.620829105 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.621871948 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.624349117 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.625188112 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.626801968 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.626882076 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.627417088 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.627612114 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.627624035 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.628142118 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.628150940 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.628290892 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.628879070 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.633564949 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.633734941 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.634255886 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.634269953 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.634426117 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.634438038 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.634802103 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.635399103 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.639836073 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.640120983 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.640827894 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.640837908 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.640999079 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.641520023 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.643474102 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.643775940 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.644154072 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.644165039 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.644601107 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.644610882 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.644771099 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.645368099 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.652745008 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.652844906 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.652905941 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.652942896 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.654521942 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.654532909 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.654711008 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.654721022 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.654905081 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.655252934 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.656229019 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.656430006 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.656440973 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.656877041 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.657224894 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.657458067 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.657691956 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.657701969 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.658396959 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.659024000 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.659699917 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.659708977 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.660779953 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.660923004 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.661453962 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.661459923 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.662350893 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.662821054 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.663470030 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.663477898 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.664083004 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.665013075 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.665618896 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.665625095 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.666570902 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.666775942 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.667368889 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.667373896 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.668071032 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.669080973 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.669698954 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.669709921 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.670326948 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.671247005 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.671415091 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.671422958 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.672441959 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.673094988 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.673733950 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.673744917 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.673973083 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.674207926 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.674597979 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.674604893 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.675455093 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.677011967 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.677659035 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.677694082 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.677700996 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.678419113 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.678589106 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.679420948 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.680028915 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.680033922 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.680816889 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.681025982 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.681788921 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.681794882 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.682657003 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.683015108 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.683789968 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.683796883 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.684583902 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.684684038 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.685364008 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.685369968 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.686155081 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.686573982 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.687233925 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.687241077 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.687856913 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.688450098 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.688832998 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.689213037 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.689218998 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.689810038 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.690104008 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.690746069 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.690752029 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.691303968 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.692153931 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.692234993 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.692733049 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.692739964 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.693265915 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.693485022 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.694163084 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.694169044 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.694621086 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.694814920 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.695837975 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.696466923 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.697012901 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.697748899 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.697953939 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.697962999 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.698492050 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.698497057 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.698661089 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.699197054 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.700381994 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.701308966 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.702147007 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.702157021 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.702317953 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.702323914 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.703850985 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.705014944 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.705965042 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.705976963 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.706155062 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.706165075 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.707165003 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.707210064 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.707952023 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.708408117 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.708419085 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.708648920 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.709420919 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.709430933 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.709709883 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.709894896 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.710180044 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.710444927 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.710542917 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.711481094 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.711488962 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.712107897 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.712119102 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.713285923 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.713295937 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.713913918 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.713917017 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.714560032 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.714566946 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.715212107 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.715504885 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.715631962 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.715718985 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.716126919 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.716134071 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.716653109 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.717287064 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.717952967 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.717959881 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.718683004 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.718851089 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.719038963 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.719605923 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.719611883 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.720616102 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.720818996 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.721267939 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.722230911 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.722558975 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.723022938 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.723031044 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.723192930 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.723200083 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.723859072 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.724029064 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.724544048 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.725584030 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.725867033 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.726377964 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.726385117 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.726547956 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.726552010 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.727082014 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.727252007 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.728419065 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.728842974 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.729032993 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.729521036 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.729527950 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.729696035 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.729700089 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.730227947 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.730397940 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.732034922 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.732259989 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.732880116 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.732887983 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.733048916 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.733052969 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.733577013 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.733827114 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.735313892 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.735394955 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.735505104 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.735578060 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.736083984 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.736284971 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.736557007 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.736562967 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.737169981 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.738353968 CEST	49362	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.738364935 CEST	443	49362	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.738787889 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.739615917 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.740329027 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.741050005 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.741060019 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.741681099 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.743647099 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.746849060 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.746959925 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.747596979 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.747607946 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.747788906 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.748259068 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.750036001 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.750612974 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.750622034 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.750830889 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.751197100 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.753192902 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.753798008 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.753807068 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.754381895 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.756298065 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.757009029 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.757018089 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.757580042 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.759418964 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.760324001 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.760334015 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.760973930 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.761754036 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.762511969 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.763132095 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.763140917 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.763911009 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.765623093 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.766499043 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.766509056 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.767239094 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.768807888 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.768862009 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.769442081 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.769454002 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.770138979 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.771666050 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.772296906 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.772306919 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.773961067 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.774682045 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.775346994 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.775356054 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.775934935 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.776294947 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.777652025 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.778542042 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.779125929 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.780091047 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.780102015 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.780771971 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.782213926 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.783045053 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.783056021 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.783673048 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.785032988 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.785636902 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.785648108 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.785861015 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.786173105 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.787848949 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.788526058 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.788537025 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.789319992 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.790766954 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.790811062 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.791404963 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.791415930 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.791857958 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.792105913 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.793546915 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.794223070 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.794234037 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.794869900 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.796376944 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.797280073 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.797290087 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.798662901 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.799207926 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.799899101 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.799910069 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.801522017 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.802036047 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.802983046 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.802994013 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.803626060 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.804856062 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.805694103 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.805701971 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.806349039 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.807652950 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.808480978 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.808491945 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.808819056 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.809146881 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.810539961 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.811161995 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.811172962 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.811783075 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.813354969 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.813975096 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.814769983 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.815354109 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.815362930 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.815978050 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.817580938 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.818161964 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.818171024 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.818577051 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.818810940 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.820328951 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.821060896 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.821069956 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.822830915 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.823133945 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.823175907 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.823884964 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.823894978 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.824538946 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.825663090 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.826364994 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.826586008 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.826595068 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.827470064 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.828033924 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.828743935 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.828753948 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.829380989 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.830465078 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.831265926 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.831275940 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.831532955 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.832084894 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.832861900 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.833463907 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.833476067 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.834114075 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.835200071 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.836103916 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.836116076 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.836688042 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.836987019 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.837639093 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.838587046 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.838597059 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.839248896 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.839788914 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.840504885 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.840516090 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.841176987 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.842067003 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.842957973 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.842968941 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.843776941 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.844485044 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.845021009 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.845031977 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.845160961 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.845930099 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.846555948 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.847165108 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.847174883 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.847820044 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.848759890 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.848841906 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.848906040 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.849381924 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.849587917 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.850250959 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.854176998 CEST	49367	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.854188919 CEST	443	49367	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.916290045 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.916326046 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.917159081 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.918170929 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.918185949 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.919387102 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.919404984 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.920243025 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.921005011 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.921016932 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.997823000 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.997859955 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:21.998492956 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.999567986 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:21.999581099 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.241137981 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.242892981 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.243470907 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.243482113 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.244040966 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.244272947 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.244925022 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.245016098 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.245692015 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.245799065 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.246243954 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.246253014 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.246395111 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.246684074 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.246778965 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.247369051 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.247982025 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.248054981 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.248203993 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.248552084 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.288196087 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.292220116 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.325161934 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.326893091 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.327482939 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.327492952 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.328506947 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.329396009 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.329485893 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.329758883 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.330584049 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.330678940 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.331111908 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.331351995 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.331363916 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.331938028 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.629616022 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.629673958 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.629757881 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.629832029 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.631058931 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.631187916 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.631187916 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.631707907 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.633172035 CEST	49369	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.633183956 CEST	443	49369	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.633335114 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.633400917 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.633462906 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.633487940 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.633536100 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.634114027 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.634125948 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.634308100 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.634438038 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.634840965 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.635451078 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.644401073 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.645189047 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.645200014 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.645773888 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.651757956 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.652708054 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.657213926 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.657289028 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.657943010 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.658032894 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.658617973 CEST	49370	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.658631086 CEST	443	49370	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.714272976 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.714397907 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:22.716093063 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.716150999 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.717365980 CEST	49371	443	192.168.11.12	34.120.41.26
Apr 23, 2024 16:09:22.717381954 CEST	443	49371	34.120.41.26	192.168.11.12
Apr 23, 2024 16:09:39.658200026 CEST	49399	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:39.658320904 CEST	443	49399	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:39.659009933 CEST	49399	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:39.661732912 CEST	49399	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:39.661823034 CEST	443	49399	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.009139061 CEST	443	49399	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.010299921 CEST	49399	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.010299921 CEST	49399	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.079996109 CEST	49399	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.080096006 CEST	443	49399	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.080374002 CEST	443	49399	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.081213951 CEST	49399	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.081305027 CEST	49399	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.135868073 CEST	49400	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.135912895 CEST	443	49400	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.136706114 CEST	49400	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.138453007 CEST	49400	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.138492107 CEST	443	49400	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.483494043 CEST	443	49400	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.484369040 CEST	49400	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.484453917 CEST	49400	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.502434969 CEST	49400	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.502568007 CEST	443	49400	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.502904892 CEST	443	49400	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:40.503882885 CEST	49400	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:40.503884077 CEST	49400	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:41.849589109 CEST	49404	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:41.849710941 CEST	443	49404	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:41.850476027 CEST	49404	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:41.851140976 CEST	49404	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:41.851217031 CEST	443	49404	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:42.195787907 CEST	443	49404	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:42.196711063 CEST	49404	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:42.196711063 CEST	49404	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:42.205904007 CEST	49404	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:42.206161022 CEST	443	49404	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:42.206757069 CEST	443	49404	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:42.206912041 CEST	49404	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:42.207360983 CEST	49404	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.032284975 CEST	49405	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.032373905 CEST	443	49405	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.033138990 CEST	49405	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.034598112 CEST	49405	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.034662962 CEST	443	49405	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.365494013 CEST	443	49405	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.366193056 CEST	49405	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.366193056 CEST	49405	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.393034935 CEST	49405	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.393224955 CEST	443	49405	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.393711090 CEST	443	49405	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.393778086 CEST	49405	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.394335985 CEST	49405	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.442681074 CEST	49406	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.442802906 CEST	443	49406	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.443744898 CEST	49406	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.446254969 CEST	49406	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.446357965 CEST	443	49406	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.783055067 CEST	443	49406	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.783873081 CEST	49406	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.783874035 CEST	49406	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.788295031 CEST	49406	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.788542986 CEST	443	49406	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.789113045 CEST	49406	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.821870089 CEST	49407	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.821993113 CEST	443	49407	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:44.822765112 CEST	49407	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.825565100 CEST	49407	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:44.825668097 CEST	443	49407	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.159955978 CEST	443	49407	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.160933971 CEST	49407	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.160934925 CEST	49407	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.174438953 CEST	49407	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.174700975 CEST	443	49407	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.175335884 CEST	49407	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.175363064 CEST	443	49407	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.176029921 CEST	49407	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.209299088 CEST	49408	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.209439993 CEST	443	49408	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.210144997 CEST	49408	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.213102102 CEST	49408	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.213165998 CEST	443	49408	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.545094013 CEST	443	49408	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.546135902 CEST	49408	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.546293974 CEST	49408	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.571115971 CEST	49408	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.571326017 CEST	443	49408	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.571793079 CEST	443	49408	151.101.3.6	192.168.11.12
Apr 23, 2024 16:09:45.572403908 CEST	49408	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:09:45.572736025 CEST	49408	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.412952900 CEST	49416	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.413044930 CEST	443	49416	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:07.413815022 CEST	49416	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.417121887 CEST	49416	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.417222023 CEST	443	49416	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:07.761250973 CEST	443	49416	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:07.762311935 CEST	49416	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.762311935 CEST	49416	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.767657995 CEST	49416	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.767772913 CEST	443	49416	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:07.768066883 CEST	443	49416	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:07.768901110 CEST	49416	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.769135952 CEST	49416	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.793941975 CEST	49417	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.794006109 CEST	443	49417	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:07.794734001 CEST	49417	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.795531988 CEST	49417	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:07.795578957 CEST	443	49417	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.143176079 CEST	443	49417	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.144277096 CEST	49417	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.144422054 CEST	49417	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.153532028 CEST	49417	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.153786898 CEST	443	49417	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.154453993 CEST	49417	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.190485954 CEST	49418	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.190608025 CEST	443	49418	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.191343069 CEST	49418	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.192259073 CEST	49418	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.192333937 CEST	443	49418	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.535542965 CEST	443	49418	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.536504984 CEST	49418	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.536504984 CEST	49418	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.547902107 CEST	49418	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.548031092 CEST	443	49418	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.548326969 CEST	443	49418	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.548850060 CEST	49418	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.548891068 CEST	49418	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.572691917 CEST	49419	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.572814941 CEST	443	49419	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.573672056 CEST	49419	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.574964046 CEST	49419	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.575063944 CEST	443	49419	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.921809912 CEST	443	49419	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.922859907 CEST	49419	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.922859907 CEST	49419	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.933809042 CEST	49419	443	192.168.11.12	151.101.3.6
Apr 23, 2024 16:11:08.934113979 CEST	443	49419	151.101.3.6	192.168.11.12
Apr 23, 2024 16:11:08.934768915 CEST	49419	443	192.168.11.12	151.101.3.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2024 16:09:11.647655964 CEST	53	53123	1.1.1.1	192.168.11.12
Apr 23, 2024 16:09:11.647761106 CEST	53	62393	1.1.1.1	192.168.11.12
Apr 23, 2024 16:09:11.659425020 CEST	53	61227	1.1.1.1	192.168.11.12
Apr 23, 2024 16:09:11.659517050 CEST	53	58636	1.1.1.1	192.168.11.12
Apr 23, 2024 16:09:17.924287081 CEST	65531	53	192.168.11.12	1.1.1.1
Apr 23, 2024 16:09:18.087956905 CEST	53	65531	1.1.1.1	192.168.11.12
Apr 23, 2024 16:09:20.453545094 CEST	50899	53	192.168.11.12	1.1.1.1
Apr 23, 2024 16:09:20.615392923 CEST	53	50899	1.1.1.1	192.168.11.12
Apr 23, 2024 16:09:23.693351030 CEST	53	52458	1.1.1.1	192.168.11.12
Apr 23, 2024 16:09:34.109570980 CEST	54322	53	192.168.11.12	1.1.1.1
Apr 23, 2024 16:09:39.486932039 CEST	53931	53	192.168.11.12	1.1.1.1
Apr 23, 2024 16:09:39.653069019 CEST	53	53931	1.1.1.1	192.168.11.12
Apr 23, 2024 16:10:15.484982014 CEST	53	58636	1.1.1.1	192.168.11.12
Apr 23, 2024 16:10:15.485878944 CEST	53	61227	1.1.1.1	192.168.11.12
Apr 23, 2024 16:11:07.240015984 CEST	54140	53	192.168.11.12	1.1.1.1
Apr 23, 2024 16:11:07.405663967 CEST	53	54140	1.1.1.1	192.168.11.12

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 23, 2024 16:09:11.648428917 CEST	192.168.11.12	1.1.1.1	2d01	(Port unreachable)	Destination Unreachable
Apr 23, 2024 16:09:11.648509979 CEST	192.168.11.12	1.1.1.1	8cc	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 23, 2024 16:09:17.924287081 CEST	192.168.11.12	1.1.1.1	0x6f	Standard query (0)	sandbox.optiturn.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:09:20.453545094 CEST	192.168.11.12	1.1.1.1	0x4347	Standard query (0)	js.honeybadger.io	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:09:34.109570980 CEST	192.168.11.12	1.1.1.1	0x804a	Standard query (0)	updates.cdn-apple.com	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:09:39.486932039 CEST	192.168.11.12	1.1.1.1	0x39b6	Standard query (0)	apis.apple.map.fastly.net	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:11:07.240015984 CEST	192.168.11.12	1.1.1.1	0x3e78	Standard query (0)	apis.apple.map.fastly.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 23, 2024 16:09:18.087956905 CEST	1.1.1.1	192.168.11.12	0x6f	No error (0)	sandbox.optiturn.com		34.120.41.26	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:09:20.615392923 CEST	1.1.1.1	192.168.11.12	0x4347	No error (0)	js.honeybadger.io	honeybadger-js.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:09:20.615392923 CEST	1.1.1.1	192.168.11.12	0x4347	No error (0)	honeybadger-js.b-cdn.net		143.244.49.177	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:09:34.275120974 CEST	1.1.1.1	192.168.11.12	0x804a	No error (0)	updates.cdn-apple.com	updates.cdn-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 23, 2024 16:09:39.653069019 CEST	1.1.1.1	192.168.11.12	0x39b6	No error (0)	apis.apple.map.fastly.net		151.101.131.6	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:09:39.653069019 CEST	1.1.1.1	192.168.11.12	0x39b6	No error (0)	apis.apple.map.fastly.net		151.101.67.6	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:09:39.653069019 CEST	1.1.1.1	192.168.11.12	0x39b6	No error (0)	apis.apple.map.fastly.net		151.101.3.6	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:09:39.653069019 CEST	1.1.1.1	192.168.11.12	0x39b6	No error (0)	apis.apple.map.fastly.net		151.101.195.6	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:11:07.405663967 CEST	1.1.1.1	192.168.11.12	0x3e78	No error (0)	apis.apple.map.fastly.net		151.101.3.6	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:11:07.405663967 CEST	1.1.1.1	192.168.11.12	0x3e78	No error (0)	apis.apple.map.fastly.net		151.101.67.6	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:11:07.405663967 CEST	1.1.1.1	192.168.11.12	0x3e78	No error (0)	apis.apple.map.fastly.net		151.101.131.6	A (IP address)	IN (0x0001)	false
Apr 23, 2024 16:11:07.405663967 CEST	1.1.1.1	192.168.11.12	0x3e78	No error (0)	apis.apple.map.fastly.net		151.101.195.6	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sandbox.optiturn.com

https:

js.honeybadger.io

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 23, 2024 16:09:02.325319052 CEST	151.101.67.6	443	192.168.11.12	49348	CN=bag.itunes.apple.com, O=Apple Inc., L=Cupertino, ST=California, C=US, SERIALNUMBER=C0806592, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US	CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 27 22:00:02 CET 2023 Wed Apr 29 14:54:50 CEST 2020	Sat May 25 23:10:02 CEST 2024 Thu Apr 11 01:59:59 CEST 2030	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-13172-18-16-11-10,29-23-24-25,0	5c118da645babe52f060d0754256a73c
Apr 23, 2024 16:09:02.325319052 CEST	151.101.67.6	443	192.168.11.12	49348	CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 29 14:54:50 CEST 2020	Thu Apr 11 01:59:59 CEST 2030		5c118da645babe52f060d0754256a73c
Apr 23, 2024 16:09:02.596045971 CEST	17.248.193.20	443	192.168.11.12	49349	CN=gateway.icloud.com, O=Apple Inc., ST=California, C=US C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1 C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1	C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1 CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE CN=Apple Root CA, OU=Apple Certification Authority, O=Apple Inc., C=US	Wed Nov 01 09:04:18 CET 2023 Wed Dec 12 13:00:00 CET 2018 Thu Apr 28 23:38:00 CEST 2022	Sat Nov 30 09:04:17 CET 2024 Wed May 07 14:00:00 CEST 2025 Wed May 07 02:00:00 CEST 2025	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-13172-18-16-11-10,29-23-24-25,0	5c118da645babe52f060d0754256a73c
					C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Dec 12 13:00:00 CET 2018	Wed May 07 14:00:00 CEST 2025
					C=US, O=Apple Inc., OU=Certification Authority, CN=Apple IST CA 2 - G1	CN=Apple Root CA, OU=Apple Certification Authority, O=Apple Inc., C=US	Thu Apr 28 23:38:00 CEST 2022	Wed May 07 02:00:00 CEST 2025
Apr 23, 2024 16:09:02.683597088 CEST	151.101.67.6	443	192.168.11.12	49352	CN=bag.itunes.apple.com, O=Apple Inc., L=Cupertino, ST=California, C=US, SERIALNUMBER=C0806592, OID.1.3.6.1.4.1.311.60.2.1.2=California, OID.1.3.6.1.4.1.311.60.2.1.3=US, OID.2.5.4.15=Private Organization CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US	CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 27 22:00:02 CET 2023 Wed Apr 29 14:54:50 CEST 2020	Sat May 25 23:10:02 CEST 2024 Thu Apr 11 01:59:59 CEST 2030	771,49196-49195-49188-49187-49162-49161-52393-49200-49199-49192-49191-49172-49171-52392-157-156-61-60-53-47-49160-49170-10,65281-0-23-13-5-13172-18-16-11-10,29-23-24-25,0	5c118da645babe52f060d0754256a73c
Apr 23, 2024 16:09:02.683597088 CEST	151.101.67.6	443	192.168.11.12	49352	CN=Apple Public EV Server RSA CA 2 - G1, O=Apple Inc., C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Apr 29 14:54:50 CEST 2020	Thu Apr 11 01:59:59 CEST 2030		5c118da645babe52f060d0754256a73c

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.11.12	49360	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:19 UTC	443	OUT	GET /session/new?mobile=1 HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB
2024-04-23 14:09:20 UTC	1467	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-UA-Compatible: IE=Edge,chrome=1 ETag: "5fb694c59dd7f97e7e2e174e9e5c6acb" Cache-Control: max-age=0, private, must-revalidate Set-Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903; path=/; expires=Tue, 23-Apr-2024 15:39:20 GMT; secure; HttpOnly X-Request-Id: a6789ad423443db04a925e4e378cc933 X-Runtime: 0.574102 Date: Tue, 23 Apr 2024 14:09:20 GMT X-Rack-Cache: miss Vary: Origin Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-23 14:09:20 UTC	1467	IN	Data Raw: 31 32 37 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 4f 70 74 69 74 75 72 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 27 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 79 65 73 27 20 6e 61 6d 65 3d 27 61 70 70 6c 65 2d 74 6f 75 63 68 2d 66 75 6c 6c 73 63 72 65 65 6e 27 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 79 65 73 27 20 6e 61 6d 65 3d 27 61 70 70 6c 65 2d 6d 6f 62 69 6c 65 2d 77 65 62 2d 61 70 70 2d 63 61 70 61 62 6c 65 27 3e 0a Data Ascii: 127e<!DOCTYPE html><html><head><title>Optiturn</title><meta content='width=device-width, initial-scale=1, user-scalable=no' name='viewport'><meta content='yes' name='apple-touch-fullscreen'><meta content='yes' name='apple-mobile-web-app-capable'>
2024-04-23 14:09:20 UTC	1467	IN	Data Raw: 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 61 75 74 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 20 6e 61 6d 65 3d 22 63 73 72 66 2d 70 61 72 61 6d 22 20 2f 3e 0a 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2b 32 61 69 4e 58 56 51 4c 57 38 57 42 38 68 59 4b 2f 53 52 55 4b 30 6c 41 2b 37 54 4b 30 78 64 65 51 46 4e 6e 4f 4e 43 63 46 45 3d 22 20 6e 61 6d 65 3d 22 63 73 72 66 2d 74 6f 6b 65 6e 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 70 61 67 65 20 62 69 67 27 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 6c 6f 61 64 69 6e 67 2d 6f 76 65 72 6c 61 79 27 20 73 74 79 6c 65 3d 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 27 3e 3c 2f 64 69 76 3e 0a 3c Data Ascii: avascript"></script><meta content="authenticity_token" name="csrf-param" /><meta content="+2aiNXVQLW8WB8hYK/SRUK0lA+7TK0xdeQFNnONCcFE=" name="csrf-token" /></head><body><div class='page big'><div class='loading-overlay' style='display:none'></div><
2024-04-23 14:09:20 UTC	1467	IN	Data Raw: 65 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 2f 3e 0a 3c 68 34 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 6c 6f 67 69 6e 5f 6c 61 62 65 6c 22 3e 55 73 65 72 6e 61 6d 65 3c 2f 6c 61 62 65 6c 3e 3c 2f 68 34 3e 0a 3c 69 6e 70 75 74 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 6f 66 66 22 20 61 75 74 6f 63 6f 72 72 65 63 74 3d 22 6f 66 66 22 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 2d 69 6e 70 75 74 22 20 69 64 3d 22 6c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 6c 6f 67 69 6e 22 20 72 65 71 75 69 72 65 64 3d 22 72 65 71 75 69 72 65 64 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 2f 3e 0a 3c 64 69 76 20 63 6c 61 73 73 3d 27 70 61 73 73 77 6f 72 64 2d 61 72 65 61 20 72 65 76 65 61 6c 2d 69 66 2d 61 63 74 69 Data Ascii: e" type="hidden" /><h4><label for="login_label">Username</label></h4><input autocapitalize="off" autocomplete="off" autocorrect="off" class="login-input" id="login" name="login" required="required" type="text" /><div class='password-area reveal-if-acti
2024-04-23 14:09:20 UTC	346	IN	Data Raw: 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 2c 69 5b 72 5d 2e 6c 3d 31 2a 6e 65 77 20 44 61 74 65 28 29 3b 61 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6f 29 2c 0a 20 20 20 20 6d 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6f 29 5b 30 5d 3b 61 2e 61 73 79 6e 63 3d 31 3b 61 2e 73 72 63 3d 67 3b 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 6d 29 0a 20 20 20 20 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 27 73 63 72 69 70 74 27 2c 27 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 27 2c 27 67 61 27 29 3b 0a 20 20 20 20 0a 20 20 20 20 67 61 28 27 63 72 65 61 74 65 27 2c 20 27 55 41 2d Data Ascii: \|[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.11.12	49362	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:20 UTC	509	OUT	GET /assets/application-mobile-7ad2940818d75a843437e99a696611a0.css HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: text/css,/;q=0.1 Referer: https://sandbox.optiturn.com/session/new?mobile=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
2024-04-23 14:09:21 UTC	1189	IN	HTTP/1.1 200 OK Last-Modified: Mon, 22 Apr 2024 15:47:24 GMT Content-Type: text/css Date: Tue, 23 Apr 2024 14:09:21 GMT Cache-Control: private X-Rack-Cache: miss Vary: Origin Content-Length: 182268 Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 6f 70 74 69 74 75 72 6e 2d 69 63 6f 2d 66 6f 6e 74 27 3b 73 72 63 3a 75 72 6c 28 22 2f 66 6f 6e 74 73 2f 6f 70 74 69 74 75 72 6e 2d 69 63 6f 2d 66 6f 6e 74 2e 65 6f 74 22 29 3b 73 72 63 3a 75 72 6c 28 22 2f 66 6f 6e 74 73 2f 6f 70 74 69 74 75 72 6e 2d 69 63 6f 2d 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 2f 66 6f 6e 74 73 2f 6f 70 74 69 74 75 72 6e 2d 69 63 6f 2d 66 6f 6e 74 2e 74 74 66 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 75 72 6c 28 22 2f 66 6f 6e 74 73 2f 6f 70 74 69 74 75 72 6e 2d 69 63 6f 2d 66 6f 6e 74 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 Data Ascii: @font-face{font-family:'optiturn-ico-font';src:url("/fonts/optiturn-ico-font.eot");src:url("/fonts/optiturn-ico-font.eot?#iefix") format("embedded-opentype"),url("/fonts/optiturn-ico-font.ttf") format("truetype"),url("/fonts/optiturn-ico-font.woff") forma
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 30 22 7d 2e 69 63 6f 6e 2d 6e 6f 74 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 31 22 7d 2e 69 63 6f 6e 2d 65 6e 76 65 6c 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 32 22 7d 2e 69 63 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 33 22 7d 2e 69 63 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 34 22 7d 2e 69 63 6f 6e 2d 6d 61 70 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 35 22 7d 2e 69 63 6f 6e 2d 6d 61 70 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 31 36 22 7d 2e 69 63 6f 6e 2d 63 6c 6f 63 6b 32 3a 62 65 66 Data Ascii: re{content:"\e610"}.icon-notebook:before{content:"\e611"}.icon-envelop:before{content:"\e612"}.icon-location:before{content:"\e613"}.icon-location2:before{content:"\e614"}.icon-map2:before{content:"\e615"}.icon-map3:before{content:"\e616"}.icon-clock2:bef
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 36 33 32 22 7d 2e 69 63 6f 6e 2d 75 6e 6c 6f 63 6b 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 33 22 7d 2e 69 63 6f 6e 2d 73 65 74 74 69 6e 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 34 22 7d 2e 69 63 6f 6e 2d 65 71 75 61 6c 69 7a 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 35 22 7d 2e 69 63 6f 6e 2d 63 6f 67 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 36 22 7d 2e 69 63 6f 6e 2d 63 6f 67 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 37 22 7d 2e 69 63 6f 6e 2d 70 69 65 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 38 22 7d 2e 69 63 6f 6e 2d 62 61 72 73 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 33 39 Data Ascii: 632"}.icon-unlocked:before{content:"\e633"}.icon-settings:before{content:"\e634"}.icon-equalizer:before{content:"\e635"}.icon-cog2:before{content:"\e636"}.icon-cog3:before{content:"\e637"}.icon-pie2:before{content:"\e638"}.icon-bars3:before{content:"\e639
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6e 2d 69 6e 66 6f 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 35 64 22 7d 2e 69 63 6f 6e 2d 62 6c 6f 63 6b 65 64 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 35 65 22 7d 2e 69 63 6f 6e 2d 63 61 6e 63 65 6c 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 35 66 22 7d 2e 69 63 6f 6e 2d 63 68 65 63 6b 6d 61 72 6b 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 36 30 22 7d 2e 69 63 6f 6e 2d 73 70 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 36 31 22 7d 2e 69 63 6f 6e 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 2e 69 63 6f 6e 2d 63 68 65 63 6b 6d 61 72 6b 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: n-info3:before{content:"\e65d"}.icon-blocked2:before{content:"\e65e"}.icon-cancel-circle:before{content:"\e65f"}.icon-checkmark-circle:before{content:"\e660"}.icon-spam:before{content:"\e661"}.icon-close:before{content:"\e001"}.icon-checkmark2:before{cont
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6e 6e 65 72 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 37 39 36 22 7d 2e 69 63 6f 6e 2d 66 69 6c 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 38 35 62 22 7d 2e 69 63 6f 6e 2d 67 69 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 37 62 35 22 7d 2e 69 63 6f 6e 2d 63 6f 6e 74 72 61 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 37 65 39 22 7d 2e 69 63 6f 6e 2d 68 65 61 72 74 33 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 37 65 64 22 7d 2e 69 63 6f 6e 2d 68 65 61 72 74 34 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 37 65 65 22 7d 2e 69 63 6f 6e 2d 68 65 61 72 74 2d 62 72 6f 6b 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 37 65 66 22 7d 2e 69 63 6f Data Ascii: nner3:before{content:"\e796"}.icon-filter:before{content:"\e85b"}.icon-gift:before{content:"\e7b5"}.icon-contrast:before{content:"\e7e9"}.icon-heart3:before{content:"\e7ed"}.icon-heart4:before{content:"\e7ee"}.icon-heart-broken:before{content:"\e7ef"}.ico
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6e 74 3a 22 5c 65 36 39 31 22 7d 2e 69 63 6f 6e 2d 65 72 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 32 22 7d 2e 69 63 6f 6e 2d 62 6c 6f 63 6b 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 33 22 7d 2e 69 63 6f 6e 2d 68 65 6c 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 34 22 7d 2e 69 63 6f 6e 2d 69 6e 66 6f 32 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 35 22 7d 2e 69 63 6f 6e 2d 71 75 65 73 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 36 22 7d 2e 69 63 6f 6e 2d 68 69 73 74 6f 72 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 36 39 37 22 7d 2e 69 63 6f 6e 2d 61 64 64 2d 74 6f 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: nt:"\e691"}.icon-erase:before{content:"\e692"}.icon-blocked:before{content:"\e693"}.icon-help:before{content:"\e694"}.icon-info2:before{content:"\e695"}.icon-question:before{content:"\e696"}.icon-history:before{content:"\e697"}.icon-add-to-list:before{con
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 2c 69 66 72 61 6d 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 2c 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 62 69 67 2c 63 69 74 65 2c 63 6f 64 65 2c 64 65 6c 2c 64 66 6e 2c 65 6d 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 74 2c 76 61 72 2c 62 2c 75 2c 69 2c 63 65 6e 74 65 72 2c 64 6c 2c 64 74 2c 64 64 2c 6f 6c 2c 75 6c 2c 6c 69 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 74 61 62 6c 65 2c 63 61 70 74 69 6f 6e 2c 74 62 6f 64 79 2c 74 66 6f 6f 74 2c 74 68 65 61 64 2c 74 72 2c 74 68 2c 74 64 2c 61 72 74 69 63 6c 65 2c 61 Data Ascii: ,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,a
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6c 6f 63 61 74 69 6f 6e 5f 62 69 6e 5f 63 68 61 6e 67 65 5f 64 65 74 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 66 32 66 32 66 7d 23 64 69 73 70 6f 73 69 74 69 6f 6e 2e 74 65 73 74 2c 2e 74 65 73 74 23 6c 6f 63 61 74 69 6f 6e 5f 62 69 6e 5f 63 68 61 6e 67 65 5f 64 65 74 61 69 6c 2c 23 64 69 73 70 6f 73 69 74 69 6f 6e 2e 74 65 73 74 69 6e 67 2c 2e 74 65 73 74 69 6e 67 23 6c 6f 63 61 74 69 6f 6e 5f 62 69 6e 5f 63 68 61 6e 67 65 5f 64 65 74 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 30 30 30 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 7d 23 64 69 73 70 6f 73 69 74 69 6f 6e 2e 62 75 6c 6b 2c 2e 62 75 6c 6b 23 6c 6f 63 61 74 69 6f 6e 5f 62 69 6e 5f 63 68 61 6e 67 65 5f 64 65 74 61 69 6c 7b 62 61 63 6b 67 72 6f Data Ascii: location_bin_change_detail{background-color:#2f2f2f}#disposition.test,.test#location_bin_change_detail,#disposition.testing,.testing#location_bin_change_detail{background-color:#fff000;color:black}#disposition.bulk,.bulk#location_bin_change_detail{backgro
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6f 63 61 74 69 6f 6e 5f 62 69 6e 5f 63 68 61 6e 67 65 5f 64 65 74 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 66 34 66 34 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 7d 23 64 69 73 70 6f 73 69 74 69 6f 6e 2e 74 6f 5f 73 68 69 70 2c 2e 74 6f 5f 73 68 69 70 23 6c 6f 63 61 74 69 6f 6e 5f 62 69 6e 5f 63 68 61 6e 67 65 5f 64 65 74 61 69 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 23 64 69 73 70 6f 73 69 74 69 6f 6e 20 2e 63 61 72 74 2d 63 61 72 64 2c 23 6c 6f 63 61 74 69 6f 6e 5f 62 69 6e 5f 63 68 61 6e 67 65 5f 64 65 74 61 69 6c 20 2e 63 61 72 74 2d 63 61 72 64 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 31 30 70 78 20 30 70 78 20 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 31 30 Data Ascii: ocation_bin_change_detail{background-color:#f4f4f4;color:black}#disposition.to_ship,.to_ship#location_bin_change_detail{background-color:#000}#disposition .cart-card,#location_bin_change_detail .cart-card{margin:10px 10px 0px 10px;display:block;padding:10
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 61 6e 67 65 5f 64 65 74 61 69 6c 20 2e 63 61 72 74 2d 63 61 72 64 20 23 63 61 72 74 5f 73 63 61 6e 20 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 23 64 69 73 70 6f 73 69 74 69 6f 6e 20 2e 63 61 72 74 2d 63 61 72 64 20 23 63 61 72 74 5f 73 63 61 6e 20 2e 6e 6f 74 69 63 65 2e 65 72 72 6f 72 2c 23 6c 6f 63 61 74 69 6f 6e 5f 62 69 6e 5f 63 68 61 6e 67 65 5f 64 65 74 61 69 6c 20 2e 63 61 72 74 2d 63 61 72 64 20 23 63 61 72 74 5f 73 63 61 6e 20 2e 6e 6f 74 69 63 65 2e 65 72 72 6f 72 7b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 23 64 69 73 70 6f 73 69 74 69 6f 6e 20 2e 63 61 72 74 2d 63 61 72 64 Data Ascii: ange_detail .cart-card #cart_scan input::-webkit-input-placeholder{font-weight:normal}#disposition .cart-card #cart_scan .notice.error,#location_bin_change_detail .cart-card #cart_scan .notice.error{text-shadow:none;text-align:left}#disposition .cart-card

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.11.12	49364	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:20 UTC	503	OUT	GET /assets/sessions/new-1b275320ca2943fe0ec5714da5973003.css HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: text/css,/;q=0.1 Referer: https://sandbox.optiturn.com/session/new?mobile=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
2024-04-23 14:09:21 UTC	1186	IN	HTTP/1.1 200 OK Last-Modified: Mon, 22 Apr 2024 15:47:24 GMT Content-Type: text/css Date: Tue, 23 Apr 2024 14:09:21 GMT Cache-Control: private X-Rack-Cache: miss Vary: Origin Content-Length: 503 Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:09:21 UTC	69	IN	Data Raw: 2e 72 65 76 65 61 6c 2d 69 66 2d 61 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 Data Ascii: .reveal-if-active{opacity:0;max-height:0;overflow:hidden;font-size:16
2024-04-23 14:09:21 UTC	434	IN	Data Raw: 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 38 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 30 2e 38 73 7d 2e 72 65 76 65 61 6c 2d 69 66 2d 61 63 74 69 76 65 2e 73 68 6f 77 7b 6f 70 61 63 69 74 79 3a 31 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6c 6f 67 6f 6e 2d 74 65 72 6d 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 70 61 73 73 77 6f 72 64 2d 61 72 65 61 7b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 2e 70 61 73 73 77 6f 72 64 Data Ascii: px;transform:scale(0.8);transition:0.8s}.reveal-if-active.show{opacity:1;max-height:100px;transform:scale(1);overflow:visible}.logon-terms{position:absolute;bottom:0;padding-bottom:15px}.password-area{opacity:0;visibility:hidden;margin-left:100%}.password

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.11.12	49363	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:20 UTC	487	OUT	GET /assets/sessions/new-2e9c6041dec9b53028870dc87a91c0c3.js HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: / Referer: https://sandbox.optiturn.com/session/new?mobile=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
2024-04-23 14:09:21 UTC	1201	IN	HTTP/1.1 200 OK Last-Modified: Mon, 22 Apr 2024 15:47:24 GMT Content-Type: application/javascript Date: Tue, 23 Apr 2024 14:09:21 GMT Cache-Control: private X-Rack-Cache: miss Vary: Origin Content-Length: 1240 Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:09:21 UTC	54	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 75 74 68 55 73 65 72 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 Data Ascii: "use strict";function authUser(){var e=document.getEle
2024-04-23 14:09:21 UTC	1186	IN	Data Raw: 6d 65 6e 74 42 79 49 64 28 22 6c 6f 67 69 6e 22 29 2e 76 61 6c 75 65 3b 70 6f 73 74 44 61 74 61 28 22 2f 69 64 65 6e 74 69 74 79 5f 70 72 6f 76 69 64 65 72 73 22 2c 65 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 72 65 64 69 72 65 63 74 5f 75 72 6c 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 73 6f 2d 72 65 64 69 72 65 63 74 2d 66 6f 72 6d 22 29 3b 6e 2e 61 63 74 69 6f 6e 3d 74 2e 72 65 64 69 72 65 63 74 5f 75 72 6c 2c 6e 2e 65 6c 65 6d 65 6e 74 73 2e 6c 6f 67 69 6e 5f 68 69 6e 74 2e 76 61 6c 75 65 3d 65 2c 6e 2e 73 75 62 6d 69 74 28 29 7d 65 6c 73 65 20 64 69 73 70 6c 61 79 50 61 73 73 77 6f 72 64 46 6c 6f 77 28 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f Data Ascii: mentById("login").value;postData("/identity_providers",e).then(function(t){if(t.redirect_url){var n=document.getElementById("sso-redirect-form");n.action=t.redirect_url,n.elements.login_hint.value=e,n.submit()}else displayPasswordFlow()})["catch"](functio

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.11.12	49366	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:20 UTC	465	OUT	GET /assets/jquery-1.12.2.min-fixed.js HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: / Referer: https://sandbox.optiturn.com/session/new?mobile=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
2024-04-23 14:09:21 UTC	1202	IN	HTTP/1.1 200 OK Last-Modified: Mon, 22 Apr 2024 15:47:26 GMT Content-Type: application/javascript Date: Tue, 23 Apr 2024 14:09:21 GMT Cache-Control: private X-Rack-Cache: miss Vary: Origin Content-Length: 97971 Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 Data Ascii: !function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,func
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 74 65 28 72 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 74 72 79 7b 6e 3d 22 74 72 75 65 22 3d 3d 3d 6e 3f 21 30 3a 22 66 61 6c 73 65 22 3d 3d 3d 6e 3f 21 31 3a 22 6e 75 6c 6c 22 3d 3d 3d 6e 3f 6e 75 6c 6c 3a 2b 6e 2b 22 22 3d 3d 3d 6e 3f 2b 6e 3a 71 65 2e 74 65 73 74 28 6e 29 3f 70 65 2e 70 61 72 73 65 4a 53 4f 4e 28 6e 29 3a 6e 7d 63 61 74 63 68 28 69 29 7b 7d 70 65 2e 64 61 74 61 28 65 2c 74 2c 6e 29 7d 65 6c 73 65 20 6e 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 69 66 28 28 22 64 61 74 61 22 21 3d 3d 74 7c 7c 21 70 65 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 65 5b 74 5d 29 29 26 26 22 74 6f 4a 53 4f 4e 22 21 3d 3d 74 29 72 65 Data Ascii: te(r),"string"==typeof n){try{n="true"===n?!0:"false"===n?!1:"null"===n?null:+n+""===n?+n:qe.test(n)?pe.parseJSON(n):n}catch(i){}pe.data(e,t,n)}else n=void 0}return n}function l(e){var t;for(t in e)if(("data"!==t\|\|!pe.isEmptyObject(e[t]))&&"toJSON"!==t)re
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 72 65 74 75 72 6e 20 70 65 2e 63 73 73 28 65 2c 74 2c 22 22 29 7d 2c 75 3d 73 28 29 2c 6c 3d 6e 26 26 6e 5b 33 5d 7c 7c 28 70 65 2e 63 73 73 4e 75 6d 62 65 72 5b 74 5d 3f 22 22 3a 22 70 78 22 29 2c 63 3d 28 70 65 2e 63 73 73 4e 75 6d 62 65 72 5b 74 5d 7c 7c 22 70 78 22 21 3d 3d 6c 26 26 2b 75 29 26 26 4d 65 2e 65 78 65 63 28 70 65 2e 63 73 73 28 65 2c 74 29 29 3b 69 66 28 63 26 26 63 5b 33 5d 21 3d 3d 6c 29 7b 6c 3d 6c 7c 7c 63 5b 33 5d 2c 6e 3d 6e 7c 7c 5b 5d 2c 63 3d 2b 75 7c 7c 31 3b 64 6f 20 6f 3d 6f 7c 7c 22 2e 35 22 2c 63 2f 3d 6f 2c 70 65 2e 73 74 79 6c 65 28 65 2c 74 2c 63 2b 6c 29 3b 77 68 69 6c 65 28 6f 21 3d 3d 28 6f 3d 73 28 29 2f 75 29 26 26 31 21 3d 3d 6f 26 26 2d 2d 61 29 7d 72 65 74 75 72 6e 20 6e 26 26 28 63 3d 2b 63 7c 7c 2b 75 7c 7c 30 Data Ascii: return pe.css(e,t,"")},u=s(),l=n&&n[3]\|\|(pe.cssNumber[t]?"":"px"),c=(pe.cssNumber[t]\|\|"px"!==l&&+u)&&Me.exec(pe.css(e,t));if(c&&c[3]!==l){l=l\|\|c[3],n=n\|\|[],c=+u\|\|1;do o=o\|\|".5",c/=o,pe.style(e,t,c+l);while(o!==(o=s()/u)&&1!==o&&--a)}return n&&(c=+c\|\|+u\|\|0
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 74 6d 6c 50 72 65 66 69 6c 74 65 72 28 61 29 2b 64 5b 32 5d 2c 6f 3d 64 5b 30 5d 3b 6f 2d 2d 3b 29 75 3d 75 2e 6c 61 73 74 43 68 69 6c 64 3b 69 66 28 21 64 65 2e 6c 65 61 64 69 6e 67 57 68 69 74 65 73 70 61 63 65 26 26 24 65 2e 74 65 73 74 28 61 29 26 26 79 2e 70 75 73 68 28 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 24 65 2e 65 78 65 63 28 61 29 5b 30 5d 29 29 2c 21 64 65 2e 74 62 6f 64 79 29 66 6f 72 28 61 3d 22 74 61 62 6c 65 22 21 3d 3d 6c 7c 7c 56 65 2e 74 65 73 74 28 61 29 3f 22 3c 74 61 62 6c 65 3e 22 21 3d 3d 64 5b 31 5d 7c 7c 56 65 2e 74 65 73 74 28 61 29 3f 30 3a 75 3a 75 2e 66 69 72 73 74 43 68 69 6c 64 2c 6f 3d 61 26 26 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 6f 2d 2d 3b 29 70 65 2e 6e 6f 64 65 4e 61 6d 65 28 63 3d Data Ascii: tmlPrefilter(a)+d[2],o=d[0];o--;)u=u.lastChild;if(!de.leadingWhitespace&&$e.test(a)&&y.push(t.createTextNode($e.exec(a)[0])),!de.tbody)for(a="table"!==l\|\|Ve.test(a)?"<table>"!==d[1]\|\|Ve.test(a)?0:u:u.firstChild,o=a&&a.childNodes.length;o--;)pe.nodeName(c=
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 65 74 75 72 6e 20 70 65 2e 6e 6f 64 65 4e 61 6d 65 28 65 2c 22 74 61 62 6c 65 22 29 26 26 70 65 2e 6e 6f 64 65 4e 61 6d 65 28 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 74 2e 66 69 72 73 74 43 68 69 6c 64 2c 22 74 72 22 29 3f 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 74 62 6f 64 79 22 29 5b 30 5d 7c 7c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 62 6f 64 79 22 29 29 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 79 70 65 3d 28 6e 75 6c 6c 21 3d 3d 70 65 2e 66 69 6e 64 2e 61 74 74 72 28 65 2c 22 74 79 70 65 22 29 29 2b 22 2f 22 2b 65 2e 74 79 70 65 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 45 28 Data Ascii: eturn pe.nodeName(e,"table")&&pe.nodeName(11!==t.nodeType?t:t.firstChild,"tr")?e.getElementsByTagName("tbody")[0]\|\|e.appendChild(e.ownerDocument.createElement("tbody")):e}function C(e){return e.type=(null!==pe.find.attr(e,"type"))+"/"+e.type,e}function E(
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 2d 31 2c 70 3d 74 5b 30 5d 2c 67 3d 70 65 2e 69 73 46 75 6e 63 74 69 6f 6e 28 70 29 3b 69 66 28 67 7c 7c 64 3e 31 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 70 26 26 21 64 65 2e 63 68 65 63 6b 43 6c 6f 6e 65 26 26 72 74 2e 74 65 73 74 28 70 29 29 72 65 74 75 72 6e 20 65 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 3d 65 2e 65 71 28 69 29 3b 67 26 26 28 74 5b 30 5d 3d 70 2e 63 61 6c 6c 28 74 68 69 73 2c 69 2c 6f 2e 68 74 6d 6c 28 29 29 29 2c 53 28 6f 2c 74 2c 6e 2c 72 29 7d 29 3b 69 66 28 64 26 26 28 6c 3d 76 28 74 2c 65 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 21 31 2c 65 2c 72 29 2c 69 3d 6c 2e 66 69 72 73 74 43 68 69 6c 64 2c 31 3d 3d 3d 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 Data Ascii: -1,p=t[0],g=pe.isFunction(p);if(g\|\|d>1&&"string"==typeof p&&!de.checkClone&&rt.test(p))return e.each(function(i){var o=e.eq(i);g&&(t[0]=p.call(this,i,o.html())),S(o,t,n,r)});if(d&&(l=v(t,e[0].ownerDocument,!1,e,r),i=l.firstChild,1===l.childNodes.length&&(
2024-04-23 14:09:21 UTC	441	IN	Data Raw: 6e 20 4c 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 29 3f 76 6f 69 64 20 64 65 6c 65 74 65 20 74 68 69 73 2e 67 65 74 3a 28 74 68 69 73 2e 67 65 74 3d 74 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 29 7b 69 66 28 65 20 69 6e 20 45 74 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 74 3d 65 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 65 2e 73 6c 69 63 65 28 31 29 2c 6e 3d 43 74 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 69 66 28 65 3d 43 74 5b 6e 5d 2b 74 2c 65 20 69 6e 20 45 74 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 Data Ascii: n L(e,t){return{get:function(){return e()?void delete this.get:(this.get=t).apply(this,arguments)}}}function H(e){if(e in Et)return e;for(var t=e.charAt(0).toUpperCase()+e.slice(1),n=Ct.length;n--;)if(e=Ct[n]+t,e in Et)return e}function q(e,t){for(var n,r
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6c 64 64 69 73 70 6c 61 79 22 2c 6a 28 72 2e 6e 6f 64 65 4e 61 6d 65 29 29 29 29 3a 28 69 3d 52 65 28 72 29 2c 28 6e 26 26 22 6e 6f 6e 65 22 21 3d 3d 6e 7c 7c 21 69 29 26 26 70 65 2e 5f 64 61 74 61 28 72 2c 22 6f 6c 64 64 69 73 70 6c 61 79 22 2c 69 3f 6e 3a 70 65 2e 63 73 73 28 72 2c 22 64 69 73 70 6c 61 79 22 29 29 29 29 3b 66 6f 72 28 61 3d 30 3b 73 3e 61 3b 61 2b 2b 29 72 3d 65 5b 61 5d 2c 72 2e 73 74 79 6c 65 26 26 28 74 26 26 22 6e 6f 6e 65 22 21 3d 3d 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 26 26 22 22 21 3d 3d 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 7c 7c 28 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 74 3f 6f 5b 61 5d 7c 7c 22 22 3a 22 6e 6f 6e 65 22 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 2c 6e Data Ascii: lddisplay",j(r.nodeName)))):(i=Re(r),(n&&"none"!==n\|\|!i)&&pe._data(r,"olddisplay",i?n:pe.css(r,"display"))));for(a=0;s>a;a++)r=e[a],r.style&&(t&&"none"!==r.style.display&&""!==r.style.display\|\|(r.style.display=t?o[a]\|\|"":"none"));return e}function _(e,t,n
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 7b 68 65 69 67 68 74 3a 65 7d 2c 69 3d 30 3b 66 6f 72 28 74 3d 74 3f 31 3a 30 3b 34 3e 69 3b 69 2b 3d 32 2d 74 29 6e 3d 4f 65 5b 69 5d 2c 72 5b 22 6d 61 72 67 69 6e 22 2b 6e 5d 3d 72 5b 22 70 61 64 64 69 6e 67 22 2b 6e 5d 3d 65 3b 72 65 74 75 72 6e 20 74 26 26 28 72 2e 6f 70 61 63 69 74 79 3d 72 2e 77 69 64 74 68 3d 65 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 28 24 2e 74 77 65 65 6e 65 72 73 5b 74 5d 7c 7c 5b 5d 29 2e 63 6f 6e 63 61 74 28 24 2e 74 77 65 65 6e 65 72 73 5b 22 2a 22 5d 29 2c 6f 3d 30 2c 61 3d 69 2e 6c 65 6e 67 74 68 3b 61 3e 6f 3b 6f 2b 2b 29 69 66 28 72 3d 69 5b 6f 5d 2e 63 61 6c 6c 28 6e 2c 74 2c 65 29 29 72 65 74 75 72 6e 20 72 7d 66 75 Data Ascii: (e,t){var n,r={height:e},i=0;for(t=t?1:0;4>i;i+=2-t)n=Oe[i],r["margin"+n]=r["padding"+n]=e;return t&&(r.opacity=r.width=e),r}function B(e,t,n){for(var r,i=($.tweeners[t]\|\|[]).concat($.tweeners["*"]),o=0,a=i.length;a>o;o++)if(r=i[o].call(n,t,e))return r}fu
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6e 65 22 3d 3d 3d 28 22 6e 6f 6e 65 22 3d 3d 3d 6c 3f 6a 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 3a 6c 29 26 26 28 70 2e 64 69 73 70 6c 61 79 3d 6c 29 3b 65 6c 73 65 7b 67 3f 22 68 69 64 64 65 6e 22 69 6e 20 67 26 26 28 68 3d 67 2e 68 69 64 64 65 6e 29 3a 67 3d 70 65 2e 5f 64 61 74 61 28 65 2c 22 66 78 73 68 6f 77 22 2c 7b 7d 29 2c 6f 26 26 28 67 2e 68 69 64 64 65 6e 3d 21 68 29 2c 68 3f 70 65 28 65 29 2e 73 68 6f 77 28 29 3a 64 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 65 28 65 29 2e 68 69 64 65 28 29 7d 29 2c 64 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 70 65 2e 5f 72 65 6d 6f 76 65 44 61 74 61 28 65 2c 22 66 78 73 68 6f 77 22 29 3b 66 6f 72 28 74 20 69 6e 20 66 29 70 65 2e 73 74 79 6c 65 28 65 2c 74 2c 66 5b 74 5d 29 Data Ascii: ne"===("none"===l?j(e.nodeName):l)&&(p.display=l);else{g?"hidden"in g&&(h=g.hidden):g=pe._data(e,"fxshow",{}),o&&(g.hidden=!h),h?pe(e).show():d.done(function(){pe(e).hide()}),d.done(function(){var t;pe._removeData(e,"fxshow");for(t in f)pe.style(e,t,f[t])

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.11.12	49367	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:20 UTC	493	OUT	GET /assets/application-mobile-c8b0069e758f0bcce97f62ce5be9b20c.js HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: / Referer: https://sandbox.optiturn.com/session/new?mobile=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
2024-04-23 14:09:21 UTC	1203	IN	HTTP/1.1 200 OK Last-Modified: Mon, 22 Apr 2024 15:47:26 GMT Content-Type: application/javascript Date: Tue, 23 Apr 2024 14:09:21 GMT Cache-Control: private X-Rack-Cache: miss Vary: Origin Content-Length: 270735 Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 69 66 28 74 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 30 21 3d 3d 74 7c 7c 31 2f 74 3d 3d 31 2f 6e 3b 69 66 28 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 3d 3d 3d 6e 3b 69 66 28 74 2e 5f 63 68 61 69 6e 26 26 28 74 3d 74 2e 5f 77 72 61 70 70 65 64 29 2c 6e 2e 5f 63 68 61 69 6e 26 26 28 6e 3d 6e 2e 5f 77 72 61 70 70 65 64 29 2c 74 2e 69 73 45 71 75 61 6c 26 26 77 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 2e 69 73 45 71 75 61 6c 29 29 72 65 74 75 72 6e 20 74 2e 69 73 45 71 75 61 6c 28 6e 29 3b 69 66 28 6e 2e 69 73 45 71 75 61 6c 26 26 77 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6e 2e 69 73 45 71 75 61 6c 29 29 72 65 74 75 72 6e 20 6e 2e 69 73 45 71 75 Data Ascii: (function(){function e(t,n,r){if(t===n)return 0!==t\|\|1/t==1/n;if(null==t\|\|null==n)return t===n;if(t._chain&&(t=t._wrapped),n._chain&&(n=n._wrapped),t.isEqual&&w.isFunction(t.isEqual))return t.isEqual(n);if(n.isEqual&&w.isFunction(n.isEqual))return n.isEqu
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6c 61 73 74 49 6e 64 65 78 4f 66 2c 6f 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 62 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 78 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 28 65 29 7d 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 28 65 78 70 6f 72 74 73 3d 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 77 29 2c 65 78 70 6f 72 74 73 2e 5f 3d 77 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e Data Ascii: lastIndexOf,o=Array.isArray,b=Object.keys,x=Function.prototype.bind,w=function(e){return new T(e)};"undefined"!=typeof exports?("undefined"!=typeof module&&module.exports&&(exports=module.exports=w),exports._=w):"function"==typeof define&&define.amd?defin
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 43 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 6e 2c 65 2c 69 2c 6f 29 3f 28 72 3d 65 2c 21 30 29 3a 76 6f 69 64 20 30 7d 29 2c 72 7d 2c 77 2e 66 69 6c 74 65 72 3d 77 2e 73 65 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 72 3a 67 26 26 65 2e 66 69 6c 74 65 72 3d 3d 3d 67 3f 65 2e 66 69 6c 74 65 72 28 74 2c 6e 29 3a 28 45 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 29 7b 74 2e 63 61 6c 6c 28 6e 2c 65 2c 69 2c 6f 29 26 26 28 72 5b 72 2e 6c 65 6e 67 74 68 5d 3d 65 29 7d 29 2c 72 29 7d 2c 77 2e 72 65 6a 65 Data Ascii: etect=function(e,t,n){var r;return C(e,function(e,i,o){return t.call(n,e,i,o)?(r=e,!0):void 0}),r},w.filter=w.select=function(e,t,n){var r=[];return null==e?r:g&&e.filter===g?e.filter(t,n):(E(e,function(e,i,o){t.call(n,e,i,o)&&(r[r.length]=e)}),r)},w.reje
2024-04-23 14:09:21 UTC	109	IN	Data Raw: 61 79 28 65 29 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 69 6e 2e 61 70 70 6c 79 28 4d 61 74 68 2c 65 29 3b 69 66 28 21 74 26 26 77 2e 69 73 45 6d 70 74 79 28 65 29 29 72 65 74 75 72 6e 20 31 2f 30 3b 76 61 72 20 72 3d 7b 63 6f 6d 70 75 74 65 64 3a 31 2f 30 7d 3b 72 65 74 75 72 6e 20 45 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ay(e))return Math.min.apply(Math,e);if(!t&&w.isEmpty(e))return 1/0;var r={computed:1/0};return E(e,function(e
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 2c 69 2c 6f 29 7b 69 3d 74 3f 74 2e 63 61 6c 6c 28 6e 2c 65 2c 69 2c 6f 29 3a 65 2c 69 3c 72 2e 63 6f 6d 70 75 74 65 64 26 26 28 72 3d 7b 76 61 6c 75 65 3a 65 2c 63 6f 6d 70 75 74 65 64 3a 69 7d 29 7d 29 2c 72 2e 76 61 6c 75 65 7d 2c 77 2e 73 68 75 66 66 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 3b 72 65 74 75 72 6e 20 45 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 30 3d 3d 72 3f 6e 5b 30 5d 3d 65 3a 28 74 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 72 2b 31 29 29 2c 6e 5b 72 5d 3d 6e 5b 74 5d 2c 6e 5b 74 5d 3d 65 29 7d 29 2c 6e 7d 2c 77 2e 73 6f 72 74 42 79 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 77 2e 70 6c 75 63 6b 28 77 2e 6d 61 70 28 65 2c 66 Data Ascii: ,i,o){i=t?t.call(n,e,i,o):e,i<r.computed&&(r={value:e,computed:i})}),r.value},w.shuffle=function(e){var t,n=[];return E(e,function(e,r){0==r?n[0]=e:(t=Math.floor(Math.random()*(r+1)),n[r]=n[t],n[t]=e)}),n},w.sortBy=function(e,t,n){return w.pluck(w.map(e,f
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 69 73 41 72 72 61 79 28 6e 29 3f 65 2e 63 6f 6e 63 61 74 28 74 3f 6e 3a 77 2e 66 6c 61 74 74 65 6e 28 6e 29 29 3a 28 65 5b 65 2e 6c 65 6e 67 74 68 5d 3d 6e 2c 65 29 7d 2c 5b 5d 29 7d 2c 77 2e 77 69 74 68 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 77 2e 64 69 66 66 65 72 65 6e 63 65 28 65 2c 61 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 2c 77 2e 75 6e 69 71 3d 77 2e 75 6e 69 71 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6e 3d 6e 3f 77 2e 6d 61 70 28 65 2c 6e 29 3a 65 2c 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 77 2e 72 65 64 75 63 65 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 2c 6f 29 7b 72 65 74 75 72 6e 20 30 21 3d 6f 26 26 28 74 3d 3d 3d 21 30 3f 77 2e 6c 61 73 74 28 6e 29 3d 3d 69 3a 77 Data Ascii: isArray(n)?e.concat(t?n:w.flatten(n)):(e[e.length]=n,e)},[])},w.without=function(e){return w.difference(e,a.call(arguments,1))},w.uniq=w.unique=function(e,t,n){var n=n?w.map(e,n):e,r=[];return w.reduce(n,function(n,i,o){return 0!=o&&(t===!0?w.last(n)==i:w
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6e 29 2c 30 29 2c 69 3d 30 2c 6f 3d 41 72 72 61 79 28 72 29 3b 72 3e 69 3b 29 6f 5b 69 2b 2b 5d 3d 65 2c 65 2b 3d 6e 3b 72 65 74 75 72 6e 20 6f 7d 3b 76 61 72 20 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 77 2e 62 69 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3b 69 66 28 65 2e 62 69 6e 64 3d 3d 3d 78 26 26 78 29 72 65 74 75 72 6e 20 78 2e 61 70 70 6c 79 28 65 2c 61 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 3b 69 66 28 21 77 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 3b 72 65 74 75 72 6e 20 72 3d 61 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 Data Ascii: n),0),i=0,o=Array(r);r>i;)o[i++]=e,e+=n;return o};var S=function(){};w.bind=function(e,t){var n,r;if(e.bind===x&&x)return x.apply(e,a.call(arguments,1));if(!w.isFunction(e))throw new TypeError;return r=a.call(arguments,2),n=function(){if(!(this instanceof
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3f 74 3a 28 6e 3d 21 30 2c 74 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 7d 2c 77 2e 77 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 73 2e 61 70 70 6c 79 28 5b 65 5d 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 6e 29 7d 7d 2c 77 2e 63 6f 6d 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2c 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 74 3d 5b 65 5b 6e 5d 2e 61 70 70 6c 79 28 Data Ascii: on(){return n?t:(n=!0,t=e.apply(this,arguments))}},w.wrap=function(e,t){return function(){var n=s.apply([e],arguments);return t.apply(this,n)}},w.compose=function(){var e=arguments;return function(){for(var t=arguments,n=e.length-1;n>=0;n--)t=[e[n].apply(
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 61 79 5d 22 3d 3d 63 2e 63 61 6c 6c 28 65 29 7d 2c 77 2e 69 73 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 4f 62 6a 65 63 74 28 65 29 7d 2c 77 2e 69 73 41 72 67 75 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 3d 3d 63 2e 63 61 6c 6c 28 65 29 7d 2c 77 2e 69 73 41 72 67 75 6d 65 6e 74 73 28 61 72 67 75 6d 65 6e 74 73 29 7c 7c 28 77 2e 69 73 41 72 67 75 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 21 6c 2e 63 61 6c 6c 28 65 2c 22 63 61 6c 6c 65 65 22 29 29 7d 29 2c 77 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 Data Ascii: ay]"==c.call(e)},w.isObject=function(e){return e===Object(e)},w.isArguments=function(e){return"[object Arguments]"==c.call(e)},w.isArguments(arguments)\|\|(w.isArguments=function(e){return!(!e\|\|!l.call(e,"callee"))}),w.isFunction=function(e){return"[object
2024-04-23 14:09:21 UTC	1255	IN	Data Raw: 28 65 2c 74 29 7b 76 61 72 20 6e 3d 77 2e 74 65 6d 70 6c 61 74 65 53 65 74 74 69 6e 67 73 2c 6e 3d 22 76 61 72 20 5f 5f 70 3d 5b 5d 2c 70 72 69 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 5f 70 2e 70 75 73 68 2e 61 70 70 6c 79 28 5f 5f 70 2c 61 72 67 75 6d 65 6e 74 73 29 3b 7d 3b 77 69 74 68 28 6f 62 6a 7c 7c 7b 7d 29 7b 5f 5f 70 2e 70 75 73 68 28 27 22 2b 65 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 67 2c 22 5c 5c 5c 5c 22 29 2e 72 65 70 6c 61 63 65 28 2f 27 2f 67 2c 22 5c 5c 27 22 29 2e 72 65 70 6c 61 63 65 28 6e 2e 65 73 63 61 70 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 27 2c 5f 2e 65 73 63 61 70 65 28 22 2b 74 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 27 2f 67 2c 22 27 22 29 2b 22 29 2c 27 22 7d 29 2e 72 65 70 6c 61 63 65 28 6e 2e Data Ascii: (e,t){var n=w.templateSettings,n="var __p=[],print=function(){__p.push.apply(__p,arguments);};with(obj\|\|{}){__p.push('"+e.replace(/\\/g,"\\\\").replace(/'/g,"\\'").replace(n.escape,function(e,t){return"',_.escape("+t.replace(/\\'/g,"'")+"),'"}).replace(n.

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.11.12	49368	143.244.49.177	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:20 UTC	371	OUT	GET /v6.5/honeybadger.min.js HTTP/1.1 Host: js.honeybadger.io Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: / Referer: https://sandbox.optiturn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-GB
2024-04-23 14:09:21 UTC	907	IN	HTTP/1.1 200 OK Date: Tue, 23 Apr 2024 14:09:21 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Server: BunnyCDN-LA1-852 CDN-PullZone: 732934 CDN-Uid: 028b4e4c-e09d-4e11-a1ea-7057824d3333 CDN-RequestCountryCode: RO Cache-Control: max-age=31536000 ETag: W/"f0bd2222f3869a63e1eba9867c6c24c2" Last-Modified: Mon, 23 Oct 2023 09:11:15 GMT Via: 1.1 e1781e38c27c8587a4a79b775f1d6666.cloudfront.net (CloudFront) x-amz-server-side-encryption: AES256 x-amz-version-id: VSDDZH6M.i.j58B_stZzkv9IH55xsWo5 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: LAX53-P2 X-Amz-Cf-Id: VlWrFVZnt7TslLrGndHYIz-Li33cy6nZleYiIqMK8v-Hnf7Hz17Xdg== CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 04/23/2024 02:40:08 CDN-EdgeStorageId: 998 CDN-Status: 200 CDN-RequestId: 656c9290a99eb426288fad9f4e6b2ea9 CDN-Cache: HIT
2024-04-23 14:09:21 UTC	3681	IN	Data Raw: 65 35 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 48 6f 6e 65 79 62 61 64 67 65 72 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e Data Ascii: e5a!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).Honeybadger=t()}(this,(function(){"use strict";var e="undefin
2024-04-23 14:09:21 UTC	16384	IN	Data Raw: 39 30 38 65 0d 0a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 31 26 6f 5b 30 5d 29 74 68 72 6f 77 20 6f 5b 31 5d 3b 72 65 74 75 72 6e 20 6f 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 3b 72 65 74 75 72 6e 20 69 3d 7b 6e 65 78 74 3a 63 28 30 29 2c 74 68 72 6f 77 3a 63 28 31 29 2c 72 65 74 75 72 6e 3a 63 28 32 29 7d 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 69 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 2c 69 3b 66 75 6e 63 74 69 6f 6e 20 63 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 6e 29 74 68 72 6f 77 20 Data Ascii: 908e0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(i){return function(c){return function(i){if(n)throw
2024-04-23 14:09:21 UTC	16384	IN	Data Raw: 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 28 6e 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 6b 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 2e 62 61 63 6b 74 72 61 63 65 5b 6e 5d 2e 73 6f 75 72 63 65 3d 74 7d 29 29 2c 6e 3d 74 68 69 73 2e 5f 5f 62 75 69 6c 64 50 61 79 6c 6f 61 64 28 65 29 2c 5b 32 2c 74 68 69 73 2e 5f 5f 74 72 61 6e 73 70 6f 72 74 2e 73 65 6e 64 28 7b 68 65 61 64 65 72 73 3a 7b 22 58 2d 41 50 49 2d 4b 65 79 22 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 70 69 4b 65 79 2c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 Data Ascii: .then((function(t){return w(n,void 0,void 0,(function(){var n;return k(this,(function(r){return t.forEach((function(t,n){e.backtrace[n].source=t})),n=this.__buildPayload(e),[2,this.__transport.send({headers:{"X-API-Key":this.config.apiKey,"Content-Type":"
2024-04-23 14:09:21 UTC	4246	IN	Data Raw: 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 2c 74 7d 3b 74 2e 67 65 74 55 73 65 72 46 65 65 64 62 61 63 6b 53 63 72 69 70 74 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6c 69 63 65 28 30 2c 32 29 2e 6a 6f 69 6e 28 22 2e 22 29 3b 72 65 74 75 72 6e 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 6f 6e 65 79 62 61 64 67 65 72 2e 69 6f 2f 76 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2f 68 6f 6e 65 79 62 61 64 67 65 72 2d 66 65 65 64 62 61 63 6b 2d 66 6f 72 6d 2e 6a 73 22 29 7d 3b 76 61 72 20 77 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 7b 7d 29 3b 76 61 72 20 74 Data Ascii: cation.protocol+"//"+e.location.host),t};t.getUserFeedbackScriptUrl=function(e){var t=e.split(".").slice(0,2).join(".");return"https://js.honeybadger.io/v".concat(t,"/honeybadger-feedback-form.js")};var w=function(n){function o(e){void 0===e&&(e={});var t
2024-04-23 14:09:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.11.12	49369	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:22 UTC	542	OUT	GET /assets/optoro-kite-logo-gray.svg HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: image/webp,image/apng,image/,/*;q=0.8 Referer: https://sandbox.optiturn.com/assets/application-mobile-7ad2940818d75a843437e99a696611a0.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
2024-04-23 14:09:22 UTC	1192	IN	HTTP/1.1 200 OK Last-Modified: Mon, 22 Apr 2024 15:50:41 GMT Content-Type: image/svg+xml Date: Tue, 23 Apr 2024 14:09:22 GMT Cache-Control: private X-Rack-Cache: miss Vary: Origin Content-Length: 2784 Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:09:22 UTC	63	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Il
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: 6c 75 73 74 72 61 74 6f 72 20 31 39 2e 32 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 09 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 32 36 20 32 33 39 22 20 73 74 79 6c 65 3d 22 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 65 77 20 30 20 30 20 35 Data Ascii: lustrator 19.2.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 526 239" style="enable-background:new 0 0 5
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: 31 2d 31 33 2e 39 2c 33 31 2d 33 31 2c 33 31 73 2d 33 31 2d 31 33 2e 39 2d 33 31 2d 33 31 73 31 33 2e 39 2d 33 31 2c 33 31 2d 33 31 53 34 32 37 2c 31 31 32 2e 39 2c 34 32 37 2c 31 33 30 4c 34 32 37 2c 31 33 30 7a 0a 09 09 20 4d 34 31 35 2e 35 2c 31 33 30 63 30 2d 31 30 2e 38 2d 38 2e 37 2d 31 39 2e 35 2d 31 39 2e 35 2d 31 39 2e 35 73 2d 31 39 2e 35 2c 38 2e 37 2d 31 39 2e 35 2c 31 39 2e 35 73 38 2e 37 2c 31 39 2e 35 2c 31 39 2e 35 2c 31 39 2e 35 53 34 31 35 2e 35 2c 31 34 30 2e 38 2c 34 31 35 2e 35 2c 31 33 30 4c 34 31 35 2e 35 2c 31 33 30 7a 20 4d 33 31 31 2c 31 33 30 0a 09 09 63 30 2c 31 37 2e 31 2d 31 33 2e 39 2c 33 31 2d 33 31 2c 33 31 73 2d 33 31 2d 31 33 2e 39 2d 33 31 2d 33 31 73 31 33 2e 39 2d 33 31 2c 33 31 2d 33 31 53 33 31 31 2c 31 31 32 2e 39 Data Ascii: 1-13.9,31-31,31s-31-13.9-31-31s13.9-31,31-31S427,112.9,427,130L427,130z M415.5,130c0-10.8-8.7-19.5-19.5-19.5s-19.5,8.7-19.5,19.5s8.7,19.5,19.5,19.5S415.5,140.8,415.5,130L415.5,130z M311,130c0,17.1-13.9,31-31,31s-31-13.9-31-31s13.9-31,31-31S311,112.9
2024-04-23 14:09:22 UTC	211	IN	Data Raw: 39 2c 34 36 34 2c 31 33 30 4c 34 36 34 2c 31 33 30 7a 20 4d 32 36 33 2c 31 37 37 63 2d 31 37 2e 31 2c 30 2d 33 31 2c 31 33 2e 39 2d 33 31 2c 33 31 0a 09 63 30 2c 31 37 2e 31 2c 31 33 2e 39 2c 33 31 2c 33 31 2c 33 31 73 33 31 2d 31 33 2e 39 2c 33 31 2d 33 31 43 32 39 34 2c 31 39 30 2e 39 2c 32 38 30 2e 31 2c 31 37 37 2c 32 36 33 2c 31 37 37 4c 32 36 33 2c 31 37 37 7a 20 4d 32 39 34 2c 33 31 63 30 2d 31 37 2e 31 2d 31 33 2e 39 2d 33 31 2d 33 31 2d 33 31 73 2d 33 31 2c 31 33 2e 39 2d 33 31 2c 33 31 0a 09 73 31 33 2e 39 2c 33 31 2c 33 31 2c 33 31 53 32 39 34 2c 34 38 2e 31 2c 32 39 34 2c 33 31 7a 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 9,464,130L464,130z M263,177c-17.1,0-31,13.9-31,31c0,17.1,13.9,31,31,31s31-13.9,31-31C294,190.9,280.1,177,263,177L263,177z M294,31c0-17.1-13.9-31-31-31s-31,13.9-31,31s13.9,31,31,31S294,48.1,294,31z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.11.12	49370	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:22 UTC	528	OUT	GET /images/spinner.gif HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: image/webp,image/apng,image/,/*;q=0.8 Referer: https://sandbox.optiturn.com/assets/application-mobile-7ad2940818d75a843437e99a696611a0.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
2024-04-23 14:09:22 UTC	1188	IN	HTTP/1.1 200 OK Last-Modified: Mon, 22 Apr 2024 15:47:26 GMT Content-Type: image/gif Date: Tue, 23 Apr 2024 14:09:22 GMT Cache-Control: private X-Rack-Cache: miss Vary: Origin Content-Length: 9284 Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:09:22 UTC	67	IN	Data Raw: 47 49 46 38 39 61 78 00 84 00 f6 00 00 ec d0 98 e3 d1 b5 fe be 0d fd c2 25 f7 f7 f7 fe bf 17 f4 cd 7b fa fa fa fe fe fe f2 f2 f1 e8 d1 a4 ee ee ed f6 f6 f6 f4 f3 f2 fd c1 1e dd d1 bc f1 ee e9 ff c5 16 Data Ascii: GIF89ax%{
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: ef cd 84 fd fd fd e1 dc d6 fd c4 2b f9 f9 f9 fd c6 25 fe c0 16 ef e5 d6 f2 d5 97 ff c2 16 e8 e1 d4 f8 d1 65 ed e7 de f5 f5 f5 ea e8 e7 f7 cd 6e f6 c8 53 ec eb e9 fa c8 3e de d9 d1 e4 db cc fc fc fc e5 ca 97 f1 f0 ee f8 f8 f8 fe c4 1f fb c5 3c fc c5 32 f8 cc 63 f5 f4 f3 ed ec ea ea e7 e3 f4 d1 83 f8 c9 43 ec e1 ce e7 dd cd e7 d5 ae eb e4 d8 f6 ca 64 f8 f8 f7 e3 cd a6 f3 ca 74 ee d1 8f eb de c5 df cd af fa c7 49 fe c8 1e e9 c0 6b e7 c8 78 f5 c6 5a f1 c3 51 f0 ec e4 f0 dd ba dc ce b5 f4 f4 f3 f4 d3 7a e5 e1 dc f0 e3 cb ed c6 59 de d5 c5 fb fb fb ef c8 70 f2 d3 8a f0 e0 bd fa c7 52 ef df c3 fc cb 33 f2 da a6 f6 c7 6a ed d7 ad e6 d9 c1 e5 d5 ba e6 c8 86 dd cb a3 ed ea e5 e7 e4 e1 df d7 cb f8 cb 5c f6 c2 32 f9 cb 54 fe be 00 f8 ce 5f fb cb 42 f1 cb 5f ee db b2 Data Ascii: +%enS><2cCdtIkxZQzYpR3j\2T_B_
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: 68 c8 42 c4 4c 14 0d 5d dc 94 71 d0 46 0c 1d 09 cd d8 28 2c 64 00 0a 1b 47 98 14 b4 f1 ca ca 00 1b 5b bc dc 70 71 c3 4b 09 1b 5f 32 c8 f9 92 e7 ca 8d 2f 5e fe 8a 78 70 a5 99 8b 1a 5e a2 5b d8 e6 25 cc 8b 4e 7d 9a 94 02 f5 25 97 8b bb 7a 46 0c 3a 33 a2 99 4e 1a 28 08 54 66 71 e1 17 4f 34 33 6d e8 a0 a4 96 ad 88 05 ff 4c d1 91 d5 22 03 aa 0f 11 4f 2d 9d 55 c5 2d a5 bc a8 a4 39 e8 f2 b7 e0 ab b4 d2 7a 44 62 61 78 5b 3a 2e ff 00 d2 b0 95 c7 5d 05 44 7b dd 81 b9 15 e4 5e 03 43 59 00 f2 aa 7c ef 41 21 c4 ee 20 df 6a 03 10 0f 21 d1 bc 14 02 2c fa 54 5e 49 6b 0b dd de 8b 1b 6d e1 e5 da e9 08 f4 3a 70 31 05 f0 71 c3 00 d4 3c 7e 6d cd 30 d4 05 11 18 70 37 2c 73 41 10 13 a8 f7 1a f3 31 0e f3 66 c3 3e 62 80 13 e0 6a b7 20 bd aa 88 27 ff 3d 97 8a de 1f d9 b7 97 e5 f7 Data Ascii: hBL]qF(,dG[pqK_2/^xp^[%N}%zF:3N(TfqO43mL"O-U-9zDbax[:.]D{^CY\|A! j!,T^Ikm:p1q<~m0p7,sA1f>bj '=
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: 9f a0 a1 84 02 a3 a5 86 55 a3 a4 a9 ac ad a5 af a9 84 0a b2 b3 82 af b0 9d b9 b7 b8 b6 b7 bc b7 05 c1 b3 b9 ba 94 c6 bd c9 b3 59 cb ae ce b1 c4 cf bf d3 ac c0 b9 7a d7 d4 d1 db a1 d0 a1 3a b9 07 da d6 e4 a8 e6 9f ca dd bb d2 dc e5 c5 af 6a ea ef a9 0f ed de f7 ec ac 08 f3 e7 e8 97 ff 30 38 e8 97 8e e0 a6 5e 00 f2 61 32 f3 ca 4c a1 0d 64 7a f0 7b 74 8f c1 a6 0b 04 3c ad 1b 35 06 d2 c6 51 05 18 ed 13 f5 d1 5f a1 6f 0a 8d 3d 20 f4 aa 82 48 69 eb 7c e5 22 33 28 66 42 63 9c 6c e2 c4 70 46 66 41 92 38 7d 46 ca e1 31 e8 cd 9f 40 8d 41 38 7a b0 a8 b1 0d 4c 01 be 0c 4a af d0 84 9d 97 aa 12 0a 80 b5 91 d6 9a 5d 11 8c fa e1 14 67 83 51 88 a6 e2 cc 60 d2 50 57 0c 57 b3 36 20 75 db 75 07 d3 45 36 de da 9d cb f2 ad 81 bb 6a 71 1a 91 59 16 e7 02 c2 89 7c bc c5 90 f6 66 Data Ascii: UYz:j08^a2Ldz{t<5Q_o= Hi\|"3(fBclpFfA8}F1@A8zLJ]gQ`PWW6 uuE6jqY\|f
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: 00 07 ff 80 00 82 83 84 85 86 86 08 02 51 87 8c 8d 8e 8f 90 91 00 13 18 95 18 06 92 99 9a 9b 86 27 96 9f 02 9c a2 a3 8c 2a 9f a7 18 62 09 a4 ac 9c 29 a8 b0 02 4b ad b4 8f 5d b0 b8 18 36 b5 bc 85 25 b9 b8 bd c2 00 46 c0 c1 c3 b5 6a c6 b0 4a c8 b4 2e cb b0 ce ad 11 d1 d2 d3 a3 d6 b0 48 d8 a2 da d7 dd 9a df a8 2b e1 e2 e3 a7 27 e6 92 e8 a8 eb 91 ed a7 64 ef 8f f1 a7 13 f4 8d f6 a7 f9 8c 5c fb 96 84 f4 3b f4 03 60 a5 81 87 0c 62 28 80 d0 90 42 1f 0d 09 dd 50 18 91 d0 05 8a 15 05 29 6c 96 11 00 c6 8c 1c 0c 32 ec 58 c0 60 83 8e 1e 0d a2 44 60 b0 02 ca 33 06 f1 75 74 a0 12 a5 c1 30 28 29 01 44 09 00 e6 4e 94 34 f7 a1 e0 59 b3 a3 ce 7d 3c ab 00 34 43 f4 a7 4d a7 19 3d ed e3 c2 13 0a d4 5a 08 46 68 d9 50 89 23 bc 7d 2e 5b c1 58 73 2c d3 55 4d 3a 96 6d 92 1a af 9c Data Ascii: Q'*b)K]6%FjJ.H+'d\;`b(BP)l2X`D`3ut0()DN4Y}<4CM=ZFhP#}.[Xs,UM:m
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: aa d1 e9 91 75 2c aa a5 10 95 35 aa e9 10 71 27 09 ea 50 8d a8 91 c4 a2 a1 13 cd b6 9e 4a 17 70 45 92 50 8f c2 84 66 77 38 09 81 29 4e 5b 54 84 d5 20 7f 2d f7 a9 20 30 88 3a 2a 00 4e 02 e4 e1 a7 84 66 d3 c6 a9 84 5c f9 8e 71 b0 0e d2 2a 33 6e d4 5a c8 3b 3e e8 ba eb 38 75 f9 0a 1b 33 02 88 21 80 19 fc 08 4b c8 0a 18 14 a0 09 0e 4b 6c 38 4d 20 00 21 f9 04 09 03 00 00 00 2c 14 00 0a 00 56 00 72 00 00 07 ff 80 00 82 83 84 85 86 87 85 0d 4b 38 62 62 05 18 1b 88 92 93 94 95 96 84 16 66 02 62 02 18 9e 9f a0 a1 97 a3 a4 a5 84 35 a1 a9 aa 9e a6 ad ae 88 3e ab b2 a0 af b5 af 6e b3 b9 18 08 b6 bd a3 21 ba b9 13 be c4 93 6d c1 c2 c5 ca 85 1b c8 b9 04 cb d1 ce ba 20 d1 ca d3 ba 0f d6 c4 d8 ba 5b db bd dd ba 42 e0 b5 e2 ba 22 e5 ae e7 ba 24 ea a6 ec ba 17 ef a4 f1 ba Data Ascii: u,5q'PJpEPfw8)N[T - 0:Nf\q3nZ;>8u3!KKl8M !,VrK8bbfb5>n!m [B"$
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: c1 2e 14 7f 65 6e ac 82 ce 5a 9a e0 00 cc 06 37 68 b2 02 3b 97 45 b2 4b 43 73 dd 87 cd 29 6b c8 15 4b 65 fd 5d a2 04 25 1b 68 31 02 5e bc a1 03 45 3d 90 70 11 4f 83 24 1a 82 4f 8a e2 c4 c3 62 23 52 b1 53 c5 8b eb c4 23 1f 8d d9 49 88 23 21 28 c4 e3 c0 8e e4 a1 d3 03 90 39 c6 47 a4 20 61 ac 78 64 95 6a 3e 2e 69 dd 38 67 2c 89 21 3b 20 e2 d8 cf 92 48 e0 53 c0 92 05 e0 c3 c1 92 57 1e d9 45 98 44 f6 73 01 98 f8 24 48 a4 0f 64 02 d9 a5 92 65 e2 b3 1c 90 42 f4 c3 c5 91 02 1d f9 e4 38 4b 26 e9 22 9a 19 1e a9 54 a0 47 2e a8 23 a0 e5 2d 29 48 96 7c 2a ca 99 37 11 38 fa 58 36 e8 49 0a c0 98 d4 a8 61 e9 a3 cf 18 b1 29 a7 c5 94 f0 29 00 36 3c e3 d6 a8 4b 08 00 cc 71 a3 12 92 40 29 ac d4 d6 ea 21 aa 9a 82 e2 ac 84 18 d0 c9 8d b8 32 92 48 95 a9 04 02 00 21 f9 04 09 03 Data Ascii: .enZ7h;EKCs)kKe]%h1^E=pO$Ob#RS#I#!(9G axdj>.i8g,!; HSWEDs$HdeB8K&"TG.#-)H\|*78X6Ia))6<Kq@)!2H!
2024-04-23 14:09:22 UTC	388	IN	Data Raw: 41 42 df a6 55 7a 62 6d c0 39 85 0f a3 19 24 d8 ac 87 21 03 bc f4 11 b2 80 61 c3 2a 88 04 07 25 24 e6 43 d1 24 41 a7 24 32 4a 65 04 24 45 47 be 54 be 04 b0 a3 99 8d 79 a4 ac c8 7c 19 e1 ca 4e 83 98 32 fc 14 e9 a9 c1 50 41 3f 3c 65 5b 66 d2 93 2e 62 01 70 9e 3c 36 41 2a 29 a6 4d 31 01 10 18 2c eb 49 75 5d 57 6a 7d 8a 4b 51 8e 51 97 c2 02 75 0a 00 8b da 8f 6c bf c9 b2 b2 da 8a 4c 59 b1 63 d3 ce 4d 04 0d ed a0 07 b1 bc e6 d5 eb f7 e5 49 c3 87 0b 2d 8d 5b a8 40 61 b8 8c 0b 8d 89 4c 78 b0 21 02 17 26 11 40 dc 6a 11 82 1e 64 3c 12 32 83 0a 5f 2e b9 96 55 ed 3d bd da 95 83 d6 aa 51 9d ae 9c d8 d5 62 ca d2 60 33 43 f5 60 b6 ee 50 50 7e 6f 0a cc 5a f8 36 d9 c5 91 e7 22 be dc 38 a4 03 ac 74 24 7f 1c 5b 39 30 eb a5 34 30 af 4e 7d 37 76 ef dd 87 6f 07 ef 29 cb 74 dc Data Ascii: ABUzbm9$!a%$C$A$2Je$EGTy\|N2PA?<e[f.bp<6A)M1,Iu]Wj}KQQulLYcMI-[@aLx!&@jd<2_.U=Qb`3C`PP~oZ6"8t$[9040N}7vo)t
2024-04-23 14:09:22 UTC	1255	IN	Data Raw: a9 26 b5 b4 b7 a2 0f ba bb bc 99 4d bf b4 08 c1 91 c3 c4 ad 4e c7 8f 25 ca b4 04 cd 8d 14 d0 b4 09 d3 88 4a d6 b4 1c d9 86 5d dc b4 0f df 84 20 e2 b4 5b e5 82 23 e8 b4 1a eb 0b ee b4 2e e5 f2 f3 ad 11 df 29 f8 b5 d9 1f fd fc 35 23 10 50 60 30 82 05 5b 71 39 86 30 61 29 16 0c 1d b6 8a 28 b1 d4 b1 1c 15 4b 8d 08 76 20 a3 27 12 c1 9c 78 f4 14 ec c4 c8 4e 21 4f 7e e2 25 52 65 8b 60 2a 29 05 9b 11 33 58 2e 95 0c 78 21 88 59 8f 17 95 9a bc 12 00 e5 75 41 a5 34 5e 2f 54 86 38 36 40 e5 b1 96 23 9b 19 38 99 e3 51 17 4c 27 65 44 c2 a0 cf 91 85 91 2b b0 a2 4c 64 25 aa d8 4e 50 10 6d f0 68 ec 2c 49 43 1e ff 45 68 5a cb aa 10 54 89 a1 2a 00 13 c4 af e2 91 50 60 0c 66 c8 28 2a b0 c0 29 15 e1 85 6a 5a 6b 02 00 c4 78 45 d1 f5 b7 44 a2 03 54 c4 00 14 91 78 34 14 31 07 2a Data Ascii: &MN%J] [#.)5#P`0[q90a)(Kv 'xN!O~%Re`)3X.x!YuA4^/T86@#8QL'eD+Ld%NPmh,ICEhZTP`f()jZkxEDTx41
2024-04-23 14:09:22 UTC	44	IN	Data Raw: 0a 72 a7 35 5a d2 0a 24 33 b9 0e 22 5c 34 9d d2 ca 4d 17 c1 2e c9 8b 29 45 24 6b 88 2b 62 c8 c0 89 b3 89 60 22 46 14 56 06 02 00 3b Data Ascii: r5Z$3"\4M.)E$k+b`"FV;

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.11.12	49371	34.120.41.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-23 14:09:22 UTC	544	OUT	GET /images/mobile-optiturn-logo-2x.png HTTP/1.1 Host: sandbox.optiturn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) ot-test-app/1.0.1 Chrome/73.0.3683.121 Electron/5.0.6 Safari/537.36 Accept: image/webp,image/apng,image/,/*;q=0.8 Referer: https://sandbox.optiturn.com/assets/application-mobile-7ad2940818d75a843437e99a696611a0.css Accept-Encoding: gzip, deflate, br Accept-Language: en-GB Cookie: _inventory_session=a1edacd959b06521fb3a0cdc25eb8903
2024-04-23 14:09:22 UTC	1187	IN	HTTP/1.1 200 OK Last-Modified: Mon, 22 Apr 2024 15:47:26 GMT Content-Type: image/png Date: Tue, 23 Apr 2024 14:09:22 GMT Cache-Control: private X-Rack-Cache: miss Vary: Origin Content-Length: 944 Via: 1.1 google Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Security-Policy: default-src ; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self' Content-Security-Policy-Report-Only: default-src ; child-src 'self'; script-src 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data:; frame-ancestors 'self'; report-uri /csp_report; Permissions-Policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), usb=(), xr-spatial-tracking=() X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-23 14:09:22 UTC	68	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 58 00 00 00 70 08 06 00 00 00 9a 6a b7 6f 00 00 03 77 49 44 41 54 78 da ed dc dd 4a 54 51 14 00 e0 3d 33 ea cc 28 d1 9d 81 f5 0a 46 f5 16 45 5d 5a Data Ascii: PNGIHDRXpjowIDATxJTQ=3(FE]Z
2024-04-23 14:09:22 UTC	876	IN	Data Raw: 4f e0 4d d2 4d 51 d7 5d 47 11 14 f4 03 f5 00 3e 43 06 66 14 68 3a 81 2f 60 94 e9 e8 84 3f 65 69 e0 38 ad 5d 07 1c 03 6b a6 f6 fa 39 6b ad 05 eb a2 0b 67 9f f5 b1 db 67 9f bd f7 39 21 e4 28 f6 26 07 a7 20 5b 89 f2 56 f0 38 80 3b 91 10 37 e6 9c ab ee e3 3e 4f 8c 1b 73 cf 65 7f e1 be 44 c0 fd 99 8e 3b 39 58 c3 c2 35 0f 0c 00 6f 31 71 4d 03 43 f1 b3 d8 b8 66 81 a1 f0 69 0a 5c 93 c0 50 f4 1b 2a 5c 73 c0 50 f0 02 25 ae 29 60 28 f6 1d 35 ae 19 60 28 74 91 03 d7 04 30 14 d9 e0 c2 55 0f 0c 05 6e 72 e2 aa 06 86 e2 ea dc b8 59 f6 f9 98 8b 9b c7 b5 e1 2e 09 c2 8d 79 52 13 ee b2 30 dc 98 15 c7 c5 cb 5e 2d b8 2b 02 71 8b 5a 70 d7 7c 58 c0 c3 dd 16 88 db af 05 77 43 20 ee 80 16 dc 55 1f 16 94 ae 2d 1c 92 25 2d b8 9f 7c 2a 86 87 bb 2e 10 b7 c7 71 7d 95 ec af b8 9f bd e7 Data Ascii: OMMQ]G>Cfh:/`?ei8]k9kgg9!(& [V8;7>OseD;9X5o1qMCfi\P\sP%)`(5`(t0UnrY.yR0^-+qZp\|XwC U-%-\|.q}

System Behavior

Analysis Process: xpcproxy PID: 612, Parent PID: 1

General

Start time (UTC):	14:09:01
Start date (UTC):	23/04/2024
Path:	/usr/libexec/xpcproxy
Arguments:	-
File size:	44048 bytes
MD5 hash:	4764d9eafe6b7dac23253a9f8b7f73d6

Chronological Activities

Analysis Process: nsurlstoraged PID: 612, Parent PID: 1

General

Start time (UTC):	14:09:01
Start date (UTC):	23/04/2024
Path:	/usr/libexec/nsurlstoraged
Arguments:	/usr/libexec/nsurlstoraged --privileged
File size:	246624 bytes
MD5 hash:	321b0a40e24b45f0af49ba42742b3f64

Chronological Activities

Analysis Process: mono-sgen32 PID: 621, Parent PID: 537

General

Start time (UTC):	14:09:09
Start date (UTC):	23/04/2024
Path:	/Library/Frameworks/Mono.framework/Versions/4.4.2/bin/mono-sgen32
Arguments:	-
File size:	3722408 bytes
MD5 hash:	8910349f44a940d8d79318367855b236

Chronological Activities

Analysis Process: open PID: 621, Parent PID: 537

General

Start time (UTC):	14:09:09
Start date (UTC):	23/04/2024
Path:	/usr/bin/open
Arguments:	/usr/bin/open -b com.apple.Finder /Users/bernard/Desktop/unpack
File size:	105952 bytes
MD5 hash:	34bd93241fa5d2aee225941b1ca14fa4

Chronological Activities

Analysis Process: mono-sgen32 PID: 624, Parent PID: 537

General

Start time (UTC):	14:09:13
Start date (UTC):	23/04/2024
Path:	/Library/Frameworks/Mono.framework/Versions/4.4.2/bin/mono-sgen32
Arguments:	-
File size:	3722408 bytes
MD5 hash:	8910349f44a940d8d79318367855b236

Chronological Activities

Analysis Process: open PID: 624, Parent PID: 537

General

Start time (UTC):	14:09:13
Start date (UTC):	23/04/2024
Path:	/usr/bin/open
Arguments:	/usr/bin/open /Users/bernard/Desktop/unpack/ot-test-app.app
File size:	105952 bytes
MD5 hash:	34bd93241fa5d2aee225941b1ca14fa4

Chronological Activities

Analysis Process: xpcproxy PID: 625, Parent PID: 1

General

Start time (UTC):	14:09:14
Start date (UTC):	23/04/2024
Path:	/usr/libexec/xpcproxy
Arguments:	-
File size:	44048 bytes
MD5 hash:	4764d9eafe6b7dac23253a9f8b7f73d6

Chronological Activities

Analysis Process: ot-test-app PID: 625, Parent PID: 1

General

Start time (UTC):	14:09:14
Start date (UTC):	23/04/2024
Path:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
Arguments:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/MacOS/ot-test-app
File size:	186044 bytes
MD5 hash:	4a43bafb4af0a038a7f430417bcc1b6e

Chronological Activities

Analysis Process: ot-test-app Helper PID: 627, Parent PID: 625

General

Start time (UTC):	14:09:14
Start date (UTC):	23/04/2024
Path:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper
Arguments:	-
File size:	253712 bytes
MD5 hash:	6a04b9530b9f9682c66dd6c189fac548

Chronological Activities

Analysis Process: ot-test-app Helper PID: 628, Parent PID: 625

General

Start time (UTC):	14:09:17
Start date (UTC):	23/04/2024
Path:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper
Arguments:	-
File size:	253712 bytes
MD5 hash:	6a04b9530b9f9682c66dd6c189fac548

Chronological Activities

Analysis Process: ot-test-app Helper PID: 629, Parent PID: 625

General

Start time (UTC):	14:09:17
Start date (UTC):	23/04/2024
Path:	/Users/bernard/Desktop/unpack/ot-test-app.app/Contents/Frameworks/ot-test-app Helper.app/Contents/MacOS/ot-test-app Helper
Arguments:	-
File size:	253712 bytes
MD5 hash:	6a04b9530b9f9682c66dd6c189fac548

Chronological Activities

Analysis Process: xpcproxy PID: 626, Parent PID: 1

General

Start time (UTC):	14:09:14
Start date (UTC):	23/04/2024
Path:	/usr/libexec/xpcproxy
Arguments:	-
File size:	44048 bytes
MD5 hash:	4764d9eafe6b7dac23253a9f8b7f73d6

Chronological Activities

Analysis Process: gamecontrollerd PID: 626, Parent PID: 1

General

Start time (UTC):	14:09:14
Start date (UTC):	23/04/2024
Path:	/usr/libexec/gamecontrollerd
Arguments:	/usr/libexec/gamecontrollerd
File size:	86928 bytes
MD5 hash:	16ce481450ab82ba0dd811f76b6cf293

Chronological Activities

Analysis Process: xpcproxy PID: 661, Parent PID: 1

General

Start time (UTC):	14:09:53
Start date (UTC):	23/04/2024
Path:	/usr/libexec/xpcproxy
Arguments:	-
File size:	44048 bytes
MD5 hash:	4764d9eafe6b7dac23253a9f8b7f73d6

Chronological Activities

Analysis Process: eficheck PID: 661, Parent PID: 1

General

Start time (UTC):	14:09:53
Start date (UTC):	23/04/2024
Path:	/usr/libexec/firmwarecheckers/eficheck/eficheck
Arguments:	/usr/libexec/firmwarecheckers/eficheck/eficheck --integrity-check-daemon
File size:	74048 bytes
MD5 hash:	328beb81a2263449258057506bb4987f

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

macOS Analysis Report ot-test-app-darwin-x64-1.0.1.zip

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/Users/bernard/Library/Application Support/ot-test-app/.com.electron.ot-test-app.qSVAxM

/Users/bernard/Library/Application Support/ot-test-app/000001.dbtmp

/Users/bernard/Library/Application Support/ot-test-app/000002.dbtmp

/Users/bernard/Library/Application Support/ot-test-app/Cache/0be797289528155c_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/2940195bd9870d6e_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/2dfde53b7dad7403_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/2f577e369a332ade_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/478ad7214b5adf30_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/62577db59fc9ecfa_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/63fcd95fbcfe52d8_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/64a158b52d8d7f13_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/72153b705d2b0ca1_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/9e8725181fa08ea9_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/a8afd1f866157e03_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/b542690c1b3a7038_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/eea7151f88f29c03_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/fb27a8b3cedb4d00_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/fbcc112b005136fb_0

/Users/bernard/Library/Application Support/ot-test-app/Cache/index

/Users/bernard/Library/Application Support/ot-test-app/Cache/index-dir/temp-index

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/402c5ed80cf90429_0

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/55278cefcf389f81_0

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/a0a94bbe1c33ff23_0

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/d90671bec5e9eb37_0

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/da20b6cbeff987ad_0

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/f6a4b760a9c11ff3_0

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/index

/Users/bernard/Library/Application Support/ot-test-app/Code Cache/js/index-dir/temp-index

/Users/bernard/Library/Application Support/ot-test-app/Cookies

macOS Analysis Report
ot-test-app-darwin-x64-1.0.1.zip