Edit tour

Windows Analysis Report
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60

Overview

General Information

Sample URL:	https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60
Analysis ID:	1432213
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2384,i,13309312840750829887,16417824520483540368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: https://eng2e.seismic.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://crl.thawte.com/ThawteTimestampingCA.crl0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ocsp.thawte.com0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcb.com/sc.crl0W
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcb.com/sc.crt0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://sc.symcd.com0&
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://scripts.sil.org/OFLCopyright
Source: chromecache_76.2.dr	String found in binary or memory: http://scripts.sil.org/OFLSource
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-aia.ws.symantec.com/tss-ca-g2.cer0
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://ts-ocsp.ws.symantec.com07
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.symauth.com/cps0(
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: http://www.symauth.com/rpa04
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: https://d.symcb.com/cps0%
Source: chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	String found in binary or memory: https://d.symcb.com/rpa0
Source: chromecache_127.2.dr, chromecache_123.2.dr	String found in binary or memory: https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60
Source: chromecache_99.2.dr	String found in binary or memory: https://js-agent.newrelic.com
Source: chromecache_127.2.dr, chromecache_123.2.dr	String found in binary or memory: https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9
Source: chromecache_93.2.dr, chromecache_75.2.dr, chromecache_129.2.dr, chromecache_110.2.dr	String found in binary or memory: https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb3
Source: chromecache_99.2.dr	String found in binary or memory: https://service-discovery.seismic.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/97@28/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2384,i,13309312840750829887,16417824520483540368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2384,i,13309312840750829887,16417824520483540368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://ocsp.thawte.com0	0%	URL Reputation	safe
http://ocsp.thawte.com0	0%	URL Reputation	safe
https://bam.nr-data.net/events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58648&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	0%	Avira URL Cloud	safe
https://bam.nr-data.net/events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58644&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	0%	Avira URL Cloud	safe
https://bam.nr-data.net/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964	0%	Avira URL Cloud	safe
https://bam.nr-data.net/ins/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=48518&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	0%	Avira URL Cloud	safe
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=68654&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	0%	Avira URL Cloud	safe
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58647&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	0%	Avira URL Cloud	safe
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=78669&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	high
kubernetes-prod-az-eastus-raptor.seismic.com	52.151.208.67	true	false	high
www.google.com	142.250.64.196	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
cdn-prod.seismic.com	unknown	unknown	false	high
eng2e.seismic.com	unknown	unknown	false	high
newdownload.seismic.com	unknown	unknown	false	high
service-discovery.seismic.com	unknown	unknown	false	high
api.seismic.com	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D	false		high
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=68654&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://js-agent.newrelic.com/nr-full-1.257.0.min.js	false		high
https://bam.nr-data.net/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58644&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/ins/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=48518&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D	false		high
https://bam.nr-data.net/events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58648&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58647&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D	false		high
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60#/	false		high
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D	false		high
https://bam.nr-data.net/jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=78669&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb3	chromecache_93.2.dr, chromecache_75.2.dr, chromecache_129.2.dr, chromecache_110.2.dr	false		high
https://js-agent.newrelic.com	chromecache_99.2.dr	false		high
http://ocsp.thawte.com0	chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://www.symauth.com/cps0(	chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	false		high
http://crl.thawte.com/ThawteTimestampingCA.crl0	chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	false		high
http://scripts.sil.org/OFLCopyright	chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	false		high
https://service-discovery.seismic.com	chromecache_99.2.dr	false		high
http://scripts.sil.org/OFLSource	chromecache_76.2.dr	false		high
http://www.symauth.com/rpa04	chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	false		high
http://scripts.sil.org/OFL	chromecache_86.2.dr, chromecache_76.2.dr, chromecache_78.2.dr	false		high
https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9	chromecache_127.2.dr, chromecache_123.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.151.208.67	kubernetes-prod-az-eastus-raptor.seismic.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.64.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432213
Start date and time:	2024-04-26 17:31:35 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/97@28/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.189.131, 142.250.217.174, 173.194.216.84, 34.104.35.123, 104.18.6.124, 104.18.7.124, 52.165.165.26, 23.45.182.83, 23.45.182.78, 23.45.182.86, 23.45.182.85, 13.95.31.18, 192.229.211.108, 142.250.217.195, 40.68.123.157
Excluded domains from analysis (whitelisted): service-discovery.seismic.com.cdn.cloudflare.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, api.seismic.com.cdn.cloudflare.net, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, eng2e.seismic.com.cdn.cloudflare.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, smc-prod-download-tmp-01.trafficmanager.net, cdn-prod.seismic.com.cdn.cloudflare.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	611
Entropy (8bit):	4.973991211936122
Encrypted:	false
SSDEEP:	12:trwdU/gKucmdyX9M65CUDckHb4Kli8Siappqbl2eSTVgQ+LoU9kAHFVQ6hllR:tYU/du1yX9MMCAckHRiMDUeSxME4kanv
MD5:	A4D81B66E7C0CE9ECDEC6CF61636315D
SHA1:	4EAEB1079DA5940D5545C35B25AA249B15F96D71
SHA-256:	2D1FBA5C211F126AE1281A9DF79AD49FBE0E442B60EC07618641A720D6EEEE9B
SHA-512:	E9D42D0698ACBDF38E2D07E929AD100D49230DF653A3148D250C323FD18F65EE7472C296B65A468BDD311CF8B62272DA34129E85A3FFC34935309C8D6AD65BD0
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/public/seismic-icons/content-icons-v2/video.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="24" height="24" rx="2" fill="#880E4F"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.3464 7.13622C10.0718 6.95909 9.72976 6.9544 9.45104 7.12393C9.17232 7.29345 9.00002 7.611 9 7.95515V16.0439C8.99926 16.3884 9.17144 16.7065 9.45044 16.8762C9.72944 17.0459 10.0719 17.0408 10.3464 16.8628L16.5687 12.8191C16.8363 12.6464 17 12.3356 17 12.0001C17 11.6647 16.8363 11.3539 16.5687 11.1812L10.3464 7.13622Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	41837
Entropy (8bit):	7.452470509076427
Encrypted:	false
SSDEEP:	768:2xcuIgssDSda2Q40ewnAx254W//jCAih4aApy2cdf:4fIg5Ahi5X/jCTWI2S
MD5:	2590B8A5B4241A039C09E55AA85E48E3
SHA1:	E339696256984A952F6382571992867AEFCAF9AD
SHA-256:	CD358E463EE32CCFC5B958FB22E245A2AA920951C99F2DAFEF3EEEC27EA77C97
SHA-512:	8A79DF8B8ECD30EF7A1AA4A034C545D7D702B2A8AE8CA3406BFA72912D05DB7ABA312A6DE300E34A632F077E511F3AE060B11B23890AE095D9875C990E731FA2
Malicious:	false
Reputation:	low
URL:	https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......8....".............................................................................................................8........................................................................................................................................................................................................................................................................8.xO.q.....y....^.o.>n@.................................f<#...X.[.%...E..].'..Y.=_c..\|O...E ..........................<.\|}o.J!...c...x.m.D..A..q....%..%..>/..............................z9'.w4.a....Kx.Q..l-i.L.........^.=.........................................................................................................................................................................................................................................

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x386, components 3
Category:	dropped
Size (bytes):	25533
Entropy (8bit):	7.9280424172852335
Encrypted:	false
SSDEEP:	384:HlJD3al0IfBbh42MJWJHssnCArbMARkLG+sdGBIpnrpVvm4DvfHDtqcX:HlJzaH1u7JEMsLnMJWvVJjtqA
MD5:	2F07B2E3BCA3056E84DCDF88FDB1D94D
SHA1:	2714B91F477A7D7B26D80F893DD8BA3B368ACDE9
SHA-256:	F3FC04A107AAD0F9F07EFB3FEA0653B6D88D730E8EDAC7874A66CAC4929D4E4E
SHA-512:	7CAEC50BE95ABE6C63995C12B138A1B270759DD346B058ABD82C904ABE3C3DCA18E5F706CF967DF394CED722B6863870BF5B0CA4D7318A1E36B47D138732224A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65402)
Category:	downloaded
Size (bytes):	536717
Entropy (8bit):	5.477445987662377
Encrypted:	false
SSDEEP:	6144:vRwbr/mwhabJaYWH/+5bqHL2/sHfIudvLDYpnNVoPG5oYAwY:Zwbr/1kMYWH/+5bqUQfIudgpPUX
MD5:	84E1DED8431CD0B100A7E01A852604DA
SHA1:	C2FCAAD23DDA26ACEC89AA0DFF7AEEFCA3272235
SHA-256:	D2B9B290BA2A4D165ADDC32080B7DE22757EB7D73C85FED7CEF2F0B1D521FBCF
SHA-512:	E575025F03015F87E812448948C9BD29D49C09B3E7BED1FD107A900B6BE57CDB95EDE20B62D50D111B09D9CD96F087084DCA97314106A35226D5395753BB1E07
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-dsr-viewer/seismic-engagement-dsr-viewer.623.9cf8761960e66e6c20fe.chunk.js
Preview:	/! For license information please see seismic-engagement-dsr-viewer.623.9cf8761960e66e6c20fe.chunk.js.LICENSE.txt /.(self.webpackChunkseismic_engagement_dsr_viewer=self.webpackChunkseismic_engagement_dsr_viewer\|\|[]).push([[623],{1934:function(e,t,n){"use strict";n.r(t),n.d(t,{default:function(){return Vb}});var o=n(1024),r=n.n(o),i=n(2779),a=n.n(i),c=n(667),s=n(8977),l=n(987),u=n(2242),d=n(793),f=n(6353),p=n.n(f),m=n(5609),h=n(8588),g=n(5126),v=(n(1738),n(5634)),y=n(8762),b=n.n(y),C=n(5571),w=n.n(C),E=n(4330),T=n.n(E),x=n(1681),S=n(2532),_=n(9682),I=function(e,t){return I=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},I(e,t)};function N(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}I(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65417)
Category:	downloaded
Size (bytes):	1156403
Entropy (8bit):	5.666569909584907
Encrypted:	false
SSDEEP:	12288:PLQMR899mamskwX4wgXOwIQzc9S9aJZEW9bFOq:PLQMRo9mHW4wgeD6c9aaJZEW9bz
MD5:	5E1F9BC8F5113223687E64FFACF678A4
SHA1:	CC75350F4E87DE0830A57221335D39AF5A34BDCB
SHA-256:	BF6A40EDCB7EC5DCE24A9B489FA87D1C90A3D0529D19F52FEE1FD8A20F747ED1
SHA-512:	4FC9F510D58DEEBA51D548D48DADC13A9B5D157D17B4B78D2505BCE45FD32E698E31C7FC4FA88D18A584073DC0D8904B66206C9D1DFB5CCC81EDC5C812CE6016
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-dsr-viewer/seismic-engagement-dsr-viewer.417.c8824206b269bc8e870e.chunk.js
Preview:	/! For license information please see seismic-engagement-dsr-viewer.417.c8824206b269bc8e870e.chunk.js.LICENSE.txt /.(self.webpackChunkseismic_engagement_dsr_viewer=self.webpackChunkseismic_engagement_dsr_viewer\|\|[]).push([[417],{6562:function(t,e){"use strict";function r(){return!1}function n(){return!0}function i(){this.timeStamp=Date.now(),this.target=void 0,this.currentTarget=void 0}Object.defineProperty(e,"__esModule",{value:!0}),i.prototype={isEventObject:1,constructor:i,isDefaultPrevented:r,isPropagationStopped:r,isImmediatePropagationStopped:r,preventDefault:function(){this.isDefaultPrevented=n},stopPropagation:function(){this.isPropagationStopped=n},stopImmediatePropagation:function(){this.isImmediatePropagationStopped=n,this.stopPropagation()},halt:function(t){t?this.stopImmediatePropagation():this.stopPropagation(),this.preventDefault()}},e.default=i,t.exports=e.default},5062:function(t,e,r){"use strict";function n(t){return t&&t.__esModule?t:{default:t}}Object.defineProper

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x386, components 3
Category:	dropped
Size (bytes):	29288
Entropy (8bit):	7.9348385139104325
Encrypted:	false
SSDEEP:	384:Ha61fM4nRXkNh8Haugz7rQnjSoxdp2fZ1X9FLTRvEk6lT6JrA4gMI5FzTZF/+fK:Ht64uh51Qn9pU3N54TgA45I/zN1J
MD5:	833C9D3EEC182CE4E9B2CDAA270F8BA9
SHA1:	6219E20AFACBFDB8CA5856CC50C5F6B07EE33595
SHA-256:	23FEA314744D4B53624008E9C758887B19E1724AAC518913DDC4D47EEEDA5723
SHA-512:	6F22BA8A743DAB71ADDBC7DDAAB5F60D37740098F5CEF3F84264E3930B1AD630A5248445220740EA22100446CE8AA232A387161ADC444404306BD9B15117A6EC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x386, components 3
Category:	downloaded
Size (bytes):	29288
Entropy (8bit):	7.9348385139104325
Encrypted:	false
SSDEEP:	384:Ha61fM4nRXkNh8Haugz7rQnjSoxdp2fZ1X9FLTRvEk6lT6JrA4gMI5FzTZF/+fK:Ht64uh51Qn9pU3N54TgA45I/zN1J
MD5:	833C9D3EEC182CE4E9B2CDAA270F8BA9
SHA1:	6219E20AFACBFDB8CA5856CC50C5F6B07EE33595
SHA-256:	23FEA314744D4B53624008E9C758887B19E1724AAC518913DDC4D47EEEDA5723
SHA-512:	6F22BA8A743DAB71ADDBC7DDAAB5F60D37740098F5CEF3F84264E3930B1AD630A5248445220740EA22100446CE8AA232A387161ADC444404306BD9B15117A6EC
Malicious:	false
Reputation:	low
URL:	https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41992)
Category:	downloaded
Size (bytes):	42074
Entropy (8bit):	5.270878816997933
Encrypted:	false
SSDEEP:	384:cr7pVvb8UrIcEu1YAuCeo8cBQQRSKcppOYF5Iq/gFjzwqvEabdBMrm5mVkTXMSxP:gMuYCL8c2FKcppTgF+a7MroTXbjD
MD5:	127B8A4421672B810F35914474E1C26C
SHA1:	022F2C5A3FF6439D94B090DB45F2551C7DEE2147
SHA-256:	1700BD4D1514C02C5B6B16652E8E98EF6B82456035F2BA6CA24BE7A1AFA40953
SHA-512:	FFA8A4921A592D417F637B7726E4B21726AAF2EC7365108356AF43E04DEB9B2596437BE915700450C7F7E9485FC339E49C8FC4BA65B7D780A6A3386AF3F903C8
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/resources/seismic-engagement-viewer/371.0be3195282943bf85581.js
Preview:	/! For license information please see 371.0be3195282943bf85581.js.LICENSE.txt /.(self.webpackChunkengagement_bundle=self.webpackChunkengagement_bundle\|\|[]).push([[371],{84559:function(n,t,e){"use strict";function r(){return r=Object.assign?Object.assign.bind():function(n){for(var t=1;t<arguments.length;t++){var e=arguments[t];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&(n[r]=e[r])}return n},r.apply(this,arguments)}function o(n){return"/"===n.charAt(0)}function i(n,t){for(var e=t,r=e+1,o=n.length;r<o;e+=1,r+=1)n[e]=n[r];n.pop()}e.d(t,{lX:function(){return w},q_:function(){return C},ob:function(){return d},PP:function(){return A},Ep:function(){return p}});var a=function(n,t){void 0===t&&(t="");var e,r=n&&n.split("/")\|\|[],a=t&&t.split("/")\|\|[],c=n&&o(n),u=t&&o(t),s=c\|\|u;if(n&&o(n)?a=r:r.length&&(a.pop(),a=a.concat(r)),!a.length)return"/";if(a.length){var f=a[a.length-1];e="."===f\|\|".."===f\|\|""===f}else e=!1;for(var l=0,p=a.length;p>=0;p--){var d=a[p];"."===d?i(a,p):".."===

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.8107568247749684
Encrypted:	false
SSDEEP:	48:5KZP2rrxI7Dzcf5ruYXxKmJ6sVASxDnpS9O7vaIyvBcVTQeQjZLfh8nexLfuXQav:/FI7Dg8YUmYyAwBRQeQjJh8sL2AU
MD5:	90116C06A5E4D1DA106DBD9CB3CECCBE
SHA1:	F366CA0F0DB73F6034DDD86A59DF8B2C064DBE46
SHA-256:	6D789CEBA9E5E878A88C1604452AF442FB42C1F794E0650E0A30E1231240619F
SHA-512:	06A91391E7EC67A124B1A6C8648CF3759508AAE9DFDD63F393FBC54E0798FE3B28FEC62751DFA15463C31668F15860A4E5C772A867AE5FA488EF66B2C82B5358
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-viewer/favicon.ico
Preview:	...... .... .........(... ...@..... .........#...#...................................c]S.gTR.d[S.d[S.dZS.d[S3d[Sjd[S.d[S.d[S.d[S.d[S.d[S.d[Sjd[S3d[S.e[S.d[S.d[Y.e[R.............................................dZS.d[R.dZS.d[S.d[S\d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S\d[S.d[T.d[S.c[S.................................h^U.dZS.d[S.dYR.d[SMd[S.d[S.d[S.d[S\|d[S.d[S.d[SNd[T.d[S.d[SMd[S.d[S.d[S}d[S.d[S.d[S.d[SMc[S.d[S.d\S.f\R.....................h^U.c[R.d[S.d[S.d[S.d[S.d[S.d[S_d[S.bVM.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.f^W.dZS.d[S^d[S.d[S.d[S.d[S.d[S.c[S.f\R.................c[S.d[S.d\S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[U.d\T.c[T.a][.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d\S.d[S.d[R.............eZR.dZS.d[S.d[S.d[S.d[Spe\S.d[S.j[P.d[S.d[SEd[S.d[S\d[S.hZM.f[M.d[S.d[S[d[S.d[SFd[S.aQX.d[S.c[R.d[Sod[S.d[S.d[S.d[S.c[S.....c]S.dZR.fXQ.d[S.d[S.d[SocWM.d[S.e[S.fZR.c[S.d[Syd[S.d[S,d[S.e\R.e\R.d[S.d[S,d[S.d[Szd[S.cZT.c[S.cZR.\UP.d[Sod[S.d[S.c[T.d[S.e[S.jTS.eZS.d[SNd[S.d[S.f[S.d[S.d[S..@@.d[S.d\

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	560
Entropy (8bit):	5.296398552592734
Encrypted:	false
SSDEEP:	12:YqKuW12nJvNM7HD5CkRx++aDHG4Qva1az4hIoOqUB:YqJRvab58NRQva1+4fOqw
MD5:	C96DB81C805B4689EF472E49EDB8EA52
SHA1:	4ED035C1BE3D3E0A50D8D1D99EB7E82CA8CF251D
SHA-256:	BDAAB9683EC4A7AE3DCC9C3A846F1F76CAD2E35F529DEE89C7E578485332091B
SHA-512:	F04C490FC5750C33EE0EF55858F4E7903A055F91F87C007DF0A87C16BD6C153271B3684733613C1269F9E01EA16C4E6B268789B83F5FE5A82992EC3CD7B9A7A6
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/api/v1/engagements/viewer/settings/livesend?tenantId=b817d80c-e942-40b0-8698-2e058b375eb8
Preview:	{"faviconBlobId":"","highlightColor":"#000000","browserTitle":"OneStream Software","logoBlobContainer":"onestreamsoftware","logoBlobId":"acb392a2-86c9-4b24-95db-2636493585ad","logoUrl":"https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D","faviconBlobContainer":"onestreamsoftware","faviconUrl":null,"hasCompliancePassword":false,"isAllowSharingLink":true,"isAllowLogin":false,"isRequirePremadeTemplate":false}

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	19183
Entropy (8bit):	6.1124770303119
Encrypted:	false
SSDEEP:	384:IGamHkZvACPvNJb9lhlgcgfoi6jIMTwMZo0SjPI41HOnqDMa5:brHkZpPvNFhlgcHi6fTK0Sjp1H2ps
MD5:	1399EAFC3BDA6546FF3FB0C759CAD2DC
SHA1:	0DD09434068D2EA6CF6D4A42A8D6B29718D84D3C
SHA-256:	5A95427189AC2E27823A22E93E32A93427EAA3273F87B829606390D2A712D38D
SHA-512:	51D8A9C9258711B201B3E70806E25BCBDF2EA4B413373DB3ECE3A14E053D1AF6CF8A576FB6E4C4C12C61FEEC58D775DA56748164A81A8CAE4FC583CDEDB67ACE
Malicious:	false
Reputation:	low
Preview:	{"isEnable":true,"defaultLanguage":"EN","policyUrls":[],"currentCountry":{"disclaimerId":"9a8a013d-bac8-45dd-b7bc-63c7d43e1ecd","id":null,"code":"US","name":"United States","disclaimerLibrary":{"name":"Seismic Default (show privacy settings only)","type":"DisclamerWithPrivacySetting","isDefault":true,"id":"9a8a013d-bac8-45dd-b7bc-63c7d43e1ecd","translations":[{"languageCode":"ro-RO","message":"Atunci c.nd vizualiza.i con.inutul, dorim s. v. oferim cea mai bun. experien.. posibil.. Expeditorul acestui con.inut va putea accesa detalii .i informa.ii legate despre activitatea dvs .i de asemenea, v. vom salva preferin.ele pentru data viitoare. Dac. face.i clic pe .Accepta.i .i vizualiza.i., sunte.i de acord cu toate activit..ile de monitorizare .i cookie-urile. Pute.i afla mai multe detalii .i v. pute.i gestiona preferin.ele .n . Set.rile mele de confiden.ialitate.. Vizita.i politica noastr. de confiden.ialitate pentru mai multe informa.ii.","id":

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14
Entropy (8bit):	3.3787834934861767
Encrypted:	false
SSDEEP:	3:YTgjXy:Y0jXy
MD5:	BDAE8BE36E9DFC819F3486870F8434D3
SHA1:	D991EF01679B350A728C665383ABB257CFECA53A
SHA-256:	8C5AAAB6E1EFDEC7F7F9F65CC0DE77461C36A46E6B7C9EE7A35299DD6E8449EE
SHA-512:	63C54BE922D5A0DAFAC9AF18BA462691C283C22D7E431D97F70CFF9C58BAE2444C06BB57BFEA2B9C71B769DDDBE8620EAC96B62FD786C378B486495880CA8521
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/api/v1/buyer-experience-settings/launch-darkly/engagement-enable-new-dsr?tenantId=onestreamsoftware
Preview:	{"value":true}

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2950 x 432, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	43495
Entropy (8bit):	7.729024746620303
Encrypted:	false
SSDEEP:	768:Xxp4kEfwXURKbRHkBVaS6k3h7JNOsDp3cxEAkZgIOE4L/HcK1s4YA:Xx/QwXURR2k3NOsDOxEAkuIOxLPz
MD5:	3248BC4EE970DD9C7BA295D920A09865
SHA1:	EA12D486DEC9F4EFF8D1EBC6FB3FE4E2908F08EE
SHA-256:	152EE6427325820BF9ABD816BD02252C1DD2968329917A9FE47A1E3167AE8B70
SHA-512:	65A20D49AAEF7BD94AEF2E71B5A8BF0B1C24B5E3A1DFD8F16F3B3A59A4496C7E7E76E8D3881C51400A3A1F41D4DF876ED0263BA8C97C29C48E83C2FD291FC5E1
Malicious:	false
Reputation:	low
URL:	https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D
Preview:	.PNG........IHDR.............O.......pHYs..........&.?.. .IDATx....q.....w.BU_~..x.....E`..#.....HG.q..#.(..#......T......y..0.W..RY.uX.1@..^...\|W.0.4..P..O...{..>g%i....\|....$m.Y=............................Z...t:.w/...F......6.. ................"..........O.:....+A.i\|-....8................/..p+..................m..eA..................p.P.p.....C.8....W.................p.`8.....~...q......l.feZ................^E0.I .......W.................H..p. ..^...K]P\|mZ...............@....(..f......l...V.A.i....................`8&S.p.7uA.m58.a7...i6..................`8....L..j..G.^.................&E0.{.t..K:....#$...............0....I..L...Dgp..^.m..[...................p.V.p..+.o.Nm.AF6z../.k...............p.`8.T.0...........t.6..................?...YU.3I....~bZ.J.w................... u......7I.m%.wku]..m.l.k...............H..p...D.'u..m5..6._.M.6................ )...V.0.t).L.m5.V...h...........@>..j....y.......^B0.@qQ.wu.p........:..........B..u.o.n...............

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1679
Entropy (8bit):	4.098630442264589
Encrypted:	false
SSDEEP:	48:n/+0VfGanosA+DL69jMGHb39h+VXq18CJHGDSVAvxxL:nWzJsXDL2jF5v8CJmDSG3L
MD5:	8C5D4096ED7FD0A95A0786C13645773B
SHA1:	23A9C71B885380954A256B484EBAE06D9253F59F
SHA-256:	FE2DCB7298738F6525BBE4788AA72C1204E558F25ACAA2C8D838424D36B7817E
SHA-512:	28A9F4FBE4708EAEE42D19022F4A3D300884DB88594973593DFA20CFDD43A604927CEBB39D89E7D49D900CF5C4929A5BAC970D5680B88EB9A590C93B539563EE
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/public/seismic-icons/content-icons-v2/pdf.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="24" height="24" rx="2" fill="#EA4335"/>.<path d="M19.6654 14.0176C18.4721 12.7129 15.1718 13.2436 14.3978 13.3763C13.2583 12.2374 12.4628 10.8885 12.194 10.3909C12.624 9.13042 12.9035 7.79253 12.9465 6.47676C12.9465 5.28261 12.4843 4 11.1942 4C10.7427 4.01106 10.3342 4.26537 10.1085 4.65236C9.56021 5.62537 9.77521 7.63774 10.6567 9.67221C10.1407 11.1649 9.39896 13.321 8.42069 15.068C7.09841 15.6098 4.29261 16.9366 4.02386 18.4072C3.93786 18.8384 4.08836 19.2807 4.41086 19.5792C4.72262 19.8667 5.13113 20.0105 5.55039 19.9994C7.23817 19.9994 8.92595 17.589 10.0655 15.5213C11.0222 15.1786 12.5488 14.7252 14.086 14.4378C15.8706 16.041 17.4616 16.2843 18.2679 16.2843C19.3644 16.2843 19.7729 15.7978 19.9234 15.3887C20.0847 14.9243 19.9879 14.3935 19.6654 14.0176ZM18.5044 14.8579C18.4506 15.1786 18.0529 15.4992 17.3111 15.3334C16.4511 15.1122 15.6448 14.6921 14.9676 14.1171C15.5481 14.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14
Entropy (8bit):	3.3787834934861767
Encrypted:	false
SSDEEP:	3:YTgjXy:Y0jXy
MD5:	BDAE8BE36E9DFC819F3486870F8434D3
SHA1:	D991EF01679B350A728C665383ABB257CFECA53A
SHA-256:	8C5AAAB6E1EFDEC7F7F9F65CC0DE77461C36A46E6B7C9EE7A35299DD6E8449EE
SHA-512:	63C54BE922D5A0DAFAC9AF18BA462691C283C22D7E431D97F70CFF9C58BAE2444C06BB57BFEA2B9C71B769DDDBE8620EAC96B62FD786C378B486495880CA8521
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/api/v1/buyer-experience-settings/launch-darkly/engagement-enable-new-dsr?tenantId=b817d80c-e942-40b0-8698-2e058b375eb8
Preview:	{"value":true}

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	301
Entropy (8bit):	4.90903799128872
Encrypted:	false
SSDEEP:	6:YMcUC6mAZXL/jr6SK+mac6M32VHQJ6RqNZ/B9LhAHV1nV22r:YO3ZPrS+/cLGVwJGqN9LK1SK
MD5:	840DEC74A02C85B569B8628442FE3751
SHA1:	33D50A8088862CD9822180FEE342B3596613B9B6
SHA-256:	F7709DA56B5ABE1DB96AA2EF6E7EDCEA0D58A630EFCC49B154439211147E3EBD
SHA-512:	66460F902A1CC25C901001D79D5A4B8B776380C06FFD09541589EB076C0A2F16EFA1EE48D306F042D3DAD61358D49DCB61B6E78C89E4F469155C6069DB588CD6
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/api/v2/engagement-links/KeKSp5v9_rr55V60/owner?tenantId=b817d80c-e942-40b0-8698-2e058b375eb8
Preview:	{"id":"861f95bc-8473-72ca-4680-42c9c5032d2c","userType":"Seller","firstName":"Ryan","lastName":"DePoy","fullName":"Ryan DePoy","emailAddress":"rdepoy@onestreamsoftware.com","avatarDownloadUrl":null,"company":null,"title":"Named Account Manager","deactivated":false,"organization":"OneStream Software"}

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14
Entropy (8bit):	3.3787834934861767
Encrypted:	false
SSDEEP:	3:YTgjXy:Y0jXy
MD5:	BDAE8BE36E9DFC819F3486870F8434D3
SHA1:	D991EF01679B350A728C665383ABB257CFECA53A
SHA-256:	8C5AAAB6E1EFDEC7F7F9F65CC0DE77461C36A46E6B7C9EE7A35299DD6E8449EE
SHA-512:	63C54BE922D5A0DAFAC9AF18BA462691C283C22D7E431D97F70CFF9C58BAE2444C06BB57BFEA2B9C71B769DDDBE8620EAC96B62FD786C378B486495880CA8521
Malicious:	false
Reputation:	low
Preview:	{"value":true}

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	301
Entropy (8bit):	4.90903799128872
Encrypted:	false
SSDEEP:	6:YMcUC6mAZXL/jr6SK+mac6M32VHQJ6RqNZ/B9LhAHV1nV22r:YO3ZPrS+/cLGVwJGqN9LK1SK
MD5:	840DEC74A02C85B569B8628442FE3751
SHA1:	33D50A8088862CD9822180FEE342B3596613B9B6
SHA-256:	F7709DA56B5ABE1DB96AA2EF6E7EDCEA0D58A630EFCC49B154439211147E3EBD
SHA-512:	66460F902A1CC25C901001D79D5A4B8B776380C06FFD09541589EB076C0A2F16EFA1EE48D306F042D3DAD61358D49DCB61B6E78C89E4F469155C6069DB588CD6
Malicious:	false
Reputation:	low
Preview:	{"id":"861f95bc-8473-72ca-4680-42c9c5032d2c","userType":"Seller","firstName":"Ryan","lastName":"DePoy","fullName":"Ryan DePoy","emailAddress":"rdepoy@onestreamsoftware.com","avatarDownloadUrl":null,"company":null,"title":"Named Account Manager","deactivated":false,"organization":"OneStream Software"}

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5638)
Category:	downloaded
Size (bytes):	5684
Entropy (8bit):	5.283482983022683
Encrypted:	false
SSDEEP:	96:3Jm5CLYIqm5J4WKDoPgJvMBV8L6VXcm73jfnRq1FuIMGiXSWc:385Bu5JfKkYQCmGOnRq1FuBXS5
MD5:	5615558C15EE0941F1151A958209887C
SHA1:	E8AF1DCE6AB1D75F34EBD5A1C908016CAFC497AB
SHA-256:	32C2EB1A689CD0EBC0E55D2C0D003A4FA75D2F85D3B91CBB9F9E53A6769C53E1
SHA-512:	36BA54244C2C53DE343176E85E81AB95FF0407A59AB960C83D56D1100942C4FB8CDF455DCDD239D896730FE4E3EF18C435468AEE7E84FB39AA56C27856BADF3F
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-dsr-viewer/dsr-viewer-loader.js?2856909
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t(require("MantleUI"),require("Moment"),require("React"),require("ReactCustomScrollbars"),require("ReactDOM"),require("ReactJSXRuntime"),require("SeismicCommon"),require("SeismicImagePicker"),require("ShareRTE"),require("UniversalVideoRecorder")):"function"==typeof define&&define.amd?define(["MantleUI","Moment","React","ReactCustomScrollbars","ReactDOM","ReactJSXRuntime","SeismicCommon","SeismicImagePicker","ShareRTE","UniversalVideoRecorder"],t):"object"==typeof exports?exports["seismic-engagement-dsr-viewer"]=t(require("MantleUI"),require("Moment"),require("React"),require("ReactCustomScrollbars"),require("ReactDOM"),require("ReactJSXRuntime"),require("SeismicCommon"),require("SeismicImagePicker"),require("ShareRTE"),require("UniversalVideoRecorder")):e["seismic-engagement-dsr-viewer"]=t(e.MantleUI,e.Moment,e.React,e.ReactCustomScrollbars,e.ReactDOM,e.ReactJSXRuntime,e.SeismicCommon,e.SeismicImagePicker,e

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3976
Entropy (8bit):	5.319620184016316
Encrypted:	false
SSDEEP:	96:cv204s4ZDH0ZrMEwVNHSkwUuxmi15MpsMdPXLV:cv204p6MdNyDU9i16sAbV
MD5:	DC498106DCA415CCCC6ADCB9D5139A55
SHA1:	520229FC4BF8CDEE07A7270ED865903250FE24E6
SHA-256:	84ECCCAF4111E2B72D77221B5A4A3BA850D78BCAD22EAC5245EA791D4775C149
SHA-512:	4312EA136210B69DEEC4ADDC1326875390C436D781B74B2B44E037BC5ED167CCC807036914FA553BC243DA351B4EC99F435CDDDD6237FE542A3F0C1A63142524
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/api/v1/engagements/links/KeKSp5v9_rr55V60?tenantId=b817d80c-e942-40b0-8698-2e058b375eb8
Preview:	{"isWatermarkEnabled":false,"isWatermarkingRequired":false,"isWatermarkingTrackingOptOut":false,"isCustomDomain":false,"isEnabledGoogleViewer":false,"isBuyerAccessControlEnabled":false,"id":"e78abab7-162a-d6bd-cea5-42078fcd4e13","urlPath":"https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60","name":"US Courts OneStream Demo Room","type":"MICROSITE_LINK","linkSettings":{"canDownload":false,"downloadFormats":["Original"],"expiresAt":"2024-05-24T00:00:00Z","isExpired":false,"notificationType":"Summary","isSeparateSend":true,"hasPassword":false},"coBrandingSettings":{"blobId":"42a9afb0-4e23-4a15-8f0a-491943de840e","blobContainer":"onestreamsoftware","downloadUrl":"https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D"},"nanoId":"KeKSp5v9_rr55V60","layoutArticleId":"a51d8b79-21c4-4347-a1c0-82cb90c8f386","crea

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	9327
Entropy (8bit):	5.184149443379865
Encrypted:	false
SSDEEP:	192:8oloGzxtZ2waGyRkylx2Z2waGyRUx5Z2waGyRsrx9Z2waGyRpUpxVGZ2waGyRaJ9:BoqJTyzglVt5/yLxr
MD5:	F77EA97A60964F78C9CDF4AD2AD2935B
SHA1:	BBD0FDB782A8A496DB85A2A94ED891D426C72C46
SHA-256:	610ABEDC41106DB2638E28D20D47B35DE490C5D54AC00159EEB1E8218DA663EA
SHA-512:	CB36397DCFDF79883000C9164C3E52FFB890C9DC3F0F5076E42F6A0D6D8C9FDB1A89576815585DF23737E9C6273A09D898FDD1E2B0D55223EBED9662ECEFD66A
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/api/v1/engagements/links/KeKSp5v9_rr55V60/layout?tenantId=b817d80c-e942-40b0-8698-2e058b375eb8
Preview:	{"Id":"a51d8b79-21c4-4347-a1c0-82cb90c8f386","Article":{"Structure":{"FeatureType":"Microsite","Setting":{"isLogoLocked":false,"isTitleLocked":false,"isNewTextLocked":false,"isNewImageLocked":false,"isTemplateLocked":false,"isNewRecordingLocked":false},"Layout":{"Version":"1","Name":"microsite.singleColumn","Type":"layout","Data":{"main":["ed5cb3ec-884e-4189-bc29-96654ce36cb6"]}},"WidgetsMapping":{"ed5cb3ec-884e-4189-bc29-96654ce36cb6":{"index":0}},"Extensions":{"HeaderExtension":{"Type":null,"Data":{"Title":"US Courts OneStream Demo Room","CobrandingLogo":{"blobId":"42a9afb0-4e23-4a15-8f0a-491943de840e","logoSource":"local","containerName":"onestreamsoftware"}}},"MicrositeContentExtension":{"Type":"ContentsBundle","Data":{"contents":[{"id":"3a942917-a726-4612-a155-69021e0caa0e","name":"US Courts demo 4-19-24","type":"file","format":"PDF","contentId":"3a942917-a726-4612-a155-69021e0caa0e","versionId":"58c78cbc-a5f6-49b6-a708-24c8c6504e07","repository":"workspace","description":null,"th

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 386x500, components 3
Category:	dropped
Size (bytes):	39734
Entropy (8bit):	7.94596067904496
Encrypted:	false
SSDEEP:	768:DeLcme7dLqZj0w+kHJ38v9G9/BWOllgHag/vQVH1sCrhCyVnwyM:DeLcmSded0PkHJMo9/UHa5VH1sYCQQ
MD5:	DD1225E903CE34D2583E5D583CCB761B
SHA1:	DA3D2AE1477CD0C41C384306FE3C46D26B23671A
SHA-256:	5A72D6CAF8F817333ED9AF25A75DE082AEF5AA6A07CF7452565A38D759C8DE5C
SHA-512:	00637D05D01BF33E748BD1A2ABA3210C627231582896CDF954B2CB1E079841915D91E6C9668BADFD6D75F5884897797AC419467563EF87BEF425A260FCE61D6E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....t..?O....<As........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?*J(.s.......&...:zQH>..QLDg..IJz.....QV,,g...{.e.=.4..Os.:......W..O...~.en............#.....#..uD/6.E#...8a..M...%.p.....

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2030
Entropy (8bit):	4.965844591370783
Encrypted:	false
SSDEEP:	24:Rm4QwAvguIqsRjQuZXjU06V125n7Uo3v9g8z13YJrETxG23hZeytGkfeARQ5L:zQBoNRjLNj5PooVY1dIfhRQ5L
MD5:	7D5A52C0BE5BDEB356BA57ED21AFC86F
SHA1:	022E5420F9C44A0E47C95A70815FCAFFEFA0D8D8
SHA-256:	A08D5B5642E391FF1A9B5B9F895909CAA56953FCDDBF7BAF87AA87763DC05C43
SHA-512:	139E4504F03F76747C5C8CC0F69C7592C1FE181924D19092D823C76615150904CEBDF890187F3C79D65782B910F297275D671AB0FCD6717C4003B8972EB1D38D
Malicious:	false
Reputation:	low
Preview:	{. "files": {. "main.css": "/static/seismic-engagement-viewer/static/css/main.08502b2a.css",. "main.js": "/static/seismic-engagement-viewer/static/js/main.f9996a90.js",. "micrositeviewer.js": "/static/seismic-engagement-viewer/micrositeviewer.93fb404c1ad15c2dc90c.js",. "livesendviewer.js": "/static/seismic-engagement-viewer/livesendviewer.5defe89533b2880ce100.js",. "engagementlivesendviewer.js": "/static/seismic-engagement-viewer/engagementlivesendviewer.3df89987f3b7247c9b9e.js",. "engagementdigitalsalesrooms.js": "/static/seismic-engagement-viewer/engagementdigitalsalesrooms.b65c3bd59504e92ebaff.js",. "714.js": "/static/seismic-engagement-viewer/714.e00f26682e91d52f2e93.js",. "371.js": "/static/seismic-engagement-viewer/371.0be3195282943bf85581.js",. "416.js": "/static/seismic-engagement-viewer/416.6102836cd0128bde9eb3.js",. "761.js": "/static/seismic-engagement-viewer/761.7367df2521c1a5884b6c.js",. "982.js": "/static/seismic-engagement-viewer/982.ffe

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3976
Entropy (8bit):	5.319620184016316
Encrypted:	false
SSDEEP:	96:cv204s4ZDH0ZrMEwVNHSkwUuxmi15MpsMdPXLV:cv204p6MdNyDU9i16sAbV
MD5:	DC498106DCA415CCCC6ADCB9D5139A55
SHA1:	520229FC4BF8CDEE07A7270ED865903250FE24E6
SHA-256:	84ECCCAF4111E2B72D77221B5A4A3BA850D78BCAD22EAC5245EA791D4775C149
SHA-512:	4312EA136210B69DEEC4ADDC1326875390C436D781B74B2B44E037BC5ED167CCC807036914FA553BC243DA351B4EC99F435CDDDD6237FE542A3F0C1A63142524
Malicious:	false
Reputation:	low
Preview:	{"isWatermarkEnabled":false,"isWatermarkingRequired":false,"isWatermarkingTrackingOptOut":false,"isCustomDomain":false,"isEnabledGoogleViewer":false,"isBuyerAccessControlEnabled":false,"id":"e78abab7-162a-d6bd-cea5-42078fcd4e13","urlPath":"https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60","name":"US Courts OneStream Demo Room","type":"MICROSITE_LINK","linkSettings":{"canDownload":false,"downloadFormats":["Original"],"expiresAt":"2024-05-24T00:00:00Z","isExpired":false,"notificationType":"Summary","isSeparateSend":true,"hasPassword":false},"coBrandingSettings":{"blobId":"42a9afb0-4e23-4a15-8f0a-491943de840e","blobContainer":"onestreamsoftware","downloadUrl":"https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D"},"nanoId":"KeKSp5v9_rr55V60","layoutArticleId":"a51d8b79-21c4-4347-a1c0-82cb90c8f386","crea

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1679
Entropy (8bit):	4.098630442264589
Encrypted:	false
SSDEEP:	48:n/+0VfGanosA+DL69jMGHb39h+VXq18CJHGDSVAvxxL:nWzJsXDL2jF5v8CJmDSG3L
MD5:	8C5D4096ED7FD0A95A0786C13645773B
SHA1:	23A9C71B885380954A256B484EBAE06D9253F59F
SHA-256:	FE2DCB7298738F6525BBE4788AA72C1204E558F25ACAA2C8D838424D36B7817E
SHA-512:	28A9F4FBE4708EAEE42D19022F4A3D300884DB88594973593DFA20CFDD43A604927CEBB39D89E7D49D900CF5C4929A5BAC970D5680B88EB9A590C93B539563EE
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="24" height="24" rx="2" fill="#EA4335"/>.<path d="M19.6654 14.0176C18.4721 12.7129 15.1718 13.2436 14.3978 13.3763C13.2583 12.2374 12.4628 10.8885 12.194 10.3909C12.624 9.13042 12.9035 7.79253 12.9465 6.47676C12.9465 5.28261 12.4843 4 11.1942 4C10.7427 4.01106 10.3342 4.26537 10.1085 4.65236C9.56021 5.62537 9.77521 7.63774 10.6567 9.67221C10.1407 11.1649 9.39896 13.321 8.42069 15.068C7.09841 15.6098 4.29261 16.9366 4.02386 18.4072C3.93786 18.8384 4.08836 19.2807 4.41086 19.5792C4.72262 19.8667 5.13113 20.0105 5.55039 19.9994C7.23817 19.9994 8.92595 17.589 10.0655 15.5213C11.0222 15.1786 12.5488 14.7252 14.086 14.4378C15.8706 16.041 17.4616 16.2843 18.2679 16.2843C19.3644 16.2843 19.7729 15.7978 19.9234 15.3887C20.0847 14.9243 19.9879 14.3935 19.6654 14.0176ZM18.5044 14.8579C18.4506 15.1786 18.0529 15.4992 17.3111 15.3334C16.4511 15.1122 15.6448 14.6921 14.9676 14.1171C15.5481 14.

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	560
Entropy (8bit):	5.296398552592734
Encrypted:	false
SSDEEP:	12:YqKuW12nJvNM7HD5CkRx++aDHG4Qva1az4hIoOqUB:YqJRvab58NRQva1+4fOqw
MD5:	C96DB81C805B4689EF472E49EDB8EA52
SHA1:	4ED035C1BE3D3E0A50D8D1D99EB7E82CA8CF251D
SHA-256:	BDAAB9683EC4A7AE3DCC9C3A846F1F76CAD2E35F529DEE89C7E578485332091B
SHA-512:	F04C490FC5750C33EE0EF55858F4E7903A055F91F87C007DF0A87C16BD6C153271B3684733613C1269F9E01EA16C4E6B268789B83F5FE5A82992EC3CD7B9A7A6
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/api/v1/engagements/viewer/settings/livesend?tenantId=b817d80c-e942-40b0-8698-2e058b375eb8
Preview:	{"faviconBlobId":"","highlightColor":"#000000","browserTitle":"OneStream Software","logoBlobContainer":"onestreamsoftware","logoBlobId":"acb392a2-86c9-4b24-95db-2636493585ad","logoUrl":"https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D","faviconBlobContainer":"onestreamsoftware","faviconUrl":null,"hasCompliancePassword":false,"isAllowSharingLink":true,"isAllowLogin":false,"isRequirePremadeTemplate":false}

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1020x1320, components 3
Category:	dropped
Size (bytes):	373057
Entropy (8bit):	7.937205153094031
Encrypted:	false
SSDEEP:	6144:wPp6ZUGkitShyBK2tLiq9LwZ2jXMtEe+QDSLbxAgTj2Hj1cEvETHoOcAFg:wBGkQU52twMe+QSLbkHjLv2oOcx
MD5:	91266F12BA6CDF2B2FEFE06BFBA8AA7A
SHA1:	B70FC11866F914D62DE98B89C144543EB45EDD56
SHA-256:	77FF8FF56614904615318BCFAE77D6CB3B7EC84FD5815DE37BB336A5397F9F48
SHA-512:	3617650E0BA6050421D60C5609686824F70D2561A9012F879B9664F562C6C1AC91D84617355220A375870C383CC04D04A85696D421831ACC3AC4FB7E4CE065C8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....x.x.....C................!.....(...!021/.-4;K@48G9-.BYBGNPTUT3?]c\RbKSTQ...C.......'..'Q6.6QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ......(...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(.."E.I#."...p..I4..+?.wG.......'........Z......i..........Z......h......-c.....4Y...+?.wG.......'........Z......h....V.....Ak...O..wG.......'..f.4(.........?....G....Ak...O...hQY...?.....!?.......?....E.\.....t...X...B....?.....!?.0..Eg..n.............?.t...X...B...asB........-c.....4.n.............,..........Z......h......-c.....4Y...+?.wG.......'........Z...

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	7121557
Entropy (8bit):	5.639721593537084
Encrypted:	false
SSDEEP:	49152:1QTdaQYHLtK2soCH8o24grT+D4T2IkBS/EobFlCykZBxAJEd7CfaNOqE0N/0heKs:pHA2sao24grT+D4T2IkBSMohaIJEd7ms
MD5:	607D2B9E759007F3A845A8754E90DEAD
SHA1:	7209B1D82904B736063ADC5DB678EC298E26ECD4
SHA-256:	A4DA607DFF6883C615A808176E26FAF06625CD2B347123E186FB2B1C58270A0D
SHA-512:	1A2C621CBBCC77F1A28A56304CAED6311B34207AA0C42213EC7A3CCB0B53721B71BAC395E8ADFAD1FBC0809F0C2E6D8D53168BE2AE8A91948B91230ECDB9C996
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-viewer/static/js/main.f9996a90.js
Preview:	/! For license information please see main.f9996a90.js.LICENSE.txt /.(function(){var __webpack_modules__={53028:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.SeismicCommonCore=void 0,n(58469);var r=n(65883),i=n(23149),o=n(47981),a=function(){function e(){this.onTenantSetSubject=new r.ReplaySubject,this.onTenantSet=this.onTenantSetSubject.asObservable(),this.serviceAdded=new r.ReplaySubject}return e.prototype.getService=function(e){return(0,o.getService)(e)},e.prototype.setService=function(e,t){i.Container.set(e,t)},e.prototype.setSubdomain=function(e){this.tenant=e,this.onTenantSetSubject.next(e)},e.prototype.getSubdomain=function(){return this.tenant\|\|console.warn("Calling SeismicCommon.getTenant before setTenant was called"),this.tenant},e.prototype.setClientId=function(e){this.clientId=e},e.prototype.getClientId=function(){return this.clientId},e}();t.SeismicCommonCore=a},4854:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{valu

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	41837
Entropy (8bit):	7.452470509076427
Encrypted:	false
SSDEEP:	768:2xcuIgssDSda2Q40ewnAx254W//jCAih4aApy2cdf:4fIg5Ahi5X/jCTWI2S
MD5:	2590B8A5B4241A039C09E55AA85E48E3
SHA1:	E339696256984A952F6382571992867AEFCAF9AD
SHA-256:	CD358E463EE32CCFC5B958FB22E245A2AA920951C99F2DAFEF3EEEC27EA77C97
SHA-512:	8A79DF8B8ECD30EF7A1AA4A034C545D7D702B2A8AE8CA3406BFA72912D05DB7ABA312A6DE300E34A632F077E511F3AE060B11B23890AE095D9875C990E731FA2
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......8....".............................................................................................................8........................................................................................................................................................................................................................................................................8.xO.q.....y....^.o.>n@.................................f<#...X.[.%...E..].'..Y.=_c..\|O...E ..........................<.\|}o.J!...c...x.m.D..A..q....%..%..>/..............................z9'.w4.a....Kx.Q..l-i.L.........^.=.........................................................................................................................................................................................................................................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65442)
Category:	downloaded
Size (bytes):	342414
Entropy (8bit):	5.431386439140905
Encrypted:	false
SSDEEP:	3072:FwE6NCPlp1kYpnxaDFsaqOGdSxwqGr+kJMw3xrWSfY/0VizCvyQ8fKWYAX:FCNulp5Zo8f13WBzCaTfYAX
MD5:	5BF6D1FB9ED27B9C796EEAD6B1E6A079
SHA1:	9082FB66ED9BF21B2BD76CCA4517246491ABCD80
SHA-256:	85D12A1D2B988B48D3551743D46D6DFD660798C98A27AB0F2D573B78B7ED6418
SHA-512:	00A05497F02871D4C5C35FCE7E806EB081C93AD92505D938AF03D7A4DA3FF09B3F7811E84AEED62A29C2A95596F8374675782202FAEF8DA5F659D9597814A0DD
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/resources/seismic-engagement-viewer/micrositeviewer.93fb404c1ad15c2dc90c.js
Preview:	/! For license information please see micrositeviewer.93fb404c1ad15c2dc90c.js.LICENSE.txt /."use strict";(self.webpackChunkengagement_bundle=self.webpackChunkengagement_bundle\|\|[]).push([[522],{23658:function(e,t,n){function i(e){return i="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},i(e)}function r(e){var t=function(e,t){if("object"!==i(e)\|\|null===e)return e;var n=e[Symbol.toPrimitive];if(void 0!==n){var r=n.call(e,t\|\|"default");if("object"!==i(r))return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"===i(t)?t:String(t)}function o(e,t,n){return(t=r(t))in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function a(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbo

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	93461
Entropy (8bit):	5.2871310377653735
Encrypted:	false
SSDEEP:	1536:apHxm1ngJu2OWPzEWnZNwOI22AiSj2o+n74YO9tF9hP:apRnJgW9nD2oHF9hP
MD5:	8CB0C39D4018510E98809063AC2FF1C7
SHA1:	2A221871F7132D8618BEB8BE3B6EF27E0074214C
SHA-256:	05581965CAAE6452F0FA821A3E53BBB0BE72463465A12DF98F92707D8B546565
SHA-512:	19F226AC1F27E7D36F7229B53D13AAF6D255526251D588BD0B2E200DCCF4E6E61CB0278B9F58F6EC24251FB4CD0C135F5E224ECEDCB8CC5CDEAD81172B1B6EE0
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-full-1.257.0.min.js
Preview:	/! For license information please see nr-full-1.257.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.257.0.PROD"]=self["webpackChunk:NRBA-1.257.0.PROD"]\|\|[]).push([[63],{9139:(e,t,i)=>{let s;i.d(t,{m:()=>n});const r=new Promise((e=>{s=e})),n=Object.freeze({onReplayReady:s,sessionReplayInitialized:r})},2573:(e,t,i)=>{i.d(t,{o:()=>c});var s=i(4247),r=i(1117),n=i(6291),a=i(8310),o=i(7056);class c extends r.w{constructor(e,t,i){super(i),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvest=new n.M(this.sharedContext),(0,a.L)(this.unload.bind(this)),this.sharedContext?.ee.on(o.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=e,this.started=!1,this.timeoutH

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	560
Entropy (8bit):	5.296398552592734
Encrypted:	false
SSDEEP:	12:YqKuW12nJvNM7HD5CkRx++aDHG4Qva1az4hIoOqUB:YqJRvab58NRQva1+4fOqw
MD5:	C96DB81C805B4689EF472E49EDB8EA52
SHA1:	4ED035C1BE3D3E0A50D8D1D99EB7E82CA8CF251D
SHA-256:	BDAAB9683EC4A7AE3DCC9C3A846F1F76CAD2E35F529DEE89C7E578485332091B
SHA-512:	F04C490FC5750C33EE0EF55858F4E7903A055F91F87C007DF0A87C16BD6C153271B3684733613C1269F9E01EA16C4E6B268789B83F5FE5A82992EC3CD7B9A7A6
Malicious:	false
Reputation:	low
Preview:	{"faviconBlobId":"","highlightColor":"#000000","browserTitle":"OneStream Software","logoBlobContainer":"onestreamsoftware","logoBlobId":"acb392a2-86c9-4b24-95db-2636493585ad","logoUrl":"https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D","faviconBlobContainer":"onestreamsoftware","faviconUrl":null,"hasCompliancePassword":false,"isAllowSharingLink":true,"isAllowLogin":false,"isRequirePremadeTemplate":false}

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 28 names, Macintosh, Copyright 2010, 2012, 2014 Adobe Systems Incorporated (http://www.adobe.com/), with Reserved Fon
Category:	downloaded
Size (bytes):	291864
Entropy (8bit):	5.780753633495338
Encrypted:	false
SSDEEP:	6144:S77YY76Mdtq8fzE4CmfaTyoEVfwmQtqb6p:S77YS/thf7faTOw+by
MD5:	774C05CCAE92D11B95A2EF722C9566A8
SHA1:	CC116F72A3684FD57B8852A41828889FBE079560
SHA-256:	1ABD7BD14DAEA0C793865E0DF0E17B3F07EC1CBF22855676C4716726B930F17E
SHA-512:	1636E6E468218FA20F505B84D080C6A4CA4E06CAAB7062F2DD27590ACB2623651C24E3D42195FEE3126D58E57886B59463CCA61BB60353E19AFD7D721A869279
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-viewer/static/media/SourceSansPro-SemiBold.26160fac3621d82c2431.ttf
Preview:	...........0BASEe.]........FDSIG......[.....GDEF..z........GPOSlo..........GSUB...+......<ZOS/2^.........`cmapm~.... p..5.cvt .X....W....*fpgm.Y.7..U....sgasp............glyfH..T..vP..K.head.......<...6hhea...V...t...$hmtx.l........Xloca.M....W....\maxp...p....... name\|...... ...opost..Hr.....K.prepS..8..Wp...V.......`J'.w_.<..................?\..8...n...........................8.8.n.............................k...............s.........X.......X...K...X...^.2.&............`...............ADBO.@. ............ .............. .....T.........U.S.@.1.q.S...S...S.t.1...S...S.....U.S...S...S...S...1.F.S...1.P.S.!.&.".....P..... .............(.../.3.I...).4.+...).=.....(...I...<.......I...I.K.I.0.I.%.).4.I.4.+.u.I.....i...,.D...................".........................................................................................B...B...B...h...U.S.@.1.@.1.@.1.@.1.@.1.q.S.q.S.q.S.......S...S...S...S...S...S...S...S...S...S...S...S...7...S...S...S...S...S.t.1.t.1.t.1.t.1.t.1.t.1.t.1.t.1

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9327
Entropy (8bit):	5.184149443379865
Encrypted:	false
SSDEEP:	192:8oloGzxtZ2waGyRkylx2Z2waGyRUx5Z2waGyRsrx9Z2waGyRpUpxVGZ2waGyRaJ9:BoqJTyzglVt5/yLxr
MD5:	F77EA97A60964F78C9CDF4AD2AD2935B
SHA1:	BBD0FDB782A8A496DB85A2A94ED891D426C72C46
SHA-256:	610ABEDC41106DB2638E28D20D47B35DE490C5D54AC00159EEB1E8218DA663EA
SHA-512:	CB36397DCFDF79883000C9164C3E52FFB890C9DC3F0F5076E42F6A0D6D8C9FDB1A89576815585DF23737E9C6273A09D898FDD1E2B0D55223EBED9662ECEFD66A
Malicious:	false
Reputation:	low
Preview:	{"Id":"a51d8b79-21c4-4347-a1c0-82cb90c8f386","Article":{"Structure":{"FeatureType":"Microsite","Setting":{"isLogoLocked":false,"isTitleLocked":false,"isNewTextLocked":false,"isNewImageLocked":false,"isTemplateLocked":false,"isNewRecordingLocked":false},"Layout":{"Version":"1","Name":"microsite.singleColumn","Type":"layout","Data":{"main":["ed5cb3ec-884e-4189-bc29-96654ce36cb6"]}},"WidgetsMapping":{"ed5cb3ec-884e-4189-bc29-96654ce36cb6":{"index":0}},"Extensions":{"HeaderExtension":{"Type":null,"Data":{"Title":"US Courts OneStream Demo Room","CobrandingLogo":{"blobId":"42a9afb0-4e23-4a15-8f0a-491943de840e","logoSource":"local","containerName":"onestreamsoftware"}}},"MicrositeContentExtension":{"Type":"ContentsBundle","Data":{"contents":[{"id":"3a942917-a726-4612-a155-69021e0caa0e","name":"US Courts demo 4-19-24","type":"file","format":"PDF","contentId":"3a942917-a726-4612-a155-69021e0caa0e","versionId":"58c78cbc-a5f6-49b6-a708-24c8c6504e07","repository":"workspace","description":null,"th

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 26 names, Macintosh, Copyright 2010, 2012, 2014 Adobe Systems Incorporated (http://www.adobe.com/), with Reserved Fon
Category:	downloaded
Size (bytes):	290916
Entropy (8bit):	5.788574728550447
Encrypted:	false
SSDEEP:	3072:q0qxC6YM3nG22R/FADAm9reurRnZqcqotiB0XYRMZ/AlDAz6o8CcYdTJTIhI29:976BWD/Fy9reGacSll0z6ol/Ih19
MD5:	0D9B62A03206F739CD34B2936A5929F1
SHA1:	F5CAD74E9791D2EF725F9FF5D53216CFFF4F3678
SHA-256:	DA4F442E66843990825ED4757E27AD3442CAD83F9844CC503E8ECE85E00F77F2
SHA-512:	D3738085D8F4891BF1A475A52108A4298B07C8959100E32D1C79038AF8B39C182E45FB9D531DD75F7BD2A514D70CF808649DCE83D3558BE236C74160923FF794
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-viewer/static/media/SourceSansPro-Bold.66dc68e4e7cdfceb5627.ttf
Preview:	...........0BASEe.]........FDSIG.p;...WL....GDEF..z........GPOS.{.........TGSUB...+......<ZOS/2_.........`cmapm~.... p..5.cvt ...9..W....fpgm.Y.7..U....sgasp............glyf..=1..vP..J.head.......<...6hhea...U...t...$hmtx.^.........Xloca.L....W....\maxp...r....... name.8.....l....post..Hr.....K.prep2.....Wp...V.......`D..._.<..................?\..7...m...........................7.7.m.............................m...............s.......,.........X...K...X...^.2.)............`...............ADBO. . ............ .............. .....P.....=...].M.F...{.M.$.M...M.~.....M.-.M.....f.M...M...M...M.....T.M.....e.M.,.#.,.....I.,...-...7.........$....=.A...$.=.'...$.U.....".;.A...5.....$.A...A.Y.A.<.A.+.$.=.A.=.'...A.........8.<...................&.=...=...=...=...=...=...=...=...=...=...=...=...=...=...=...=...=...=...=...=...=...=...M...M...M...t...].M.F...F...F...F...F...{.M.{.M.{.M.....$.M.$.M.$.M.$.M.$.M.$.M.$.M.$.M.$.M.$.M.$.M.$.M.$.#.$.M.$.M.$.M.$.M.$.M.~...~...~...~...~...~...~...~..

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	19183
Entropy (8bit):	6.1124770303119
Encrypted:	false
SSDEEP:	384:IGamHkZvACPvNJb9lhlgcgfoi6jIMTwMZo0SjPI41HOnqDMa5:brHkZpPvNFhlgcHi6fTK0Sjp1H2ps
MD5:	1399EAFC3BDA6546FF3FB0C759CAD2DC
SHA1:	0DD09434068D2EA6CF6D4A42A8D6B29718D84D3C
SHA-256:	5A95427189AC2E27823A22E93E32A93427EAA3273F87B829606390D2A712D38D
SHA-512:	51D8A9C9258711B201B3E70806E25BCBDF2EA4B413373DB3ECE3A14E053D1AF6CF8A576FB6E4C4C12C61FEEC58D775DA56748164A81A8CAE4FC583CDEDB67ACE
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/api/v1/engagements/viewer/settings/privacy?tenantId=b817d80c-e942-40b0-8698-2e058b375eb8
Preview:	{"isEnable":true,"defaultLanguage":"EN","policyUrls":[],"currentCountry":{"disclaimerId":"9a8a013d-bac8-45dd-b7bc-63c7d43e1ecd","id":null,"code":"US","name":"United States","disclaimerLibrary":{"name":"Seismic Default (show privacy settings only)","type":"DisclamerWithPrivacySetting","isDefault":true,"id":"9a8a013d-bac8-45dd-b7bc-63c7d43e1ecd","translations":[{"languageCode":"ro-RO","message":"Atunci c.nd vizualiza.i con.inutul, dorim s. v. oferim cea mai bun. experien.. posibil.. Expeditorul acestui con.inut va putea accesa detalii .i informa.ii legate despre activitatea dvs .i de asemenea, v. vom salva preferin.ele pentru data viitoare. Dac. face.i clic pe .Accepta.i .i vizualiza.i., sunte.i de acord cu toate activit..ile de monitorizare .i cookie-urile. Pute.i afla mai multe detalii .i v. pute.i gestiona preferin.ele .n . Set.rile mele de confiden.ialitate.. Vizita.i politica noastr. de confiden.ialitate pentru mai multe informa.ii.","id":

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 386x500, components 3
Category:	downloaded
Size (bytes):	39734
Entropy (8bit):	7.94596067904496
Encrypted:	false
SSDEEP:	768:DeLcme7dLqZj0w+kHJ38v9G9/BWOllgHag/vQVH1sCrhCyVnwyM:DeLcmSded0PkHJMo9/UHa5VH1sYCQQ
MD5:	DD1225E903CE34D2583E5D583CCB761B
SHA1:	DA3D2AE1477CD0C41C384306FE3C46D26B23671A
SHA-256:	5A72D6CAF8F817333ED9AF25A75DE082AEF5AA6A07CF7452565A38D759C8DE5C
SHA-512:	00637D05D01BF33E748BD1A2ABA3210C627231582896CDF954B2CB1E079841915D91E6C9668BADFD6D75F5884897797AC419467563EF87BEF425A260FCE61D6E
Malicious:	false
Reputation:	low
URL:	https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....t..?O....<As........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?J(.s........?O..?*J(.s.......&...:zQH>..QLDg..IJz.....QV,,g...{.e.=.4..Os.:......W..O...~.en............#.....#..uD/6.E#...8a..M...%.p.....

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2030
Entropy (8bit):	4.965844591370783
Encrypted:	false
SSDEEP:	24:Rm4QwAvguIqsRjQuZXjU06V125n7Uo3v9g8z13YJrETxG23hZeytGkfeARQ5L:zQBoNRjLNj5PooVY1dIfhRQ5L
MD5:	7D5A52C0BE5BDEB356BA57ED21AFC86F
SHA1:	022E5420F9C44A0E47C95A70815FCAFFEFA0D8D8
SHA-256:	A08D5B5642E391FF1A9B5B9F895909CAA56953FCDDBF7BAF87AA87763DC05C43
SHA-512:	139E4504F03F76747C5C8CC0F69C7592C1FE181924D19092D823C76615150904CEBDF890187F3C79D65782B910F297275D671AB0FCD6717C4003B8972EB1D38D
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-viewer/asset-manifest.json?t=2856909
Preview:	{. "files": {. "main.css": "/static/seismic-engagement-viewer/static/css/main.08502b2a.css",. "main.js": "/static/seismic-engagement-viewer/static/js/main.f9996a90.js",. "micrositeviewer.js": "/static/seismic-engagement-viewer/micrositeviewer.93fb404c1ad15c2dc90c.js",. "livesendviewer.js": "/static/seismic-engagement-viewer/livesendviewer.5defe89533b2880ce100.js",. "engagementlivesendviewer.js": "/static/seismic-engagement-viewer/engagementlivesendviewer.3df89987f3b7247c9b9e.js",. "engagementdigitalsalesrooms.js": "/static/seismic-engagement-viewer/engagementdigitalsalesrooms.b65c3bd59504e92ebaff.js",. "714.js": "/static/seismic-engagement-viewer/714.e00f26682e91d52f2e93.js",. "371.js": "/static/seismic-engagement-viewer/371.0be3195282943bf85581.js",. "416.js": "/static/seismic-engagement-viewer/416.6102836cd0128bde9eb3.js",. "761.js": "/static/seismic-engagement-viewer/761.7367df2521c1a5884b6c.js",. "982.js": "/static/seismic-engagement-viewer/982.ffe

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	611
Entropy (8bit):	4.973991211936122
Encrypted:	false
SSDEEP:	12:trwdU/gKucmdyX9M65CUDckHb4Kli8Siappqbl2eSTVgQ+LoU9kAHFVQ6hllR:tYU/du1yX9MMCAckHRiMDUeSxME4kanv
MD5:	A4D81B66E7C0CE9ECDEC6CF61636315D
SHA1:	4EAEB1079DA5940D5545C35B25AA249B15F96D71
SHA-256:	2D1FBA5C211F126AE1281A9DF79AD49FBE0E442B60EC07618641A720D6EEEE9B
SHA-512:	E9D42D0698ACBDF38E2D07E929AD100D49230DF653A3148D250C323FD18F65EE7472C296B65A468BDD311CF8B62272DA34129E85A3FFC34935309C8D6AD65BD0
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect width="24" height="24" rx="2" fill="#880E4F"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M10.3464 7.13622C10.0718 6.95909 9.72976 6.9544 9.45104 7.12393C9.17232 7.29345 9.00002 7.611 9 7.95515V16.0439C8.99926 16.3884 9.17144 16.7065 9.45044 16.8762C9.72944 17.0459 10.0719 17.0408 10.3464 16.8628L16.5687 12.8191C16.8363 12.6464 17 12.3356 17 12.0001C17 11.6647 16.8363 11.3539 16.5687 11.1812L10.3464 7.13622Z" stroke="white" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17317), with no line terminators
Category:	downloaded
Size (bytes):	17317
Entropy (8bit):	5.19131016199633
Encrypted:	false
SSDEEP:	384:oNzprrop+mqcUE02yk9HL0nggkD1xN1N7L7I4KzliIch:UxreHVyILRvbvknoI6
MD5:	6ECA72A3909DD911DA645EFC334CC5CE
SHA1:	20D9AAA917CD439AB1BA2A855F860233F6B48F0B
SHA-256:	FC0FC24F373C43A90439ADF3A3589B3FC8A3CD367E461EBC1A9DEB557DA4C39D
SHA-512:	E82D62B1E0FA75A1980B5412EA0AA187EFB8866AEBACDEDB51426F2291C847EC74B11F7470BE52E9B8997169AB383066C6EB01FF1CEA9AD85CF5A2F978F424C2
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/resources/seismic-engagement-viewer/982.ffe0d7a37ec4f9d644aa.js
Preview:	"use strict";(self.webpackChunkengagement_bundle=self.webpackChunkengagement_bundle\|\|[]).push([[982],{2982:function(e,n,t){t.d(n,{IE:function(){return w},KK:function(){return k},W$:function(){return b},XQ:function(){return l},_Y:function(){return h},cG:function(){return u},es:function(){return I},wQ:function(){return q}});var i=t(63520),s=t(44744),o=function(){return o=Object.assign\|\|function(e){for(var n,t=1,i=arguments.length;t<i;t++)for(var s in n=arguments[t])Object.prototype.hasOwnProperty.call(n,s)&&(e[s]=n[s]);return e},o.apply(this,arguments)};function r(e,n,t,i){return new(t\|\|(t=Promise))((function(s,o){function r(e){try{p(i.next(e))}catch(e){o(e)}}function a(e){try{p(i.throw(e))}catch(e){o(e)}}function p(e){var n;e.done?s(e.value):(n=e.value,n instanceof t?n:new t((function(e){e(n)}))).then(r,a)}p((i=i.apply(e,n\|\|[])).next())}))}function a(e,n){var t,i,s,o,r={label:0,sent:function(){if(1&s[0])throw s[1];return s[1]},trys:[],ops:[]};return o={next:a(0),throw:a(1),return:a(2)},

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 1020x1320, components 3
Category:	downloaded
Size (bytes):	373057
Entropy (8bit):	7.937205153094031
Encrypted:	false
SSDEEP:	6144:wPp6ZUGkitShyBK2tLiq9LwZ2jXMtEe+QDSLbxAgTj2Hj1cEvETHoOcAFg:wBGkQU52twMe+QSLbkHjLv2oOcx
MD5:	91266F12BA6CDF2B2FEFE06BFBA8AA7A
SHA1:	B70FC11866F914D62DE98B89C144543EB45EDD56
SHA-256:	77FF8FF56614904615318BCFAE77D6CB3B7EC84FD5815DE37BB336A5397F9F48
SHA-512:	3617650E0BA6050421D60C5609686824F70D2561A9012F879B9664F562C6C1AC91D84617355220A375870C383CC04D04A85696D421831ACC3AC4FB7E4CE065C8
Malicious:	false
Reputation:	low
URL:	https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D
Preview:	......JFIF.....x.x.....C................!.....(...!021/.-4;K@48G9-.BYBGNPTUT3?]c\RbKSTQ...C.......'..'Q6.6QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ......(...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(.."E.I#."...p..I4..+?.wG.......'........Z......i..........Z......h......-c.....4Y...+?.wG.......'........Z......h....V.....Ak...O..wG.......'..f.4(.........?....G....Ak...O...hQY...?.....!?.......?....E.\.....t...X...B....?.....!?.0..Eg..n.............?.t...X...B...asB........-c.....4.n.............,..........Z......h......-c.....4Y...+?.wG.......'........Z...

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	173484
Entropy (8bit):	5.120482741636527
Encrypted:	false
SSDEEP:	1536:UBsJeRD+TCR0n2ho7yXtntuMA9sTxOx/r+3y3cuJf:UBKeRD+TC+ZcJTxOxgsl
MD5:	F4A49C501A1C64DE0F8AA6CE59FA6A36
SHA1:	06E6B23F01669BCA931A760FD52781CDE40A0D72
SHA-256:	02784CE2FDAFAF58194E7D187DD0CE4B0BFA8B025ACC089F02069CC5D9CD3BB0
SHA-512:	EE2900ABDBA8887E7E51B8BFF6EC8B1F54F3C6F9B33E196C574AF90D7632C655A5470071F6B63473B7B183E9344348E8C2236DB4A19DBE3698AD5D0EB27F5C00
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-dsr-viewer/seismic-engagement-dsr-viewer.styles.16d6ad48db320ce945fc.css
Preview:	@charset "UTF-8";.seismic-dsr-viewer-9thizc2x .microsite-theme-widgets-common-component-v2-common-textarea-wrapper{flex-direction:column}.seismic-dsr-viewer-9thizc2x .microsite-theme-widgets-common-component-v2-common-textarea-wrapper .mntl-outline-focus-within{position:static}.seismic-dsr-viewer-9thizc2x .microsite-theme-widgets-common-component-v2-common-textarea-wrapper .mntl-outline-focus-within:focus-within:before{border:none}.seismic-dsr-viewer-9thizc2x .microsite-theme-widgets-common-component-v2-common-textarea-wrapper .mntl-outline-focus-within:focus-within:after{border:none}.seismic-dsr-viewer-9thizc2x .microsite-theme-widgets-common-component-v2-common-textarea-wrapper .mntl-outline-focus-within textarea{border:0;box-sizing:border-box;font-family:Helvetica,Arial,Verdana,Tahoma,sans-serif;font-style:normal;outline:none;resize:none;width:100%}.seismic-dsr-viewer-9thizc2x .microsite-theme-widgets-common-component-v2-common-textarea-hot-zone .microsite-theme-widgets-common-compo

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 19 tables, 1st "BASE", 26 names, Macintosh, Copyright 2010, 2012, 2014 Adobe Systems Incorporated (http://www.adobe.com/), with Reserved Fon
Category:	downloaded
Size (bytes):	293516
Entropy (8bit):	5.782267836191412
Encrypted:	false
SSDEEP:	3072:LgqxC65nO0Z77DOwtyp59cyrz5Ar0HQMB2HhG9CUYhYrMvH2dtoTX4rISTap6KuK:k76NFOc+IDHhCC0wvH2dtoilawnK
MD5:	5182DA425F811908BED9F5B8C72FA44F
SHA1:	17C25475C0369F7F8C8462AF9CF127A4CF6F1332
SHA-256:	71D10A86B4C54A5A9C0C8B467E53AC67D79EDB96C956E4E9F65A7074DFB9992A
SHA-512:	CF37EE1E2C3574DE5819E5C5328EE010832987750A3CDC0BC43F102C3BDAFD3993A9984C8D51F66B18198E80049C0323FA2F8F692025D8947F9580EDA6A7A5B2
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-viewer/static/media/SourceSansPro-Regular.c2b23b36ce51dfd4d60a.ttf
Preview:	...........0BASEe.]........FDSIG..>...at....GDEF..z...<....GPOS.,$...#.....GSUB...+..%...<ZOS/2].........`cmapm~.... p..5.cvt ."....W....fpgm.Y.7..U....sgasp............glyf.<0...vP..R\head.......<...6hhea...X...t...$hmtx.f.\.......Xloca.gD$..W....\maxp...z....... name.([.......=post..Hr......K.prep.c....Wp...V.......`XK.c_.<..................?\..:...o...........................:.:.o.............................v...............s.................X...K...X...^.2.#............`...............ADBO.@. ............ .............. .....Y..... ...L.Z.;.4.g.Z...Z...Z.i.4...Z...Z.....C.Z...Z...Z...Z...4.6.Z...4.9.Z..........W...................-...4.).R.....+./.....$.....-. .R...C.......R...R.=.R.#.R.....+.R.+./.[.R.....R... .K..................... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ... ...6...6...6...[...L.Z.;.4.;.4.;.4.;.4.;.4.g.Z.g.Z.g.Z.~.!...Z...Z...Z...Z...Z...Z...Z...Z...Z...Z...Z...Z...I...Z...Z...Z...Z...Z.i.4.i.4.i.4.i.4.i.4.i.4.i.4.i.4

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	262528
Entropy (8bit):	4.867626152863171
Encrypted:	false
SSDEEP:	3072:of4aIkyjWgQUwAAqmbHywrhyGQ0w3n8YcQ:of45kyjVTAqmbHywrhyGQ0w3nWQ
MD5:	44983D1EC4170E367F9589BDF79D34B1
SHA1:	88AD1AB343FB9857A3B082EACBE62D309376B16B
SHA-256:	C1FADC8794474D1ADC722870A53181DFAB2E2F17DE18585263B064A1C8056A55
SHA-512:	FC1748322B168C67DECB6F69520C231EEF7B2168F41984D9246017FFB026A1649B1E95F755E988AEA93380FAE57219FBC8A96169184E1AADE04E1381F15AEE05
Malicious:	false
Reputation:	low
URL:	https://cdn-prod.seismic.com/static/seismic-engagement-viewer/static/css/main.08502b2a.css
Preview:	@font-face{font-display:swap;font-family:Source Sans Pro;font-style:italic;font-weight:400;src:url(/static/seismic-engagement-viewer/static/media/SourceSansPro-Italic.17d1903a6e9b98bf9b78.ttf) format("truetype")}@font-face{font-display:swap;font-family:Source Sans Pro;font-style:normal;font-weight:700;src:url(/static/seismic-engagement-viewer/static/media/SourceSansPro-Bold.66dc68e4e7cdfceb5627.ttf) format("truetype")}@font-face{font-display:swap;font-family:Source Sans Pro;font-style:normal;font-weight:300;src:url(/static/seismic-engagement-viewer/static/media/SourceSansPro-Light.9fb307e32869e9835cf4.ttf) format("truetype")}@font-face{font-display:swap;font-family:Source Sans Pro;font-style:normal;font-weight:600;src:url(/static/seismic-engagement-viewer/static/media/SourceSansPro-SemiBold.26160fac3621d82c2431.ttf) format("truetype")}@font-face{font-display:swap;font-family:Source Sans Pro;font-style:normal;font-weight:900;src:url(/static/seismic-engagement-viewer/static/media/SourceS

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12662
Entropy (8bit):	4.4759145736629184
Encrypted:	false
SSDEEP:	96:4I8f4GzoviM0rPLbiBd0e1miD6VwlYZ0ZPim6MeL9X8EaT9kLWt16ET5aw/BR:Afab0rPLbi8Ji2V50PipL9hc5aIH
MD5:	BD9249CAF1B383172256D9859AC2A05A
SHA1:	6D6EDA26243987985BEE224C727689E9B3B4CD44
SHA-256:	361776269F00D4CA8985803144A1648898DF9A0EE6C7718E94FDBCB54FCDC1E6
SHA-512:	72A3ABF0D63D599399F36F7B7365D13038477EC4B2C1B60420F45446DCAF68FA6BB4E53EE86303C36A0B73D3505478125997FBEE60EA7BCCC7B8402D3B978665
Malicious:	false
Reputation:	low
Preview:	{"tenantName":"onestreamsoftware","tenantUniqueId":"b817d80c-e942-40b0-8698-2e058b375eb8","geoNetworkId":"gnl04","primaryRegion":"prod-azure-eastus2-03","tenantSubdomain":"onestreamsoftware","tenantDomain":"onestreamsoftware.seismic.com","environment":"prod","serviceAddress":{"cds":"https://cds-edge-prod-az-eastus-raptor.seismic.com","sales-plugin-bup":"https://sales-plugin-bup-edge-prod-az-eastus-raptor.seismic.com","whintv2":"https://whintv2-prod-az-eastus-raptor.seismic.com","llbff":"https://llbff-prod-az-eastus-raptor.seismic.com","crm-routing":"https://crm-routing-edge-prod-az-eastus-raptor.seismic.com","acs":"https://acs-edge-prod-az-eastus-raptor.seismic.com","crm-configuration":"https://crm-configuration-edge-prod-az-eastus-raptor.seismic.com","intake":"https://disc-intake-edge.seismic.com","dda":"https://disc-data-apis-edge.seismic.com","videostream":"https://1-seismicmedia.streaming.mediaservices.windows.net","ldfs":"https://ldfs-edge-prod-az-eastus-raptor.seismic.com","rcbs"

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.8107568247749684
Encrypted:	false
SSDEEP:	48:5KZP2rrxI7Dzcf5ruYXxKmJ6sVASxDnpS9O7vaIyvBcVTQeQjZLfh8nexLfuXQav:/FI7Dg8YUmYyAwBRQeQjJh8sL2AU
MD5:	90116C06A5E4D1DA106DBD9CB3CECCBE
SHA1:	F366CA0F0DB73F6034DDD86A59DF8B2C064DBE46
SHA-256:	6D789CEBA9E5E878A88C1604452AF442FB42C1F794E0650E0A30E1231240619F
SHA-512:	06A91391E7EC67A124B1A6C8648CF3759508AAE9DFDD63F393FBC54E0798FE3B28FEC62751DFA15463C31668F15860A4E5C772A867AE5FA488EF66B2C82B5358
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .........#...#...................................c]S.gTR.d[S.d[S.dZS.d[S3d[Sjd[S.d[S.d[S.d[S.d[S.d[S.d[Sjd[S3d[S.e[S.d[S.d[Y.e[R.............................................dZS.d[R.dZS.d[S.d[S\d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S\d[S.d[T.d[S.c[S.................................h^U.dZS.d[S.dYR.d[SMd[S.d[S.d[S.d[S\|d[S.d[S.d[SNd[T.d[S.d[SMd[S.d[S.d[S}d[S.d[S.d[S.d[SMc[S.d[S.d\S.f\R.....................h^U.c[R.d[S.d[S.d[S.d[S.d[S.d[S_d[S.bVM.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.f^W.dZS.d[S^d[S.d[S.d[S.d[S.d[S.c[S.f\R.................c[S.d[S.d\S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[U.d\T.c[T.a][.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d[S.d\S.d[S.d[R.............eZR.dZS.d[S.d[S.d[S.d[Spe\S.d[S.j[P.d[S.d[SEd[S.d[S\d[S.hZM.f[M.d[S.d[S[d[S.d[SFd[S.aQX.d[S.c[R.d[Sod[S.d[S.d[S.d[S.c[S.....c]S.dZR.fXQ.d[S.d[S.d[SocWM.d[S.e[S.fZR.c[S.d[Syd[S.d[S,d[S.e\R.e\R.d[S.d[S,d[S.d[Szd[S.cZT.c[S.cZR.\UP.d[Sod[S.d[S.c[T.d[S.e[S.jTS.eZS.d[SNd[S.d[S.f[S.d[S.d[S..@@.d[S.d\

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	39
Entropy (8bit):	3.8003728096085654
Encrypted:	false
SSDEEP:	3:dNEDE2DyAO7Nn:PkLpO7N
MD5:	832F6270F2061A27F50C8F3B3DF67585
SHA1:	2A472DE1EBE92FD20025A815CE341C3E32EB8128
SHA-256:	C831B05C118F15362B0D24289204D68F17EE7679CBB3E35509263681F178221B
SHA-512:	505BE10138F8F8C73E313170ED43E0629BF972074D102535ED68EBAF061F82D99D31F8D1543DB16D1BBF8216061677A08D05BACE08725AF93FE106CB2507EAF3
Malicious:	false
Reputation:	low
Preview:	Cannot change transports mid-connection

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2950 x 432, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43495
Entropy (8bit):	7.729024746620303
Encrypted:	false
SSDEEP:	768:Xxp4kEfwXURKbRHkBVaS6k3h7JNOsDp3cxEAkZgIOE4L/HcK1s4YA:Xx/QwXURR2k3NOsDOxEAkuIOxLPz
MD5:	3248BC4EE970DD9C7BA295D920A09865
SHA1:	EA12D486DEC9F4EFF8D1EBC6FB3FE4E2908F08EE
SHA-256:	152EE6427325820BF9ABD816BD02252C1DD2968329917A9FE47A1E3167AE8B70
SHA-512:	65A20D49AAEF7BD94AEF2E71B5A8BF0B1C24B5E3A1DFD8F16F3B3A59A4496C7E7E76E8D3881C51400A3A1F41D4DF876ED0263BA8C97C29C48E83C2FD291FC5E1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............O.......pHYs..........&.?.. .IDATx....q.....w.BU_~..x.....E`..#.....HG.q..#.(..#......T......y..0.W..RY.uX.1@..^...\|W.0.4..P..O...{..>g%i....\|....$m.Y=............................Z...t:.w/...F......6.. ................"..........O.:....+A.i\|-....8................/..p+..................m..eA..................p.P.p.....C.8....W.................p.`8.....~...q......l.feZ................^E0.I .......W.................H..p. ..^...K]P\|mZ...............@....(..f......l...V.A.i....................`8&S.p.7uA.m58.a7...i6..................`8....L..j..G.^.................&E0.{.t..K:....#$...............0....I..L...Dgp..^.m..[...................p.V.p..+.o.Nm.AF6z../.k...............p.`8.T.0...........t.6..................?...YU.3I....~bZ.J.w................... u......7I.m%.wku]..m.l.k...............H..p...D.'u..m5..6._.M.6................ )...V.0.t).L.m5.V...h...........@>..j....y.......^B0.@qQ.wu.p........:..........B..u.o.n...............

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 624 x 319, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	146857
Entropy (8bit):	7.981082586159938
Encrypted:	false
SSDEEP:	3072:K9k1J4PE5u9gV10Quxy6mcB8GICssh7UKw4h9SmLsnPX+wRwET:z1JzmXk61ICssZHfwRwET
MD5:	587AD130FB08DBD127A3F2DE46688C2B
SHA1:	CA95949AF17F4BEA2ABCA5512D0E13AE346822B2
SHA-256:	27495A599659F62C35048CB68F52EB4EF201D1BAA3FBB4A88DD2C1064831D552
SHA-512:	2A91564B48730CC8D8925E43D66B8E9DBB6ABA962F36621DC15A86C9BC8BEC2FCCE71FE97C1115B040CDF4506019EE7C8F7FA8DB3354A768F4E6EA6D39BA7E2E
Malicious:	false
Reputation:	low
URL:	https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D
Preview:	.PNG........IHDR...p...?.............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.].x.W.. ...)........;..-P.....%h xBB....f}.?wv6L6....9.w3..7o..{..'. .a".......D..E"...Hd.\|E.@<!.D"..".eY..U..~......}.."...Hd..:..~+8=....J..).. ."Q.."Q..\.... .[...R}(.6...d..CT....(6.1...N......^z..g..;DL$..u.~G.8.Bx.D"..".9.... .......,k.......CWP#..@...PW@.:...'..X...<..Q\|.dL...$8z@."Nvxgq.Y.E.....V.u.(..PH' I...D.J/...B....9......$G.{..i........<.H..)...N.1..'..".@..<y.'....e.........W....;...o.......Uq,.}....~X8......N...8.:...M.G#z.t..."a.h\Z...4y.6...)^...t..e.+T.....J..0$.+v.+.AS.L;M.m.E....(.L.+.#..X. \.s.......{j.B..o.. ...H..0J @../..\..P<...hH.k..$.)0VIR.W.?.S..^j..B,-.>.....sw.....k..n.\|.{388.FBB....T.......Q._..;{...3[..95m...:L>Q.^..P.....25u...4J.;I.rq..'C......m.......5....`..[......q..P.6..z.f..P....Z...\|.....{.9;.K.5jy.%.S....z....t.4(("9..Q.].....H4......X..wp.....'N..6l8!.8q..K..*.$U..5.I....."BG....#]$~..L....>....

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	560
Entropy (8bit):	5.296398552592734
Encrypted:	false
SSDEEP:	12:YqKuW12nJvNM7HD5CkRx++aDHG4Qva1az4hIoOqUB:YqJRvab58NRQva1+4fOqw
MD5:	C96DB81C805B4689EF472E49EDB8EA52
SHA1:	4ED035C1BE3D3E0A50D8D1D99EB7E82CA8CF251D
SHA-256:	BDAAB9683EC4A7AE3DCC9C3A846F1F76CAD2E35F529DEE89C7E578485332091B
SHA-512:	F04C490FC5750C33EE0EF55858F4E7903A055F91F87C007DF0A87C16BD6C153271B3684733613C1269F9E01EA16C4E6B268789B83F5FE5A82992EC3CD7B9A7A6
Malicious:	false
Reputation:	low
Preview:	{"faviconBlobId":"","highlightColor":"#000000","browserTitle":"OneStream Software","logoBlobContainer":"onestreamsoftware","logoBlobId":"acb392a2-86c9-4b24-95db-2636493585ad","logoUrl":"https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D","faviconBlobContainer":"onestreamsoftware","faviconUrl":null,"hasCompliancePassword":false,"isAllowSharingLink":true,"isAllowLogin":false,"isRequirePremadeTemplate":false}

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51585)
Category:	downloaded
Size (bytes):	51998
Entropy (8bit):	5.354999160336013
Encrypted:	false
SSDEEP:	1536:DQ8Bo9VtdQjyqEo6edf94VaMAtpKV599e2UpZdG:DZo9ViyqEoDV94dype9e2UpZdG
MD5:	798C2312183513710E56DB7439345B03
SHA1:	95972A721395FA89797FE31029B203C28BD83BAF
SHA-256:	F3AB9DFF25E981731B029FD1D6071A68E0FB4A2DAE438B6BE1ED19DF6306B3D0
SHA-512:	8D9BF32A4CF4AE72B2CE0CB6B8CA13D65C74AB3E92E0C6771FC49CD44A62B813623C02BAD3BF6644676E09AA6988013AAA6DFC93DF17E903F9B5C9B4A7E6FC28
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/api/v1/links/newrelic
Preview:	.;window.NREUM\|\|(NREUM={});NREUM.init={privacy:{cookies_enabled:true}};..;NREUM.loader_config={accountID:"472143",trustKey:"472143",agentID:"937843118",licenseKey:"33e37aa8ea",applicationID:"937843118"}.;NREUM.info={beacon:"bam.nr-data.net",errorBeacon:"bam.nr-data.net",licenseKey:"33e37aa8ea",applicationID:"937843118",sa:1}.;/! For license information please see nr-loader-full-1.257.0.min.js.LICENSE.txt /.(()=>{var e,t,r={234:(e,t,r)=>{"use strict";r.d(t,{P_:()=>m,Mt:()=>b,C5:()=>s,DL:()=>w,OP:()=>D,lF:()=>N,Yu:()=>x,Dg:()=>v,CX:()=>c,GE:()=>E,sU:()=>O});var n=r(8632),i=r(9567);const o={beacon:n.ce.beacon,errorBeacon:n.ce.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},a={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!a[e])throw

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14
Entropy (8bit):	3.3787834934861767
Encrypted:	false
SSDEEP:	3:YTgjXy:Y0jXy
MD5:	BDAE8BE36E9DFC819F3486870F8434D3
SHA1:	D991EF01679B350A728C665383ABB257CFECA53A
SHA-256:	8C5AAAB6E1EFDEC7F7F9F65CC0DE77461C36A46E6B7C9EE7A35299DD6E8449EE
SHA-512:	63C54BE922D5A0DAFAC9AF18BA462691C283C22D7E431D97F70CFF9C58BAE2444C06BB57BFEA2B9C71B769DDDBE8620EAC96B62FD786C378B486495880CA8521
Malicious:	false
Reputation:	low
Preview:	{"value":true}

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x386, components 3
Category:	downloaded
Size (bytes):	25533
Entropy (8bit):	7.9280424172852335
Encrypted:	false
SSDEEP:	384:HlJD3al0IfBbh42MJWJHssnCArbMARkLG+sdGBIpnrpVvm4DvfHDtqcX:HlJzaH1u7JEMsLnMJWvVJjtqA
MD5:	2F07B2E3BCA3056E84DCDF88FDB1D94D
SHA1:	2714B91F477A7D7B26D80F893DD8BA3B368ACDE9
SHA-256:	F3FC04A107AAD0F9F07EFB3FEA0653B6D88D730E8EDAC7874A66CAC4929D4E4E
SHA-512:	7CAEC50BE95ABE6C63995C12B138A1B270759DD346B058ABD82C904ABE3C3DCA18E5F706CF967DF394CED722B6863870BF5B0CA4D7318A1E36B47D138732224A
Malicious:	false
Reputation:	low
URL:	https://newdownload.seismic.com/api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12662
Entropy (8bit):	4.4759145736629184
Encrypted:	false
SSDEEP:	96:4I8f4GzoviM0rPLbiBd0e1miD6VwlYZ0ZPim6MeL9X8EaT9kLWt16ET5aw/BR:Afab0rPLbi8Ji2V50PipL9hc5aIH
MD5:	BD9249CAF1B383172256D9859AC2A05A
SHA1:	6D6EDA26243987985BEE224C727689E9B3B4CD44
SHA-256:	361776269F00D4CA8985803144A1648898DF9A0EE6C7718E94FDBCB54FCDC1E6
SHA-512:	72A3ABF0D63D599399F36F7B7365D13038477EC4B2C1B60420F45446DCAF68FA6BB4E53EE86303C36A0B73D3505478125997FBEE60EA7BCCC7B8402D3B978665
Malicious:	false
Reputation:	low
URL:	https://service-discovery.seismic.com/api/sds/v1/tenants/b817d80c-e942-40b0-8698-2e058b375eb8/services?useEdgeComputing=true
Preview:	{"tenantName":"onestreamsoftware","tenantUniqueId":"b817d80c-e942-40b0-8698-2e058b375eb8","geoNetworkId":"gnl04","primaryRegion":"prod-azure-eastus2-03","tenantSubdomain":"onestreamsoftware","tenantDomain":"onestreamsoftware.seismic.com","environment":"prod","serviceAddress":{"cds":"https://cds-edge-prod-az-eastus-raptor.seismic.com","sales-plugin-bup":"https://sales-plugin-bup-edge-prod-az-eastus-raptor.seismic.com","whintv2":"https://whintv2-prod-az-eastus-raptor.seismic.com","llbff":"https://llbff-prod-az-eastus-raptor.seismic.com","crm-routing":"https://crm-routing-edge-prod-az-eastus-raptor.seismic.com","acs":"https://acs-edge-prod-az-eastus-raptor.seismic.com","crm-configuration":"https://crm-configuration-edge-prod-az-eastus-raptor.seismic.com","intake":"https://disc-intake-edge.seismic.com","dda":"https://disc-data-apis-edge.seismic.com","videostream":"https://1-seismicmedia.streaming.mediaservices.windows.net","ldfs":"https://ldfs-edge-prod-az-eastus-raptor.seismic.com","rcbs"

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 624 x 319, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	146857
Entropy (8bit):	7.981082586159938
Encrypted:	false
SSDEEP:	3072:K9k1J4PE5u9gV10Quxy6mcB8GICssh7UKw4h9SmLsnPX+wRwET:z1JzmXk61ICssZHfwRwET
MD5:	587AD130FB08DBD127A3F2DE46688C2B
SHA1:	CA95949AF17F4BEA2ABCA5512D0E13AE346822B2
SHA-256:	27495A599659F62C35048CB68F52EB4EF201D1BAA3FBB4A88DD2C1064831D552
SHA-512:	2A91564B48730CC8D8925E43D66B8E9DBB6ABA962F36621DC15A86C9BC8BEC2FCCE71FE97C1115B040CDF4506019EE7C8F7FA8DB3354A768F4E6EA6D39BA7E2E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p...?.............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.].x.W.. ...)........;..-P.....%h xBB....f}.?wv6L6....9.w3..7o..{..'. .a".......D..E"...Hd.\|E.@<!.D"..".eY..U..~......}.."...Hd..:..~+8=....J..).. ."Q.."Q..\.... .[...R}(.6...d..CT....(6.1...N......^z..g..;DL$..u.~G.8.Bx.D"..".9.... .......,k.......CWP#..@...PW@.:...'..X...<..Q\|.dL...$8z@."Nvxgq.Y.E.....V.u.(..PH' I...D.J/...B....9......$G.{..i........<.H..)...N.1..'..".@..<y.'....e.........W....;...o.......Uq,.}....~X8......N...8.:...M.G#z.t..."a.h\Z...4y.6...)^...t..e.+T.....J..0$.+v.+.AS.L;M.m.E....(.L.+.#..X. \.s.......{j.B..o.. ...H..0J @../..\..P<...hH.k..$.)0VIR.W.?.S..^j..B,-.>.....sw.....k..n.\|.{388.FBB....T.......Q._..;{...3[..95m...:L>Q.^..P.....25u...4J.;I.rq..'C......m.......5....`..[......q..P.6..z.f..P....Z...\|.....{.9;.K.5jy.%.S....z....t.4(("9..Q.].....H4......X..wp.....'N..6l8!.8q..K..*.$U..5.I....."BG....#]$~..L....>....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6636)
Category:	downloaded
Size (bytes):	8715
Entropy (8bit):	5.333990715801877
Encrypted:	false
SSDEEP:	192:TRfRYwpXlsEoLoMwf7wdkxpghpyF9I9iFgPKf3v8e4vkoD8q/qRqgboNmZ/U:swpXlsEoLoMwTwdkxpghpyF9I9iFgyvE
MD5:	4262B918993A88F024E744BCE054CF7B
SHA1:	E9D70205A05F453728995090991D2D880AFBE289
SHA-256:	EE141B4540C402FF01DB5E36CDDFE2DC6A3CB70A989244F3C23600BAE2243250
SHA-512:	B579C4D3D59C0D36F39D335F6F9C5FD783B318C684E442973ADAD9A0C7BD892A83B63FC5D9C7DFCDB0E1915E71DF250179BF4383FD0AFCBB891E73EBA9B0FDE8
Malicious:	false
Reputation:	low
URL:	https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60
Preview:	<!DOCTYPE html>.<html lang="en">.<head>.<meta http-equiv="x-dns-prefetch-control" content="on">.<link rel="preconnect" href="https://js-agent.newrelic.com">.<link rel="preconnect" href="https://service-discovery.seismic.com">.<meta charset="utf-8">.<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no">.<meta name="description" content="Engagement Viewer">.<title></title>.<style>.engagement-viewer-busy-spinner{position:absolute;top:calc(50% - 30px);left:calc(50% - 30px);width:50px;height:50px;border-radius:50px;border:5px solid rgba(83,104,114,.4);border-top-color:#536872;animation:engagement-viewer-spin 1s infinite}@keyframes engagement-viewer-spin{10%{-webkit-transform:rotate(0);-ms-transform:rotate(0);-o-transform:rotate(0);transform:rotate(0)}100%{-webkit-transform:rotate(360deg);-ms-transform:rotate(360deg);-o-transform:rotate(360deg);transform:rotate(360deg)}}.seismic-engagement-viewer-entry-error{flex-direction:column;text-align:cente

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:32:21.854464054 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 17:32:31.508055925 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 17:32:34.603296995 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:32:34.603343964 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:32:34.603559017 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:32:34.612535954 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:32:34.612562895 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:32:34.735754967 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:34.735789061 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:34.735851049 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:34.736285925 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:34.736299992 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:34.874855995 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:32:34.875400066 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:32:34.875412941 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:32:34.876962900 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:32:34.877028942 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:32:34.878138065 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:32:34.878230095 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:32:35.041254997 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:32:35.041271925 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:32:35.072503090 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:35.072909117 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:35.072931051 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:35.074585915 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:35.074661970 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:35.151770115 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:32:35.412473917 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:35.412832975 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:35.539446115 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:35.539489031 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:35.652317047 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:38.897836924 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:38.897877932 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:38.898272038 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:38.902657032 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:38.902674913 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:39.160372972 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:39.160439014 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:39.276547909 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:39.276571989 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:39.276802063 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:39.339976072 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.287619114 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.332129002 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.413567066 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.413664103 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.413722038 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.452244997 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.452281952 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.452295065 CEST	49749	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.452301979 CEST	443	49749	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.504842997 CEST	49750	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.504882097 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.504976034 CEST	49750	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.505686998 CEST	49750	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.505702972 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.759706974 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.759785891 CEST	49750	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.761326075 CEST	49750	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.761342049 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.761578083 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:43.762738943 CEST	49750	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:43.808119059 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:44.008969069 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:44.009074926 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:44.009146929 CEST	49750	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:44.202475071 CEST	49750	443	192.168.2.4	23.204.76.112
Apr 26, 2024 17:32:44.202497005 CEST	443	49750	23.204.76.112	192.168.2.4
Apr 26, 2024 17:32:45.049791098 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:45.049860001 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:45.049921036 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:46.313688040 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:32:46.313728094 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 17:32:46.753112078 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 26, 2024 17:32:46.753137112 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 26, 2024 17:32:47.924583912 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 26, 2024 17:32:48.060607910 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 26, 2024 17:32:48.060820103 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 26, 2024 17:32:48.061043024 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 26, 2024 17:32:50.133372068 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.133393049 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.133445024 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.133793116 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.133819103 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.133882046 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.134402990 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.134413958 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.134808064 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.134823084 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.446352005 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.446876049 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.498826027 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.499100924 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.513717890 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.513731003 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.514982939 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.514997959 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.515064001 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.517030001 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.517043114 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.518332005 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.518345118 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.518393993 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.550139904 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.550283909 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.553525925 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.553728104 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.557233095 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.557245970 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.557271004 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.557287931 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.608272076 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.608299017 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.776987076 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.777014017 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.777064085 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.777074099 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.777080059 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.777116060 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.777132034 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.777132034 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.781961918 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.781980038 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.782028913 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.782052994 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.782094955 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.782094955 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.782108068 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.828649044 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.828829050 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.929725885 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.929740906 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.929826975 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.929874897 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.929883003 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.929924011 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.929939985 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.930100918 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.930145025 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.930152893 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.930191994 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.930361986 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.930418015 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.930423021 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.930459976 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.930701017 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.930762053 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.930932045 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.930983067 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.934966087 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.934978008 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.935038090 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.935197115 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.935204029 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.935250044 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.935256958 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.935596943 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.935647011 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.935652971 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.935723066 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.935956001 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.936008930 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.937092066 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.937176943 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.937325954 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.937381983 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.945879936 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.945946932 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:50.946307898 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:50.946346998 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.082814932 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.082869053 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.082911015 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.082938910 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.082956076 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.082958937 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.082990885 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.082998037 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083009005 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083029985 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083086014 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083091974 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083117962 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083167076 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083167076 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083204985 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083224058 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083270073 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083276987 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083287001 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083350897 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083352089 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083369017 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083621979 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083678961 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083679914 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083690882 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083725929 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083725929 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083766937 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083775997 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.083785057 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.083812952 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.087989092 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.088078022 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.088087082 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.088104010 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.088136911 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.088136911 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.088145018 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.088197947 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.088289976 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.089617968 CEST	49774	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.089633942 CEST	443	49774	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.098356009 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.098426104 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.098433971 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.098473072 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.098562956 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.098612070 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.098750114 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.098798990 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.236768961 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.236835957 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.236941099 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.236989975 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.237226963 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.237284899 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.237663984 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.237714052 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.238066912 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.238126040 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.238266945 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.238326073 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.238475084 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.238528013 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.238672018 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.238723040 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.238951921 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.239006996 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.239105940 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.239160061 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.239284992 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.239346027 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.239713907 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.239763021 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.240377903 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.240438938 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.240447044 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.240463018 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.240493059 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.240523100 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.245089054 CEST	49773	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.245098114 CEST	443	49773	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.452277899 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.452323914 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.452431917 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.452481985 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.452482939 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.452601910 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.453350067 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.453372002 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.453933001 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.453950882 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.765952110 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.766247988 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.766267061 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.767185926 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.767245054 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.767668009 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.767735958 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.767899990 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.767909050 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.768693924 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.768874884 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.768887997 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.769922972 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.769979954 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.770303011 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.770363092 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.770416975 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.812154055 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:51.822016001 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.884529114 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:51.884545088 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.049345016 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.079121113 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.079140902 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.079190016 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.079210043 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.079256058 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.079344034 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.079452038 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.101900101 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.101919889 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.101965904 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.101977110 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.102025032 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.102025032 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.102041960 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.102062941 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.121289968 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.121335983 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.121344090 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.121558905 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.232371092 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.232434034 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.232469082 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.232491016 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.232491016 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.232510090 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.232532024 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.232549906 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.232557058 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.232573986 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.232750893 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.232825041 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.232835054 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.233334064 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.233464003 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.233473063 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.233506918 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.233714104 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.233721972 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.233859062 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.254661083 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.254719019 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.254817963 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.254823923 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.254873991 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.255011082 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.255017996 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.255059958 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.255110025 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.255156040 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.255283117 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.255290031 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.255328894 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.255470991 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.255476952 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.255527020 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.266741037 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.266838074 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.274317980 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.274327993 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.274378061 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.385776043 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.385870934 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.385896921 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.385912895 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.385930061 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.385941982 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.385972977 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.386013031 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.387638092 CEST	49777	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.387658119 CEST	443	49777	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.407752037 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.407762051 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.407816887 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.407819033 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.407830954 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.407860994 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.407907963 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.407947063 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.407953978 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.408164024 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.408216000 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.408221006 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.408278942 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.408385992 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.408437014 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.408843040 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.408869982 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.408900976 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.408906937 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.408999920 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.409043074 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.409090996 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.409374952 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.409425974 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.409630060 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.409682035 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.409837008 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.409888983 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.409991980 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.410043955 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.410229921 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.410274982 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.427506924 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.427560091 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.427767038 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.427814007 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.428039074 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.428086042 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.560897112 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.560966015 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.561105967 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.561156988 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.561475992 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.561531067 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.561662912 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.561713934 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.561836004 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.561880112 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.562007904 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.562053919 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.562233925 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.562279940 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.562402964 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.562462091 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.562553883 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.562599897 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.562946081 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.562985897 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.563123941 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.563175917 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.563550949 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.563606024 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.563695908 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.563738108 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.563745975 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.563776970 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:32:52.563827991 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.565268993 CEST	49776	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:32:52.565287113 CEST	443	49776	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:20.046081066 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.046108961 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.092700958 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.092740059 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.092801094 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.093378067 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.093388081 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.349415064 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.350604057 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.350615978 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.351671934 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.351720095 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.353452921 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.353508949 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.356003046 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.356008053 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.401438951 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.746706963 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.746834993 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.746865988 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.746891975 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.746916056 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.746933937 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.747297049 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.751027107 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.751054049 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.751077890 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.751090050 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.751504898 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.754616022 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.758781910 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.758816004 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.759145975 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.759151936 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.759224892 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.762959003 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.767167091 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.767227888 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.767232895 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.771442890 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.771637917 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.771647930 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.775608063 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.775713921 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.775719881 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.779711008 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.779763937 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.779772043 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.783920050 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.784019947 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.784027100 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.792244911 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.792275906 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.792416096 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.792424917 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.792515993 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.796415091 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.839133024 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.884855986 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.887276888 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.887327909 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.887440920 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.887454033 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.887650967 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.890746117 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.894505024 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.894572020 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.894578934 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.897461891 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.897779942 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.897784948 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.911662102 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.911675930 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.911693096 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.911725044 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.911746025 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.911783934 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.911783934 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.920000076 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.920028925 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.920082092 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.920089960 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.920201063 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.931077957 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.931137085 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:20.931174040 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.931181908 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:20.931258917 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:21.071436882 CEST	49788	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:21.071470976 CEST	443	49788	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:21.252926111 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.252979040 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.253087044 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.253432989 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.253446102 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.517011881 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.517812967 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.517838001 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.518959045 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.519040108 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.520354033 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.520464897 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.520818949 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.520828009 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.573367119 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.801640034 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.801774979 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.801923037 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.802336931 CEST	49794	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.802361012 CEST	443	49794	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.815968990 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.816015959 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:21.816091061 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.963645935 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:21.963675022 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:22.216706038 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:22.272232056 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:23.727936029 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:23.727965117 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:23.728449106 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:23.731216908 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:23.731288910 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:23.733124971 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:23.776133060 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:23.837928057 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.837979078 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.838093996 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.845702887 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.845740080 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.845824003 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.853451967 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.853492975 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.853584051 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.857531071 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.857566118 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.857621908 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.859241009 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.859281063 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.859334946 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.864342928 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.864372969 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.864759922 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.864777088 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.869062901 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.869077921 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.871984959 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.872010946 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:23.872265100 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:23.872283936 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.027959108 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.028040886 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.028098106 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.052722931 CEST	49800	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.052742958 CEST	443	49800	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.183971882 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.185015917 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.185446024 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.185467958 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.185766935 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.185918093 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.185947895 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.186048985 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.186075926 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.186595917 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.186678886 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.186723948 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.187011003 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.187036037 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.187052965 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.187112093 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.187208891 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.187268019 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.187333107 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.187741995 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.187913895 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.188079119 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.188114882 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.188127995 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.188688993 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.188765049 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.189138889 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.189377069 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.189677000 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.189733028 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.189748049 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.189815044 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.190059900 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.190082073 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.190104961 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.190179110 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.190186977 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.190716028 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.190844059 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.191097975 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.191113949 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.236121893 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.236139059 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.258431911 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.313608885 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.313724995 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.318692923 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.318733931 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.318794966 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.318990946 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.319004059 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.513920069 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.513981104 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.514039993 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.514058113 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.514094114 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.514125109 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.514132023 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.514154911 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.519143105 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519166946 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519215107 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.519237995 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519279003 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.519445896 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519454002 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519500017 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.519762993 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519785881 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519828081 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.519851923 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519891024 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.519989014 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.519995928 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.520032883 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.524718046 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.524782896 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.524852037 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.524874926 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.524905920 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.524918079 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.524934053 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.524955988 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.560493946 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.572385073 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.594337940 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.594352961 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.595590115 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.595654011 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.598236084 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.598364115 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.598890066 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.598906040 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.628802061 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.628869057 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.628938913 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.628969908 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.629013062 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.629014015 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.629045963 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.629062891 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.642224073 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.642462969 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.666601896 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.666625977 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.666681051 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.666687012 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.666703939 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.666732073 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.666749954 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.666762114 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.666882992 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.666928053 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.666937113 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.666973114 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.667058945 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.667069912 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.667105913 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.667131901 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.667172909 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.667180061 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.667212009 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.667248964 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.671622992 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.671634912 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.671665907 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.671696901 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.671731949 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.671758890 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.671758890 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.671802998 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.671809912 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.671842098 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.671998978 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672055960 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.672209978 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672256947 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.672357082 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672406912 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.672406912 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672472954 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.672521114 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672533989 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672574997 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.672580957 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672594070 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672712088 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.672784090 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672791958 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.672832012 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.673005104 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.673015118 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.673047066 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.673151016 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.673192978 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.673198938 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.673233032 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.673290968 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.673331976 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.673516989 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.673563004 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.676542997 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.676554918 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.676604033 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.676673889 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.676714897 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.676923037 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.676933050 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.676975965 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.677170992 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.677179098 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.677220106 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.677391052 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.677401066 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.677438021 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.677536964 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.677542925 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.677586079 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.677814960 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.677822113 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.677860975 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.684998989 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.685007095 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.685074091 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.685642004 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.685697079 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.685746908 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.685790062 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.685796022 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.685807943 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.685831070 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.685864925 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.747570038 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:24.747590065 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.754288912 CEST	49805	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.754311085 CEST	443	49805	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.754837990 CEST	49804	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.754868031 CEST	443	49804	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.755805969 CEST	49803	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.755826950 CEST	443	49803	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.781594992 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.781608105 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.781641960 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.781670094 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.781692028 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.781718016 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.781985998 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.782032967 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.782040119 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.782078981 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.782249928 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.782257080 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.782296896 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.782571077 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.782578945 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.782618046 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.782967091 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.782974958 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.783015013 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.783231020 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.783282995 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.828823090 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.828845024 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.828902006 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.828918934 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.828942060 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.828968048 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.828982115 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.830254078 CEST	49806	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.830264091 CEST	443	49806	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.935056925 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.935141087 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.935225010 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.935312986 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.935400009 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.935457945 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.935533047 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.935587883 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.935700893 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.935762882 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.935828924 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.935883045 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.935946941 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.936002970 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.936064959 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.936122894 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.936217070 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.936269999 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.936466932 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.936522007 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.936582088 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.936635017 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.936686993 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:24.936743021 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:24.969182014 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.969330072 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:24.969392061 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:25.032331944 CEST	49811	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:25.032368898 CEST	443	49811	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:25.050838947 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.050904036 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.050970078 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.051681042 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.051697016 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.056261063 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.056303978 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.056364059 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.056974888 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.057002068 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.060245991 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.060301065 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.060363054 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.060834885 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.060853958 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.063271999 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.063307047 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.063364029 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.063776016 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.063790083 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088001966 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088074923 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088131905 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088192940 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088215113 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088284016 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088332891 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088377953 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088382006 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088393927 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088424921 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088579893 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088615894 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088625908 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088637114 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088658094 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088670969 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088718891 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088726997 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088768959 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088768959 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088781118 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088815928 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.088929892 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.088995934 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.089004040 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089046001 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.089066982 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089116096 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089117050 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.089128017 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089169025 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.089298964 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089349031 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.089689970 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089742899 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.089876890 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089937925 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089946032 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.089951992 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.089983940 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.089998007 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090029001 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090090036 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090105057 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090166092 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090301037 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090359926 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090416908 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090471029 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090493917 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090554953 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090658903 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090709925 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090712070 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090724945 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090763092 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090867043 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090917110 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090924025 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.090960026 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.090976954 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.091028929 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.243029118 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.243132114 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.243179083 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.243249893 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.243499041 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.243556023 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.243599892 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.243657112 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.243837118 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.243899107 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.244070053 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.244134903 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.244427919 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.244528055 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.244643927 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.244704008 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.244905949 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.244967937 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.245109081 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.245172024 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.245332003 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.245390892 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.245610952 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.245695114 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.245817900 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.245878935 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.245992899 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.246048927 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.246335983 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.246402025 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.246602058 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.246659994 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.247009993 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.247071028 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.247181892 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.247240067 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.247385025 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.247442007 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.247654915 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.247703075 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.247961998 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.248028994 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.248183966 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.248250008 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.248402119 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.248461008 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.248572111 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.248629093 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.248795033 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.248850107 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.248974085 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.249032021 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.249114990 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.249172926 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.249411106 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.249466896 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.249640942 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.249695063 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.249856949 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.249912024 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.250123978 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.250191927 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.250312090 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.250359058 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.250502110 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.250557899 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.250725031 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.250792027 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.250891924 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.250950098 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.251060963 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.251120090 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.251189947 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.251245022 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.251341105 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.251393080 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.251586914 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.251642942 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.251873970 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.251923084 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.252135992 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.252191067 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.252412081 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.252465963 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.253092051 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.253170013 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.253329039 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.253407001 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.253489017 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.253539085 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.253715992 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.253763914 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.253777027 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.253798962 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.253849030 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.254785061 CEST	49802	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.254801989 CEST	443	49802	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.347600937 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.347670078 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.347882986 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.348532915 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.348556042 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.364542007 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.364851952 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.364886999 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.365252972 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.365967989 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.366034031 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.366147041 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.375191927 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.375510931 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.375540972 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.375998020 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.376456022 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.376553059 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.376629114 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.378040075 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.378295898 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.378314018 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.379215002 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.379283905 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.379620075 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.379801035 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.379856110 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.380043983 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.380065918 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.380191088 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.380201101 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.383490086 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.383552074 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.384030104 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.384088993 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.384172916 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.384182930 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.412121058 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.424113035 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.447455883 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.486224890 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.486546040 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.660290003 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.663292885 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.663314104 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.664477110 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.664653063 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.665024996 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.665107965 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.665241957 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.665247917 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.688397884 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.688424110 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.688488960 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.688518047 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.688571930 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.688576937 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.688582897 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.688612938 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.696163893 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.696192980 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.696232080 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.696263075 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.696296930 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.696316957 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.709115982 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.709145069 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.709192991 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.709218979 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.709717035 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.709773064 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.709780931 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.709817886 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.712327957 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.712383032 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.712392092 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.715872049 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.715895891 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.715945005 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.715970039 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.716208935 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.716258049 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.716270924 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.716618061 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.724765062 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.724783897 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.724828005 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.725809097 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.725872040 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.759954929 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.842982054 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843059063 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843096018 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843105078 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.843135118 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843152046 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.843152046 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.843233109 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843265057 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843275070 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843276024 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.843301058 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843311071 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.843411922 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.843452930 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.844171047 CEST	49818	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.844182968 CEST	443	49818	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.848309040 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.848432064 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.848459959 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.848474026 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.848520041 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.848525047 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.848597050 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.848632097 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.848637104 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.848763943 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.848814011 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.848818064 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.849037886 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.849164009 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.849169970 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.849209070 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.849630117 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.849637032 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.849689007 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.862724066 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.862833023 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.862844944 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.862858057 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.862894058 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.863121986 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.863172054 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.863183975 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.863221884 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.863287926 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.863328934 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.863481045 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.863526106 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.863533974 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.863617897 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.863787889 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.864619017 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.864629030 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.864675045 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.864784956 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.864826918 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.864831924 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.864872932 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.864922047 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.865118027 CEST	49816	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.865134954 CEST	443	49816	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868385077 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868401051 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868448973 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.868488073 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868494987 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868552923 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.868594885 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868635893 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.868647099 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868684053 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.868810892 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868856907 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.868937969 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.868985891 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.869529009 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.869592905 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.873163939 CEST	49815	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.873183966 CEST	443	49815	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.877343893 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.877403021 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.993091106 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.993124008 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.993202925 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.993221998 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.993277073 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:25.993321896 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.993330002 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:25.993372917 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.009157896 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.009171963 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.009212971 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.009246111 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.021229029 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.021311045 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.021321058 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.021364927 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.028635979 CEST	49817	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.028662920 CEST	443	49817	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.145582914 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.145679951 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.145714998 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.145766020 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.146050930 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.146109104 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.146337986 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.146398067 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.146423101 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.146471977 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.146610022 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.146706104 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.161874056 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.161940098 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.298290014 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.298382998 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.298695087 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.298754930 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.298881054 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.298929930 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.299324989 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.299385071 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.299685001 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.299742937 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.299979925 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.300035954 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.300221920 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.300271034 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.300533056 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.300589085 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.300828934 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.300879002 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.301086903 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.301132917 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.301840067 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.301898003 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.314645052 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.314738989 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.314759016 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.314769030 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.314820051 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.314924955 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.314975023 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.451196909 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.451339006 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.451524019 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.451572895 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.452415943 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.452471018 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.452955008 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.453005075 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.453166962 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.453212023 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.453948021 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.453998089 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.454736948 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.454787970 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.455054045 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.455102921 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.455180883 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.455224991 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.455503941 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.455547094 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.455951929 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.456001997 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.456237078 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.456281900 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.456408978 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.456453085 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.456676960 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.456731081 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.456852913 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.456909895 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.457334042 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.457381010 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.457529068 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.457571030 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.457736015 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.457777977 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.457911968 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.457952976 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.458403111 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.458444118 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.458782911 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.458825111 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.458992958 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.459037066 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.467406988 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.467463970 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.467889071 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.467941999 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.468081951 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.468130112 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.468283892 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.468333960 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.468432903 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.468480110 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.603838921 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.603981972 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.603993893 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.604017973 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.604034901 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.604224920 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.604274988 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.604295015 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.604338884 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.604430914 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.604479074 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.604846001 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.604897022 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.605170012 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.605216026 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.605479956 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.605535984 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.605674028 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.605722904 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.605875969 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.605928898 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.606169939 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.606218100 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.606498957 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.606545925 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.606740952 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.606785059 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.606964111 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.607014894 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.607351065 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.607398033 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.607703924 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.607748985 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.607932091 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.607974052 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.608203888 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.608258963 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.608439922 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.608483076 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.608733892 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.608778954 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.608886957 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.608933926 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.609117985 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.609160900 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.609303951 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.609357119 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.609575033 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.609618902 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.609910011 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.609954119 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.610167980 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.610219955 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.610358000 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.610416889 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.610588074 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.610630989 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.610860109 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.610905886 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.611017942 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.611063957 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.611279011 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.611323118 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.611675978 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.611721039 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.611933947 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.611980915 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.612199068 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.612251997 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.612349987 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.612399101 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.612607956 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.612654924 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.612883091 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.612926006 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.613209963 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.613256931 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.613389969 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.613435984 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.613580942 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.613625050 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:26.824132919 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:26.826874971 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:27.240150928 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:27.240291119 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:28.072143078 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:28.072221041 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:28.649235964 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:28.649280071 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:28.649307013 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:28.649354935 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:28.649415016 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:29.349395990 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:29.352325916 CEST	49819	443	192.168.2.4	52.151.208.67
Apr 26, 2024 17:33:29.352372885 CEST	443	49819	52.151.208.67	192.168.2.4
Apr 26, 2024 17:33:31.948072910 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.948127031 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:31.948437929 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.949007988 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.949023008 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:31.949857950 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.949898005 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:31.949973106 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.950314999 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.950326920 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:31.950962067 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.951004028 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:31.951147079 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.951351881 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:31.951371908 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.201806068 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.206698895 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.206732035 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.207161903 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.207607985 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.207684040 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.208628893 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.209362030 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.209610939 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.209620953 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.210841894 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.211177111 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.211328030 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.211328030 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.211344957 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.211509943 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.218466997 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.252123117 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.259197950 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.259627104 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.281467915 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.281488895 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.282691956 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.282702923 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.282756090 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.283282042 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.283350945 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.283513069 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.283524990 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.283536911 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.328128099 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.490864992 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.491000891 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.491055965 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.492376089 CEST	49825	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.492398977 CEST	443	49825	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.493560076 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.497982979 CEST	49828	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.498013020 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.498189926 CEST	49828	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.498508930 CEST	49828	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.498521090 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.502794027 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.503135920 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.503453970 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.503663063 CEST	49826	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.503678083 CEST	443	49826	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.506896973 CEST	49829	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.506972075 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.507179976 CEST	49829	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.507394075 CEST	49829	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.507428885 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.508042097 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.508163929 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.508255005 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.508654118 CEST	49827	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.508666039 CEST	443	49827	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.513025999 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.513053894 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.513113976 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.513314962 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.513329029 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.753035069 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.754363060 CEST	49828	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.754381895 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.754770994 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.755598068 CEST	49828	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.755678892 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.755924940 CEST	49828	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.763832092 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.764074087 CEST	49829	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.764115095 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.764467001 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.765000105 CEST	49829	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.765070915 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.765423059 CEST	49829	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.766083002 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.766452074 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.766477108 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.767529011 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.767592907 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.768012047 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.768076897 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.768265963 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:32.768274069 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.796116114 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.808134079 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:32.927439928 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:33.044950008 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:33.045083046 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:33.045137882 CEST	49828	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:33.047399044 CEST	49828	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:33.047420025 CEST	443	49828	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:33.053533077 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:33.053850889 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:33.053925991 CEST	49829	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:33.054619074 CEST	49829	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:33.054651976 CEST	443	49829	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:33.057282925 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:33.057411909 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:33.057471991 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:33.076067924 CEST	49830	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:33.076092958 CEST	443	49830	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:34.636195898 CEST	49831	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:33:34.636240005 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:34.636558056 CEST	49831	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:33:34.636697054 CEST	49831	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:33:34.636712074 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:34.964150906 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:34.964507103 CEST	49831	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:33:34.964548111 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:34.964894056 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:34.965296030 CEST	49831	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:33:34.965367079 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:35.009193897 CEST	49831	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:33:36.919248104 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 26, 2024 17:33:37.050954103 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 26, 2024 17:33:37.050978899 CEST	80	49724	199.232.214.172	192.168.2.4
Apr 26, 2024 17:33:37.051048994 CEST	49724	80	192.168.2.4	199.232.214.172
Apr 26, 2024 17:33:37.361440897 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:37.361552000 CEST	443	49739	162.247.243.39	192.168.2.4
Apr 26, 2024 17:33:37.361701965 CEST	49739	443	192.168.2.4	162.247.243.39
Apr 26, 2024 17:33:41.953835011 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:41.953881979 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:41.953991890 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:41.954634905 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:41.954652071 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.208506107 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.262397051 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.277184010 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.277193069 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.277786970 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.278862953 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.278951883 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.279438019 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.279489040 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.279499054 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.496387005 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.496560097 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.496617079 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.498903036 CEST	49832	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.498933077 CEST	443	49832	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.506974936 CEST	49833	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.507005930 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.507062912 CEST	49833	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.507488012 CEST	49833	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.507500887 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.761859894 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.762274027 CEST	49833	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.762284040 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.762757063 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.763402939 CEST	49833	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.763485909 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:42.763657093 CEST	49833	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:42.808137894 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:43.050451040 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:43.050617933 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:43.050678015 CEST	49833	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:43.058106899 CEST	49833	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:43.058136940 CEST	443	49833	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:44.950556040 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:44.950634956 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:44.950738907 CEST	49831	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:33:46.841741085 CEST	49831	443	192.168.2.4	142.250.64.196
Apr 26, 2024 17:33:46.841794014 CEST	443	49831	142.250.64.196	192.168.2.4
Apr 26, 2024 17:33:51.968029022 CEST	49834	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:51.968065977 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:51.968115091 CEST	49834	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:51.968982935 CEST	49834	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:51.968995094 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.230293036 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.230645895 CEST	49834	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.230659008 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.231012106 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.235132933 CEST	49834	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.235187054 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.235563040 CEST	49834	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.276109934 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.522691011 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.522825956 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.522959948 CEST	49834	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.584114075 CEST	49834	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.584136963 CEST	443	49834	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.587959051 CEST	49835	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.588006973 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.588222980 CEST	49835	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.588475943 CEST	49835	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.588489056 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.859558105 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.859870911 CEST	49835	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.859894991 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.860244989 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.860594034 CEST	49835	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.860656977 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:52.860903978 CEST	49835	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:52.904117107 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:53.149503946 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:53.149625063 CEST	443	49835	162.247.243.29	192.168.2.4
Apr 26, 2024 17:33:53.149784088 CEST	49835	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:53.150306940 CEST	49835	443	192.168.2.4	162.247.243.29
Apr 26, 2024 17:33:53.150321960 CEST	443	49835	162.247.243.29	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 17:32:30.540191889 CEST	53	62281	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:30.659954071 CEST	53	55005	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:33.367388010 CEST	53	60109	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:33.449814081 CEST	49603	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:33.449975014 CEST	58307	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:33.596018076 CEST	53	58307	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:34.436887026 CEST	59967	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:34.476512909 CEST	57547	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:34.477616072 CEST	52377	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:34.482379913 CEST	53870	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:34.562640905 CEST	53	59967	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:34.601797104 CEST	53	57547	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:34.608558893 CEST	53653	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:34.609190941 CEST	59144	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:34.623905897 CEST	53	53870	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:34.733465910 CEST	53	53653	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:34.734078884 CEST	53	59144	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:35.421672106 CEST	65512	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:35.421951056 CEST	54322	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:35.462752104 CEST	56696	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:35.463253021 CEST	56573	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:35.547591925 CEST	53	54322	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:35.608517885 CEST	53	56573	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:43.864332914 CEST	58639	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:43.864763021 CEST	54570	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:43.865443945 CEST	60560	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:43.865647078 CEST	56077	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:44.008532047 CEST	53	54570	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:44.012499094 CEST	53	56077	1.1.1.1	192.168.2.4
Apr 26, 2024 17:32:48.515733957 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 17:32:48.786823988 CEST	56341	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:48.787240028 CEST	53332	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:50.127119064 CEST	56948	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:50.127430916 CEST	56884	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:51.296505928 CEST	56230	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:51.296936035 CEST	59652	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:32:53.932842970 CEST	53	64174	1.1.1.1	192.168.2.4
Apr 26, 2024 17:33:13.987406015 CEST	53	65253	1.1.1.1	192.168.2.4
Apr 26, 2024 17:33:21.126701117 CEST	55647	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:33:21.127046108 CEST	51468	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:33:21.251833916 CEST	53	51468	1.1.1.1	192.168.2.4
Apr 26, 2024 17:33:21.252022028 CEST	53	55647	1.1.1.1	192.168.2.4
Apr 26, 2024 17:33:23.861804008 CEST	58070	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:33:23.862354994 CEST	62488	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:33:23.989356995 CEST	53	62488	1.1.1.1	192.168.2.4
Apr 26, 2024 17:33:24.192501068 CEST	59773	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:33:24.192775011 CEST	63447	53	192.168.2.4	1.1.1.1
Apr 26, 2024 17:33:24.317661047 CEST	53	63447	1.1.1.1	192.168.2.4
Apr 26, 2024 17:33:24.317751884 CEST	53	59773	1.1.1.1	192.168.2.4
Apr 26, 2024 17:33:30.199768066 CEST	53	57809	1.1.1.1	192.168.2.4
Apr 26, 2024 17:33:39.569170952 CEST	53	58896	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 17:32:50.335742950 CEST	192.168.2.4	1.1.1.1	c28d	(Port unreachable)	Destination Unreachable
Apr 26, 2024 17:32:51.505944014 CEST	192.168.2.4	1.1.1.1	c2d3	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 17:32:33.449814081 CEST	192.168.2.4	1.1.1.1	0xb560	Standard query (0)	eng2e.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:33.449975014 CEST	192.168.2.4	1.1.1.1	0xab0c	Standard query (0)	eng2e.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:34.436887026 CEST	192.168.2.4	1.1.1.1	0x8f6d	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:34.476512909 CEST	192.168.2.4	1.1.1.1	0x1456	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:34.477616072 CEST	192.168.2.4	1.1.1.1	0xf2eb	Standard query (0)	service-discovery.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:34.482379913 CEST	192.168.2.4	1.1.1.1	0xaa5e	Standard query (0)	service-discovery.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:34.608558893 CEST	192.168.2.4	1.1.1.1	0x6f83	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:34.609190941 CEST	192.168.2.4	1.1.1.1	0x8f28	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:35.421672106 CEST	192.168.2.4	1.1.1.1	0xead1	Standard query (0)	cdn-prod.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:35.421951056 CEST	192.168.2.4	1.1.1.1	0xea40	Standard query (0)	cdn-prod.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:35.462752104 CEST	192.168.2.4	1.1.1.1	0x8da6	Standard query (0)	service-discovery.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:35.463253021 CEST	192.168.2.4	1.1.1.1	0xf2f7	Standard query (0)	service-discovery.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:43.864332914 CEST	192.168.2.4	1.1.1.1	0x299b	Standard query (0)	cdn-prod.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:43.864763021 CEST	192.168.2.4	1.1.1.1	0xb4a2	Standard query (0)	cdn-prod.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:43.865443945 CEST	192.168.2.4	1.1.1.1	0x5db6	Standard query (0)	eng2e.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:43.865647078 CEST	192.168.2.4	1.1.1.1	0xe08d	Standard query (0)	eng2e.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:48.786823988 CEST	192.168.2.4	1.1.1.1	0xf8e4	Standard query (0)	newdownload.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:48.787240028 CEST	192.168.2.4	1.1.1.1	0xdbf7	Standard query (0)	newdownload.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:50.127119064 CEST	192.168.2.4	1.1.1.1	0xb37c	Standard query (0)	newdownload.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:50.127430916 CEST	192.168.2.4	1.1.1.1	0x4a46	Standard query (0)	newdownload.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:32:51.296505928 CEST	192.168.2.4	1.1.1.1	0x54ec	Standard query (0)	newdownload.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:51.296936035 CEST	192.168.2.4	1.1.1.1	0x2bd0	Standard query (0)	newdownload.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:33:21.126701117 CEST	192.168.2.4	1.1.1.1	0x6afe	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:33:21.127046108 CEST	192.168.2.4	1.1.1.1	0xa98f	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Apr 26, 2024 17:33:23.861804008 CEST	192.168.2.4	1.1.1.1	0x37bf	Standard query (0)	api.seismic.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:33:23.862354994 CEST	192.168.2.4	1.1.1.1	0x7e32	Standard query (0)	api.seismic.com	65	IN (0x0001)	false
Apr 26, 2024 17:33:24.192501068 CEST	192.168.2.4	1.1.1.1	0x8cbb	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:33:24.192775011 CEST	192.168.2.4	1.1.1.1	0x8dd1	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 17:32:33.596018076 CEST	1.1.1.1	192.168.2.4	0xab0c	No error (0)	eng2e.seismic.com	eng2e.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:33.596308947 CEST	1.1.1.1	192.168.2.4	0xb560	No error (0)	eng2e.seismic.com	eng2e.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:34.562640905 CEST	1.1.1.1	192.168.2.4	0x8f6d	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:34.619534969 CEST	1.1.1.1	192.168.2.4	0xf2eb	No error (0)	service-discovery.seismic.com	service-discovery.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:34.623905897 CEST	1.1.1.1	192.168.2.4	0xaa5e	No error (0)	service-discovery.seismic.com	service-discovery.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:34.733465910 CEST	1.1.1.1	192.168.2.4	0x6f83	No error (0)	www.google.com		142.250.64.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:34.734078884 CEST	1.1.1.1	192.168.2.4	0x8f28	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 17:32:35.547591925 CEST	1.1.1.1	192.168.2.4	0xea40	No error (0)	cdn-prod.seismic.com	cdn-prod.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:35.548296928 CEST	1.1.1.1	192.168.2.4	0xead1	No error (0)	cdn-prod.seismic.com	cdn-prod.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:35.589725018 CEST	1.1.1.1	192.168.2.4	0x8da6	No error (0)	service-discovery.seismic.com	service-discovery.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:35.608517885 CEST	1.1.1.1	192.168.2.4	0xf2f7	No error (0)	service-discovery.seismic.com	service-discovery.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:43.993699074 CEST	1.1.1.1	192.168.2.4	0x299b	No error (0)	cdn-prod.seismic.com	cdn-prod.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:44.008532047 CEST	1.1.1.1	192.168.2.4	0xb4a2	No error (0)	cdn-prod.seismic.com	cdn-prod.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:44.008574009 CEST	1.1.1.1	192.168.2.4	0x5db6	No error (0)	eng2e.seismic.com	eng2e.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:44.012499094 CEST	1.1.1.1	192.168.2.4	0xe08d	No error (0)	eng2e.seismic.com	eng2e.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:48.730880022 CEST	1.1.1.1	192.168.2.4	0x4439	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:48.730880022 CEST	1.1.1.1	192.168.2.4	0x4439	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:48.984816074 CEST	1.1.1.1	192.168.2.4	0xf8e4	No error (0)	newdownload.seismic.com	smc-prod-download-tmp-01.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:48.984816074 CEST	1.1.1.1	192.168.2.4	0xf8e4	No error (0)	bss-prod-az-eastus-raptor.seismic.com	kubernetes-prod-az-eastus-raptor.seismic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:48.984816074 CEST	1.1.1.1	192.168.2.4	0xf8e4	No error (0)	kubernetes-prod-az-eastus-raptor.seismic.com		52.151.208.67	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:48.996696949 CEST	1.1.1.1	192.168.2.4	0xdbf7	No error (0)	newdownload.seismic.com	smc-prod-download-tmp-01.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:48.996696949 CEST	1.1.1.1	192.168.2.4	0xdbf7	No error (0)	bss-prod-az-eastus-dracorex.seismic.com	kubernetes-prod-az-eastus-dracorex.seismic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:50.335678101 CEST	1.1.1.1	192.168.2.4	0xb37c	No error (0)	newdownload.seismic.com	smc-prod-download-tmp-01.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:50.335678101 CEST	1.1.1.1	192.168.2.4	0xb37c	No error (0)	bss-prod-az-eastus-raptor.seismic.com	kubernetes-prod-az-eastus-raptor.seismic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:50.335678101 CEST	1.1.1.1	192.168.2.4	0xb37c	No error (0)	kubernetes-prod-az-eastus-raptor.seismic.com		52.151.208.67	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:50.342297077 CEST	1.1.1.1	192.168.2.4	0x4a46	No error (0)	newdownload.seismic.com	smc-prod-download-tmp-01.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:50.342297077 CEST	1.1.1.1	192.168.2.4	0x4a46	No error (0)	bss-prod-az-eastus-dracorex.seismic.com	kubernetes-prod-az-eastus-dracorex.seismic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:51.422831059 CEST	1.1.1.1	192.168.2.4	0x54ec	No error (0)	newdownload.seismic.com	smc-prod-download-tmp-01.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:51.422831059 CEST	1.1.1.1	192.168.2.4	0x54ec	No error (0)	bss-prod-az-eastus-raptor.seismic.com	kubernetes-prod-az-eastus-raptor.seismic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:51.422831059 CEST	1.1.1.1	192.168.2.4	0x54ec	No error (0)	kubernetes-prod-az-eastus-raptor.seismic.com		52.151.208.67	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:32:51.505827904 CEST	1.1.1.1	192.168.2.4	0x2bd0	No error (0)	newdownload.seismic.com	smc-prod-download-tmp-01.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:32:51.505827904 CEST	1.1.1.1	192.168.2.4	0x2bd0	No error (0)	bss-prod-az-eastus-dracorex.seismic.com	kubernetes-prod-az-eastus-dracorex.seismic.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:10.058465958 CEST	1.1.1.1	192.168.2.4	0x6e24	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:10.058465958 CEST	1.1.1.1	192.168.2.4	0x6e24	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:33:21.251833916 CEST	1.1.1.1	192.168.2.4	0xa98f	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:21.251833916 CEST	1.1.1.1	192.168.2.4	0xa98f	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:21.252022028 CEST	1.1.1.1	192.168.2.4	0x6afe	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:21.252022028 CEST	1.1.1.1	192.168.2.4	0x6afe	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:21.252022028 CEST	1.1.1.1	192.168.2.4	0x6afe	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Apr 26, 2024 17:33:23.989356995 CEST	1.1.1.1	192.168.2.4	0x7e32	No error (0)	api.seismic.com	api.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:24.004637957 CEST	1.1.1.1	192.168.2.4	0x37bf	No error (0)	api.seismic.com	api.seismic.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:24.317661047 CEST	1.1.1.1	192.168.2.4	0x8dd1	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:24.317661047 CEST	1.1.1.1	192.168.2.4	0x8dd1	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:24.317751884 CEST	1.1.1.1	192.168.2.4	0x8cbb	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:24.317751884 CEST	1.1.1.1	192.168.2.4	0x8cbb	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 17:33:24.317751884 CEST	1.1.1.1	192.168.2.4	0x8cbb	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

https:

newdownload.seismic.com

js-agent.newrelic.com

bam.nr-data.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49749	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:32:43 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=55862 Date: Fri, 26 Apr 2024 15:32:43 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49750	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 15:32:44 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=55856 Date: Fri, 26 Apr 2024 15:32:43 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 15:32:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49774	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:50 UTC	752	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:32:50 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:32:50 GMT Content-Type: application/octet-stream Content-Length: 43495 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:32:50 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30R4T7NEBU:00000047 Content-Disposition: attachment; filename*=utf-8''acb392a2-86c9-4b24-95db-2636493585ad.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:32:50 UTC	3620	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b 86 00 00 01 b0 08 06 00 00 00 4f 0c 9a d1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ec dd db 71 dc c6 f6 f6 e1 77 ef 42 55 5f 7e dc 11 78 14 81 a9 08 0c 45 60 2a 02 0f 23 b0 18 01 c9 08 48 47 c0 71 04 a2 23 d0 28 02 8e 23 d0 ec 0c e6 7f 89 2a 54 ed ef 02 0d 11 a2 79 c0 1c 30 ab 57 f7 ef a9 52 59 96 75 58 16 31 40 1f de 5e f8 97 00 7c 57 85 30 93 34 1b fc 50 fd c2 4f fd e5 99 1f 7b e9 e7 3e 67 25 69 f3 cc 8f 7f 1d 7c 7f 13 7f 9e 24 6d da a6 59 3d f3 f3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd cb ba 00 e0 98 aa 10 ea f8 dd 5a d2 ff 93 74 3a f8 77 2f d6 f1 db 46 d2 df f1 c7 96 92 d4 36 cd d2 a2 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDROpHYs&? IDATxqwBU_~xE`#HGq#(#Ty0WRYuX1@^\|W04PO{>g%i\|$mY=Zt:w/F6
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 52 6d 5d c7 11 5c b7 4d f3 81 50 38 bc a8 42 b8 92 f4 4d d2 a5 08 85 4f e9 54 dd e1 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 2c 83 e1 31 14 3e b7 ae 63 62 6b 49 1f da a6 b9 32 ae 03 18 a5 0a 61 5e 85 40 20 fc b8 ea 78 3f 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 99 cb 2e 18 5e 85 f0 49 f9 87 c2 ef 25 bd 6f 9b 66 69 5d 08 f0 96 2a 84 ba 0a e1 8b a4 3b 49 33 e3 72 4a 34 8f 5d da 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 c6 b2 0a 86 57 21 cc 25 dd 58 d7 31 b1 8b b6 69 3e b6 4d b3 b1 2e 04 78 4d 15 c2 49 ec 56 fd 45 52 6d 5c 4e e9 2e e3 fd 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 2a 9b 60 78 15 c2 a9 f2 0e 85 6f 24 7d 68 9b e6 d6 ba 10 e0 2d b1 73 ff 37 e5 df bd df 93 bb 78 9f 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 ca 22 18 5e Data Ascii: Rm]\MP8BMOTP,1>cbkI2a^@ x?.^I%ofi];I3rJ4]@W!%X1i>M.xMIVERm\N.d`xo$}h-s7x"^
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 34 ac d7 fb 74 e9 f9 3e 11 83 ed 34 8e c8 d7 a9 ba b5 be b9 75 21 3d cb 8e e1 77 86 7f f6 be 56 92 2e ac 8b 00 7a f1 d5 3a a5 87 c2 17 7a ec 0e be 34 ae 05 00 90 90 38 c9 62 d1 11 6f e1 b5 85 18 3a 68 47 b5 c1 e6 c7 ec 90 bf 2f dc 98 a9 db 08 25 14 58 28 36 40 f1 86 99 08 87 66 89 cd 1e 8c d4 77 0f 67 53 1a c0 54 0e 7e 7f 19 34 2a 9a 1f fa f7 86 3f cc 77 f0 86 99 98 ef 14 2b 1e 22 e2 90 3c b6 41 93 0d 3c 55 1f ea 37 1a bc e9 86 fb 91 6f 67 ea c6 16 33 eb 42 c6 1a 3c 0f 79 a3 79 fe fa bc c1 8d 75 21 92 51 30 3c 4e 10 bd 3e c8 37 92 3e d2 85 18 a9 88 93 e8 cf 2a 73 f0 b2 91 74 ad c7 40 f8 da b8 1e 00 40 42 aa 10 4e e3 ab c0 2e 55 e6 73 12 bb a9 45 80 13 07 0a 70 c5 c5 9e cf ea 36 3f 80 9b d8 51 0f 85 60 03 14 5b 22 1c 9a 09 36 7b b0 83 99 ba cf ff 95 71 1d Data Ascii: 4t>4u!=wV.z:z48bo:hG/%X(6@fwgST~4?w+"<A<U7og3B<yyu!Q0<N>7>st@@BN.UsEp6?Q`["6{q
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 3e 8c c5 38 48 df e7 3b a5 ac 97 f0 96 c6 3d 65 92 59 78 cb 4a dd 7a c8 c2 ba 90 14 c4 79 f0 a5 f2 0f d7 ad d5 1d 96 e7 fe f0 86 42 ee 03 53 d9 a8 0b dd de e6 74 ad c5 10 ee a5 f2 be 2e fe b1 76 92 d9 bc 6e a1 0c 9b c3 14 f4 0c 93 ba fb ca c5 2e bf f0 20 c1 70 87 0b e7 84 30 90 84 2a 84 4f 92 6e ac eb d8 13 a1 70 00 c0 d6 32 7f 4d fb 4b fa 45 81 05 1b 13 3f 2a 6c 93 62 88 4e 15 72 11 ba f0 64 a1 82 37 3f 0b 59 a4 1c a2 03 f0 01 54 21 7c 56 19 af da ce 72 73 e2 50 0a ba 7f ec bc 88 9c bb 2a 84 3b e5 b1 91 b0 54 37 c6 5c 1b d7 e1 42 9c 97 de 28 8f af fd 73 92 ed 5e 9b 3a 07 73 14 82 e1 89 ca 2c 40 90 ba 8d ba 80 df d7 f8 cf 4d 6e 61 87 43 c8 68 8c f3 16 e6 3b af 28 68 be 43 06 64 47 05 bc d9 75 a9 6e fc b4 34 ae 23 49 85 84 eb 18 3f 8f 40 30 7c 27 45 8c 41 Data Ascii: >8H;=eYxJzyBSt.vn. p0Onp2MKE?lbNrd7?YT!\|VrsP*;T7\B(s^:s,@MnaCh;(hCdGun4#I?@0\|'EA
2024-04-26 15:32:50 UTC	42	IN	Data Raw: 7e af db ba 0a a1 e6 60 9f 3b d7 74 00 cd c2 85 a4 07 eb 22 76 70 26 9f 81 d4 5d 78 bd b7 7f 64 01 b8 08 d7 ea 3e 8f 33 e3 3a Data Ascii: ~`;t"vp&]xd>3:
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: b6 71 56 85 90 d3 06 c5 4f d6 05 bc e1 ab 75 01 38 88 6b f9 59 1f 9e 55 21 cc d8 1c 07 b0 25 c6 ae 76 98 ef 20 59 6d d3 5c 55 21 fc aa f4 0f 63 0e cd ab 10 4a 08 0a d6 d6 05 8c b4 51 39 eb 57 a5 f8 43 d2 27 eb 22 46 3a 55 b7 5f 88 3c 2d c9 a0 a4 a7 6d 9a 4d 15 c2 1f f2 3b c6 dd d7 92 b7 99 a7 a9 6d 9a 75 15 c2 42 7e d6 f7 a4 17 c6 7b 63 83 e1 1e 5e 29 b8 26 1c 81 04 78 eb 4e 96 d3 e6 1e 5e b7 52 37 a1 49 fd fa 9c 89 49 3f e0 8a e3 4e 35 12 1d 7c 8b 15 37 2a 7e 96 9f 03 b0 4f 5d 8a 8e 92 9e b0 e8 98 89 b6 69 56 55 08 b7 f2 b3 a1 d1 fb 55 05 8c b1 1d 8f 49 38 38 52 88 b8 d9 71 2e e9 8b 75 2d 5b e8 1b 20 e4 72 0f 99 59 17 f0 06 ee 05 19 88 9b 47 4b f9 09 e0 9c aa eb fe 0b 00 63 5c 30 76 b5 51 85 e0 ed 80 61 ef 9a fd fb a2 9c cb df 81 fa b9 a4 2b e3 1a a6 e6 Data Ascii: qVOu8kYU!%v Ym\U!cJQ9WC'"F:U_<-mM;muB~{c^)&xN^R7II?N5\|7*~O]iVUUI88Rq.u-[ rYGKc\0vQa+
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 07 34 01 20 5b 8c 49 e6 c1 cd 98 61 c4 63 66 6c ce c3 1a f3 c9 b7 c2 f0 b4 88 5f db 65 59 8b cd 77 98 4a 9b 2f b9 6f 76 71 5d 35 b6 e2 e0 fd ea 71 b3 19 28 81 a7 4e 35 9e 3a 39 c3 a9 b4 59 9a fb 77 e6 4a cd c6 c5 c1 78 3a 20 00 1b b9 df c6 23 e5 3f b7 fd 8e b3 62 48 2f df 13 c8 9f 97 cf 92 a7 e7 53 f2 7b 78 e3 44 d2 c7 2a 84 33 eb 20 00 80 a2 b4 d6 01 f0 ad f0 d4 cb 1c ad b5 0e 80 62 b4 d6 01 26 f2 36 df 01 80 b9 f0 b2 6e 86 dd 74 d6 01 36 c4 c1 db f9 70 71 30 65 dc 31 3c f7 41 2d 2f 75 58 6b ac 03 ac b1 ec 63 a4 48 05 bb 68 ad 03 ac 91 fb f7 14 50 a2 c6 3a c0 44 9d 83 03 2e 28 87 a7 43 08 7c 77 1e 86 87 53 e0 b0 e5 e1 3b c9 db fb c1 53 5e de 11 d8 97 ce 3a c0 44 8d 75 80 4d a4 6e 52 1e de d3 8f 39 91 74 5b 85 f0 81 c3 f3 00 80 3d 61 ec 9a 87 c6 3a c0 06 Data Ascii: 4 [Iacfl_eYwJ/ovq]5q(N5:9YwJx: #?bH/S{xD*3 b&6nt6pq0e1<A-/uXkcHhP:D.(C\|wS;S^:DuMnR9t[=a:
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: cb 3e c6 9b 3e c6 d7 fa be 48 7c 69 9b 0c 0e 5c 53 1c 0e 00 00 80 67 7c 50 fe f5 11 00 00 00 d8 41 65 1d 00 b0 56 85 50 2b f3 d3 b0 7d 8c 5c 29 07 00 00 90 2f ae db 04 80 f9 6a fb 18 5f 59 87 00 50 b6 3e c6 a5 a4 9b f4 43 55 08 67 1a 6e 40 3c 53 e6 eb 9a 30 73 5d 85 a0 3e c6 1b eb 20 00 00 d7 98 ef 00 85 a9 42 78 23 e9 dc 3a 07 00 00 00 0e 2b f7 8e e1 b5 75 00 cc 42 63 1d 60 8d d6 3a 00 00 00 00 9e e5 a1 bb 0a 07 0d 01 00 00 0a d1 c7 78 d7 c7 78 d9 c7 f8 b3 a4 9f 35 74 13 bf 11 dd c4 f1 bd eb 74 88 00 00 00 00 50 15 c2 a9 86 6e e1 00 00 00 28 1c 85 e1 80 f4 8b 75 80 35 3e 59 07 c0 2c 79 28 70 03 b0 7f 5e 8a 08 1a eb 00 80 43 7f 59 07 00 00 00 c0 fe f5 31 76 7d 8c 37 7d 8c 17 7d 8c ff 94 f4 42 f7 85 e2 9d 65 36 64 e1 3a 15 00 01 00 f2 e2 65 1d 16 40 21 aa Data Ascii: >>H\|i\Sg\|PAeVP+}\)/j_YP>CUgn@<S0s]> Bx#:+uBc`:xx5ttPn(u5>Y,y(p^CY1v}7}}Be6d:e@!
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: d8 8c 8b b1 47 3a a0 81 dd d5 d6 01 60 8a f5 2e 00 c0 53 bc cc 77 24 7f 4d 15 60 cb cb fc b8 b5 0e 30 91 87 22 fb 3f ad 03 c0 9c 97 e7 1e 00 80 e2 fc ad 30 dc c9 c2 fe 4b eb 00 c8 5b 3a 71 dc 18 c7 98 82 13 c7 b0 96 fd d5 4d 4e be 97 80 e2 f5 31 2e e5 6b 53 42 92 de d2 b5 06 3b 78 a3 fc 6f 9f 79 c8 db 33 0a 00 db f2 74 93 c9 5b eb 00 70 c5 c3 86 69 6b 1d 60 02 2f 9d 98 3d 14 72 e0 70 72 5f 17 f6 36 17 02 80 92 78 3a f8 ff ab 75 00 b8 e2 e1 20 ec 22 ed 85 78 c0 78 0d 1e 64 5f 8b 00 00 40 a9 1e eb 18 2e e5 df ad c2 c3 26 09 6c 79 98 58 4a 14 ef c0 5e 63 1d 60 8d dc bf 8f 80 b9 f1 54 84 25 0d 1d f8 e8 5a 83 8d 39 ed 16 be e8 63 ec ac 43 00 c0 31 f4 31 de c9 4f e1 67 cd 2d 26 98 a2 0a a1 91 8f 0e d2 b9 17 b3 4a 7e d6 12 7e b1 0e 00 53 b9 7f 8f 71 70 01 00 8c Data Ascii: G:`.Sw$M`0"?0K[:qMN1.kSB;xoy3t[pik`/=rpr_6x:u "xxd_@.&lyXJ^c`T%Z9cC11Og-&J~~Sqp
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 37 b5 da a4 78 67 1d a4 64 55 08 4d 15 c2 57 49 25 6f 06 bd 4e c5 4a 00 80 03 29 70 4c 72 a2 e1 aa 75 ae 5f 3e b0 d1 8d 25 e7 b6 49 f6 6a ae 6b 59 57 f2 5b 34 f1 98 37 e9 1d 40 21 85 a1 74 58 d8 63 51 b8 54 ce 61 89 7d f3 f4 9e b8 e6 1d 00 40 92 fa 18 af 24 b5 d6 39 f6 8c f9 ce 11 94 3a df 99 d9 5a eb 8d 75 80 1d 50 1c 6e 24 1d be f9 2c 9f f3 98 43 f9 97 75 00 00 00 f6 81 c2 70 64 23 75 b7 f1 da d9 a2 a5 f3 31 ac 39 eb 16 2e f9 5e a0 00 b0 9d d7 f2 b5 b1 ba a9 b7 a9 7b 78 63 1d a4 24 a9 53 4d c9 5d c2 57 de d3 a5 0f 00 8e a6 c4 31 49 23 ba e9 1d 44 c1 63 91 ab b9 ae 65 15 d6 35 7c a5 91 f4 95 ae c1 36 d2 9f bb d7 a2 70 6e c1 7c da 27 eb 00 1b 38 d1 d0 dd 15 00 a4 e1 f0 5f a9 f3 9d 77 c6 39 8a 53 f0 7c e7 6e 86 f3 1d ef 0d b9 56 c5 e1 1e c7 d4 ee a4 2e e1 Data Ascii: 7xgdUMWI%oNJ)pLru_>%IjkYW[47@!tXcQTa}@$9:ZuPn$,Cupd#u19.^{xc$SM]W1I#Dce5\|6pn\|'8_w9S\|nV.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49773	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:50 UTC	758	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:32:50 UTC	477	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:32:50 GMT Content-Type: application/octet-stream Content-Length: 146857 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:32:50 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30R4T5QB80:00000059 Content-Disposition: attachment; filename*=utf-8''42a9afb0-4e23-4a15-8f0a-491943de840e.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:32:50 UTC	3619	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 70 00 00 01 3f 08 06 00 00 00 c6 f5 fe 87 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec 5d 05 78 14 57 17 dd 20 c1 dd a5 14 29 14 87 10 df 18 12 dc dd 8b 3b e5 87 e2 2d 50 dc dd dd dd dd 25 68 20 78 42 42 8c b8 bb ec 66 7d e7 3f 77 76 36 4c 36 0b 04 08 da 39 df 77 33 9b 91 37 6f 9e dc 7b 9e dd 27 12 20 20 9b 61 22 12 d9 e4 13 89 1c eb 89 44 0e 93 45 22 db 9b 10 a9 48 64 c7 7c 45 d1 40 3c 21 9b 44 22 eb 2e 22 91 65 59 91 a8 55 1e 2e 7e 02 04 08 f8 cf 80 ea 7d b3 12 22 91 b8 8d 48 64 bf 1a 3a e1 19 7e 2b 38 3d f1 15 c4 9e 8e 4a bc f3 29 8e 0b 20 f6 22 51 fd 02 22 51 Data Ascii: PNGIHDRp?sRGBgAMAapHYsodIDATx^]xW );-P%h xBBf}?wv6L69w37o{' a"DE"Hd\|E@<!D"."eYU.~}"Hd:~+8=J) "Q"Q
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 28 2d 4d 41 ab db bf d8 ae 2d 3f 3a 92 92 24 cc b2 65 87 98 5f 7f ed 84 74 7b d7 90 aa 1d f9 58 ec ca 25 bc 00 01 02 7e 0e d8 77 83 18 ac 32 35 67 72 e7 b6 4b 1d 3a 74 51 b4 9f 5f 28 19 c6 1f ce 97 d2 b7 00 d2 e9 e1 81 03 97 8f d5 ae dd eb a2 48 54 df 4f a7 48 f5 46 89 84 7e b3 44 8e fc c7 6d 81 fc a4 bd 3d 4e b9 f0 6d b4 09 b7 da c4 c4 96 71 72 1a ad 91 4a e5 d9 6e 80 23 23 e3 e5 52 a9 e2 a3 57 1e 86 84 44 33 d3 a7 6f e5 7a e3 88 6c f3 f3 87 ad 07 cf 11 77 61 12 f8 17 83 93 05 d2 78 01 c4 5f 97 de 7a dd 43 f5 a5 81 a2 62 c5 4e 11 d3 a6 6d 0a 0e 0c 8c a4 79 6e ff e9 e9 1a 1f 83 f3 e7 1f 30 0e 0e a3 91 86 d4 30 31 9c 2a c0 92 b8 08 c8 a4 9f bf f1 28 40 c0 4f 0f 9a ef 66 33 59 57 a9 d9 ca 0d a1 5e 89 46 da f2 e5 db 25 ac 5b 77 22 52 2e 57 24 73 ba 41 40 16 Data Ascii: (-MA-?:$e_t{X%~w25grK:tQ_(HTOHF~Dm=NmqrJn##RWD3ozlwax_zCbNmyn001*(@Of3YW^F%[w"R.W$sA@
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: e4 b7 e4 ad 50 21 67 f5 ea d5 c7 94 34 7c c0 d5 c5 cf 06 74 9a e4 f0 e1 6b 81 68 81 47 a3 32 83 1c d8 3c 44 25 76 c2 91 86 b7 8e eb 2a b4 9e bc 59 6b cb 94 e9 f0 fa ea 55 37 22 6f df dc 39 2f 29 f1 37 6f c2 35 6b d7 1e 53 a3 55 a9 ae 50 a1 93 b6 60 41 67 ad 89 09 cd eb a1 56 2e f9 a6 33 4f ed d5 6b 96 fb 9b 37 61 91 88 73 b6 af d0 fd d2 20 a3 03 44 cb 64 f2 27 37 6f 3e 5e d5 b0 61 bf f9 26 26 e4 f0 d7 06 ca de 06 df a9 57 be 7a 05 cc 12 39 35 fe 0f 83 1c c6 b9 56 ba e1 b3 ef 15 d6 ad 75 71 6d c0 fc f3 cf 16 ee ab bf 3e 94 4a 25 33 75 ea 46 a4 5d a6 5e 38 72 e5 f2 83 f8 86 a3 89 e8 e4 72 c6 6e 23 c4 57 a7 3f 58 a3 0c a1 1e 1f 9d c1 a6 95 91 66 66 03 55 ab 56 1d 91 fb f9 85 aa 65 32 c5 0f 43 dc 0c 21 95 ca 99 9d 3b 2f 30 15 2b 76 c1 b7 d1 ea 4e ca 3f 4b 05 Data Ascii: P!g4\|tkhG2<D%v*YkU7"o9/)7o5kSUP`AgV.3Ok7as Dd'7o>^a&&Wz95Vuqm>J%3uF]^8rrn#W?XffUVe2C!;/0+vN?K
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: e7 e4 34 16 df dc 90 4b 03 12 b6 3c 8e 7e 3b 9c 95 55 90 e1 25 ef f6 d4 38 11 bb e0 c8 4d 15 d0 0b 11 0a ea 1d 32 d7 e6 cf df 44 5d b3 66 6f d5 b0 61 8b e5 b7 6f 3f 93 2b 95 c2 30 69 76 81 b6 6c 2b 5f 9e e6 d7 1a f6 c4 51 be da 82 f8 90 f3 5a b3 f2 f8 bd 1d 22 87 de f1 9f 30 61 dd 0e b9 5c 41 53 35 be 4a 6f 7f 44 44 1c d3 a9 d3 74 6e 65 aa 3e 8e 6c 19 21 5f 8f b4 2a 95 9b 87 69 87 46 be 2d 91 34 c4 55 3c 14 f5 c8 4e d7 f8 27 fd cf 96 4f 61 c1 81 00 01 3f 09 78 95 d9 d1 0c 95 ff d9 db de 37 73 c6 c2 62 88 cf e3 c7 de 3e 01 01 11 ca 98 98 44 a5 44 92 46 13 60 69 73 f5 2f 62 54 69 8f bf 56 ad 26 aa 75 64 81 14 25 2d ac d0 cf cd b3 43 2b d1 2e e4 2d 79 b3 62 72 e5 b2 89 98 34 69 fd 55 b5 5a e3 cb 05 21 20 9b 80 2c a6 e1 d5 0b 97 2f bb 2e 6d da f4 7f 7b 0b 16 Data Ascii: 4K<~;U%8M2D]foao?+0ivl+_QZ"0a\AS5JoDDtne>l!_*iF-4U<N'Oa?x7sb>DDF`is/bTiV&ud%-C+.-ybr4iUZ! ,/.m{
2024-04-26 15:32:50 UTC	42	IN	Data Raw: ed da 7d 4f ed dc 79 71 2b d2 ed 1c e4 9b 3b 33 a6 05 3d 6b d6 1c 63 1a 37 1e 83 fa 4a 64 8d 48 68 3a 71 4b 82 ec c2 ff 6d 41 Data Ascii: }Oyq+;3=kc7JdHh:qKmA
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 42 79 db c1 09 10 20 40 80 00 23 10 97 87 d2 1c 00 b9 a0 53 fc ac 53 54 65 a5 4a 9d 13 c7 8e 5d 19 f3 e4 89 77 d4 b7 52 fc 71 71 49 cc ca 95 87 19 4b 4b 72 23 41 4a de 98 b1 22 f2 46 c4 b3 cd d3 e3 c7 5d 68 55 e7 0f 47 de 0c 11 1a 1a 4d 73 fb 98 5d bb 2e 30 33 67 6e 63 ba 75 fb 87 dd 12 28 6f de a6 f8 56 22 74 2c 99 83 34 50 c3 00 46 23 4d 3c 7f f9 a5 93 bb bd fd e8 67 83 07 2f 74 5d b9 f2 c8 39 1f 9f 90 fb 5c 70 3f 15 de bc 09 67 46 8d 5a ce 58 58 0c 60 2a 54 e8 c4 e4 c8 41 f9 4f e5 42 4f d8 d8 ed 92 b8 ff 1b 86 16 2f de fa 75 9b 36 13 5f 2c 5e bc ff c5 cd 9b 4f 3d 53 52 a4 2f 51 46 7e 0a 7f 87 ee ee 6f 98 8e 1d a7 e1 3b 59 3f 68 10 7e bd d0 8b 85 06 69 f1 d4 c6 66 d8 ce a7 4f 7d 97 e3 db 9f 72 8f 7f 55 24 25 a5 b2 53 06 5a b6 9c c0 e4 cb 47 e5 98 88 1b Data Ascii: By @#SSTeJ]wRqqIKKr#AJ"F]hUGMs].03gncu(oV"t,4PF#M<g/t]9\p?gFZXX`*TAOBO/u6_,^O=SR/QF~o;Y?h~ifO}rU$%SZG
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 11 89 1c fb c0 98 c4 ea 0c 8b 75 e2 e0 c1 8b 9e a4 a5 c9 a3 38 fb 23 e0 33 40 9e f8 17 2f de cf 54 a8 d0 11 69 4b e4 88 4f 9a f4 62 c3 e4 cd eb 40 0e 79 7d 7d 7d 83 c9 a5 47 a6 61 6c 22 01 63 c7 ae 4c 6d dd 7a e2 95 80 80 88 9b b8 27 83 ef 36 3f bf 30 66 f0 e0 85 92 2e 5d fe 7e a8 d1 68 32 0d a3 12 fc fc 42 99 61 c3 16 33 45 8b d2 10 9e 7e 05 24 5f 28 6e 36 da 72 e5 3a 28 97 2e 3d 20 a3 e1 5f ee 51 01 9f 81 0b 17 1e 30 d5 aa 51 cf a9 05 97 ce ec 02 a2 c7 48 eb 7a 5c 1d 14 20 40 80 00 01 02 3e 05 b5 69 5f d5 b1 90 14 32 e2 39 72 d8 c6 ce 9a b5 fd 91 5a ad 36 4a 04 04 7c 3c 2e 5d 72 65 1a 34 18 c0 33 e2 6f 49 93 a9 a9 43 d4 9c 39 3b 3c a4 52 d9 3b 9d e2 2a 95 6a 5a 74 10 2a 91 a4 bd 79 d7 10 77 52 92 84 71 71 79 9e ac 52 a9 c2 b9 53 99 40 0e 65 69 28 af 4c Data Ascii: u8#3@/TiKOb@y}}}Gal"cLmz'6?0f.]~h2Ba3E~$_(n6r:(.= _Q0QHz\ @>i_29rZ6J\|<.]re43oIC9;<R;jZtywRqqyRS@ei(L
2024-04-26 15:32:50 UTC	588	IN	Data Raw: 99 ed d5 33 06 99 4c c9 0c 1b b6 24 b6 7a f5 5e 7f aa d5 9a b3 dc 69 16 34 84 5b bf 3e ed 5d da e0 c9 9a 35 27 96 e0 7d 1e dc 25 16 b4 27 2d f5 32 53 dc 09 b7 6f bf e0 dc 86 90 cf 37 76 de 1b 48 11 f5 b8 e9 61 3b 09 d7 42 ff fc 73 b9 bb 4c 26 cf e0 4b 11 0d 92 a4 e0 e0 28 b6 f7 52 2a 95 6b ab 54 e9 86 ba 6b 95 88 f4 34 18 42 a5 9e 32 f3 6b 65 ca b4 63 56 ad 3a ac 4d 4c 94 b0 3d 77 f4 1c ea 0d 35 72 b4 1e 1e 01 1a 1b 9b 11 78 bf 79 1c e2 d0 97 7b 90 07 22 85 e6 68 24 9a 05 e6 cf ef ac a5 9e ce 6e dd 66 32 e3 c7 af 63 a0 53 b8 15 b5 96 0b de ef 5a 48 80 00 01 02 fe d3 a8 65 66 6a da f4 ca ee dd 17 ce 43 ef 06 26 24 24 47 c2 68 c4 ef da 75 31 a9 6f df b9 44 68 a0 48 69 f8 47 7c 1d 4a 57 cc 3d c4 a1 c1 c6 ce 9d a7 79 cb 64 8a 30 9a 73 76 e1 c2 7d 69 54 54 9c Data Ascii: 3L$z^i4[>]5'}%'-2So7vHa;BsL&K(R*kTk4B2kecV:ML=w5rxy{"h$nf2cSZHefjC&$$Ghu1oDhHiG\|JW=yd0sv}iTT
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 17 98 48 d8 e2 c5 fb e2 2a 54 e8 bc 14 44 75 07 c2 64 cb 64 54 54 02 d3 b6 ed 54 84 53 cf 7f c2 84 75 73 71 fe 39 9d e7 03 8d 16 e6 d5 ab b7 2e f2 a8 4c 80 d8 e3 19 2a 0f 76 41 a8 2f 2d 75 75 85 40 73 d1 1a ba f7 ea f5 af 17 08 5a 06 f2 b6 77 ef 65 06 8d 9a 78 94 53 36 4e d4 cb 5b ae 5c 07 aa 73 d1 48 53 de ea 72 b6 e7 7c 43 c9 92 6d 98 ed db cf b2 a4 8d 0d 00 08 0a 8a 8c 71 77 7f 43 43 b1 5a 34 e0 34 f5 ea b1 9b e6 fb 83 40 f2 e2 40 ab 54 6d 46 a0 ee 7b 95 2c d9 96 19 3c 78 31 b3 7f ff 15 8d bb bb bf 3a 31 31 85 ca a7 e6 ec d9 7b 12 bc 1b cf d6 47 c3 51 20 70 02 04 08 10 f0 0e d4 aa 9e 33 a7 fd 9e 2d 5b 4e 3d 23 25 9c 94 a4 1b c9 83 22 55 c1 80 c9 a0 d4 53 6c 6d 87 71 7b 53 da bc 80 11 68 cc 3d 08 34 1c 87 56 f6 4b 10 27 76 61 c0 89 13 2e ca 49 93 36 40 Data Ascii: HTDuddTTTSusq9.LvA/-uu@sZwexS6N[\sHSr\|CmqwCCZ44@@TmF{,<x1:11{GQ p3-[N=#%"USlmq{Sh=4VK'va.I6@
2024-04-26 15:32:50 UTC	4096	IN	Data Raw: 0a 15 72 be 07 b2 4d 8d c6 2b b8 07 df 65 bd 16 3a 8b 37 c7 4f 80 00 01 02 7e 2a 34 2c 05 85 ba 1d 2d df 94 fe fd e7 b3 ae 02 ce 9d bb 4f 04 42 33 7b f6 b6 44 18 8c 44 9d 52 17 a3 55 2e f6 c1 6f 22 61 c7 f0 4c 50 ae 5c 8e 0c b9 10 a1 d5 60 3a c2 64 4b c3 96 a4 9c e9 7e 08 4b c4 40 a2 c8 51 af 98 9c 75 92 d0 42 07 28 68 d6 ef 18 44 ef 11 9e bd 97 f7 9b ed c1 33 10 5b 19 8e 20 7b 34 8f 89 0c 91 25 c8 a5 05 94 b7 f5 73 90 3a 18 0f b1 5c 17 57 7d 98 14 06 19 05 12 5a d8 40 a2 0f d7 4a 53 b1 62 47 69 87 0e 53 22 46 8c 58 fa 6a de bc 5d d1 bb 76 5d 48 19 37 6e 4d 5a fe fc 4d b5 05 0a 38 a6 75 e9 32 2d ea f4 e9 3b c9 4d 9a fc 49 43 ba 78 86 dc 2e b0 04 12 df 68 cb e0 c8 fc f1 c7 bc 0c 93 d0 61 33 63 b7 6d 3b bb a3 6c d9 76 0f 41 e2 32 f4 c2 69 34 9a 37 fd fb cf Data Ascii: rM+e:7O~*4,-OB3{DDRU.o"aLP\`:dK~K@QuB(hD3[ {4%s:\W}Z@JSbGiS"FXj]v]H7nMZM8u2-;MICx.ha3cm;lvA2i47

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49777	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:51 UTC	516	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:32:52 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:32:52 GMT Content-Type: application/octet-stream Content-Length: 43495 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:32:52 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30VGEQ1UAJ:00000048 Content-Disposition: attachment; filename*=utf-8''acb392a2-86c9-4b24-95db-2636493585ad.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:32:52 UTC	3620	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0b 86 00 00 01 b0 08 06 00 00 00 4f 0c 9a d1 00 00 00 09 70 48 59 73 00 00 17 11 00 00 17 11 01 ca 26 f3 3f 00 00 20 00 49 44 41 54 78 9c ec dd db 71 dc c6 f6 f6 e1 77 ef 42 55 5f 7e dc 11 78 14 81 a9 08 0c 45 60 2a 02 0f 23 b0 18 01 c9 08 48 47 c0 71 04 a2 23 d0 28 02 8e 23 d0 ec 0c e6 7f 89 2a 54 ed ef 02 0d 11 a2 79 c0 1c 30 ab 57 f7 ef a9 52 59 96 75 58 16 31 40 1f de 5e f8 97 00 7c 57 85 30 93 34 1b fc 50 fd c2 4f fd e5 99 1f 7b e9 e7 3e 67 25 69 f3 cc 8f 7f 1d 7c 7f 13 7f 9e 24 6d da a6 59 3d f3 f3 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd cb ba 00 e0 98 aa 10 ea f8 dd 5a d2 ff 93 74 3a f8 77 2f d6 f1 db 46 d2 df f1 c7 96 92 d4 36 cd d2 a2 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDROpHYs&? IDATxqwBU_~xE`#HGq#(#Ty0WRYuX1@^\|W04PO{>g%i\|$mY=Zt:w/F6
2024-04-26 15:32:52 UTC	140	IN	Data Raw: 52 6d 5d c7 11 5c b7 4d f3 81 50 38 bc a8 42 b8 92 f4 4d d2 a5 08 85 4f e9 54 dd e1 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 80 2c 83 e1 31 14 3e b7 ae 63 62 6b 49 1f da a6 b9 32 ae 03 18 a5 0a 61 5e 85 40 20 fc b8 ea 78 3f 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 99 cb 2e 18 5e 85 f0 49 f9 87 c2 ef 25 bd 6f 9b 66 69 5d 08 f0 96 2a 84 ba 0a e1 8b a4 3b 49 33 e3 72 4a 34 8f 5d da 01 00 00 00 00 00 00 00 00 Data Ascii: Rm]\MP8BMOTP,1>cbkI2a^@ x?.^I%ofi]*;I3rJ4]
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: 00 00 00 00 00 40 c6 b2 0a 86 57 21 cc 25 dd 58 d7 31 b1 8b b6 69 3e b6 4d b3 b1 2e 04 78 4d 15 c2 49 ec 56 fd 45 52 6d 5c 4e e9 2e e3 fd 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 2a 9b 60 78 15 c2 a9 f2 0e 85 6f 24 7d 68 9b e6 d6 ba 10 e0 2d b1 73 ff 37 e5 df bd df 93 bb 78 9f 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 ca 22 18 5e 85 70 a2 ae 2b f1 89 75 2d 13 59 49 7a d7 36 cd d2 ba 10 e0 35 55 08 75 15 c2 83 ba 43 1a b9 7e 1e 3d fb 42 38 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3c 65 11 0c 57 de a1 f0 45 db 34 ef db a6 d9 58 17 02 bc a4 0a e1 a4 0a e1 46 dd 67 91 e0 71 ba 4e d4 75 0e cf f5 7e 09 00 00 00 00 00 00 00 00 00 00 00 00 00 40 b1 dc 07 c3 ab 10 ee 94 6f 10 f5 a2 6d 9a 73 eb 22 80 d7 54 21 d4 92 1e 24 7d 32 2e 05 e3 9c 4a ba b3 Data Ascii: @W!%X1i>M.xMIVERm\N.d*`xo$}h-s7x"^p+u-YIz65UuC~=B8<eWE4XFgqNu~@oms"T!$}2.J
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: 1a bc e9 86 fb 91 6f 67 ea c6 16 33 eb 42 c6 1a 3c 0f 79 a3 79 fe fa bc c1 8d 75 21 92 51 30 3c 4e 10 bd 3e c8 37 92 3e d2 85 18 a9 88 93 e8 cf 2a 73 f0 b2 91 74 ad c7 40 f8 da b8 1e 00 40 42 aa 10 4e e3 ab c0 2e 55 e6 73 12 bb a9 45 80 13 07 0a 70 c5 c5 9e cf ea 36 3f 80 9b d8 51 0f 85 60 03 14 5b 22 1c 9a 09 36 7b b0 83 99 ba cf ff 95 71 1d 00 32 75 c8 d0 44 ec fc fb 45 7e f7 79 71 20 4f d6 3c 98 ef e0 2d fd 7c a7 b6 2e 04 c7 51 85 70 26 e9 9b 38 34 82 ed cd d4 dd 2f e6 c6 75 20 11 87 38 58 14 43 9a ac cd e7 e3 54 4e d6 51 07 5d ea 6b e3 52 70 5c 9f 52 e8 6e 7f f4 60 78 fc 1f f6 bc 28 fe 91 f0 29 52 11 3f 4f a5 2e c0 dd aa 0b 84 5f f1 99 04 00 3c 35 e8 54 53 e2 33 12 fb 3b 51 17 e0 74 75 e2 1c 07 35 db f7 37 18 74 50 3b db bb 1a e4 64 5e 85 f0 60 bd 18 Data Ascii: og3B<yyu!Q0<N>7>*st@@BN.UsEp6?Q`["6{q2uDE~yq O<-\|.Qp&84/u 8XCTNQ]kRp\Rn`x()R?O._<5TS3;Qtu57tP;d^`
2024-04-26 15:32:52 UTC	1594	IN	Data Raw: a2 03 f0 01 54 21 7c 56 19 af da ce 72 73 e2 50 0a ba 7f ec bc 88 9c bb 2a 84 3b e5 b1 91 b0 54 37 c6 5c 1b d7 e1 42 9c 97 de 28 8f af fd 73 92 ed 5e 9b 3a 07 73 14 82 e1 89 ca 2c 40 90 ba 8d ba 80 df d7 f8 cf 4d 6e 61 87 43 c8 68 8c f3 16 e6 3b af 28 68 be 43 06 64 47 05 bc d9 75 a9 6e fc b4 34 ae 23 49 85 84 eb 18 3f 8f 40 30 7c 27 45 8c 41 32 1f 4b fc d0 4c 23 36 b6 7b 30 ac e7 50 16 2a 60 bf b0 90 67 98 d4 75 0d 5f 6f fb 8b 0e 15 0c f7 36 a9 dc e9 2f 0b 38 a4 4c 02 71 84 c2 01 00 3b 29 6c 71 a1 88 45 81 43 c8 7c 61 e1 25 ef 4b 1f 4b 39 08 5d 78 b0 50 01 0b 3c 63 15 76 2f 61 d3 73 0f 99 1c d6 1e e3 56 dd 3d 82 71 c8 1b e2 fd e3 4e 79 77 10 ff d8 36 cd bd 75 11 29 71 d8 f4 e4 39 6b 49 17 7c 6d 77 13 37 fd ee 94 e7 41 55 0e a3 ee c0 c1 1c 85 60 4b a2 08 Data Ascii: T!\|VrsP;T7\B(s^:s,@MnaCh;(hCdGun4#I?@0\|'EA2KL#6{0P`gu_o6/8Lq;)lqEC\|a%KK9]xP<cv/asV=qNyw6u)q9kI\|mw7AU`K
2024-04-26 15:32:52 UTC	1398	IN	Data Raw: 73 29 fe 8e b7 10 e7 9d 1f 94 cf b5 39 1f fb 13 f7 e9 18 7e 26 3f 9b 69 b9 bd fa 08 0e c5 09 96 d7 d7 b7 ad d5 dd 24 01 00 d8 45 8e 9d 39 d8 98 30 94 61 28 6b e8 13 81 0d 44 0b 75 9b 1b 6b e3 3a b2 34 58 08 ca 65 b3 53 ea 36 3c 67 d6 45 a4 2a de 5b e7 c6 65 1c 52 bf 08 bc b4 2e a4 34 f1 a0 da 07 e5 f3 16 93 bb 12 df 58 12 0f af ce ac eb d8 c2 3d a1 70 3b 83 d7 a7 7b 0f 40 78 3b 0c 01 20 2f 6b 75 6b 69 cc 73 27 10 e7 3b 5e f7 20 9f d3 1f 94 cf 69 ce ee 42 9c ef 7c 54 3e f9 8a 9b 12 e7 3b 23 78 6f 2e 40 30 ce 48 5c 87 f2 3e 37 62 0d 15 6f e1 6d 6d 3b 8a 7f 67 39 05 70 53 b2 88 cd ea b8 2e 77 90 d9 b5 f9 fb d8 f1 ed 3e c1 70 2f a7 a8 36 9c 12 44 22 6e ac 0b d8 51 1f 7c e3 e1 02 00 d8 5a 15 c2 95 a4 53 eb 3a 0e 8c 8d 89 04 0c 42 59 b9 6c 52 0c 15 19 d0 c2 0f Data Ascii: s)9~&?i$E90a(kDuk:4XeS6<gE*[eR.4X=p;{@x; /kukis';^ iB\|T>;#xo.@0H\>7bomm;g9pS.w>p/6D"nQ\|ZS:BYlR
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: 9f 1c 02 ac 6c 4c 64 22 4e 9e 73 38 f0 36 2f 3d e0 99 21 ee 33 89 1b 84 c3 3d f3 b8 e1 77 48 9e c3 ad dc 23 9c 8b 07 ee bd 2e e2 e7 de 45 cf c3 a6 2f 6b 73 8e c4 7b b5 c7 af d9 ab 1b 47 00 b0 25 42 e1 c7 e7 79 be 23 31 df 71 cd f9 61 d8 59 3c 58 51 22 6f e3 bf 05 cf 16 5f 62 46 cb db dc a8 f4 f5 d3 52 f1 36 02 3b 1e 0f 90 1c 4b 0e 7b 52 9e 7d 94 cf 6b 73 fe da 9b c7 b7 0d 86 7b 19 2c 7a 1b 6c 20 4f 1e 17 65 ce 19 fc 00 00 76 e5 f4 50 d4 53 04 b1 f2 73 2e bf a7 7c 87 4a ee 66 93 a3 73 ee 33 e9 8b 5f a3 0b eb 3a f6 f0 9b 75 01 56 aa 10 ae e4 bb 5b 38 f7 88 0c c4 0d ec 85 71 19 bb f2 b8 a6 35 d6 a9 75 01 6f d8 28 8f 83 8d 45 89 5d af bc dd b7 09 40 00 38 14 42 e1 47 96 c1 db 91 98 ef 64 20 7e ee bd 66 32 7e b7 2e e0 d8 62 60 c8 d3 f8 6f 2d df 6b 72 c5 8a 6f Data Ascii: lLd"Ns86/=!3=wH#.E/ks{G%By#1qaY<XQ"o_bFR6;K{R}ks{,zl OevPSs.\|Jfs3_:uV[8q5uo(E]@8BGd ~f2~.b`o-kro
2024-04-26 15:32:52 UTC	2894	IN	Data Raw: 67 81 cd 2c c5 f9 ce cc ba 8e 91 98 ef 60 57 5e ee 35 1e e7 3b 80 07 6b eb 02 90 1d 9a 85 e5 cb 4b 23 9e e7 ac 1d 05 88 b1 bd a5 75 01 23 cc a4 e7 83 e1 a9 07 5e 97 d6 05 a0 78 b5 75 01 23 30 f8 c1 36 96 d6 05 bc 21 f5 e7 12 50 82 da ba 80 2d 2c d9 94 c0 04 bc bd 89 a5 b6 2e a0 10 6c 82 e2 07 4e 0e 5d 4a 7e 82 06 cf f1 d4 2d 9c 37 0a 60 57 5e ba 75 7a 9c ab ff d7 ba 80 91 e6 74 0d 07 00 1c 99 97 a0 66 ee 6a eb 02 b6 c0 7c 07 bb f2 12 f2 aa ad 0b 00 32 e5 65 5e 0e 3f bc 3c 57 b0 bd a5 75 01 7b 58 5a 17 80 49 79 b8 ef cc a4 e7 83 e1 f5 51 cb d8 9e 87 bf 5c e4 cd 43 d7 54 16 64 b0 8d d4 ef ab 1e 37 9b 81 6c 38 eb 54 23 f1 0c c4 04 62 d7 ac b5 75 1d 5b f0 30 5e cd 01 f7 1b 3c 67 69 5d c0 18 f1 f9 ee 91 a7 8e 5d 84 6b b0 ab a5 75 01 23 9d 3a 7c 4b 89 a7 4e 3d Data Ascii: g,`W^5;kK#u#^xu#06!P-,.lN]J~-7`W^uztfj\|2e^?<Wu{XZIyQ\CTd7l8T#bu[0^<gi]]ku#:\|KN=
2024-04-26 15:32:52 UTC	1398	IN	Data Raw: e6 b8 79 a8 ad 03 00 98 ac 16 0d 0d b3 54 85 50 6b f8 fb 69 24 fd 92 fe 99 fd 64 a0 5c ac 15 20 47 7c 2e e7 a9 b3 0e b0 8e 87 c2 70 4e fb c0 d2 2f d6 01 d6 f8 b4 fe 5f 01 36 c6 7b 17 80 07 7c 07 22 07 5e 36 52 59 08 df 1d 8b 3a d8 46 ce 07 2e bd c8 7d 4e 0e a0 10 7d 8c 8b 2a 84 2b 49 6f ac b3 cc 4c f3 e0 e7 6f 9e e9 38 be ec 63 f4 32 0e 07 80 2c 71 f8 26 1b 1c e4 07 80 0d a5 e6 46 8d 86 35 a3 46 34 15 00 e6 86 f5 00 e4 88 cf e5 3c 75 d6 01 d6 a9 1c 74 85 e4 e1 81 a5 c6 3a c0 1a 3c 1f 38 84 ac 3f 57 55 08 a7 6c 00 02 07 d5 58 07 98 a8 b3 0e 00 f4 31 76 1e ae 2f 13 8b e3 fb c0 61 14 c0 06 ef 2f 00 c7 f4 5e d2 99 e8 de 99 93 e6 c1 cf e3 8e e3 5d fa b1 d0 d0 e4 a0 95 d4 f5 31 76 47 4b 07 00 3e b1 b6 9e 0f 0e f2 03 7e 9c 8a 9b bc 4d 54 21 9c 49 7a a9 61 4e c0 Data Ascii: yTPki$d\ G\|.pN/_6{\|"^6RY:F.}N}*+IoLo8c2,q&F5F4<ut:<8?WUlX1v/a/^]1vGK>~MT!IzaN
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: f5 14 00 00 00 b3 97 7b 61 38 70 54 a9 3b 4b 6d 1c e3 59 14 c3 01 00 0e a8 b6 0e 00 00 00 00 00 5e f4 31 de 49 fa 59 dc bc 86 dd 9d 49 fa 58 85 f0 91 02 71 00 98 05 8a 2a 01 b8 51 85 50 8f ba 84 03 00 00 c0 01 0a c3 81 ef 35 d6 01 d6 68 ad 03 00 00 00 e0 6f 3e 59 07 00 00 00 80 8d 3e c6 65 1f e3 2b 49 97 a2 7b 38 76 d7 88 02 71 00 00 00 64 a2 0a e1 4c 74 09 07 00 00 70 87 c2 70 e0 7b bf 58 07 58 83 a2 23 00 00 00 00 00 00 e4 66 61 1d c0 5a 1f e3 95 86 ee e1 77 d6 59 50 84 46 43 81 f8 6d ba e5 12 00 00 00 38 aa 2a 84 0f 92 6e 25 9d 58 67 01 00 00 c0 66 28 0c 07 be d7 58 07 58 63 f6 9b 6c 80 24 55 21 70 2a 1d 00 80 cd d4 d6 01 00 00 40 d1 fe b2 0e 90 83 d4 3d fc b5 a4 57 92 3a e3 38 28 c3 99 a4 af 55 08 ef aa 10 28 c8 01 00 00 b0 31 ab e6 6d 55 08 27 55 08 Data Ascii: {a8pT;KmY^1IYIXqQP5ho>Y>e+I{8vqdLtpp{XX#faZwYPFCm8n%Xgf(XXcl$U!p*@=W:8(U(1mU'U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49776	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:32:51 UTC	522	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:32:52 UTC	477	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:32:52 GMT Content-Type: application/octet-stream Content-Length: 146857 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:32:52 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30R4B3BR9N:00000034 Content-Disposition: attachment; filename*=utf-8''42a9afb0-4e23-4a15-8f0a-491943de840e.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:32:52 UTC	3619	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 70 00 00 01 3f 08 06 00 00 00 c6 f5 fe 87 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec 5d 05 78 14 57 17 dd 20 c1 dd a5 14 29 14 87 10 df 18 12 dc dd 8b 3b e5 87 e2 2d 50 dc dd dd dd dd 25 68 20 78 42 42 8c b8 bb ec 66 7d e7 3f 77 76 36 4c 36 0b 04 08 da 39 df 77 33 9b 91 37 6f 9e dc 7b 9e dd 27 12 20 20 9b 61 22 12 d9 e4 13 89 1c eb 89 44 0e 93 45 22 db 9b 10 a9 48 64 c7 7c 45 d1 40 3c 21 9b 44 22 eb 2e 22 91 65 59 91 a8 55 1e 2e 7e 02 04 08 f8 cf 80 ea 7d b3 12 22 91 b8 8d 48 64 bf 1a 3a e1 19 7e 2b 38 3d f1 15 c4 9e 8e 4a bc f3 29 8e 0b 20 f6 22 51 fd 02 22 51 Data Ascii: PNGIHDRp?sRGBgAMAapHYsodIDATx^]xW );-P%h xBBf}?wv6L69w37o{' a"DE"Hd\|E@<!D"."eYU.~}"Hd:~+8=J) "Q"Q
2024-04-26 15:32:52 UTC	2936	IN	Data Raw: 28 2d 4d 41 ab db bf d8 ae 2d 3f 3a 92 92 24 cc b2 65 87 98 5f 7f ed 84 74 7b d7 90 aa 1d f9 58 ec ca 25 bc 00 01 02 7e 0e d8 77 83 18 ac 32 35 67 72 e7 b6 4b 1d 3a 74 51 b4 9f 5f 28 19 c6 1f ce 97 d2 b7 00 d2 e9 e1 81 03 97 8f d5 ae dd eb a2 48 54 df 4f a7 48 f5 46 89 84 7e b3 44 8e fc c7 6d 81 fc a4 bd 3d 4e b9 f0 6d b4 09 b7 da c4 c4 96 71 72 1a ad 91 4a e5 d9 6e 80 23 23 e3 e5 52 a9 e2 a3 57 1e 86 84 44 33 d3 a7 6f e5 7a e3 88 6c f3 f3 87 ad 07 cf 11 77 61 12 f8 17 83 93 05 d2 78 01 c4 5f 97 de 7a dd 43 f5 a5 81 a2 62 c5 4e 11 d3 a6 6d 0a 0e 0c 8c a4 79 6e ff e9 e9 1a 1f 83 f3 e7 1f 30 0e 0e a3 91 86 d4 30 31 9c 2a c0 92 b8 08 c8 a4 9f bf f1 28 40 c0 4f 0f 9a ef 66 33 59 57 a9 d9 ca 0d a1 5e 89 46 da f2 e5 db 25 ac 5b 77 22 52 2e 57 24 73 ba 41 40 16 Data Ascii: (-MA-?:$e_t{X%~w25grK:tQ_(HTOHF~Dm=NmqrJn##RWD3ozlwax_zCbNmyn001*(@Of3YW^F%[w"R.W$sA@
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: 5d 94 ff 80 40 9a 29 20 de a1 a1 51 97 e6 cd db b5 d8 c4 c4 7e 1b d2 3b 5a a7 e0 f9 ca 36 03 91 43 5e d0 10 ba 1d ca 44 ab 1f 78 27 01 5a d4 60 9b 44 bd 70 ab 57 1f e1 52 e4 eb e2 fa f5 c7 cc 2f bf 74 44 9a f2 8d 9b 03 0d 5f 6f d2 91 cc 9f 0d dd 73 e2 db 5a 42 f6 21 fd fd f0 bd da cc c4 8d 9d 8e a1 1c 3a 74 b1 1c e9 a3 8c 8b 4b 56 67 b7 7e f9 af 40 a1 50 b2 2b ae c9 5f a2 8e b0 19 d6 6b 12 9a 13 6b 15 5c a9 52 17 e5 c4 89 eb 98 e0 e0 c8 6c 4d 6b 95 4a cd 1c 3d 7a 93 a9 5c 99 e6 e6 51 39 e7 c7 81 d5 27 d4 eb bc 14 24 ae 20 57 48 04 08 10 90 7d b0 1b 01 09 d5 29 5a aa 74 d4 25 6f a3 a5 21 8d 80 80 f0 6c 5d 24 00 3d 2d 39 71 e2 56 70 c3 86 03 e3 4c 4c 68 71 42 23 2f 28 75 90 0a db e7 78 37 5a e9 fa 8a 4f 8a de 36 6a e1 c2 3d 2f 65 32 79 14 f7 f8 77 0d 72 c0 Data Ascii: ]@) Q~;Z6C^Dx'Z`DpWR/tD_osZB!:tKVg~@P+_kk\RlMkJ=z\Q9'$ WH})Zt%o!l]$=-9qVpLLhqB#/(ux7ZO6j=/e2ywr
2024-04-26 15:32:52 UTC	2894	IN	Data Raw: ff 6d c7 e9 9c 5f 13 a8 4e 5a dc f9 fd f7 9e a1 af 5e 05 44 80 90 a9 11 5f 6d 64 64 9c 36 38 38 4a e3 ef 1f c6 3c 7d fa 5a 7d f5 ea 23 c5 c9 93 2e 9a 7d fb ae 30 eb d6 1d 57 2f 5a b4 4f 39 6b d6 0e 0d d9 91 a9 53 37 33 63 c7 ae 64 06 0f 5e a8 fd e3 8f 79 ea de bd 67 69 fa f6 9d ad ee d0 61 aa ba 52 25 72 cb 42 ef d6 db 25 bd 90 bd a2 5d 81 ec 7b c1 76 e4 d7 c5 45 80 80 ff 14 ac cb a0 12 ac 41 e5 20 a7 ab 68 d1 d8 bd e6 89 b7 89 09 0d 65 92 91 b5 f5 83 f8 43 02 f0 7f 10 8e 21 38 86 41 22 71 4f 4c 8e 1c f6 71 b9 72 39 26 99 9a 3a 49 f2 e6 6d 22 cf 9f bf a9 aa 50 a1 e6 4c 85 0a 9d 99 46 8d 86 30 6d db 4e 05 f1 5b c7 4c 9b b6 99 a9 55 ab 2f cd f7 40 e5 13 23 2c 87 96 5c 44 00 5b da 20 3f 4a a7 24 a8 c2 36 92 b7 6e fd d7 4b 28 83 37 9c 4e f9 2a a0 b9 3a c7 8f Data Ascii: m_NZ^D_mdd688J<}Z}#.}0W/ZO9kS73cd^ygiaR%rB%]{vEA heC!8A"qOLqr9&:Im"PLF0mN[LU/@#,\D[ ?J$6nK(7N*:
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: 8c 19 5b 99 26 4d fe 64 0a 15 6a 81 30 a8 cc 50 1d b1 4c c6 6f e8 39 db 8b 08 8b 1c 58 0f c7 d1 01 47 ce 49 af 00 01 02 04 7c 71 38 55 84 e2 e9 00 65 34 17 ca e8 0c 94 d3 6b 91 c8 5c 45 8a aa 74 e9 b6 4c ef de b3 d3 f6 ec b9 90 ea ef 1f 9a 9a 9a 9a 26 07 11 63 74 6e 42 58 f2 e6 8e 67 78 be e8 68 98 8d 1d 8e c2 35 12 2b 72 dd 10 b2 62 c5 61 81 bc 7d a7 40 be 24 43 2e 5d bb f6 78 57 8f 1e b3 4e 94 28 d1 da 45 24 aa 0f 32 d3 08 84 3e 9d dc f0 84 fe d7 13 1c 6b 94 85 a6 da 8d 1b 8f a7 cf a7 a4 a3 fe f7 f7 0a 72 90 9d 79 45 2a ff bb f4 e7 a8 8c d3 36 5c 96 8a 4a 95 3a cb 3a 76 9c 9a b6 7e fd 71 49 40 40 b8 04 df 28 f4 b6 7d a7 b8 73 e7 05 63 66 36 88 f2 0d c2 27 71 ec c2 81 9d d0 79 45 75 fa 8a dc 6c d8 1e a6 7c 36 31 11 1f 7a fc d8 6b 59 5c 5c 62 d4 ed db 2f Data Ascii: [&Mdj0PLo9XGI\|q8Ue4k\EtL&ctnBXgxh5+rba}@$C.]xWN(E$2>kryE*6\J::v~qI@@(}scf6'qyEul\|61zkY\\b/
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: 25 21 97 2b 99 79 f3 76 23 9d 1a 24 fc f9 e7 aa 17 48 a3 af e6 f6 85 de bd 71 e3 a9 b4 9b 37 1f df d4 68 34 5f 6d 0b 27 7c 23 d3 b7 ef 1c 7c b3 b9 e2 f2 e5 87 0f 70 ea 87 f4 e7 f6 25 e1 e9 19 c4 fa c7 e3 ea 27 24 9d c4 a9 51 bf 0e e0 7c 65 90 ac 96 10 7f fc 4e c9 99 d3 7e 35 9e e9 87 b4 f5 e2 82 30 0a da 9b 95 76 b8 68 dd 7a 12 b7 8b 08 cd 73 a3 f0 d9 b0 15 08 fb 28 8e a8 c3 4e 45 39 85 21 40 80 00 01 02 be 23 98 40 51 57 83 a2 9e 8a 23 b7 d0 c1 8a dc 19 a8 6a d7 ee 93 bc 66 cd 91 c8 94 14 49 0a 8c 41 a6 85 0e f1 f1 c9 cc c8 91 cb 99 3c 79 1a 73 8a 9f 5c 83 88 b7 8b 44 ce 20 86 0e 2d 10 56 c0 5b f2 66 a9 2c 5f be fd a3 fb f7 3d 2e 21 a8 1f 62 ab af af 0d 72 6c 4b 5b 45 15 29 d2 3c 06 e9 f4 55 fd 7c 51 2f aa b3 f3 ff d2 3a 74 98 7a 09 86 fd ab fa 0b 3c 7a Data Ascii: %!+yv#$Hq7h4_m'\|#\|p%'$Q\|eN~50vhzs(NE9!@#@QW#jfIA<ys\D -V[f,_=.!brlK[E)<U\|Q/:tz<z
2024-04-26 15:32:52 UTC	1594	IN	Data Raw: ef 07 62 0b c8 6b 28 6a 28 7a 5b 7f fc 3e 85 e3 54 fc 6f af f3 e5 f6 3e 74 c7 75 9b f9 a6 a6 4e 92 d1 a3 97 3e 59 bb f6 98 7a e0 c0 05 cc ef bf d3 e4 75 32 3a e6 34 c9 1a c6 c3 a6 15 f7 00 07 71 43 c8 4b 1d 89 6b 98 32 6c d8 d2 a7 f3 e7 ef 0e c9 93 a7 31 63 6d 3d ec 91 ab ab 87 c7 c9 93 77 98 41 83 16 92 a7 79 18 37 71 64 cf 9e b3 82 9e 3c f1 a1 ad a0 3e e8 8e 22 38 38 52 5b be 7c 47 59 be 7c 4d 2f 47 44 c4 4e da b1 e3 ec a0 02 05 9c 7b db db 8f 1c 77 ea 94 cb a5 e4 64 49 28 77 6b 96 71 f2 e4 6d a6 67 cf e9 a9 73 e6 ec 8c 02 c9 88 45 3c be c8 b0 24 6d 8f b4 64 c9 41 a4 4b 8d 57 33 67 6e 5b 8c f7 fc 27 e6 8d 2d 5d 7a 80 41 39 52 6e dc 78 82 1c 0a 27 70 a7 b3 15 cf 9e f9 32 2b 57 1e 67 7a f7 9e 9d b0 7b f7 85 ed 78 cf 23 ee 52 96 10 1b 9b c4 6c db 76 96 71 Data Ascii: bk(j(z[>To>tuN>Yzu2:4qCKk2l1cm=wAy7qd<>"88R[\|GY\|M/GDN{wdI(wkqmgsE<$mdAKW3gn['-]zA9Rnx'p2+Wgz{x#Rlvq
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: 38 38 92 69 da f4 7f 88 5b 1d 66 f1 e2 03 8c bf 7f 38 b3 7b f7 45 a6 63 c7 a9 44 26 71 be 5e 12 e2 14 74 e7 ce 0b 5a 81 99 e5 f9 71 09 09 c9 da 6d db ce aa 66 cc d8 aa 5a b8 70 8f 6a d1 a2 bd aa 65 cb 0e a8 86 0e 5d 04 83 ab 9f ef 64 19 62 6f 3f ea 2a ce 6b 71 8f 1a 64 51 f5 f7 df 5b 54 87 0f df 48 93 48 a4 9f bc e2 f1 5b 21 35 35 8d 39 78 f0 8a e6 9f 7f 36 ab e6 cf df c5 7e f3 d2 a5 fb 55 43 86 2c 52 14 2d da 02 44 81 48 8b b5 aa 5b b7 19 7e 8b 16 ed 93 2c 5e bc 57 b3 60 c1 1e f5 ac 59 db b4 1b 37 9e 8c 42 9a 45 23 8d b3 44 5c a9 ac f4 ec 39 9b b6 70 4b 43 1e 5d 1e 3f 7e f5 66 3c 7f 14 8f fb d1 f5 e4 64 69 cc 96 2d a7 7b 81 a8 2c c4 b9 77 a6 25 d2 9a a9 5a b5 07 e2 d5 00 61 d9 31 fd fb cf 65 dc dc 5e 73 57 df 22 29 29 0d e5 ae 7f 48 d7 ae 33 9b 21 3c 1f Data Ascii: 88i[f8{EcD&q^tZqmfZpje]dbo?*kqdQ[THH[!559x6~UC,R-DH[~,^W`Y7BE#D\9pKC]?~f<di-{,w%Za1e^sW"))H3!<
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: bc 78 eb 17 15 2a b4 97 55 ab d6 43 03 e5 0a 02 c7 ba 26 70 41 18 95 75 cf 8a 0a 81 00 4e 76 76 1e 1f b2 60 c1 5e b6 05 7f eb d6 b3 28 67 e7 71 37 a1 88 a3 f2 e7 6f ca 58 5a 0e d5 ea dc 81 88 f1 3c 2d 44 b0 46 eb da a2 2e c2 aa 8d 38 38 e3 f7 69 18 9f c0 45 8b f6 3f 92 cb 55 64 10 93 64 32 85 62 d1 a2 bd 0a bc 3f b5 6a d5 2e 51 7f ff bd 39 61 fc f8 35 aa bc 79 c9 21 aa 0d ed fa 40 cf 57 05 29 2c ab eb d5 ab 31 c4 d1 71 ec ad 57 af 02 32 10 9f 87 0f 3d 61 10 47 a6 34 6b 36 3e e0 c9 13 ef 10 7c 1b db 93 46 3e ba 10 b6 b6 7d fb a9 9e b7 6e 3d f7 4c 4c 4c 89 06 69 8c 28 5c b8 b9 66 eb d6 b7 8b 01 71 bf 36 25 45 e2 07 82 b6 0f e9 23 a1 ff b9 4b 7a 24 ed d9 73 e9 6a be 7c 96 b3 c3 c3 63 f7 d0 89 ed db cf 21 8e 75 99 01 03 e6 d3 b0 30 7b 13 01 64 50 b9 6a d5 d1 Data Ascii: x*UC&pAuNvv`^(gq7oXZ<-DF.88iE?Udd2b?j.Q9a5y!@W),1qW2=aG4k6>\|F>}n=LLLi(\fq6%E#Kz$sj\|c!u0{dPj
2024-04-26 15:32:52 UTC	4096	IN	Data Raw: b0 4c eb d6 13 92 7e ff bd f7 ca 94 94 d4 b3 b4 aa b6 76 9d 7e 88 ac 99 fb ae bc cd 77 6a 0b 75 da be d9 b4 c5 8d b2 26 76 c9 8d 9d c7 33 cf 5f fa 53 6f 25 f5 b6 26 40 67 45 c5 c4 24 c4 d0 ce 2c 94 0f 68 04 79 56 ac d8 f9 04 ea e7 49 e8 bb dc 5c 44 05 08 10 20 e0 47 46 c5 7c 26 26 e2 fb 20 3d 6c 6f 00 81 7a e1 08 64 8c 20 61 b7 6e 3d bb 6e 69 39 e4 4e ae 5c 76 67 a0 00 39 77 01 b6 96 30 2a d1 f8 df 7f fb f6 b3 b4 c7 67 ea 96 2d 67 22 41 7c 76 44 47 27 5c c7 ff f2 1d 3b ce cb f2 e4 61 97 f9 8f d6 3d 63 b9 87 dc 83 c0 28 92 bf 36 76 be d1 b9 73 f7 14 20 4a a9 68 71 a7 f9 fa 06 b3 bd 4f 61 61 b1 aa ea d5 7b ca 61 08 e6 be 75 0c 6a 6d 0d 21 a2 f5 68 d3 a6 e3 53 70 df 63 08 bb 12 f0 f0 e1 9b 4c ed da 7d 24 bd 7b cf f2 73 71 79 16 9d 9c 2c 95 6a 34 1a d5 f4 e9 Data Ascii: L~v~wju&v3_So%&@gE$,hyVI\D GF\|&& =lozd an=ni9N\vg9w0*g-g"A\|vDG'\;a=c(6vs JhqOaa{aujm!hSpcL}${sqy,j4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49788	162.247.243.39	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:20 UTC	576	OUT	GET /nr-full-1.257.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://eng2e.seismic.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:20 UTC	978	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93461 x-amz-id-2: Qe5WBIiYVYiy3D734LHgTbxzIvhVOjKPgQONlXuZR6RbtR/tIcbilH4JMfMEra9jDLjGrGeqrTM= x-amz-request-id: A5WH5K96D18CZ8A9 Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Access-Control-Allow-Credentials: true Last-Modified: Fri, 19 Apr 2024 00:43:41 GMT ETag: "8cb0c39d4018510e98809063ac2ff1c7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: 2BhrAM2qEpGRR38b5iNE7vLs2.jNQq1S Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Fri, 26 Apr 2024 15:33:20 GMT Via: 1.1 varnish X-Served-By: cache-mia-kmia1760073-MIA X-Cache: MISS X-Cache-Hits: 0 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 66 75 6c 6c 2d 31 2e 32 35 37 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 37 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 35 37 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 5d 2c 7b 39 31 33 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 6c 65 74 20 73 3b 69 2e 64 28 74 2c 7b 6d 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 72 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 65 3d 3e 7b 73 3d 65 7d 29 29 Data Ascii: /! For license information please see nr-full-1.257.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.257.0.PROD"]=self["webpackChunk:NRBA-1.257.0.PROD"]\|\|[]).push([[63],{9139:(e,t,i)=>{let s;i.d(t,{m:()=>n});const r=new Promise((e=>{s=e}))
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 64 7d 29 2c 21 69 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 21 65 3f 2e 75 6e 6c 6f 61 64 26 26 69 3d 3d 3d 73 2e 42 65 3b 69 66 28 72 3d 74 68 69 73 2e 6f 70 74 73 2e 67 65 74 50 61 79 6c 6f 61 64 28 7b 72 65 74 72 79 3a 74 2c 6f 70 74 73 3a 65 7d 29 2c 21 72 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 29 29 3b 72 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 3f 72 3a 5b 72 5d 2c 6e 2e 70 75 73 68 28 2e 2e 2e 72 29 7d 6c 65 74 20 61 3d 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 65 29 3b 6e 2e 6c 65 6e 67 74 68 Data Ascii: d}),!i)return!1;const t=!e?.unload&&i===s.Be;if(r=this.opts.getPayload({retry:t,opts:e}),!r)return void(this.started&&this.scheduleHarvest());r="[object Array]"===Object.prototype.toString.call(r)?r:[r],n.push(...r)}let a=e=>this.harvest.sendX(e);n.length
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 74 65 78 74 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2c 22 68 61 72 76 65 73 74 2e 74 6f 6f 4d 61 6e 79 52 65 71 75 65 73 74 73 44 65 6c 61 79 22 29 7c 7c 36 30 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 6f 72 3d 6e 65 77 20 75 2e 52 52 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 7d 73 65 6e 64 58 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 74 20 74 3d 6e 2e 71 44 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 65 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 7d 29 2c 69 3d 7b 72 65 74 72 79 3a 21 65 2e 6f 70 74 73 3f 2e 75 Data Ascii: text.agentIdentifier,"harvest.tooManyRequestsDelay")\|\|60,this.obfuscator=new u.RR(this.sharedContext),this._events={}}sendX(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};const t=n.qD({isFinalHarvest:e.opts?.unload}),i={retry:!e.opts?.u
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 28 74 29 3a 22 22 3b 6c 65 74 20 52 3d 22 22 2e 63 6f 6e 63 61 74 28 77 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 41 29 2e 63 6f 6e 63 61 74 28 49 2c 22 2f 31 2f 22 29 2e 63 6f 6e 63 61 74 28 67 2e 6c 69 63 65 6e 73 65 4b 65 79 29 3b 64 26 26 28 52 3d 64 29 2c 6c 26 26 28 52 3d 22 22 2e 63 6f 6e 63 61 74 28 77 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 41 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 3b 63 6f 6e 73 74 20 45 3d 21 6c 26 26 66 3f 74 68 69 73 2e 62 61 73 65 51 75 65 72 79 53 74 72 69 6e 67 28 54 2c 74 29 3a 22 22 3b 6c 65 74 20 50 3d 28 30 2c 73 2e 6a 36 29 28 54 2c 79 2e 6d 61 78 42 79 74 65 73 29 3b 63 7c 7c 28 63 3d 6e 2e 71 44 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 61 2e 75 6e 6c 6f 61 64 7d 29 29 2c 22 22 3d 3d 3d 45 Data Ascii: (t):"";let R="".concat(w,"://").concat(A).concat(I,"/1/").concat(g.licenseKey);d&&(R=d),l&&(R="".concat(w,"://").concat(A,"/").concat(t));const E=!l&&f?this.baseQueryString(T,t):"";let P=(0,s.j6)(T,y.maxBytes);c\|\|(c=n.qD({isFinalHarvest:a.unload})),""===E
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 6c 64 4f 62 66 75 73 63 61 74 65 28 29 3f 74 68 69 73 2e 6f 62 66 75 73 63 61 74 6f 72 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 6e 29 3a 6e 2c 75 3d 31 3d 3d 3d 69 3f 2e 73 65 73 73 69 6f 6e 3f 2e 73 74 61 74 65 2e 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 4d 6f 64 65 26 26 22 6a 73 65 72 72 6f 72 73 22 21 3d 3d 74 2c 64 3d 5b 22 61 3d 22 2b 72 2e 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 2c 28 30 2c 73 2e 77 75 29 28 22 73 61 22 2c 72 2e 73 61 3f 22 22 2b 72 2e 73 61 3a 22 22 29 2c 28 30 2c 73 2e 77 75 29 28 22 76 22 2c 66 2e 71 34 29 2c 62 28 72 29 2c 28 30 2c 73 2e 77 75 29 28 22 63 74 22 2c 69 2e 63 75 73 74 6f 6d 54 72 61 6e 73 61 63 74 69 6f 6e 29 2c 22 26 72 73 74 3d 22 2b 28 30 2c 67 2e 7a 29 28 29 2c 22 26 63 6b 3d 30 22 2c 22 26 73 3d 22 2b Data Ascii: ldObfuscate()?this.obfuscator.obfuscateString(n):n,u=1===i?.session?.state.sessionReplayMode&&"jserrors"!==t,d=["a="+r.applicationID,(0,s.wu)("sa",r.sa?""+r.sa:""),(0,s.wu)("v",f.q4),b(r),(0,s.wu)("ct",i.customTransaction),"&rst="+(0,g.z)(),"&ck=0","&s="+
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 72 6e 20 65 7c 7c 30 3d 3d 3d 65 7c 7c 22 22 3d 3d 3d 65 3f 74 28 65 29 2b 28 69 3f 22 2c 22 3a 22 22 29 3a 22 21 22 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 3a 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 30 3d 3d 3d 65 3f 22 22 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 72 65 61 74 65 22 29 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3a 7b 7d 2c 69 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 73 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 22 22 Data Ascii: rn e\|\|0===e\|\|""===e?t(e)+(i?",":""):"!"}function h(e,t){return t?Math.floor(e).toString(36):void 0===e\|\|0===e?"":Math.floor(e).toString(36)}function u(e){var t=Object.hasOwnProperty("create")?Object.create(null):{},i=0;return function(s){if(void 0===s\|\|""
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 75 2b 73 5d 2c 69 2c 22 72 70 22 2c 66 29 2c 67 28 74 5b 75 2b 72 5d 2c 69 2c 22 72 70 65 22 2c 66 29 2c 67 28 74 2e 64 6f 6d 4c 6f 61 64 69 6e 67 2c 69 2c 22 64 6c 22 2c 66 29 2c 67 28 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 2c 69 2c 22 64 69 22 2c 66 29 2c 67 28 74 5b 6c 2b 73 5d 2c 69 2c 22 64 73 22 2c 66 29 2c 67 28 74 5b 6c 2b 72 5d 2c 69 2c 22 64 65 22 2c 66 29 2c 67 28 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 2c 69 2c 22 64 63 22 2c 66 29 2c 67 28 74 5b 64 2b 73 5d 2c 69 2c 22 6c 22 2c 66 29 2c 67 28 74 5b 64 2b 72 5d 2c 69 2c 22 6c 65 22 2c 66 29 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 20 67 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 28 69 3d 65 2e 74 79 70 65 29 3f 69 3a 7b 6e 61 Data Ascii: u+s],i,"rp",f),g(t[u+r],i,"rpe",f),g(t.domLoading,i,"dl",f),g(t.domInteractive,i,"di",f),g(t[l+s],i,"ds",f),g(t[l+r],i,"de",f),g(t.domComplete,i,"dc",f),g(t[d+s],i,"l",f),g(t[d+r],i,"le",f),i}function m(e,t){var i;return g("number"==typeof(i=e.type)?i:{na
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 72 72 61 79 28 73 29 26 26 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 69 2b 3d 39 2c 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 26 26 28 61 3d 68 28 28 30 2c 72 2e 50 29 28 73 5b 6f 5d 29 29 2c 69 2b 3d 61 2e 6c 65 6e 67 74 68 2c 21 28 76 6f 69 64 20 30 21 3d 3d 74 26 26 69 3e 3d 74 29 29 3b 6f 2b 2b 29 63 2e 70 75 73 68 28 61 29 3b 6e 2b 3d 22 26 22 2b 65 2b 22 3d 25 35 42 22 2b 63 2e 6a 6f 69 6e 28 22 2c 22 29 2b 22 25 35 44 22 7d 7d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 6c 65 74 20 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 29 2e 69 6e Data Ascii: rray(s)&&s.length){for(i+=9,o=0;o<s.length&&(a=h((0,r.P)(s[o])),i+=a.length,!(void 0!==t&&i>=t));o++)c.push(a);n+="&"+e+"=%5B"+c.join(",")+"%5D"}})),n}function d(e,t){let i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{};return Object.keys(i).in
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 72 65 70 6c 61 63 65 6d 65 6e 74 20 72 75 6c 65 20 63 6f 6e 74 61 69 6e 73 20 61 20 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 20 76 61 6c 75 65 20 77 69 74 68 20 61 6e 20 69 6e 76 61 6c 69 64 20 74 79 70 65 20 28 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 29 27 29 2c 74 3d 21 30 29 7d 72 65 74 75 72 6e 21 74 26 26 21 69 7d 7d 2c 34 32 34 37 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 42 65 3a 28 29 3d 3e 6e 2c 71 44 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 73 3d 69 28 33 38 35 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 6c 65 74 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 65 3d 21 31 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 Data Ascii: replacement rule contains a "replacement" value with an invalid type (must be a string)'),t=!0)}return!t&&!i}},4247:(e,t,i)=>{i.d(t,{Be:()=>n,qD:()=>r});var s=i(385);function r(){let{isFinalHarvest:e=!1}=arguments.length>0&&void 0!==arguments[0]?arguments
2024-04-26 15:33:20 UTC	1378	IN	Data Raw: 6c 6f 61 64 53 74 61 74 65 3a 69 2e 6c 6f 61 64 53 74 61 74 65 7d 3b 61 2e 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 74 2c 61 74 74 72 73 3a 73 7d 29 7d 29 29 7d 2c 38 33 37 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 55 3a 28 29 3d 3e 6e 7d 29 3b 76 61 72 20 73 3d 69 28 33 38 35 29 2c 72 3d 69 28 38 31 35 38 29 3b 63 6f 6e 73 74 20 6e 3d 6e 65 77 28 69 28 32 30 39 34 29 2e 55 29 28 72 2e 53 2e 46 49 52 53 54 5f 50 41 49 4e 54 29 3b 69 66 28 73 2e 69 6c 29 7b 63 6f 6e 73 74 20 65 3d 65 3d 3e 7b 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 22 66 69 72 73 74 2d 70 61 69 6e 74 22 21 3d 3d 65 2e 6e 61 6d 65 7c 7c 6e 2e 69 73 56 61 6c 69 64 7c 7c 28 74 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 6e 2e 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 65 2e Data Ascii: loadState:i.loadState};a.update({value:t,attrs:s})}))},8373:(e,t,i)=>{i.d(t,{U:()=>n});var s=i(385),r=i(8158);const n=new(i(2094).U)(r.S.FIRST_PAINT);if(s.il){const e=e=>{e.forEach((e=>{"first-paint"!==e.name\|\|n.isValid\|\|(t.disconnect(),n.update({value:e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49794	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:21 UTC	1126	OUT	POST /1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://eng2e.seismic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:21 UTC	446	IN	HTTP/1.1 200 Connection: close Content-Length: 148 date: Fri, 26 Apr 2024 15:33:21 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://eng2e.seismic.com access-control-expose-headers: Date timing-allow-origin: https://eng2e.seismic.com x-served-by: cache-mia-kmia1760048-MIA
2024-04-26 15:33:21 UTC	148	IN	Data Raw: 7b 22 73 74 6e 22 3a 30 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 30 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4e 44 63 79 4d 54 51 7a 66 45 4a 53 54 31 64 54 52 56 4a 38 51 56 42 51 54 45 6c 44 51 56 52 4a 54 30 35 38 4f 54 4d 33 4f 44 51 7a 4d 54 45 34 22 7d 5d 7d 7d Data Ascii: {"stn":0,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":0,"sts":0,"app":{"agents":[{"entityGuid":"NDcyMTQzfEJST1dTRVJ8QVBQTElDQVRJT058OTM3ODQzMTE4"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49800	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:23 UTC	783	OUT	POST /ins/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=48518&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 501 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://eng2e.seismic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:23 UTC	501	OUT	Data Raw: 7b 22 69 6e 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 34 31 34 35 36 30 30 39 34 35 2c 22 74 69 6d 65 53 69 6e 63 65 4c 6f 61 64 22 3a 34 38 2e 31 31 31 2c 22 62 72 6f 77 73 65 72 57 69 64 74 68 22 3a 31 32 38 30 2c 22 62 72 6f 77 73 65 72 48 65 69 67 68 74 22 3a 39 30 37 2c 22 63 75 72 72 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 67 32 65 2e 73 65 69 73 6d 69 63 2e 63 6f 6d 2f 6c 73 2f 62 38 31 37 64 38 30 63 2d 65 39 34 32 2d 34 30 62 30 2d 38 36 39 38 2d 32 65 30 35 38 62 33 37 35 65 62 38 2f 4b 65 4b 53 70 35 76 39 5f 72 72 35 35 56 36 30 22 2c 22 70 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6e 67 32 65 2e 73 65 69 73 6d 69 63 2e 63 6f 6d 2f 6c 73 2f 62 38 31 37 64 38 30 63 2d 65 39 34 32 2d 34 30 62 30 2d Data Ascii: {"ins":[{"timestamp":1714145600945,"timeSinceLoad":48.111,"browserWidth":1280,"browserHeight":907,"currentUrl":"https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60","pageUrl":"https://eng2e.seismic.com/ls/b817d80c-e942-40b0-
2024-04-26 15:33:24 UTC	270	IN	HTTP/1.1 204 Connection: close date: Fri, 26 Apr 2024 15:33:23 GMT access-control-allow-origin: https://eng2e.seismic.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760089-MIA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49803	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:24 UTC	801	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:24 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:24 GMT Content-Type: application/octet-stream Content-Length: 25533 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:24 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30VGEQ1UBT:00000021 Content-Disposition: attachment; filename*=utf-8''93b6e874-5233-482c-8362-ef68a6f3547b.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:24 UTC	3620	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 82 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: a8 96 98 ad b2 e3 fb ec 4f f0 e2 b4 e5 8c 1b 89 72 3a b1 ac 8b 8b 3b d4 2d b5 c1 42 73 bb 3c e2 b4 a7 63 9a 6c cd d4 a4 8e 49 17 62 90 ca 31 93 dc 55 41 2b 84 da 18 80 6a 69 91 e4 93 95 c3 1e 29 ab 0b 2b 60 f1 5d 49 68 72 bb dc b9 6b a7 3d cc 3e 63 3e cf 41 8e b5 af 04 2b 04 41 17 b5 47 6c e3 ca 50 14 80 06 39 a9 f7 0a e7 9c 9b 37 84 52 d4 70 3d aa 45 62 38 a6 2e 0d 3c 01 9e 95 99 a9 6a 37 f5 ab 91 b1 ac f4 cf 6a bb 17 4a 96 86 8b a8 79 ab d0 b1 e3 15 9d 1b 74 ab b0 1c 8a 82 93 34 42 07 5c 1e f5 8f 7d 64 cb b8 95 24 13 c1 ad 98 4d 5a 65 56 8c 96 50 40 f5 a8 bd 8a 6a e7 0b 2d bb 26 72 2a a3 f0 6b a5 be 64 91 5f 2b 8c 76 02 b9 b9 d8 02 78 ad 11 9b 44 6a d8 35 32 c9 55 59 e9 be 65 31 1a 02 6c 54 8b 3d 66 79 b8 a7 2c b9 a0 0d 55 9b 9e 2a 78 f2 c4 13 59 b1 b8 Data Ascii: Or:;-Bs<clIb1UA+ji)+`]Ihrk=>c>A+AGlP97Rp=Eb8.<j7jJyt4B\}d$MZeVP@j-&rkd_+vxDj52UYe1lT=fy,UxY
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: e0 b0 b5 5c 45 12 e3 3d d8 f7 27 dc 9a bd 58 57 a8 a7 2f 77 65 a2 35 a7 1e 55 ae e1 45 14 56 25 85 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 1f 3e dd ff 00 c7 ec df ef 9a 8b 02 a4 bb ff 00 8f c9 bf df 35 1a d7 b6 b6 3c 96 38 2d 2e da 05 3a 98 86 ed a7 74 a2 8a 00 95 5c 81 c5 59 82 f6 48 f8 27 2b ef 54 a9 c0 f1 50 e2 9a 29 3b 1a df 6e 62 9b 8a 90 3e b5 11 bd dc 7b e2 a8 ee 38 eb f8 52 74 a8 74 d1 5e d1 97 64 9e 4d 9c 31 0a 7b 54 0f b9 d7 3b 89 a8 fc cf 97 19 cd 39 d9 7e ce d9 6c 6e 05 40 ee 4e 3f c3 35 9c a3 63 48 cb 99 d8 6a af 98 a0 8e 41 19 a0 c7 c5 49 06 05 bc 7e 9b 47 f2 a4 90 e6 a4 ab 90 f0 b4 fd e3 d6 a1 90 81 de a2 df 8f 5a 56 1d cb 0d 2e 0f 15 1b 49 9a 8f 70 a4 24 1e 9c d1 60 b8 33 d4 Data Ascii: \E='XW/we5UEV%Q@Q@Q@Q@Q@Q@Q@Q@Q@>5<8-.:t\YH'+TP);nb>{8Rtt^dM1{T;9~ln@N?5cHjAI~GZV.Ip$`3
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: eb c5 1a 61 d5 6d e7 63 13 a4 1b 82 c8 b9 de 43 0e 46 0f 1f ad 00 68 5a 4b 3d ee ad 77 a7 4d a9 5f 89 6d 80 2e 52 35 8d 0e 7a 60 8c 9a 87 4a 82 3d 5e 2b ff 00 3a ca 61 71 6d 2b 42 ab 73 70 f2 06 60 32 09 e4 71 9a c9 5f 18 c6 b7 57 17 24 07 79 13 62 b4 51 6d c6 0f 04 f2 73 8a ac be 2b 99 63 9a 34 8e 67 92 76 0c d2 e4 23 67 db 6e 29 01 d2 e9 50 cd 77 e1 99 66 8e d6 d6 d3 50 22 40 9e 54 23 e5 65 38 03 9f a5 69 f8 7d ee e5 d0 ed 4d eb 97 b9 2b fb d2 46 39 c9 ed 5c 14 ba dd fc 96 df 65 36 c8 63 2d bf f7 af b8 e7 dc 92 6a c5 a5 c7 89 66 b6 55 b2 47 58 01 21 44 40 85 f7 e9 8a 35 0b 9e 91 9c 70 01 3f 41 57 e3 27 81 83 cd 79 84 7a 17 89 6e 98 3c ae c8 73 d5 db ff 00 af 52 b9 d5 34 eb 87 45 9a 54 64 38 2c 32 01 fa 55 44 4c ea 7c 5f 3d e5 96 92 d3 59 42 8f 37 9c a3 Data Ascii: amcCFhZK=wM_m.R5z`J=^+:aqm+Bsp`2q_W$ybQms+c4gv#gn)PwfP"@T#e8i}M+F9\e6c-jfUGX!D@5p?AW'yzn<sR4ETd8,2UDL\|_=YB7
2024-04-26 15:33:24 UTC	42	IN	Data Raw: bc 97 11 de a5 9b 05 29 30 00 b2 c8 a1 64 60 0f 42 39 23 dc 8a ba 6c 75 2d 99 c5 cb 33 cd 71 e6 2b 4f 90 63 2a e2 3e 09 c6 39 Data Ascii: )0d`B9#lu-3q+Oc*>9
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 5f f2 2a b9 2d f6 85 7f 23 4d ad b4 80 b6 b7 8f 0d a8 11 85 5b 79 4a 81 b4 1f ba 14 fb f1 8a 92 75 d3 ae ae d2 19 d6 19 2e 10 1d aa d8 2c 07 71 fc b8 aa 73 da 5c 37 87 2d 6d 56 06 33 a0 83 72 64 71 b5 94 b7 7c 76 35 53 52 d0 ee 2e 67 b8 fb 3b 38 89 8c 93 90 c4 0c ca d1 18 c0 53 d4 0e 72 73 52 92 6f 56 17 6b 64 6d 5b ad 93 5d 5c 4b 02 c6 6e 01 09 33 a8 f9 b2 06 40 27 e8 7f 5a 49 2c 34 f4 66 b9 92 de 05 21 8c ad 21 50 30 71 82 d9 f5 c7 7a c3 b6 b5 bf b3 bc 17 42 de e1 63 0f 99 23 f3 41 0c 82 00 31 8d d8 ce f5 ff 00 22 ba 07 95 9a c4 ca b6 cf 23 18 f7 08 4e 03 13 8c ed e7 8c d2 92 b3 d1 8d 3b ee 67 c6 ba 03 47 6b 75 1a 59 14 88 94 b7 90 05 f9 3d 40 f4 e7 f2 ab 32 36 9b a8 ce d6 72 34 13 4d 0f ce 63 24 16 4f 7f 51 58 92 e9 77 93 24 b2 ad 9b a4 93 c1 71 13 a3 Data Ascii: _*-#M[yJu.,qs\7-mV3rdq\|v5SR.g;8SrsRoVkdm[]\Kn3@'ZI,4f!!P0qzBc#A1"#N;gGkuY=@26r4Mc$OQXw$q
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 2c bc 70 a6 aa ad ac e1 01 31 e0 63 ab 30 1f d6 ba 5d 3a 0d 3e ce eb cf 99 61 93 08 cb fb bb 81 9e 46 3b 8f 42 6a a0 b3 8f 90 1a dd 97 f8 47 07 03 fe fb 14 b9 45 ed 59 85 13 e9 91 dc 2b 6a 37 f6 f6 f0 74 76 0d 96 23 d0 60 1a d4 d2 84 da a1 be 6d 32 d9 61 b6 30 95 b6 d8 bb a7 7c b0 01 f7 1c 90 71 9e 06 2a e4 3a 74 45 f3 e4 db 71 df cb 8b ff 00 66 73 5b 96 51 25 bd a5 ce 6e dd 24 65 02 31 1c d0 a0 e0 e7 f8 4f 1e 9d e8 e5 25 cd bd 59 cf db f8 7e da de 6f 32 e4 19 6e 41 e5 e6 7d cd f4 3b ab 7a 1b 99 63 01 62 7d 80 76 52 3f c6 a0 22 6c 73 e5 b1 f5 37 b9 ff 00 d0 54 53 15 67 3c 91 00 19 ee f2 bf f5 aa b1 37 3a 0b 6b 9b a9 2d 8a 2c db 64 2a cc 3c c5 fb dc e3 83 d8 d4 97 ef 76 9a 14 4f 63 99 6e 19 43 5c 73 b9 d0 63 82 07 a7 a9 ac 79 d1 3e c9 6a 15 e2 91 c0 60 c8 Data Ascii: ,p1c0]:>aF;BjGEY+j7tv#`m2a0\|q:tEqfs[Q%n$e1O%Y~o2nA};zcb}vR?"ls7TSg<7:k-,d<vOcnC\scy>j`
2024-04-26 15:33:24 UTC	1391	IN	Data Raw: dd d8 fb 93 5d 34 a4 a9 d3 73 bf bc f4 5e 4b ab f5 7d 3c 8c e4 9c a5 cb d1 1a 14 51 45 73 9a 01 ac 1b 9d 1e e2 58 f5 2b 55 28 62 be 94 48 65 27 e6 8f 85 04 63 bf dd e3 eb 5b d4 53 8c 9c 76 13 57 39 97 d1 f5 30 d2 34 72 02 ae cc 5e 33 70 c3 cc 1e 63 10 33 83 b7 0a c3 f2 c5 25 c6 83 77 20 9d 61 61 1a cd 13 24 81 a5 2e b2 9d 9b 55 88 23 21 f3 8c b0 ea 07 39 ae 9e 8a bf 69 2b dc 5c 88 e6 ce 8f 7c 5c b0 38 57 9d 8b c6 2e 58 61 08 1b 48 38 e0 a9 cf 1e f4 df ec 7d 4e 49 24 f3 5d 36 33 16 da b3 bf f7 64 1e 9e ac 87 f0 ae 9a 8a 3d ac 83 91 18 96 b6 37 d0 59 5c c0 5c 17 94 a6 d6 32 16 db f2 2a b9 19 1d 72 18 8f ad 57 5d 22 fa dd 3e cd 17 96 f6 4b 3b 32 46 64 31 9d 8c 39 1f 28 e3 6b 64 8f 63 db 15 d1 d1 4b 9d 87 2a 39 e1 a6 6a 3d 64 28 e4 4a 7c cc 4c c3 cf 43 bb 19 Data Ascii: ]4s^K}<QEsX+U(bHe'c[SvW904r^3pc3%w aa$.U#!9i+\\|\8W.XaH8}NI$]63d=7Y\\2rW]">K;2Fd19(kdcK9j=d(J\|LC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49805	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:24 UTC	791	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:24 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:24 GMT Content-Type: application/octet-stream Content-Length: 39734 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:24 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30VGEQ1UBU:00000011 Content-Disposition: attachment; filename*=utf-8''2acae5d3-2811-4025-aea0-7972a7f5879b.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:24 UTC	3620	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 f4 01 82 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 6c dc d2 11 be 52 a7 39 6c 71 9e df 40 3a d7 47 0e 83 a5 dc 78 e7 45 48 6d c9 d1 b5 58 d6 78 a2 2e 7e 51 b4 ee 42 7a e4 30 ae 31 b8 76 03 a0 62 05 54 1c 24 f4 26 6a 4b 73 47 fb 66 79 2f 64 96 e9 e6 b8 86 51 22 34 6f 21 c8 47 eb 82 7a 1e 9f 95 49 6b aa 5b e9 f2 41 f6 48 a6 28 93 09 9d a5 65 dc cc 14 aa 81 8e 00 1b 89 f7 ad bf 0c 68 5a 5d d6 92 ad aa ab 7d a3 54 9d ad 34 f7 dc 40 8d 95 49 de 7d 46 ed ab 55 b4 cd 2a d6 c7 47 8e fa fb 4d 3a 85 fd cd eb 59 5b d9 b4 86 38 d5 97 ef 16 23 04 9c f0 06 45 4b 9c 35 8d b6 fc 4a 51 96 8c c3 be bf 7b f4 b6 33 6e 33 45 1f 96 c7 3f 2b 60 f0 40 ec 7d 7d 7a d5 3a ee ec fc 3b 6f 2f 8b ad ed ef 3c 3e f6 51 4d 65 2c bf 64 96 eb 72 3c 8a 3a ab 83 90 b9 c7 53 45 ae 8b 69 73 e2 7d 1a ce f7 43 b0 b4 b7 9d a4 f3 12 d2 fc cf e6 80 Data Ascii: lR9lq@:GxEHmXx.~QBz01vbT$&jKsGfy/dQ"4o!GzIk[AH(ehZ]}T4@I}FU*GM:Y[8#EK5JQ{3n3E?+`@}}z:;o/<>QMe,dr<:SEis}C
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: b5 56 d2 d9 19 4a 5b c4 a5 57 6a 90 80 60 67 38 fa 66 95 6d 6d d3 3b 61 8c 65 b7 1c 28 e4 fa fd 68 03 17 fe 12 2d 35 10 dc 7d 9a 50 a9 95 2e 23 5c ae 17 73 0c 67 3c 01 f4 f4 cd 55 7d 5b 42 fb 4c 52 35 93 f9 91 21 db fb a0 02 02 70 d9 19 c0 fb dc 9f 43 5d 27 d9 ad f7 33 79 11 6e 61 b4 9d 83 24 7a 53 7e c5 68 46 0d b4 3d 00 ff 00 56 3a 0e 94 01 8c 75 cd 32 5b 06 95 2c 9a 4b 65 90 44 41 89 40 c6 09 c8 07 82 3e 5e 9d 7a 52 45 ae e9 90 99 6d a3 b6 9b 2a e5 e4 1b 41 e4 92 59 8f 3c e0 e7 3e f5 b9 f6 68 30 cb e4 c7 86 6d cc 36 8e 4f af d6 81 6f 00 66 61 0c 61 9b ef 1d a3 27 eb 40 18 5f f0 90 69 52 00 cd 6c df 21 c6 1a 34 ca b7 cd 85 c6 72 1b 83 fe 4d 33 fe 12 2d 1e 7d ae 6d 1d f7 46 c7 26 00 7e 41 d7 f0 cf 1f 87 e3 5b 8b a7 d9 23 b3 ad ac 01 9d 76 b1 08 39 1e 9f Data Ascii: VJ[Wj`g8fmm;ae(h-5}P.#\sg<U}[BLR5!pC]'3yna$zS~hF=V:u2[,KeDA@>^zREm*AY<>h0m6Oofaa'@_iRl!4rM3-}mF&~A[#v9
2024-04-26 15:33:24 UTC	1734	IN	Data Raw: 0b 71 a5 ad 83 ce 7c b5 94 c8 a4 aa fc b9 c8 c0 07 d8 9f 7a 00 d9 f3 13 19 de b8 c6 73 9e d4 17 55 0c 4b 00 17 a9 27 a5 73 f2 f8 56 ca 49 a6 74 9d 94 c9 90 ab c1 11 9c e7 e5 1d b1 e9 f8 d5 9b 6d 06 de 0b 4b c8 85 cc ae b7 43 e7 90 b7 cc 39 27 af 4e a4 f3 fe 14 01 af bd 3f bc bf 9d 1b d7 fb c3 ae 3a d6 02 f8 76 c1 a5 61 1c e0 aa 80 8e 98 53 d0 29 f4 e0 9e 09 f5 cd 31 7c 27 68 76 81 75 23 05 72 e4 12 0e 73 d3 3f 87 19 ee 0d 00 74 22 58 db ee ba 9f a1 fc 68 79 63 8e 33 23 c8 aa 80 64 b1 38 15 ce cb e1 bb 28 2d d8 4b 78 de 6b 28 54 92 42 a3 04 0c 60 71 d0 e7 91 de a6 4d 0e 3b 9d 16 da 09 6e 50 84 2e e5 e2 45 d8 43 92 4e 01 e0 63 3c 1e d4 01 bb bd 07 56 5f 4e b4 6f 5c e3 23 ae 3a f7 ae 7e 3f 0b 69 e8 9b 64 95 a4 c1 ea e4 13 cf 4e bd fd fb d2 1f 0c d8 c0 b3 49 Data Ascii: q\|zsUK'sVItmKC9'N?:vaS)1\|'hvu#rs?t"Xhyc3#d8(-Kxk(TB`qM;nP.ECNc<V_No\#:~?idNI
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 7d 79 3d 6a d9 f0 dc 3e 54 68 b7 0e bb 22 68 b3 b1 7a 12 4f 1c 7c bc 93 d3 1c 71 55 53 c1 d6 a1 0a 3d c4 8c 83 ee 00 ab d3 68 18 6e 3e 61 c7 43 c5 20 2e 6a 5a 65 96 a5 71 1f 9b 73 b1 92 36 5c 29 5c ed c8 24 82 79 18 38 e9 eb 55 66 f0 ec 0f be 51 7b be 6c ef dd 22 a6 37 73 8c f1 c2 f3 f7 7a 1a 9a 3f 0c 5b 21 bb 2d 3c 92 35 ca 32 3e f0 31 c9 07 38 f5 e0 54 23 c2 30 36 7c eb a9 1c 86 ca 9d a0 64 63 1f 36 3e f7 e3 d3 b5 30 21 8f c3 56 16 d0 79 97 57 6a 5c 11 b9 98 0d a1 ba 10 01 e8 3d 07 6e d5 a2 74 8b 49 74 68 74 e9 2e 5d e3 42 30 e1 80 63 df 6f d0 82 47 d0 fe 35 04 be 13 b3 91 76 ac 92 20 23 0d 80 a7 3c e7 3c 8e bc 0e 7a d4 77 1e 15 8f 6c 42 da 60 84 10 24 32 20 6c ae ed c4 f4 fb dd b3 40 0e 1e 18 d3 81 c3 dc 3c 84 ae c6 32 6d 2c 58 ae 32 4e 3a f2 4f d4 d5 Data Ascii: }y=j>Th"hzO\|qUS=hn>aC .jZeqs6\)\$y8UfQ{l"7sz?[!-<52>18T#06\|dc6>0!VyWj\=ntItht.]B0coG5v #<<zwlB`$2 l@<2m,X2N:O
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: b8 a4 8e 78 a6 69 16 29 11 cc 6d b1 c2 b0 3b 5b d0 fa 1e 68 01 b2 da db ce c1 a5 86 37 20 82 0b 28 3c 8e 94 b1 db 43 16 ef 2e 24 5d cc 5c e1 47 24 f2 4f d6 a5 a6 34 88 85 43 b0 5d c7 6a e4 f5 3e 94 00 d1 6d 00 1c 43 18 c0 c7 08 3a 75 a7 08 a3 1b b1 1a 8d c7 27 03 a9 a7 d5 6b 7d 42 ce ed dd 2d ae a1 9d a3 fb e2 39 03 15 fa e3 a5 00 4e 91 a4 63 08 8a a3 d1 46 29 d4 94 06 0d d0 83 83 83 83 40 0b 45 41 f6 db 5f b5 fd 90 5c c3 f6 90 33 e4 ef 1b f1 eb 8e b5 31 20 02 49 c0 1d 49 a0 05 a2 a0 b6 bd b5 bc 4d f6 d7 11 4c b9 23 31 b8 61 91 d7 a7 e1 53 d0 01 45 26 69 68 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 02 bc ff 00 f1 f3 6d fe f3 7f e8 26 ac 55 79 ff 00 e3 e6 db fd e6 ff 00 d0 4d 58 a0 02 8a 28 a0 0e 52 29 bc 4d 09 0d 34 5b d5 10 Data Ascii: xi)m;[h7 (<C.$]\G$O4C]j>mC:u'k}B-9NcF)@EA_\31 IIML#1aSE&ih((((((m&UyMX(R)M4[
2024-04-26 15:33:24 UTC	2992	IN	Data Raw: 90 e6 75 da 7e 46 f9 79 38 e7 bb 70 3f a5 00 09 77 ac 49 6b 39 7b 38 e3 98 05 f2 b0 ac 41 cb 60 e4 1f 6e 6a 9c fa d6 b3 12 c8 ed a5 f9 69 13 7c c4 86 3b 86 0f 3d 3a 13 e9 c8 c7 bd 2f fc 24 3a 9b 5c 3c 31 69 a2 59 11 94 49 1a 6e 3b 32 48 c1 6e 99 c0 c8 3d 39 e6 af 59 6a 97 97 17 90 5b 4d 6c 14 c9 19 95 ce d6 5f 2c 0e 08 20 f3 9c 90 01 e8 7e 63 da 80 21 5d 5e fd 62 bd 79 ec 76 88 21 32 46 db 5c 09 08 24 73 91 91 9e b8 e4 e2 a3 93 57 d5 0a 2a ae 9e ea e2 41 99 3c 97 2a 63 c8 f9 b1 8c f3 cf 1d 45 3a e2 7d 5d e5 78 ed da 55 98 ce 57 61 84 08 d2 3e 76 b0 72 0e 73 81 9e bd 48 e2 9d a6 dc eb 8f a9 47 0d ec 20 40 9e 6e f9 56 3c 07 c9 f9 31 cf 18 00 e7 d7 22 80 1b 61 a8 ea b2 5e 79 57 56 0d 04 2e f9 0c 63 63 81 fd de 07 5f 73 c7 14 3e af ab ad cb 44 9a 43 48 ab 23 Data Ascii: u~Fy8p?wIk9{8A`nji\|;=:/$:\<1iYIn;2Hn=9Yj[Ml_, ~c!]^byv!2F\$sWA<cE:}]xUWa>vrsHG @nV<1"a^yWV.cc_s>DCH#
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 26 d2 a6 bc 78 5e 0b e8 5e 48 91 62 79 5d 04 8c 8c a7 24 ae 72 01 39 e4 71 d0 73 4d 3a 2e a9 e4 6c fe d7 64 2d ce dd cc 41 23 18 01 89 ce 0f cc 4f b9 18 e9 57 f4 cd 28 e9 cb 30 f3 95 8b aa a2 95 8f 6e 02 e4 02 7d 5b 9e 4f 7a cc 1e 18 9c a2 2b 6a 8e ec ac 58 12 ac 4a 9e 73 8f 9b 80 72 73 fa 62 80 27 fe c4 bd 68 b8 d5 67 32 72 03 f9 8c 71 d0 7a e3 a0 23 f1 f5 a4 6d 07 51 12 2f 95 ab 4c b1 82 49 52 ec 4f 5e 0e 49 3d 06 06 3a 51 ff 00 08 f4 df 67 8e 34 d4 65 40 ac 58 22 82 11 09 24 e5 00 39 c8 cf f1 16 fa 55 db 6d 38 43 61 35 a2 dc bb f9 cb 90 db 8e 46 54 29 20 e7 3c 90 4f 07 bd 00 55 1a 24 a9 15 dc 72 dc f9 cb 71 1a c6 a2 59 1f 8c 12 71 9c fb fd 6a 04 d1 35 24 38 fe d4 c8 0a bb 62 52 63 52 06 32 b8 5c 60 7b 8c 1e 69 0f 86 2e 1f 66 fd 4e 42 c8 06 08 43 d4 00 Data Ascii: &x^^Hby]$r9qsM:.ld-A#OW(0n}[Oz+jXJsrsb'hg2rqz#mQ/LIRO^I=:Qg4e@X"$9Um8Ca5FT) <OU$rqYqj5$8bRcR2\`{i.fNBC
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 1a 82 aa cd 80 c1 48 07 39 e7 04 e7 df 1c d3 8f 87 af 76 6d 1a 89 53 b9 08 75 0c 0e 17 3f ed 63 39 39 e3 af 02 9b 37 87 cc 72 c2 0e a9 b2 05 20 47 14 84 e0 e0 83 b7 ef 73 c8 06 ae ea 3a 45 c5 e4 f3 3c 77 a6 35 96 30 80 61 b2 98 3c e3 04 0e 7e 99 a0 0a 5f f0 8e dc c6 00 8f 51 68 91 57 1f 2e e1 b3 00 0c 8f 9b be 39 ce 7d b1 57 ec b4 a9 ac f5 03 30 ba 67 80 a3 27 96 c5 8e 32 d9 18 c9 ed d3 de 92 df 47 78 2c ae 61 92 f6 49 5a 78 4a 3c 8f 93 cf cd f3 72 7d 08 1f f0 1a 8a cb 44 9e da f6 19 db 50 76 8e 30 40 85 4b 04 5e bc 0c 93 c7 3d f3 d0 50 02 de 68 b3 dc 6a 0f 73 0d d9 84 39 52 c0 6e c8 23 b8 c1 03 3e 99 18 e4 e4 1a b9 a8 59 c9 79 e4 f9 53 ec f2 9f 73 21 27 0c 31 df 04 1e 3a 8e d5 42 ef 46 bf b8 bb 0c ba 86 21 2e c4 0f 98 14 07 24 1e 1b 92 09 e3 b7 02 ab 49 Data Ascii: H9vmSu?c997r Gs:E<w50a<~_QhW.9}W0g'2Gx,aIZxJ<r}DPv0@K^=Phjs9Rn#>YySs!'1:BF!.$I
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 57 62 e7 9d e6 ba 8f 0f f8 7e 3d 0e 19 07 99 e6 cd 21 f9 a4 00 80 40 e8 31 9a e5 bc 45 e1 bb d7 d6 a5 93 4f b2 92 48 64 1b cb 06 1c b9 ce 7a 9a 00 cd 87 53 b7 8f c5 9f da 67 7f d9 fe d0 d2 7d df 9b 07 3d bf 1a d1 bc d5 6d b5 8f 18 69 77 16 bb f6 2b 46 87 7a e0 e7 71 3f d6 b3 3f e1 19 d6 bf e8 1d 2f e6 bf e3 56 f4 af 0f 6a f0 6a f6 73 4b 61 22 c6 93 2b 33 12 38 00 fd 68 03 d3 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 2b 9a 97 c2 96 4a ae 45 ec b1 f9 99 41 9c 60 6e 60 4a 8f ab 73 f5 35 d2 d7 39 ff 00 08 94 45 d9 9a f6 66 de fb c9 2a 32 0e 41 ca 9f e1 3c 72 45 00 31 fc 3b 64 db 23 8f 52 91 59 18 6e da e3 73 38 3d 73 d7 77 38 cf a5 36 df c2 ab 8d f7 77 43 73 67 29 08 da 80 7b 0f e7 c7 35 28 f0 85 bf cc 4d cb ab 31 39 31 a2 a6 dc ff 00 77 1f 77 a0 a7 ff Data Ascii: Wb~=!@1EOHdzSg}=miw+Fzq??/VjjsKa"+38h((((+JEA`n`Js59Ef*2A<rE1;d#RYns8=sw86wCsg){5(M191ww

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49804	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:24 UTC	799	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:24 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:24 GMT Content-Type: application/octet-stream Content-Length: 29288 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:24 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30R5F9T87L:00000011 Content-Disposition: attachment; filename*=utf-8''551b630b-f274-454a-a270-9fbd8cbd7632.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:24 UTC	3620	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 82 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: fa dd 8b 69 d6 ec 9b 76 55 91 8a 9c 6e 72 c4 39 ce 30 54 57 a5 cb 3c 50 a8 69 64 54 52 42 82 cc 00 c9 e8 3e b5 1c 37 d6 d7 17 57 16 d1 4c ad 35 b9 51 32 0e a9 b8 64 67 ea 2a fe b3 27 7d 37 fe be ed 45 ec d6 9a 9c 16 93 e1 e9 e2 7d 0c 3d a5 d0 17 3a 74 b1 ea 1e 63 3e 0b 6d 1b 43 e4 f0 73 9c 54 5a 4e 9b 71 65 a7 f8 71 8e 93 7a ad 67 79 20 bd 5f 28 92 4b 21 50 e0 77 5e 47 23 8a f4 9c d3 16 68 9d de 34 91 59 e3 c6 f5 0c 32 b9 e9 91 da 8f ad 4d f4 fe b5 ff 00 3f c8 3d 92 fe be 5f e4 70 be 1c b6 b8 93 c4 9f d9 92 3b 3d a6 84 d2 98 dc 3e 43 99 4f ee c1 f7 55 2d 4c f1 06 85 3d f6 ab e2 5b 9f b1 dc bb 8b 28 8d 9b 47 b8 6e 90 03 f7 71 d4 8e 2b af d2 57 49 85 ae ed f4 b8 e0 8c c5 31 17 09 12 e3 12 11 9e 7d f0 6b 47 34 9e 21 a9 f3 25 fd 6f f8 82 a6 9a b3 3c d7 5b 5b Data Ascii: ivUnr90TW<PidTRB>7WL5Q2dg*'}7E}=:tc>mCsTZNqeqzgy _(K!Pw^G#h4Y2M?=_p;=>COU-L=[(Gnq+WI1}kG4!%o<[[
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 9c 05 96 a5 a8 6a 11 df d8 4f aa dc 5d 3c d6 13 48 1e da 45 74 25 4f 19 5d a1 a2 27 a6 d3 d7 9a 13 55 ba 83 46 f0 fd bd b6 aa c9 65 2d bb 99 6e 1e e1 62 db 2a 81 fb ad fb 4e d0 bc f1 8c 9c 75 af 4e 58 91 19 99 51 55 9b 96 20 63 34 86 18 d9 36 34 68 54 9c ed 2a 31 4d e2 63 7f 87 40 f6 6f b9 c0 db 5f ea da a5 c6 8d 6d 26 af 2c 3e 7e 9f 34 b2 c9 6c a0 79 85 58 05 61 b9 78 e3 1d bf 9d 26 8b a9 ea ad 27 86 ee a7 d5 27 9b fb 4a 39 d6 68 9d 57 60 d8 a4 a9 00 0c e7 8e 7d 6b d0 7c b5 c8 38 19 03 00 e3 a5 02 34 1b 70 8b f2 f4 e3 a5 27 88 4d 5b 97 fa d7 fc d7 dc 3f 66 fb ff 00 5a 1c 17 84 35 8b db 8d 75 6d 6e b5 27 bd f3 20 69 0b c7 22 bc 79 0d d4 ae 03 44 7b 6d 35 07 8b 7c 41 79 69 aa ea 2b 6b a8 cd 03 d9 a4 45 21 2e a8 ac 4f 24 85 c1 32 0c 75 e8 05 7a 1a c4 88 cc Data Ascii: jO]<HEt%O]'UFe-nbNuNXQU c464hT1Mc@o_m&,>~4lyXax&''J9hW`}k\|84p'M[?fZ5umn' i"yD{m5\|Ayi+kE!.O$2uz
2024-04-26 15:33:24 UTC	1734	IN	Data Raw: f0 76 b8 cd 7b 37 83 a2 f2 3c 0f a4 c5 8c 6d 23 ff 00 46 1a f1 df ec d8 ad a3 7c 33 37 9a 40 27 8c 80 3b 03 f8 d7 b3 78 4e 05 b5 f0 5e 95 0a 67 6a 11 8c 9c ff 00 19 a5 2d 86 8e 94 74 ac ad 67 fd 6e 97 ff 00 5f c9 ff 00 a0 bd 6a 8e 95 95 ac ff 00 ad d2 ff 00 eb f9 3f f4 17 a9 43 35 6a 86 af a7 a6 a5 a7 bd b3 c9 e5 33 15 29 26 d0 4a b2 b0 61 c1 eb ca 8c 8e f5 7e b9 df 10 e9 97 f7 f7 b6 b7 16 85 c7 d9 63 76 40 b2 85 cb b3 28 e0 1e 32 13 cc c1 3d 09 14 2d c4 c8 ee bc 24 2f e4 9e 7b eb b1 35 c4 c8 ea 5b c9 01 57 2b b5 4a a9 27 1b 46 ee e7 97 34 b6 de 13 8e d9 35 30 b7 4d ba f6 37 88 49 b4 96 45 76 62 72 49 e4 fc d8 1d 3a 55 55 b2 f1 20 e0 cb 31 22 36 30 7f a4 ae 23 24 b9 0b 2f 07 79 c1 8c 67 d8 f3 dc b8 5b 78 92 5b 8b 57 66 9a 24 13 a9 74 f3 d4 e2 30 10 1d d8 Data Ascii: v{7<m#F\|37@';xN^gj-tgn_j?C5j3)&Ja~cv@(2=-$/{5[W+J'F450M7IEvbrI:UU 1"60#$/yg[x[Wf$t0
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 67 e2 1b bd 16 d4 99 15 2f a4 63 34 c0 b0 c4 04 a6 d5 55 c8 fe 12 41 cf a8 3e b4 fb cd 33 59 7d 15 ed 22 9d a4 97 ed 12 ba 3c 92 fc c2 30 ad e5 8d d8 eb bb 61 cf 6f c2 8b be e1 65 d8 4b cf 07 ad e5 a5 94 22 fa 58 5a d6 d5 60 56 8e 31 cb a9 52 92 63 3d 54 a9 20 7a 9c f6 a3 fe 10 ab 6f b4 06 f3 54 c3 9e 62 68 81 ca ef 8d b6 e7 3d 31 18 53 eb 93 53 e8 56 3a ad 9e a3 28 b9 92 73 64 b0 aa 44 26 9c 48 41 00 0e dd 7a 13 93 83 92 7a f0 47 45 49 c9 ad 2e 3b 27 d0 e6 2f bc 23 f6 cd 26 df 4e 5b d3 1c 51 19 4b 62 21 f3 19 09 24 80 08 da 46 e6 03 b7 3d 2b a6 50 15 42 81 80 06 05 2d 15 2d b6 3b 24 14 51 45 21 85 36 4f f5 6d f4 34 ea 6c 9f ea db e8 68 03 cf 3e 2a ae ed 0f 4c 1f f4 dc ff 00 e8 06 bc a0 a9 43 cb 62 bd 5b e2 bb 94 d0 b4 c2 33 93 3f 6f f7 0d 79 21 20 f7 27 Data Ascii: g/c4UA>3Y}"<0aoeK"XZ`V1Rc=T zoTbh=1SSV:(sdD&HAzzGEI.;'/#&N[QKb!$F=+PB--;$QE!6Om4lh>*LCb[3?oy! '
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 67 92 f1 e6 72 db 97 7a 2f 51 e6 60 91 dc 83 26 7e aa 2a 4d 1f c3 53 e9 7a 97 da 56 68 c4 40 f9 6b 16 37 62 31 1a a8 c1 c0 c3 31 55 66 fa 01 46 9d 18 6b d8 75 c4 1e 16 b1 3f e9 12 59 45 b5 85 b1 46 9f 80 ce 48 08 57 3d 49 76 c6 7a 64 e3 15 62 0b 5d 04 42 b6 50 cb 6c cb 24 fe 60 41 71 b9 9a 54 c1 ce 73 92 c3 0b f9 56 40 f0 05 b8 bf 9e f3 ed ef e6 4b 7a 97 81 7c 84 da 19 4b 9e 46 39 27 7f 27 8e 54 1e b9 cb 17 e1 be 9f 15 c6 9f 34 37 32 46 6c ed d2 10 55 17 2c c8 58 89 33 d9 8b 31 63 c1 c9 02 9f bb dc 35 ec 6b 49 6b e1 b6 b6 1b e5 b2 11 29 58 43 2d c6 dd a5 41 01 43 06 e0 80 cd c7 fb 47 35 57 5a 8f c2 97 ad 6a 75 18 ad ee 8a 45 2f 95 e5 e5 c7 97 1e d2 ea 76 f5 00 ed f9 4f 04 e3 8a ca 8b e1 7d 82 da cd 0c f7 f2 cd e6 c6 e8 4b 44 98 05 a3 48 f7 01 d8 85 56 ff Data Ascii: grz/Q`&~*MSzVh@k7b11UfFku?YEFHW=Ivzdb]BPl$`AqTsV@Kz\|KF9''T472FlU,X31c5kIk)XC-ACG5WZjuE/vO}KDHV
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 6d c9 1b f8 c9 cf f1 75 e0 0e 7e 52 31 d0 d6 35 ff 00 8b 75 38 6f 65 8d bf d1 92 20 f2 04 78 7e 66 1f 39 44 6e a4 12 15 0f 6e 18 f3 9c 50 a0 d8 dc ac 7a 0d 15 c3 69 da cf 88 ae a5 86 44 06 6b 66 66 66 3e 46 7a 16 0c 87 00 00 46 d1 df 92 dd 4d 02 fb c5 66 38 e5 29 36 e5 8d 83 2f d9 70 ae 4c 8a bb b1 8d dc 2e e6 03 19 3e 87 1c be 46 2e 63 b9 a2 b9 0b 7b 8f 10 dd ea 1a 7c 37 2b 34 11 87 47 98 c7 01 55 74 08 58 92 fd 89 6d ab b7 eb eb 4c 27 c4 8d a9 49 32 49 70 63 8e e1 f6 c4 f0 80 ac 8d 2a 22 af b8 08 ac fb bb 6e a5 ca 3b 9d 95 15 c7 d9 5e 78 8e f6 fe df ce 8e e2 d6 d4 dd 29 6f f4 70 0e cd 8e 4a 36 7b 67 60 dd eb 9e 7a 53 73 e2 43 7e d3 47 25 c1 58 e7 93 11 49 08 0a 51 a6 54 55 e3 a8 08 ac db bf da a3 97 cc 5c c7 65 45 72 d6 5a 87 88 9f 49 bf 9e e6 d7 6d c2 Data Ascii: mu~R15u8oe x~f9DnnPziDkfff>FzFMf8)6/pL.>F.c{\|7+4GUtXmL'I2Ipc*"n;^x)opJ6{g`zSsC~G%XIQTU\eErZIm
2024-04-26 15:33:24 UTC	3454	IN	Data Raw: c8 c8 bb f0 de 9d 7a f1 99 56 50 b1 44 61 48 d2 42 aa ab b4 af 03 b7 04 8f 7e 33 d0 52 9f 0e d8 6c 21 15 c1 c7 ca 4b 13 83 e6 79 bd 3f df c1 fc 31 5a d4 51 76 16 47 3d 07 83 b4 d8 ed 22 86 67 b8 9d 92 31 1f 98 f2 9c 95 da ca 57 d8 61 db 8f 7a b3 17 87 ad a2 d5 6d ef 03 65 6d 96 4f 26 3c 1e 1e 46 dc ec 4e 79 f6 e3 8c 9f 5a d8 a2 8e 66 16 46 34 de 19 b0 95 a3 91 7c c4 96 2d e5 1f 71 3c b3 ef 39 f5 f9 b9 fd 3a 55 78 7c 1f a7 c5 69 0c 2d 2d db c9 12 2c 62 63 31 0f b4 29 5d a0 f6 52 19 b8 f7 ae 86 8a 39 98 59 18 ed e1 ad 35 91 50 46 ea 8b e6 7c aa e4 02 1c 82 c0 fb 7c ab c7 a0 aa 3a af 83 6d 6f ed e2 8a 09 de db cb ea 70 5f 20 6f 23 b8 e7 73 93 ef df 35 d3 51 42 93 5d 42 c8 82 d6 d8 5a c2 23 f3 24 93 9c 96 90 e7 f2 f4 1e c3 81 53 d1 45 21 85 14 51 40 05 14 51 Data Ascii: zVPDaHB~3Rl!Ky?1ZQvG="g1WazmemO&<FNyZfF4\|-q<9:Ux\|i--,bc1)]R9Y5PF\|\|:mop_ o#s5QB]BZ#$SE!Q@Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49802	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:24 UTC	791	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:24 UTC	477	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:24 GMT Content-Type: application/octet-stream Content-Length: 373057 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:24 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30R4B34UED:000000AD Content-Disposition: attachment; filename*=utf-8''9ae068b6-c5e0-4162-88d9-0fe8901271a8.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:24 UTC	3619	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 0d 09 0a 0b 0a 08 0d 0b 0b 0b 0f 0e 0d 10 14 21 15 14 12 12 14 28 1d 1e 18 21 30 2a 32 31 2f 2a 2e 2d 34 3b 4b 40 34 38 47 39 2d 2e 42 59 42 47 4e 50 54 55 54 33 3f 5d 63 5c 52 62 4b 53 54 51 ff db 00 43 01 0e 0f 0f 14 11 14 27 15 15 27 51 36 2e 36 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 ff c0 00 11 08 05 28 03 fc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFxxC!(!021/.-4;K@48G9-.BYBGNPTUT3?]c\RbKSTQC''Q6.6QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ("}!1AQa"q2
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 0b ff 00 23 7d 8f fd b4 ff 00 d1 6d 5c fd 74 1e 05 ff 00 91 be c7 fe da 7f e8 b6 a9 9f c2 c6 b7 3d 7a 8a 28 ae 13 70 ac ff 00 10 7f c8 bb a9 ff 00 d7 ac bf fa 01 ad 0a cf f1 07 fc 8b ba 9f fd 7a cb ff 00 a0 1a 6b 71 33 c4 68 a2 8a ef 30 0a 28 a2 80 0a 28 a2 80 0a 28 ae d7 48 d3 ac bc 37 a5 26 b9 ab c6 24 ba 90 66 d6 d8 f6 3d 89 f7 ef ed f5 a9 94 ac 34 ae 67 e9 7e 0d bd bb 83 ed 77 d2 a6 9d 69 8c f9 93 70 48 fa 71 8f c7 15 77 ec fe 07 b0 f9 65 b9 b9 bf 71 d7 66 40 fc 31 8f e6 6b 9e d6 75 bb fd 66 e0 cb 77 31 2b 9f 96 25 e1 13 e8 3f ad 67 52 e5 6f 76 3b a5 b1 d7 c9 a8 78 18 a1 09 a3 de ee ed f3 91 ff 00 b3 d4 7a 7f 83 6f 35 89 4d cc 51 1d 3e c5 ce 63 13 1d ef 8f 61 c6 7f 1c 55 af 00 f8 6d 2f 5f fb 56 f5 03 41 1b 62 28 d8 70 ec 3b 9f 61 fc fe 95 df ea 3a 85 Data Ascii: #}m\t=z(pzkq3h0(((H7&$f=4g~wipHqweqf@1kufw1+%?gRov;xzo5MQ>caUm/_VAb(p;a:
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 1e 96 08 f7 2e f8 47 74 5a 56 a5 e2 1b b1 fb cb a6 79 b9 ec 8b 9f eb 9f c8 57 98 cb 23 cb 2b ca e7 73 bb 16 63 ea 4d 7a b7 8d 27 87 4a f0 8b da c0 04 62 40 b6 f1 a8 ec 3b fe 80 d7 93 d2 a5 ad e4 39 76 0a bd a2 44 d3 6b 96 11 a8 c9 6b 84 1f f8 f0 aa 35 d5 f8 02 c1 64 d5 25 d4 e7 f9 6d ac 50 b9 63 d3 71 1f d0 64 fe 55 72 76 57 25 6a ca be 3b 91 64 f1 6d e6 df e1 08 a7 eb b4 55 df 86 91 ab f8 86 67 3d 52 dd 88 fa ee 51 5c d6 a5 78 da 86 a5 71 78 fc 19 a4 2f 8f 40 4f 02 b6 bc 05 7a b6 7e 26 85 5c e1 6e 14 c3 9f 73 82 3f 50 2a 5a b4 2c 34 fd e3 57 e2 83 13 7d 60 9d 84 6c 7f 32 3f c2 b8 7a f4 0f 8a 16 cc 57 4f ba 03 e5 05 e3 63 ef c1 1f c8 d7 9f d1 4b e1 41 2d c2 bd 5f e1 e3 13 e1 68 c1 e8 b2 b8 1f 9d 79 45 7a df 84 02 e9 be 0b 82 79 ce d5 08 f3 b9 f6 c9 3f cb Data Ascii: .GtZVyW#+scMz'Jb@;9vDkk5d%mPcqdUrvW%j;dmUg=RQ\xqx/@Oz~&\ns?P*Z,4W}`l2?zWOcKA-_hyEzy?
2024-04-26 15:33:24 UTC	2234	IN	Data Raw: 51 8e 38 23 91 56 8c 66 74 9e 0b b5 12 6a 1e 69 fb b1 ae 47 d7 fc 93 5d e8 ae 27 c1 b7 96 f0 48 f1 cb 20 57 97 0a a3 07 ad 76 a2 a9 19 48 5a 28 a2 99 21 45 14 50 02 d1 45 14 01 1c af e4 c3 2b 6c de 31 9d b5 e7 d7 f7 70 4b 70 e6 67 f2 c1 3c 0e b5 e8 a6 b9 8f 13 69 f1 f9 a9 2c 36 a1 9d c1 07 6a f2 7f 2a 89 23 6a 52 b6 87 36 d7 7e 42 83 64 e4 13 c6 54 72 6b 7e c6 4f 32 df f7 e5 cc 9b 46 72 d5 82 da 75 d4 18 2c 42 e3 b1 22 98 6e a6 80 8f 9c 71 fe d5 43 5d 8d f9 bb a3 5d 2e de d2 f1 de 2f be 54 81 5b 16 97 71 3d b2 17 9d bc d2 32 46 7b d6 12 9f 3e e2 d1 d4 7c d2 32 82 05 5f ba d0 ed df 57 62 bb d1 71 93 b4 f7 a4 84 cd 33 23 37 00 e4 54 6e d8 ab 76 f6 2b 6d 6e 37 33 31 f7 aa 37 2c 15 88 a9 63 45 6b 90 5e 32 05 73 d7 96 85 98 92 38 ad f3 20 15 4e 7c 31 38 a6 98 Data Ascii: Q8#VftjiG]'H WvHZ(!EPE+l1pKpg<i,6j*#jR6~BdTrk~O2Fru,B"nqC]]./T[q=2F{>\|2_Wbq3#7Tnv+mn7317,cEk^2s8 N\|18
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: ed f9 d7 52 7c 51 a7 1e d3 7f df 03 fc 6b 9a b5 3a 92 76 48 b8 ca 2b a9 7e e7 ee 9a e7 a7 ff 00 8f ca b7 37 88 ac 5d 48 02 5f fb e4 7f 8d 64 c9 a8 c0 d7 1b c0 7c 7d 2b 0f ab d5 fe 53 45 52 3d cd 78 ba 55 85 ac 84 d5 ed 54 72 24 fc aa 51 ad d9 8e d2 7f df 3f fd 7a 3e af 57 f9 58 7b 48 f7 37 f4 cf f5 b2 7f bb 59 97 bf f2 16 3f 4a 65 9f 88 ac 60 77 2e 25 c1 18 e1 47 f8 d5 2b 8d 62 d2 4b e3 32 89 36 e3 1c af 34 7d 5e af f2 87 b4 8f 73 66 1f bf fe 7d 2a 97 86 4e 2d 21 ff 00 ae ad fc ea 18 f5 db 35 6c 91 2f fd f3 ff 00 d7 aa 9a 56 ab 05 9d aa c6 fb f7 07 2d c0 f5 34 fd 85 5f e5 13 9c 7b 9d a4 93 85 7c 13 52 2c ca dd 0d 72 52 eb b6 ae 73 99 73 fe ef ff 00 5e 92 2d 7e 08 cf fc b4 3f 85 47 b0 ad fc ac 3d ac 4e b4 1c b7 5a 93 35 cb c3 e2 6b 45 6c b8 97 f0 5f fe bd Data Ascii: R\|Qk:vH+~7]H_d\|}+SER=xUTr$Q?z>WX{H7Y?Je`w.%G+bK264}^sf}*N-!5l/V-4_{\|R,rRss^-~?G=NZ5kEl_
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: f2 33 c6 0f e1 d6 b8 c9 b5 ad 4e 74 91 25 bc 91 92 40 43 29 c6 08 fa 54 53 a9 56 a5 ed 6d 18 dc 62 ac d9 34 1e 1d d5 26 84 cd f6 7f 2e 30 bb b7 48 c0 71 f4 eb 51 d8 e8 7a 95 fa 07 82 d8 f9 67 f8 dc ed 07 e9 9e bf 85 75 7e 0f 62 7c 3b 2e 79 c4 8f c1 e7 b0 ae 32 7b fb c9 e4 df 2d cc ac 7b 7c c4 01 f4 1d aa a3 52 72 94 a2 ad a0 9c 62 a2 99 6b 50 d0 75 1d 3a 1f 3a 78 41 88 70 5d 1b 20 7d 6b 32 bb fd 3a 67 bd f0 64 8d 70 c6 46 f2 64 52 5b 92 71 9c 57 01 55 46 a4 a5 75 2d d0 4e 29 24 d7 50 ab fa 25 b2 dc ea 71 f9 bf ea 62 cc b2 1f f6 57 93 54 2b 5a 0f f4 2f 0e cf 3f 49 6f 1f ca 4f f7 07 2c 7f 3c 0a ba 8e ca cb a9 11 57 7a 9d 6e b2 89 ac f8 60 cf 10 e7 60 99 07 a1 1d 47 f3 15 e7 95 dc 78 22 ec 4d a7 4b 66 e7 26 26 c8 07 fb a7 ff 00 af 9f ce b9 3d 5e d0 d8 ea 97 Data Ascii: 3Nt%@C)TSVmb4&.0HqQzgu~b\|;.y2{-{\|RrbkPu::xAp] }k2:gdpFdR[qWUFu-N)$P%qbWT+Z/?IoO,<Wzn``Gx"MKf&&=^
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 40 dc ec 33 d0 b1 fe 98 ad 0d 0f 57 d3 e5 d0 db 4b bf 97 c9 3b 59 37 1e 84 1f 7f 5e 6b 31 46 95 a4 5d c7 3c 57 66 fe 54 60 55 55 36 aa f3 d4 9c f2 7e 95 37 72 94 94 d7 a7 60 b2 51 4d 1a 9e 3d fb f6 3f 47 fe 95 77 c4 f1 fd ab c2 f1 4d 17 2a 9b 24 e3 d3 18 fe b5 47 c4 f7 5a 66 a9 69 0c f1 6a 0a 1e 20 d8 8f 61 25 b3 8e 3d ba 54 1e 1e f1 1c 36 d6 bf 60 d4 54 b4 1c 85 7c 67 00 f6 23 d2 b2 8c 25 ec e2 d2 d6 2c b7 25 ce ef b3 39 8a 2b a8 b9 d3 bc 2e 58 cc 9a 93 a2 1e 7c b4 39 fc b8 cd 64 5e 4b 63 71 34 76 d6 68 b6 d6 ca 4f ef 65 c9 66 3e a7 00 9f c0 57 64 6a f3 6c 99 93 8d ba 9d 57 89 ff 00 e4 54 8b fe d9 ff 00 2a e1 57 ef 0f ad 76 1a ce a9 a5 df e8 8b 65 15 fa 09 17 6f 2d 1c 98 38 ff 00 80 d7 27 6c 89 24 ea b2 4c 90 af 52 ec 09 1f a0 26 b2 c3 27 18 bb ae a5 54 Data Ascii: @3WK;Y7^k1F]<WfT`UU6~7r`QM=?GwM$GZfij a%=T6`T\|g#%,%9+.X\|9d^Kcq4vhOef>WdjlWTWveo-8'l$LR&'T
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 6a 21 9a 04 04 a4 40 e3 7e 3d 4f d7 8a 86 c7 50 b1 ba bd 8e de eb 4b b5 48 24 60 bb a3 05 59 73 d0 e7 3c d1 ed 75 6a 2a f6 0e 5d 2e cc 4a 2b ab d5 2c 74 8d 08 ec 92 ce 6b 83 32 37 97 23 38 21 4f a6 38 e9 c5 49 e1 5d 37 4a bf b4 69 64 b3 2d 2c 64 2b 17 72 c0 9c 75 c7 15 0f 10 b9 39 ec ec 57 b3 77 e5 ea 72 14 57 51 6c 3c 3d a6 3b 47 7a 3e d3 72 49 de 15 77 24 7e de 87 f5 ac fb 79 74 58 ee 2f a7 9e dd a6 4d ff 00 e8 d1 02 54 11 93 d7 f4 aa 55 6f 7b 26 27 0b 75 31 e8 ad ab 7d 56 c1 ee 12 39 f4 7b 51 03 36 0e cc ee 03 eb 9e 6a cf 8a b4 38 34 d1 15 cd a6 56 29 1b 69 42 73 b4 f5 e0 d1 ed 6d 25 19 2b 5c 39 6e 9b 47 39 45 75 fe 15 d3 74 bb fb 46 96 4b 32 d2 c6 42 b1 77 2c 09 c7 5c 71 59 88 fa 1d 84 ee 93 5b cb 7b 20 62 18 e7 62 2f b0 1d 4f e3 4b db 27 27 14 9d d0 Data Ascii: j!@~=OPKH$`Ys<uj*].J+,tk27#8!O8I]7Jid-,d+ru9WwrWQl<=;Gz>rIw$~ytX/MTUo{&'u1}V9{Q6j84V)iBsm%+\9nG9EutFK2Bw,\qY[{ bb/OK''
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 66 80 33 ef 39 85 0d 50 b9 fb 81 ab 4a e9 71 6c b5 99 77 fe a6 80 12 db 81 ba ae c7 20 78 0d 50 80 fe ec 0a 90 4b e5 ab 0a 00 94 b6 56 9c 9c e0 d5 5f 38 03 4e 17 18 e0 50 05 b6 5c 0f a5 20 e0 fe b4 c4 97 72 83 4e fe 94 08 90 f2 b9 a7 d9 ca 60 bc 8a 5e 9b 58 1a 62 72 08 a6 9f 96 98 1d bd f6 ab 6d a6 e9 6b 73 70 e3 95 f9 54 75 63 ed 5c ef 83 b5 bb 8d 67 c6 32 c9 33 61 05 b3 ec 41 d0 0d cb 5c 6f 88 af ae 25 b8 44 96 46 65 54 01 46 7a 0a d9 f8 58 49 f1 44 a4 ff 00 cf b3 ff 00 e8 4b 54 89 3d 6e 8a 28 a0 61 54 f5 8f f9 03 5f 7f d7 bc 9f fa 09 ab 95 4f 58 ff 00 90 35 f7 fd 7b c9 ff 00 a0 9a a8 7c 48 4f 63 cb 28 a2 8a f7 ce 00 a2 8a 28 00 a2 8a 28 02 6b 5b b9 ac e4 32 40 50 31 18 cb 22 b7 f3 06 b4 1f c4 9a bc 8b b6 4b a5 71 e8 d0 a1 fe 95 93 45 43 84 65 ab 43 4d Data Ascii: f39PJqlw xPKV_8NP\ rN`^XbrmkspTuc\g23aA\o%DFeTFzXIDKT=n(aT_OX5{\|HOc(((k[2@P1"KqECeCM
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 0b cb 99 2e a7 68 43 6d 81 7a 85 e2 91 af 09 94 c4 87 6a 2a 1c 7b 71 54 de 6d f2 12 ab 85 ce 4e 3f 95 3e da 3c dc 34 92 91 b1 46 58 7a fa 2d 69 73 1b 15 b5 05 c7 90 e0 6d 77 4c b6 7b fa 1a 75 9c f1 db c8 ae a3 74 8b c8 3e 86 a0 d4 5d 9d f7 b9 cb b1 24 e3 b5 56 41 96 18 7c 54 b3 48 ad 0d eb 7f 32 e2 63 3c d9 0c 48 e0 f4 35 d6 dc 1c 5a c7 1f fb 35 c8 68 cb 12 dd 23 48 e5 80 e7 04 f1 5d 5c d2 6e f9 bb 63 8a e4 ac fa 1d 94 11 0e 9e a5 66 91 ff 00 ba 2a a5 c3 16 d5 e1 c7 d6 af 44 76 c6 c3 bb 54 16 f0 99 75 48 88 ed 59 2d cd d9 db 69 c3 11 60 d4 b7 0b ca 9a 6d aa ec 41 4e ba 38 0b 5d 5d 0e 2e a5 4b e6 da 63 c7 ad 4e c7 2a a6 ab dd ae 63 56 3d 41 a9 0b 7e e8 50 05 2d 6a 1d f6 6d 81 5c d9 c8 b4 23 d2 bb 1b a4 12 5a 91 ed 5c bd c4 05 22 71 8e d4 00 96 d2 86 d3 99 Data Ascii: .hCmzj{qTmN?><4FXz-ismwL{ut>]$VA\|TH2c<H5Z5h#H]\ncfDvTuHY-i`mAN8]].KcN*cV=A~P-jm\#Z\"q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49806	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:24 UTC	795	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:24 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:24 GMT Content-Type: image/png Content-Length: 41837 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:24 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30R4T7NEBK:00000150 Content-Disposition: attachment; filename*=utf-8''55c0f2a0-d164-4d6c-871f-2c0a754f72b0.PNG Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:24 UTC	3639	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 06 09 02 04 05 03 01 ff da 00 08 01 01 00 00 00 00 ad e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}8"
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 91 c3 93 95 ca d7 8c 6f 3a 45 d9 87 a5 19 e4 f7 e2 01 a9 b3 cc 1b e7 19 26 c9 23 aa 7b 8b 67 d8 cc f7 60 f5 e3 e4 5e 5e 54 46 f4 f6 e8 64 d1 7c b5 f5 83 6c ef 5b b8 3a 56 d8 36 af 7c 8c c7 0e cf f6 2d ad 2c 5b 88 00 00 00 00 00 00 02 f0 f9 94 cd f3 cb f6 15 46 ff 00 2f 1f d6 27 c8 e0 2a f5 b0 fa b9 09 4c 56 cb 5d 9c 2f 54 4d 5d b6 29 4e e2 ed 8b d3 a8 9a 4e bb fa e4 9a 6c 4e bf 2f 44 9b fb 0c 53 3e ce c2 72 aa 70 b1 5a fd fc 9b 2e c7 85 14 4b 3a e5 eb df e9 02 a3 63 16 bb 5e 1c 24 5b d7 57 eb 7a 4d bb 5e c7 95 5a 6b 50 e7 63 ad 56 43 e6 41 f4 fb c8 fd d8 85 65 82 3b 3b 12 a9 10 d4 f1 62 f5 fb db ba d3 2f 8f 00 55 2b 71 62 3c ef 2e 80 e3 e2 cf d9 de bf 93 4c a2 dc fe fa 6b a3 c4 1c ad 9d 8e f6 71 ca af 5b fb 7b 34 aa 58 3d dd c9 3a 51 0d 26 c8 76 2d 41 a2 Data Ascii: o:E&#{g`^^TFd\|l[:V6\|-,[F/'*LV]/TM])NNlN/DS>rpZ.K:c^$[WzM^ZkPcVCAe;;b/U+qb<.Lkq[{4X=:Q&v-A
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 00 00 27 2c e7 d0 39 ed 6a 2c 8b 04 0b 02 03 37 36 c0 19 2b 85 c5 a3 36 c8 cd b0 08 b0 00 00 00 07 07 78 4d 00 17 0e 7d 01 cf a0 0b 70 e8 86 e5 6d c0 5a 0e 77 71 5b c7 bc 45 ed 22 2c 00 e7 d0 b0 00 00 00 46 4d f3 e9 ce f6 2f 9d ef 3e 99 95 35 17 16 cc cb 9a 45 64 f4 ae 5d 9c 2a a6 a2 e6 a7 63 bc 45 c6 d5 f3 ad e3 dd cb 2e d0 a7 1e 9c fa 26 b9 75 9a e7 d2 c0 00 00 01 cb 66 f9 f4 8a a8 eb c3 a3 9f 68 9b 66 54 76 e1 d2 55 35 ce aa 69 7c 3a 22 b4 8b 22 d7 19 b1 b5 71 35 cf a1 9a a9 e7 d1 cf a4 5e c5 4f 5e 7a e7 d2 c0 00 00 02 6a 00 02 a4 9a 17 00 02 d1 9a 05 c1 35 68 9a d5 22 68 c6 ad 13 49 a6 6a 7a c0 58 00 00 00 00 00 00 00 00 00 00 00 00 00 06 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c6 80 66 80 00 11 60 00 00 00 00 00 00 00 00 00 00 73 Data Ascii: ',9j,76+6xM}pmZwq[E",FM/>5Ed]*cE.&ufhfTvU5i\|:""q5^O^zj5h"hIjzXhf`s
2024-04-26 15:33:24 UTC	1734	IN	Data Raw: d7 a7 b6 39 24 0a ea 1e 1d e5 b4 e4 95 82 72 61 b6 db 91 96 28 a4 7b 5a b7 cf 50 3c e9 c9 df bf 66 ff 00 49 40 f7 dc 6b dc 6f af 86 8e 9c be 79 d2 d5 e8 69 e7 19 71 0e 36 b5 21 67 58 a7 a5 5a c3 27 cc 16 4b 5d ef f6 c7 3b df ed 8f d3 e8 3a 12 25 49 5d 90 e6 50 b6 24 e4 03 86 04 83 8c 77 0d b1 b0 b7 0c ed 98 d2 06 8d 2d d1 23 5e 79 f7 dc cb 8f 3a b7 17 0b 69 9f af be 87 a3 a4 df 6b 3a 9b 68 b3 78 13 d4 cf c2 51 25 b1 29 40 5b e0 08 0d e4 ff 00 9e 70 44 47 18 48 64 a3 ba f3 7e f5 a7 94 3e e3 55 08 1e 98 e7 68 a7 55 9b 93 4d 7e e2 b3 d3 82 7d ac 6e 56 f2 94 d7 61 91 8c 74 c6 fb 75 6b bf 9e da 95 d7 18 c7 18 20 81 1e 43 c3 bc b6 9c 90 b0 4e 4b b6 db 72 12 c5 14 8f e5 cc 7e ab aa 93 8c de 60 b1 9c 63 8e e7 38 1d ff 00 87 59 f7 9c 7e 6e 51 c7 33 d5 79 c7 5f 63 Data Ascii: 9$ra({ZP<fI@koyiq6!gXZ'K];:%I]P$w-#^y:ik:hxQ%)@[pDGHd~>UhUM~}nVatuk CNKr~`c8Y~nQ3y_c
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 34 fd b2 fc 59 22 f7 83 85 d5 b4 8a f1 ed c8 45 c3 65 82 54 8c 29 0a 42 be 8a b4 9e b6 5e 56 b5 c0 f5 56 e4 ab 43 d4 ed 9e a1 12 2f 80 3e bc d7 32 57 d3 96 96 57 e0 07 5f d3 b4 88 16 51 8c 81 eb 2f a6 12 b1 86 b0 df c9 d1 9d dd 8b af 69 d9 a9 4f c9 35 14 d2 0a fe 3b a6 2b 7f 38 2e 80 a9 69 ff 00 26 c3 20 c4 3c 2c 94 83 fe e6 a5 4f 76 4a 48 d3 1d cf 57 3b 38 58 b0 87 a4 e0 dd cf 5c ed 6a ca 2c 54 d9 41 d2 df 7d e7 11 94 2d 48 56 3d fd 7a 73 45 d3 98 83 ab e2 55 e4 63 26 ed 6d 84 8a 34 2a 72 36 30 b9 09 2b 0c cc b9 2b 28 e9 27 9d 77 5e 6d 09 da 9c 90 ad ba 63 af c6 c7 94 c9 82 b0 53 0b c2 9b ed 27 f7 ac 27 1b fa c6 f9 44 5e 13 4f 81 e6 e6 be bf 4b 86 65 a8 f7 32 89 37 65 a5 1e 2d 46 38 7b ca 23 44 df 0e b2 04 74 4c 9b f9 74 97 87 1c 96 f1 87 d8 43 98 db 7b Data Ascii: 4Y"EeT)B^VVC/>2WW_Q/iO5;+8.i& <,OvJHW;8X\j,TA}-HV=zsEUc&m4*r60++('w^mcS''D^OKe27e-F8{#DtLtC{
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 1e 51 8f 67 aa f5 2f 9e a0 f8 ff 00 d5 39 cb 4f 99 26 39 8f dc f6 34 4d ad b8 0b 62 45 21 7d 18 79 a4 1c cb cc b8 9f cc d9 1a 56 72 1c e2 cf 86 17 25 47 fc dc 9f cb b8 6b 10 a6 e5 7a cb 4b cb 1d 22 1c ac f3 1e ac 0e 54 c8 8c e7 2a ce 10 d6 d6 b4 22 d3 72 91 25 8c e7 d5 b1 8c e7 38 4e 31 d7 35 dd 0b 67 9e 8c 6c f7 4c 60 2c 5a ea 52 f4 f9 1f 51 93 67 ba bd 4f 4e 8d ba ca 49 c7 9d de c7 2c fa 3a e1 04 e3 8b 14 7f 5e 15 da dd 81 87 32 da e1 0d eb 5e d6 57 0b 11 48 65 98 97 99 45 2a ba dd 46 be 1c 43 4a c2 b9 da 46 71 84 03 11 06 95 a7 2e 86 21 07 94 c0 a3 b7 95 bc df 67 5b 62 e3 7d 69 67 8c 82 65 a2 8d 84 3c 90 0e 67 2d 11 e9 aa 59 09 aa cf 47 ca 30 bc e3 95 fb 30 16 78 a1 64 a3 dc 4e 5b d9 1a 96 36 f2 8c 12 c3 a8 12 4a 7f 57 dc 6b c4 38 d1 11 2e b8 94 57 27 Data Ascii: Qg/9O&94MbE!}yVr%GkzK"T"r%8N15glL`,ZRQgONI,:^2^WHeEFCJFq.!g[b}ige<g-YG00xdN[6JWk8.W'
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 83 af b6 14 cd 4e 70 35 fa eb 8b 09 a5 b6 f3 2d 3b 8f 7e 36 c5 d9 ba 0c 1e 51 18 d2 5a 38 99 a9 62 cb 51 8f 1e f2 88 d0 97 83 e7 c4 3a 1e 48 a5 be f6 d5 86 6a 62 8b 38 ca fe 3e c7 67 9a 88 ec 04 5d 90 b6 30 b7 6f f7 36 28 f5 f2 24 d6 de 1c 76 c1 6e b0 58 cc 74 a3 e4 5e 56 6a 1b 0a c5 51 3d 97 85 90 71 43 d6 e7 03 b0 43 05 28 37 4c 37 da 47 ee 58 3e 21 0a 71 68 42 71 d5 5a 92 98 35 52 ac 1a f2 84 e4 cd d9 b3 8a 80 cb 70 50 cf e5 06 2a 56 49 64 7a ca ce 79 4f 68 9d 90 7c e3 8a ae 4b 3f e3 3b bc 6a e3 cd 54 0a 90 4b 38 f5 8e 69 cc f4 d7 b0 f8 e6 cf b8 e2 99 58 20 e6 d3 d4 b9 2b 0c d4 b1 ce 1c 6c 93 ee 91 a0 ef f2 66 48 bb 5d 93 37 2f 60 91 d8 21 9c b0 43 49 71 1b b3 66 1f 99 27 ab 50 e5 65 81 a3 2c 33 30 e6 34 60 52 0f 34 f5 0a c7 8b 5d 5a 32 51 6b c6 57 da Data Ascii: Np5-;~6QZ8bQ:Hjb8>g]0o6($vnXt^VjQ=qCC(7L7GX>!qhBqZ5RpP*VIdzyOh\|K?;jTK8iX +lfH]7/`!CIqf'Pe,304`R4]Z2QkW
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 07 6b 31 37 48 89 e3 1c 6f 0e ee 4a d9 cc 5a 49 9a 6d 9c ba 1d 7d 82 29 3a b2 c6 79 68 f0 5f 0f 61 ea b7 ab 11 90 92 d5 f9 07 11 ac 25 b5 79 7f 3a be 6d c1 96 2f 2c b3 15 b6 ac 0c 1d 4f 01 c0 c7 56 cd b6 2b 19 c6 5d 07 8e 38 a7 9c 5b 8a e9 de d2 9f 6a b1 f0 df b6 97 c8 1b 05 e2 a2 d0 ef 45 be 4b 0c c1 49 59 86 83 b0 5d 6d 66 bf 8c be ea 9f 71 c7 97 f4 b9 a9 fc f9 07 cb e7 ba e3 34 ae 2b 62 ea 43 e0 e2 e2 e4 eb d2 2e b7 42 95 d6 04 d7 ae ae c2 d7 cb 1c 29 a1 22 ec 76 15 b1 4d 87 21 23 e9 b3 15 11 68 98 85 33 3e 03 b3 75 09 a8 a9 f7 e2 14 03 b9 23 64 bb 9a e5 2e 9f 52 52 f1 97 b6 20 c7 5a 28 b4 f9 b0 3a 92 d6 8e 00 f8 c9 b3 ec 04 8e a4 46 49 be d9 32 52 0f b7 9e a8 d5 d2 ec c1 de 20 8d 7b a7 73 6b 54 65 61 ad 92 a5 a8 55 2c 6d 31 5b 3d 99 72 2c 07 36 a1 a3 Data Ascii: k17HoJZIm}):yh_a%y:m/,OV+]8[jEKIY]mfq4+bC.B)"vM!#h3>u#d.RR Z(:FI2R {skTeaU,m1[=r,6
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 80 42 32 7c 14 78 98 89 be d6 a3 2c 2b 1e 2d fb 46 70 da 8b 7b 2b 59 e1 4a 29 12 e3 81 c4 01 4f 98 39 ed 52 67 8b 29 1e 67 88 52 61 e5 b8 11 e7 7d 95 9f 70 45 e7 95 83 b8 fc 91 fa ab 3e e0 83 9e e0 3f dd a7 b8 1b 49 19 0a a2 22 05 ce c1 dd 34 4f c5 5c 00 3d 0e 6f f2 1d 41 7e 23 38 4f f2 75 ea 6a 77 f5 00 c2 58 81 d5 c1 ec 00 cd 36 9f 66 a6 c4 21 83 39 f9 0b c5 46 ac f3 7c 4e ae c4 d6 ce 01 71 ea 1d f1 9d 88 f6 13 e7 39 c2 a2 0c 93 1f 95 96 11 28 b9 ea 62 3b ca 1c 7c a3 1c 2a 28 c9 27 d4 23 72 b2 c2 26 96 fb 29 72 39 12 87 07 a3 51 a7 45 a1 9c e0 31 0d 12 97 2e 8e 40 de 00 ed 51 1e fb 1a b1 e0 a5 89 1f b0 31 01 54 0c 92 4c 70 0a 68 bd 5f 6e 2f 3c 00 17 fb cf aa d7 a2 fb cc fb 0c af 8f cb 30 82 57 51 50 c4 6e da 6e 5f 98 e3 a7 ca 28 2d 67 f0 af b9 66 a3 f5 Data Ascii: B2\|x,+-Fp{+YJ)O9Rg)gRa}pE>?I"4O\=oA~#8OujwX6f!9F\|Nq9(b;\|*('#r&)r9QE1.@Q1TLph_n/<0WQPnn_(-gf
2024-04-26 15:33:24 UTC	4096	IN	Data Raw: 5d 4f 6b 00 71 c3 56 c9 c9 9b 4c 6d 53 6d 61 fb f3 57 fa 7b eb 6b 91 4a 31 9a ab 14 39 a6 d0 f8 4e f0 71 e6 55 70 e2 8f 15 8c 01 c1 bd 66 ac 0b 59 a9 70 e0 58 7b 5a 6a 0f fa 45 43 e2 8e 3e 61 61 bc 7b 44 24 97 b6 da 93 de 63 a9 15 ae 9d 47 0a b8 74 d9 d4 0b 6f 50 e1 f3 de 0c 4a dc 13 4b 87 80 e6 55 a6 01 95 b5 08 08 87 49 50 df 53 87 1d 02 b3 e9 da e1 04 b3 45 72 2a 2d e8 58 92 b3 71 e8 5c e6 bb 2e 45 61 12 97 0e 69 70 e0 1c c1 6a 64 fe 31 74 d5 82 a6 f4 04 1c 46 54 c5 95 30 65 38 51 05 a9 93 f8 c5 d3 d6 0a 9d 42 02 08 58 ea 98 b2 a6 0c a7 0a 3a 05 6e 1a cb 5c 22 88 6a 60 3f d2 12 35 cc 54 88 68 60 1e d7 08 25 9a 46 0a 8b 7a 12 4e 47 45 6c 77 d5 65 81 5a 1f a7 c2 56 9c b9 2d 71 c1 4e 3a 76 a2 03 de a6 58 e5 9d bd 6c 72 4c a2 d4 b1 7d aa 73 36 8e 35 0e 42 Data Ascii: ]OkqVLmSmaW{kJ19NqUpfYpX{ZjEC>aa{D$cGtoPJKUIPSEr*-Xq\.Eaipjd1tFT0e8QBX:n\"j`?5Th`%FzNGElweZV-qN:vXlrL}s65B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49811	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:24 UTC	872	OUT	GET /1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:24 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Fri, 26 Apr 2024 15:33:24 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-mia-kmia1760095-MIA
2024-04-26 15:33:24 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49815	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:25 UTC	555	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:25 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:25 GMT Content-Type: application/octet-stream Content-Length: 39734 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:25 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30R5F9T87U:00000005 Content-Disposition: attachment; filename*=utf-8''2acae5d3-2811-4025-aea0-7972a7f5879b.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:25 UTC	3620	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 f4 01 82 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 6c dc d2 11 be 52 a7 39 6c 71 9e df 40 3a d7 47 0e 83 a5 dc 78 e7 45 48 6d c9 d1 b5 58 d6 78 a2 2e 7e 51 b4 ee 42 7a e4 30 ae 31 b8 76 03 a0 62 05 54 1c 24 f4 26 6a 4b 73 47 fb 66 79 2f 64 96 e9 e6 b8 86 51 22 34 6f 21 c8 47 eb 82 7a 1e 9f 95 49 6b aa 5b e9 f2 41 f6 48 a6 28 93 09 9d a5 65 dc cc 14 aa 81 8e 00 1b 89 f7 ad bf 0c 68 5a 5d d6 92 ad aa ab 7d a3 54 9d ad 34 f7 dc 40 8d 95 49 de 7d 46 ed ab 55 b4 cd 2a d6 c7 47 8e fa fb 4d 3a 85 fd cd eb 59 5b d9 b4 86 38 d5 97 ef 16 23 04 9c f0 06 45 4b 9c 35 8d b6 fc 4a 51 96 8c c3 be bf 7b f4 b6 33 6e 33 45 1f 96 c7 3f 2b 60 f0 40 ec 7d 7d 7a d5 3a ee ec fc 3b 6f 2f 8b ad ed ef 3c 3e f6 51 4d 65 2c bf 64 96 eb 72 3c 8a 3a ab 83 90 b9 c7 53 45 ae 8b 69 73 e2 7d 1a ce f7 43 b0 b4 b7 9d a4 f3 12 d2 fc cf e6 80 Data Ascii: lR9lq@:GxEHmXx.~QBz01vbT$&jKsGfy/dQ"4o!GzIk[AH(ehZ]}T4@I}FU*GM:Y[8#EK5JQ{3n3E?+`@}}z:;o/<>QMe,dr<:SEis}C
2024-04-26 15:33:25 UTC	1636	IN	Data Raw: b5 56 d2 d9 19 4a 5b c4 a5 57 6a 90 80 60 67 38 fa 66 95 6d 6d d3 3b 61 8c 65 b7 1c 28 e4 fa fd 68 03 17 fe 12 2d 35 10 dc 7d 9a 50 a9 95 2e 23 5c ae 17 73 0c 67 3c 01 f4 f4 cd 55 7d 5b 42 fb 4c 52 35 93 f9 91 21 db fb a0 02 02 70 d9 19 c0 fb dc 9f 43 5d 27 d9 ad f7 33 79 11 6e 61 b4 9d 83 24 7a 53 7e c5 68 46 0d b4 3d 00 ff 00 56 3a 0e 94 01 8c 75 cd 32 5b 06 95 2c 9a 4b 65 90 44 41 89 40 c6 09 c8 07 82 3e 5e 9d 7a 52 45 ae e9 90 99 6d a3 b6 9b 2a e5 e4 1b 41 e4 92 59 8f 3c e0 e7 3e f5 b9 f6 68 30 cb e4 c7 86 6d cc 36 8e 4f af d6 81 6f 00 66 61 0c 61 9b ef 1d a3 27 eb 40 18 5f f0 90 69 52 00 cd 6c df 21 c6 1a 34 ca b7 cd 85 c6 72 1b 83 fe 4d 33 fe 12 2d 1e 7d ae 6d 1d f7 46 c7 26 00 7e 41 d7 f0 cf 1f 87 e3 5b 8b a7 d9 23 b3 ad ac 01 9d 76 b1 08 39 1e 9f Data Ascii: VJ[Wj`g8fmm;ae(h-5}P.#\sg<U}[BLR5!pC]'3yna$zS~hF=V:u2[,KeDA@>^zREm*AY<>h0m6Oofaa'@_iRl!4rM3-}mF&~A[#v9
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: a4 bb 52 61 58 90 e1 5c 15 05 13 93 92 3e 6c b7 18 f4 a7 db 6a 5a b4 92 5d c2 f6 c0 cd 14 3b 82 ac 78 50 f9 18 01 b3 cf 19 38 fc 2a cb 1d 67 fb 09 76 ac 7f da 3b 80 6c ed e5 77 72 47 6c e3 b5 55 94 78 94 a6 d5 f2 0b 0f 94 32 00 03 1e 0e 4e 4f 03 92 30 32 72 a0 f7 a0 04 37 3e 23 36 bb 9a 08 d5 d9 48 21 10 16 43 81 82 01 6e 72 73 f4 a9 64 6d 75 2e 77 45 b5 91 63 52 11 d4 6d 66 c2 e4 6e ce 7a ee 39 ed 4c 58 bc 45 88 53 cc 8d 42 0d 8c fc 12 c3 00 ee 39 e3 39 e3 f0 27 bd 4d a6 4d a9 cd 35 e4 77 88 50 a2 80 ac 10 05 df 96 fb a7 b8 c6 de b4 01 13 4d af be 9d 0c 9e 4a 2d d7 98 77 c6 a0 00 57 6f 19 24 f1 f3 77 1d b1 55 62 bd d7 af 63 96 6b 70 15 54 14 19 84 0c b6 39 20 16 ec 78 1d 8e 2a 55 87 c4 90 c3 14 69 2a c8 42 e0 b3 ed 3c e3 92 c7 a9 3d c6 3b f5 e2 af c1 1e Data Ascii: RaX\>ljZ];xP8gv;lwrGlUx2NO02r7>#6H!Cnrsdmu.wEcRmfnz9LXESB99'MM5wPMJ-wWo$wUbckpT9 xUi*B<=;
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: ad ae 00 85 ce 09 42 38 c0 50 78 fc 06 7e a6 aa ff 00 c2 21 68 21 11 2d c4 aa 30 03 10 06 5b 19 c6 78 ed 9f cf 9a 55 f0 8d 9a b1 61 3c c4 e3 f8 88 38 39 24 1f d7 91 d0 f7 a0 04 87 c3 ba 58 82 2d b3 99 17 0c 37 92 a7 77 1b 73 9c 73 8c 71 e9 51 dc 78 76 c4 80 d7 1a 8c a2 35 e9 b9 94 05 1c e3 9c 7d 79 3d 6a d9 f0 dc 3e 54 68 b7 0e bb 22 68 b3 b1 7a 12 4f 1c 7c bc 93 d3 1c 71 55 53 c1 d6 a1 0a 3d c4 8c 83 ee 00 ab d3 68 18 6e 3e 61 c7 43 c5 20 2e 6a 5a 65 96 a5 71 1f 9b 73 b1 92 36 5c 29 5c ed c8 24 82 79 18 38 e9 eb 55 66 f0 ec 0f be 51 7b be 6c ef dd 22 a6 37 73 8c f1 c2 f3 f7 7a 1a 9a 3f 0c 5b 21 bb 2d 3c 92 35 ca 32 3e f0 31 c9 07 38 f5 e0 54 23 c2 30 36 7c eb a9 1c 86 ca 9d a0 64 63 1f 36 3e f7 e3 d3 b5 30 21 8f c3 56 16 d0 79 97 57 6a 5c 11 b9 98 0d a1 Data Ascii: B8Px~!h!-0[xUa<89$X-7wssqQxv5}y=j>Th"hzO\|qUS=hn>aC .jZeqs6\)\$y8UfQ{l"7sz?[!-<52>18T#06\|dc6>0!VyWj\
2024-04-26 15:33:25 UTC	1594	IN	Data Raw: dd bd 9c 5e 6d cc f1 c3 1e 71 be 47 0a 33 e9 93 40 12 79 71 e7 3b 17 38 c6 71 da 93 ca 8c c9 e6 18 d7 7e 31 bb 1c e3 eb 4a 92 2c 91 ab c6 c1 91 86 55 94 e4 11 ed 49 1c 89 2c 6b 24 6c 1d 18 64 32 9c 83 40 0e da be 83 f2 a8 c5 b4 01 76 88 63 0b 9c e3 60 c6 69 cd 2a 2b aa 33 28 77 ce d5 27 93 8e b8 a4 8e 78 a6 69 16 29 11 cc 6d b1 c2 b0 3b 5b d0 fa 1e 68 01 b2 da db ce c1 a5 86 37 20 82 0b 28 3c 8e 94 b1 db 43 16 ef 2e 24 5d cc 5c e1 47 24 f2 4f d6 a5 a6 34 88 85 43 b0 5d c7 6a e4 f5 3e 94 00 d1 6d 00 1c 43 18 c0 c7 08 3a 75 a7 08 a3 1b b1 1a 8d c7 27 03 a9 a7 d5 6b 7d 42 ce ed dd 2d ae a1 9d a3 fb e2 39 03 15 fa e3 a5 00 4e 91 a4 63 08 8a a3 d1 46 29 d4 94 06 0d d0 83 83 83 83 40 0b 45 41 f6 db 5f b5 fd 90 5c c3 f6 90 33 e4 ef 1b f1 eb 8e b5 31 20 02 49 c0 Data Ascii: ^mqG3@yq;8q~1J,UI,k$ld2@vc`i*+3(w'xi)m;[h7 (<C.$]\G$O4C]j>mC:u'k}B-9NcF)@EA_\31 I
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: ad 46 7c 45 74 f2 9f 2f 4e 93 cb 57 65 c6 1b 73 e0 ae 30 31 e8 4f 5f 4a 00 e8 e8 ae 7c 78 86 e9 a0 32 ae 9a 59 54 1c b0 72 01 38 62 31 95 1c 7c b8 24 e3 9a b5 77 ac b5 be 91 0d f2 5a 49 23 4b b7 f7 40 10 46 46 7d 38 e9 f9 e2 80 35 a8 ac 7b 6d 62 e2 7d 49 2d 1f 4f 92 35 65 2d e6 16 ed 92 07 6f 61 9f f7 85 32 e3 5b 96 d6 ee e2 17 b4 67 28 d8 88 26 ec b8 c2 9f 4e bf 31 fc a8 03 6e 8a c1 93 5a be 46 00 e9 8c 4e ed a3 6b 12 0f 5e a7 6f 03 38 f5 e2 a6 b3 d6 de e3 52 4b 29 2d 84 4e c8 58 82 e7 3c 01 93 8c 7d de 70 0e 7b 74 a0 0d 8a 28 a2 80 2b cf ff 00 1f 36 df ef 37 fe 82 6a c5 57 9f fe 3e 6d bf de 6f fd 04 d5 8a 00 2a af f6 8d a1 9c 42 b3 06 94 be cd aa 32 73 ff 00 d6 ef e9 56 ab 26 cf 44 16 77 a2 7f b4 3b a2 16 f2 d0 83 f2 e7 a8 ce 7a 7d 00 f7 e9 4d 5b a8 9d Data Ascii: F\|Et/NWes01O_J\|x2YTr8b1\|$wZI#K@FF}85{mb}I-O5e-oa2[g(&N1nZFNk^o8RK)-NX<}p{t(+67jW>mo*B2sV&Dw;z}M[
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 54 9c e3 e5 19 ee 32 7e 6e 87 1c 56 f7 1e d4 71 ed 40 1c f7 f6 ce ae e6 6f 2b 4b 0f b0 bf cb f3 0c 15 dd f2 e7 a3 13 81 c8 e2 94 ea 7a e9 8c b0 d3 93 01 7a 00 db 89 e3 a6 7a 75 e8 7d 0d 6f 86 42 48 0c a4 8e a3 3d 29 7e 5f 6a 00 c1 b3 d5 75 79 6e e1 8a 5d 2f 64 6c e4 4b 2e 18 0c 7b 7e 1d ce 33 d0 53 e0 d4 75 59 a4 94 3e 9e 23 45 47 21 8a b0 39 1f 75 46 7a 9f 7e 87 b5 6d fc be d4 80 a1 c8 04 1c 1e 79 e9 40 18 7f 6f d6 0d 8b b9 b4 54 94 14 2a a1 19 8e 0b 10 c0 8f 50 00 3f 8d 3a cf 50 d5 da f2 1b 7b 9b 05 08 57 f7 93 0c 80 4e 33 c7 a6 0e 06 0f 5c f1 d2 b6 f0 be d4 60 50 07 38 75 5d 68 32 b8 d3 cb 06 51 94 f2 9c 6d 6c 9c a6 7d 7a 0d df 77 8c f7 a9 7f b5 b5 39 67 81 45 84 91 44 5d 3c c6 68 98 92 30 37 81 e9 8e 79 3d 7b 56 f6 17 af 14 60 7b 50 00 0e 46 45 2d 27 Data Ascii: T2~nVq@o+Kzzzu}oBH=)~_juyn]/dlK.{~3SuY>#EG!9uFz~my@oT*P?:P{WN3\`P8u]h2Qml}zw9gED]<h07y={V`{PFE-'
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: bb 7c 9b f2 50 0c ee df 9c 6f 1b f1 9c 76 a0 0e 82 4f 09 e8 12 fd 9f cc d2 ed d8 5b 45 e4 c3 95 fb 88 33 85 1e dc 9f cc d5 3b 5f 05 f8 72 3d 52 7b c8 60 47 90 a8 8c c3 b8 18 e2 e3 07 0a 3a 12 07 24 d4 1e 19 d1 bc 43 a6 6a 97 b2 6a 17 c9 71 69 2c 98 5f 36 57 79 18 0d c4 30 04 ed 52 77 00 40 e3 0a 38 ac c8 fe 1d 6a 16 9a 9e a3 7f 63 ae ad bc d7 92 c8 df 2c 0d c2 bb 48 c4 12 1c 64 8f 33 8e 9c a8 34 01 d2 ff 00 c2 29 a2 36 a6 d7 af 68 92 5c 05 8d 54 31 c8 8c 27 dd da 3b 74 eb 47 fc 22 1e 1f cb 37 f6 55 b6 5c b1 6f 97 ef 6e e0 83 ea a7 fb bd 3d ab 92 b8 f0 27 88 ad ee 56 6b 3d 7a 59 a5 9a 64 f3 a5 79 64 8d 82 29 27 79 f9 8e e6 00 90 17 85 e7 ee d6 e6 81 e1 2b cd 27 53 8a fe eb 5a 9b 51 91 61 96 16 33 16 e4 33 2b 02 3e 6c 0f ba 73 c1 eb c6 28 02 fb f8 37 c3 b2 Data Ascii: \|PovO[E3;_r=R{`G:$Cjjqi,_6Wy0Rw@8jc,Hd34)6h\T1';tG"7U\on='Vk=zYdyd)'y+'SZQa33+>ls(7
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: eb 83 40 1e 97 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 5c c2 e8 82 66 75 8b 59 0d e6 87 31 85 25 99 46 ef 9b 69 dd cf 3f 2b 67 3e 9c 57 4f 5c a8 f0 de 9f 39 65 b7 d4 8e e9 55 f6 85 2a df 2e f0 5f 00 76 df c9 f7 34 01 3b f8 70 bc 4d 0c 7a a4 ab 26 00 72 49 27 18 1b 7f 8b 8c 15 24 7d 6a 19 b4 78 23 b9 54 6d 6c 47 21 19 2a ce 43 70 79 61 f3 70 4f 20 f5 e3 35 33 f8 4e 12 b8 5b db 85 25 42 b6 70 43 10 c5 b2 47 72 73 83 ed c5 3d 7c 29 67 b2 64 69 24 6f 30 7c a7 3f 74 e4 9d d8 e8 c7 e6 3c 9c d0 05 f8 74 e9 23 d1 0e 9e 6e db 7f 96 c8 26 51 82 33 9c 77 ed f5 a8 2c 34 53 67 70 93 b5 db c8 cb 9f 97 90 a1 4e 7e 50 09 3c 0c fb f4 aa 12 78 6a 0b 78 24 f3 b5 26 55 93 20 bc 80 70 49 07 e5 39 e3 38 e7 d7 da ac cb e1 b4 97 c8 db 74 ea 22 84 44 43 2e e0 f8 6d df 30 Data Ascii: @EPEPEPEP\fuY1%Fi?+g>WO\9eU._v4;pMz&rI'$}jx#TmlG!CpyapO 53N[%BpCGrs=\|)gdi$o0\|?t<t#n&Q3w,4SgpN~P<xjx$&U pI98t"DC.m0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49816	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:25 UTC	563	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:25 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:25 GMT Content-Type: application/octet-stream Content-Length: 29288 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:25 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30R4B3I6AT:00000003 Content-Disposition: attachment; filename*=utf-8''551b630b-f274-454a-a270-9fbd8cbd7632.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:25 UTC	2362	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 82 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: f1 b9 37 16 ca 8f 22 ed 20 00 d9 c7 3d fa 52 49 b1 dc b7 45 55 4b e8 e4 be 9a cd 56 4f 36 25 57 62 63 21 48 3d 30 dd 09 e3 b5 47 79 ab d9 58 3c 49 3c c0 3c b3 24 2a ab f3 10 cf 9d b9 03 a0 38 3c 9a 69 36 ec 85 74 5e a2 a9 df 6a 56 da 72 c0 d7 4e 54 4f 32 c1 1e 14 9c bb 74 1c 53 ad af a3 ba 7b 85 8d 64 06 09 0c 4f be 32 b9 23 d3 3d 47 3d 47 14 59 da e1 74 5a a2 a8 4b ab d9 c5 a8 5b d8 99 83 5c 4e ce a8 ab f3 60 a8 dc 41 c7 43 83 de ac 4b 7b 6f 04 f0 43 34 c8 92 ce c5 62 56 3c b9 03 24 0f c2 8b 30 ba 27 a2 93 35 52 fb 52 b6 d3 84 06 e5 8a f9 f3 2c 11 e1 49 cb b7 41 ed d2 84 9b 76 43 bd 8b 94 55 49 b5 2b 7b 7d 46 d6 c2 47 22 e2 e8 39 89 76 92 0e d1 93 cf 6a b5 9a 1a 68 2e 2d 14 94 b4 80 28 a2 8a 00 29 b2 7f ab 6f a1 a7 53 64 ff 00 56 df 43 40 1e 3d f1 fb fe Data Ascii: 7" =RIEUKVO6%Wbc!H=0GyX<I<<$*8<i6t^jVrNTO2tS{dO2#=G=GYtZK[\N`ACK{oC4bV<$0'5RR,IAvCUI+{}FG"9vjh.-()oSdVC@=
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 44 ff 00 af b3 ff 00 a2 cd 78 1d 7b e7 c7 ef f9 16 34 4f fa fb 3f fa 2c d7 81 d7 55 2f 84 c6 7b 85 14 51 5a 10 14 51 45 00 6a 69 ba d3 69 b6 77 16 ab 69 04 c9 73 95 9c c9 9c b2 6d 2b b4 63 a6 32 4f 7e 71 e9 57 9f c5 d3 5c 46 b1 dd 59 c7 2a 2e 57 22 42 ac 50 c4 63 d9 9c 74 19 24 7a 67 1d 2b 9d a2 93 49 85 cd ab 6f 10 98 35 29 ae cd a2 b4 72 5b 0b 51 16 ff 00 ba 83 6e 3e 66 07 27 e5 1c 91 52 5a f8 9d ed 23 b1 85 6c 91 a2 b2 95 a6 88 19 0e 4b 38 21 f3 c6 0e 72 3b 71 8f 73 58 34 51 64 3b 9a d2 eb 6b 24 6a 3e c6 03 43 29 96 dd fc d2 3c b2 48 27 20 00 1b 95 f4 14 b7 3a ef 9c cf e5 59 a4 28 d1 4e 85 7c c2 df 34 dc bb 67 f9 0a c8 a2 8b 21 5c dc ff 00 84 96 46 d8 cd 66 86 58 41 f2 1c 48 c0 21 31 ac 64 95 fe 2e 14 1e 7f 51 4c d4 bc 47 71 aa 5b 43 0c d0 46 0c 33 09 Data Ascii: Dx{4O?,U/{QZQEjiiwism+c2O~qW\FY*.W"BPct$zg+Io5)r[Qn>f'RZ#lK8!r;qsX4Qd;k$j>C)<H' :Y(N\|4g!\FfXAH!1d.QLGq[CF3
2024-04-26 15:33:25 UTC	2992	IN	Data Raw: 71 13 61 4b 1c 38 38 03 a9 fa 52 1b eb 60 40 33 20 05 55 83 13 f2 90 4e 07 3d 39 c5 00 58 a2 a2 37 30 a8 90 b4 b1 81 1f df 25 87 cb f5 f4 a3 ed 10 ee db e6 c7 bb 66 fc 6e 19 db eb f4 f7 a0 09 68 a8 16 f2 d9 81 2b 71 11 00 6e 24 38 e0 74 cf d2 9c 2e a0 25 40 9a 33 b9 77 ae 1c 72 be a3 db de 80 25 a2 a2 5b 98 5d 37 24 b1 b2 fa 86 04 75 c7 f3 e2 98 2f 6d 8b b2 79 ca ac a4 82 ac 70 78 eb 8c f5 1e f4 01 62 8a af 0d fd a5 c4 4b 24 37 50 c8 8c 9e 62 b2 c8 08 29 fd ef a7 bd 30 ea 76 42 55 8b ed 31 34 8c a1 d5 11 83 31 52 76 82 00 e7 19 38 cd 00 5b a2 a1 fb 65 b6 d0 df 68 8b 6b 36 d0 77 8c 13 e9 f5 a8 e6 d4 6d 2d cf ef 6e 11 4f 98 23 c6 72 43 11 90 0e 3a 70 09 a0 0b 54 55 64 bf b6 92 d1 6e 96 65 30 b2 79 81 b3 fc 38 ce 7f 2a 58 af 6d a6 48 99 26 43 e6 ae e4 19 c1 Data Ascii: qaK88R`@3 UN=9X70%fnh+qn$8t.%@3wr%[]7$u/mypxbK$7Pb)0vBU141Rv8[ehk6wm-nO#rC:pTUdne0y8*XmH&C
2024-04-26 15:33:25 UTC	2796	IN	Data Raw: 67 e2 1b bd 16 d4 99 15 2f a4 63 34 c0 b0 c4 04 a6 d5 55 c8 fe 12 41 cf a8 3e b4 fb cd 33 59 7d 15 ed 22 9d a4 97 ed 12 ba 3c 92 fc c2 30 ad e5 8d d8 eb bb 61 cf 6f c2 8b be e1 65 d8 4b cf 07 ad e5 a5 94 22 fa 58 5a d6 d5 60 56 8e 31 cb a9 52 92 63 3d 54 a9 20 7a 9c f6 a3 fe 10 ab 6f b4 06 f3 54 c3 9e 62 68 81 ca ef 8d b6 e7 3d 31 18 53 eb 93 53 e8 56 3a ad 9e a3 28 b9 92 73 64 b0 aa 44 26 9c 48 41 00 0e dd 7a 13 93 83 92 7a f0 47 45 49 c9 ad 2e 3b 27 d0 e6 2f bc 23 f6 cd 26 df 4e 5b d3 1c 51 19 4b 62 21 f3 19 09 24 80 08 da 46 e6 03 b7 3d 2b a6 50 15 42 81 80 06 05 2d 15 2d b6 3b 24 14 51 45 21 85 36 4f f5 6d f4 34 ea 6c 9f ea db e8 68 03 cf 3e 2a ae ed 0f 4c 1f f4 dc ff 00 e8 06 bc a0 a9 43 cb 62 bd 5b e2 bb 94 d0 b4 c2 33 93 3f 6f f7 0d 79 21 20 f7 27 Data Ascii: g/c4UA>3Y}"<0aoeK"XZ`V1Rc=T zoTbh=1SSV:(sdD&HAzzGEI.;'/#&N[QKb!$F=+PB--;$QE!6Om4lh>*LCb[3?oy! '
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 27 cb db 3b 8e 3f 0e b4 5b c8 5f 32 9b f8 9f 52 8e 6b 54 4b 68 2e 62 93 2c d3 45 1c 8a 1d 43 60 84 07 9c 81 93 dc 1e 3d 78 af 75 e2 1d 7d 6d 41 68 21 86 40 ac ed b2 07 6c fe e3 78 41 fe d0 66 51 9e f8 3c 71 5b b6 7e 25 b3 be be 8e da dd 65 90 ca 81 d0 ac 67 81 b4 31 2d 9f ba 06 e5 fc 4d 6d 52 bd b7 43 df a9 87 a3 6a 77 77 b7 97 36 92 46 a6 3b 26 30 cb 39 cf ef 1f 82 b8 ed f7 4e 4f b9 03 d6 b7 2a 38 60 8a da 3d 90 c6 91 a6 4b 6d 45 00 64 9c 93 f5 26 a4 a9 65 20 a2 8a 29 00 51 45 14 00 53 64 ff 00 56 df 43 4e a6 c9 fe ad be 86 80 3c e3 e2 df fc 80 74 bf fa f8 ff 00 d9 0d 79 1e ec 72 48 00 77 35 eb 7f 17 7f e4 03 a5 7f d7 c1 ff 00 d0 0d 79 5c 52 c5 14 19 60 03 67 96 ef ed 5a c7 62 59 9c d1 c8 e4 98 d2 76 cf 70 81 47 3f 5a b9 6f 6b 30 60 4c 4e 46 f1 cb 48 b9 Data Ascii: ';?[_2RkTKh.b,EC`=xu}mAh!@lxAfQ<q[~%eg1-MmRCjww6F;&09NO*8`=KmEd&e )QESdVCN<tyrHw5y\R`gZbYvpG?Zok0`LNFH
2024-04-26 15:33:25 UTC	98	IN	Data Raw: 9e 4d c4 62 66 19 95 8e 1d 86 07 cd e4 e7 39 e0 1c 13 d4 e8 5a 69 de 34 1a 8c 73 cf a8 c7 c0 74 75 7c 34 1c 45 18 56 d8 30 d9 69 3c c6 ea 30 31 eb 5d ad 14 9c df 60 e5 47 05 79 a4 f8 d2 7b 8b 99 a2 d4 a6 88 b9 97 cb 8e 39 10 46 b8 78 c4 58 04 13 8d a2 47 3c f7 0b 55 2f b4 9f 1c ea 4d a8 23 3c Data Ascii: Mbf9Zi4stu\|4EV0i<01]`Gy{9FxXG<U/M#<
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 71 c5 2c f1 bc 31 cb 2a b4 69 b2 56 70 46 39 db 85 8c 63 be e3 91 c5 7a 45 14 d5 46 ba 07 29 e7 92 68 9e 2f 63 73 2d b5 cc d6 d2 48 0b 2b 79 d1 97 76 09 12 c6 1c ed c1 19 f3 98 e3 d8 77 a3 41 bb f1 26 a1 73 af dd 32 5e fd a2 38 e4 5b 08 2e 07 95 16 4b b6 de a3 01 80 0a 31 83 8e b9 e4 d7 a1 d2 52 75 2e ad 60 e5 3c f6 0d 2f c7 4f 6b 1a 4b 7f 34 6d 1b b3 21 f3 63 2c d9 96 30 03 f0 72 02 09 1b 03 fb c0 66 a5 b2 d2 bc 58 2e b5 5d 46 e8 b3 5f 0b 19 61 b2 0f 3a 14 12 bb 93 95 00 7c aa 02 c7 f7 b9 e0 d7 7d 45 1e d1 f6 0e 54 79 ce ab 6b e3 5d 2e 4b c9 2d af ae 6e ad a3 b5 f2 ad 8f c8 cd 24 8c 81 41 20 0c ee 12 31 6c e3 01 40 f7 15 37 f6 7f 8e 31 02 c7 75 30 8c cc ec 9e 64 f1 b3 c4 37 a6 3c d2 06 1d 76 89 38 5e ec 07 6c 8f 40 a4 a7 ed 3c 90 72 f9 9e 77 77 e1 df 15 Data Ascii: q,1*iVpF9czEF)h/cs-H+yvwA&s2^8[.K1Ru.`</OkK4m!c,0rfX.]F_a:\|}ETyk].K-n$A 1l@71u0d7<v8^l@<rww
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 11 37 53 f3 20 3d 46 0f e9 c5 25 9d 8d bd 8c 6e 96 e8 57 7b 99 1c 96 2c 59 8f 52 49 e4 9a 4d c6 db 05 99 62 8a 28 a9 28 28 a2 8a 00 28 a2 8a 00 29 b2 7f ab 6f a1 a7 53 64 ff 00 56 df 43 40 1e 3d f1 fb fe 45 8d 13 fe be cf fe 8b 35 e0 75 ef 9f 1f bf e4 58 d1 3f eb ec ff 00 e8 b3 5e 07 5d 54 be 13 19 fc 41 45 14 56 84 05 14 51 40 05 04 e0 66 8a 28 03 b6 d6 3c 03 16 97 75 73 6c 9a 8c d2 49 6f 61 35 e3 33 c2 81 5b cb 55 6d a3 0e 4f 3b b1 f3 01 d3 bd 33 5a f8 79 75 a4 e9 ef 79 0d d2 dd a1 92 da 18 04 69 cb c9 28 e5 0f 3f 2b 2f cb f5 0c 0d 72 ef aa df c9 77 73 76 f7 92 9b 8b a8 cc 53 ca 5b e6 95 08 00 a9 f5 04 00 2a c2 f8 8b 59 8e 56 91 75 3b 90 ed 2c 73 13 bf ac 88 36 a3 7d 40 e0 1a 8b 4b b9 57 47 41 aa fc 3e 9b 4a d5 e6 b2 92 f1 9a 34 d3 66 be 49 8c 25 77 b4 Data Ascii: 7S =F%nW{,YRIMb(((()oSdVC@=E5uX?^]TAEVQ@f(<uslIoa53[UmO;3Zyuyi(?+/rwsvS[*YVu;,s6}@KWGA>J4fI%w
2024-04-26 15:33:25 UTC	560	IN	Data Raw: 95 22 41 a8 c6 bb 56 75 65 00 e3 71 c9 fc f1 5a 54 50 05 28 63 bf 12 c6 65 99 59 39 de 00 ff 00 eb 55 da 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a Data Ascii: "AVueqZTP(ceY9U(((((((((((((((((((((((((((((((((((((((((((((((((((((((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49818	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:25 UTC	565	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:25 UTC	476	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:25 GMT Content-Type: application/octet-stream Content-Length: 25533 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:25 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30VGEQ1UBK:0000006C Content-Disposition: attachment; filename*=utf-8''93b6e874-5233-482c-8362-ef68a6f3547b.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:25 UTC	3620	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 01 82 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: a8 96 98 ad b2 e3 fb ec 4f f0 e2 b4 e5 8c 1b 89 72 3a b1 ac 8b 8b 3b d4 2d b5 c1 42 73 bb 3c e2 b4 a7 63 9a 6c cd d4 a4 8e 49 17 62 90 ca 31 93 dc 55 41 2b 84 da 18 80 6a 69 91 e4 93 95 c3 1e 29 ab 0b 2b 60 f1 5d 49 68 72 bb dc b9 6b a7 3d cc 3e 63 3e cf 41 8e b5 af 04 2b 04 41 17 b5 47 6c e3 ca 50 14 80 06 39 a9 f7 0a e7 9c 9b 37 84 52 d4 70 3d aa 45 62 38 a6 2e 0d 3c 01 9e 95 99 a9 6a 37 f5 ab 91 b1 ac f4 cf 6a bb 17 4a 96 86 8b a8 79 ab d0 b1 e3 15 9d 1b 74 ab b0 1c 8a 82 93 34 42 07 5c 1e f5 8f 7d 64 cb b8 95 24 13 c1 ad 98 4d 5a 65 56 8c 96 50 40 f5 a8 bd 8a 6a e7 0b 2d bb 26 72 2a a3 f0 6b a5 be 64 91 5f 2b 8c 76 02 b9 b9 d8 02 78 ad 11 9b 44 6a d8 35 32 c9 55 59 e9 be 65 31 1a 02 6c 54 8b 3d 66 79 b8 a7 2c b9 a0 0d 55 9b 9e 2a 78 f2 c4 13 59 b1 b8 Data Ascii: Or:;-Bs<clIb1UA+ji)+`]Ihrk=>c>A+AGlP97Rp=Eb8.<j7jJyt4B\}d$MZeVP@j-&rkd_+vxDj52UYe1lT=fy,UxY
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: e0 b0 b5 5c 45 12 e3 3d d8 f7 27 dc 9a bd 58 57 a8 a7 2f 77 65 a2 35 a7 1e 55 ae e1 45 14 56 25 85 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 51 40 1f 3e dd ff 00 c7 ec df ef 9a 8b 02 a4 bb ff 00 8f c9 bf df 35 1a d7 b6 b6 3c 96 38 2d 2e da 05 3a 98 86 ed a7 74 a2 8a 00 95 5c 81 c5 59 82 f6 48 f8 27 2b ef 54 a9 c0 f1 50 e2 9a 29 3b 1a df 6e 62 9b 8a 90 3e b5 11 bd dc 7b e2 a8 ee 38 eb f8 52 74 a8 74 d1 5e d1 97 64 9e 4d 9c 31 0a 7b 54 0f b9 d7 3b 89 a8 fc cf 97 19 cd 39 d9 7e ce d9 6c 6e 05 40 ee 4e 3f c3 35 9c a3 63 48 cb 99 d8 6a af 98 a0 8e 41 19 a0 c7 c5 49 06 05 bc 7e 9b 47 f2 a4 90 e6 a4 ab 90 f0 b4 fd e3 d6 a1 90 81 de a2 df 8f 5a 56 1d cb 0d 2e 0f 15 1b 49 9a 8f 70 a4 24 1e 9c d1 60 b8 33 d4 Data Ascii: \E='XW/we5UEV%Q@Q@Q@Q@Q@Q@Q@Q@Q@>5<8-.:t\YH'+TP);nb>{8Rtt^dM1{T;9~ln@N?5cHjAI~GZV.Ip$`3
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: eb c5 1a 61 d5 6d e7 63 13 a4 1b 82 c8 b9 de 43 0e 46 0f 1f ad 00 68 5a 4b 3d ee ad 77 a7 4d a9 5f 89 6d 80 2e 52 35 8d 0e 7a 60 8c 9a 87 4a 82 3d 5e 2b ff 00 3a ca 61 71 6d 2b 42 ab 73 70 f2 06 60 32 09 e4 71 9a c9 5f 18 c6 b7 57 17 24 07 79 13 62 b4 51 6d c6 0f 04 f2 73 8a ac be 2b 99 63 9a 34 8e 67 92 76 0c d2 e4 23 67 db 6e 29 01 d2 e9 50 cd 77 e1 99 66 8e d6 d6 d3 50 22 40 9e 54 23 e5 65 38 03 9f a5 69 f8 7d ee e5 d0 ed 4d eb 97 b9 2b fb d2 46 39 c9 ed 5c 14 ba dd fc 96 df 65 36 c8 63 2d bf f7 af b8 e7 dc 92 6a c5 a5 c7 89 66 b6 55 b2 47 58 01 21 44 40 85 f7 e9 8a 35 0b 9e 91 9c 70 01 3f 41 57 e3 27 81 83 cd 79 84 7a 17 89 6e 98 3c ae c8 73 d5 db ff 00 af 52 b9 d5 34 eb 87 45 9a 54 64 38 2c 32 01 fa 55 44 4c ea 7c 5f 3d e5 96 92 d3 59 42 8f 37 9c a3 Data Ascii: amcCFhZK=wM_m.R5z`J=^+:aqm+Bsp`2q_W$ybQms+c4gv#gn)PwfP"@T#e8i}M+F9\e6c-jfUGX!D@5p?AW'yzn<sR4ETd8,2UDL\|_=YB7
2024-04-26 15:33:25 UTC	42	IN	Data Raw: bc 97 11 de a5 9b 05 29 30 00 b2 c8 a1 64 60 0f 42 39 23 dc 8a ba 6c 75 2d 99 c5 cb 33 cd 71 e6 2b 4f 90 63 2a e2 3e 09 c6 39 Data Ascii: )0d`B9#lu-3q+Oc*>9
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 5f f2 2a b9 2d f6 85 7f 23 4d ad b4 80 b6 b7 8f 0d a8 11 85 5b 79 4a 81 b4 1f ba 14 fb f1 8a 92 75 d3 ae ae d2 19 d6 19 2e 10 1d aa d8 2c 07 71 fc b8 aa 73 da 5c 37 87 2d 6d 56 06 33 a0 83 72 64 71 b5 94 b7 7c 76 35 53 52 d0 ee 2e 67 b8 fb 3b 38 89 8c 93 90 c4 0c ca d1 18 c0 53 d4 0e 72 73 52 92 6f 56 17 6b 64 6d 5b ad 93 5d 5c 4b 02 c6 6e 01 09 33 a8 f9 b2 06 40 27 e8 7f 5a 49 2c 34 f4 66 b9 92 de 05 21 8c ad 21 50 30 71 82 d9 f5 c7 7a c3 b6 b5 bf b3 bc 17 42 de e1 63 0f 99 23 f3 41 0c 82 00 31 8d d8 ce f5 ff 00 22 ba 07 95 9a c4 ca b6 cf 23 18 f7 08 4e 03 13 8c ed e7 8c d2 92 b3 d1 8d 3b ee 67 c6 ba 03 47 6b 75 1a 59 14 88 94 b7 90 05 f9 3d 40 f4 e7 f2 ab 32 36 9b a8 ce d6 72 34 13 4d 0f ce 63 24 16 4f 7f 51 58 92 e9 77 93 24 b2 ad 9b a4 93 c1 71 13 a3 Data Ascii: _*-#M[yJu.,qs\7-mV3rdq\|v5SR.g;8SrsRoVkdm[]\Kn3@'ZI,4f!!P0qzBc#A1"#N;gGkuY=@26r4Mc$OQXw$q
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 2c bc 70 a6 aa ad ac e1 01 31 e0 63 ab 30 1f d6 ba 5d 3a 0d 3e ce eb cf 99 61 93 08 cb fb bb 81 9e 46 3b 8f 42 6a a0 b3 8f 90 1a dd 97 f8 47 07 03 fe fb 14 b9 45 ed 59 85 13 e9 91 dc 2b 6a 37 f6 f6 f0 74 76 0d 96 23 d0 60 1a d4 d2 84 da a1 be 6d 32 d9 61 b6 30 95 b6 d8 bb a7 7c b0 01 f7 1c 90 71 9e 06 2a e4 3a 74 45 f3 e4 db 71 df cb 8b ff 00 66 73 5b 96 51 25 bd a5 ce 6e dd 24 65 02 31 1c d0 a0 e0 e7 f8 4f 1e 9d e8 e5 25 cd bd 59 cf db f8 7e da de 6f 32 e4 19 6e 41 e5 e6 7d cd f4 3b ab 7a 1b 99 63 01 62 7d 80 76 52 3f c6 a0 22 6c 73 e5 b1 f5 37 b9 ff 00 d0 54 53 15 67 3c 91 00 19 ee f2 bf f5 aa b1 37 3a 0b 6b 9b a9 2d 8a 2c db 64 2a cc 3c c5 fb dc e3 83 d8 d4 97 ef 76 9a 14 4f 63 99 6e 19 43 5c 73 b9 d0 63 82 07 a7 a9 ac 79 d1 3e c9 6a 15 e2 91 c0 60 c8 Data Ascii: ,p1c0]:>aF;BjGEY+j7tv#`m2a0\|q:tEqfs[Q%n$e1O%Y~o2nA};zcb}vR?"ls7TSg<7:k-,d<vOcnC\scy>j`
2024-04-26 15:33:25 UTC	1391	IN	Data Raw: dd d8 fb 93 5d 34 a4 a9 d3 73 bf bc f4 5e 4b ab f5 7d 3c 8c e4 9c a5 cb d1 1a 14 51 45 73 9a 01 ac 1b 9d 1e e2 58 f5 2b 55 28 62 be 94 48 65 27 e6 8f 85 04 63 bf dd e3 eb 5b d4 53 8c 9c 76 13 57 39 97 d1 f5 30 d2 34 72 02 ae cc 5e 33 70 c3 cc 1e 63 10 33 83 b7 0a c3 f2 c5 25 c6 83 77 20 9d 61 61 1a cd 13 24 81 a5 2e b2 9d 9b 55 88 23 21 f3 8c b0 ea 07 39 ae 9e 8a bf 69 2b dc 5c 88 e6 ce 8f 7c 5c b0 38 57 9d 8b c6 2e 58 61 08 1b 48 38 e0 a9 cf 1e f4 df ec 7d 4e 49 24 f3 5d 36 33 16 da b3 bf f7 64 1e 9e ac 87 f0 ae 9a 8a 3d ac 83 91 18 96 b6 37 d0 59 5c c0 5c 17 94 a6 d6 32 16 db f2 2a b9 19 1d 72 18 8f ad 57 5d 22 fa dd 3e cd 17 96 f6 4b 3b 32 46 64 31 9d 8c 39 1f 28 e3 6b 64 8f 63 db 15 d1 d1 4b 9d 87 2a 39 e1 a6 6a 3d 64 28 e4 4a 7c cc 4c c3 cf 43 bb 19 Data Ascii: ]4s^K}<QEsX+U(bHe'c[SvW904r^3pc3%w aa$.U#!9i+\\|\8W.XaH8}NI$]63d=7Y\\2rW]">K;2Fd19(kdcK9j=d(J\|LC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49817	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:25 UTC	559	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:25 UTC	457	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:25 GMT Content-Type: image/png Content-Length: 41837 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:25 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN32ETRMC169:00000005 Content-Disposition: attachment; filename*=utf-8''55c0f2a0-d164-4d6c-871f-2c0a754f72b0.PNG Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:25 UTC	2381	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 07 08 06 09 02 04 05 03 01 ff da 00 08 01 01 00 00 00 00 ad e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}8"
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 00 00 f6 36 53 01 c2 31 43 95 cc f7 e8 a7 16 c1 62 da 98 7d 2e 6c fb c3 b3 43 22 0e 20 cc 6e 94 a1 d6 ec 50 08 b0 00 01 da 95 62 00 00 00 00 00 00 00 00 01 6c e6 5c eb 5a 38 db 93 83 63 f5 f2 b1 3e 8f 98 fa 71 e3 ef 78 fc 4e 0f d7 db d2 f1 5f 47 cd 22 ec 6b 57 1e 59 f3 7d 1c 1c d9 76 cb 35 a1 88 7d 3d 7f 18 00 05 97 b7 14 72 19 f6 ee e6 55 ae 1f 86 cd aa 45 7e ed 6c f2 92 42 9f 5f 4b c9 70 07 eb f1 c8 07 14 8f b1 4d 5f 78 df a5 d9 f5 e8 79 b1 18 86 a6 38 cd 37 c3 5f 31 8f a4 f2 83 8f b7 b1 7c 36 95 e2 d9 4f c7 1b 1c 9f 37 d0 7c df 47 cd 2d df fd 56 f5 fe 8f 9b 90 00 00 00 00 00 00 00 7d 36 67 4e ad 75 79 ac ac 8a e8 c9 b1 44 83 5c 6b 1d e6 c0 a7 1f 76 9f ca 93 84 7d 46 7a 37 b2 ad 47 77 a6 2c 9e fd ba 8d 01 cc d3 e5 1c cf 2e 34 85 81 d1 eb e1 23 46 15 7b Data Ascii: 6S1Cb}.lC" nPbl\Z8c>qxN_G"kWY}v5}=rUE~lB_KpM_xy87_1\|6O7\|G-V}6gNuyD\kv}Fz7Gw,.4#F{
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: 0b 3a c0 a5 0c ba 2e ea 4b b0 de 45 80 e5 d2 9c 3d 2f 42 fe 48 00 00 00 cf 71 fe f4 d9 5c 67 3c 5f cc f2 3c af 32 72 fa 43 79 7e 65 13 f6 f1 89 3b 2a 83 ec 6d 69 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 2c 93 30 8b 00 00 3d 29 4a 1b fd 00 00 00 04 87 e5 62 23 8b e8 3e 6f a3 e6 fa 66 5d d8 f7 f4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: :.KE=/BHq\g<_<2rCy~e;*mi,0=)Jb#>of]
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: b1 48 7a a3 75 da f5 27 5d 4a 35 3d fe 22 32 62 6b 9b 18 28 cb dc c4 b1 42 e5 51 66 6b bd 6d 2e fb 92 80 df 46 0c 5b e5 b2 ba 1d 70 3a 75 59 4b 58 94 59 58 d1 28 37 91 09 39 96 88 88 33 e4 f9 40 4b ca 73 dd bf c3 52 6d ed 3b 67 12 e2 33 0e f1 9f ae 6b f9 6d f9 58 e9 47 ab 6a 04 d6 48 c5 46 c2 e5 5e 7e 3e 51 09 eb c9 2a 86 b6 bc 10 e4 c8 17 56 22 33 73 86 ab c1 e0 61 61 a6 73 20 40 8f 54 36 3d 42 02 2a 46 c4 cc 31 b4 a2 a8 55 41 ac 91 62 4d b4 fb da 66 62 2e 35 eb ee 4f 3d 81 71 10 a4 37 28 02 d6 ac 25 1b 7e 4c 09 4b 08 8e 82 5b 44 37 03 2f 16 8d 23 6c 8c 70 f6 10 75 2e a3 50 b3 46 29 32 16 66 a2 8f 3e 42 ad 41 a5 58 6b a2 59 3e 59 2b ff 00 e6 90 74 eb c4 8c 46 7a ff 00 c3 bb cc b4 e3 7f 4d b5 27 f4 15 ed 15 6a b2 42 c7 cb 88 70 08 62 ef 41 96 a1 90 2b 12 Data Ascii: Hzu']J5="2bk(BQfkm.F[p:uYKXYX(793@KsRm;g3kmXGjHF^~>QV"3saas @T6=BF1UAbMfb.5O=q7(%~LK[D7/#lpu.PF)2f>BAXkY>Y+tFzM'jBpbA+
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: f6 03 2d f0 49 60 96 17 94 bb ac f6 f4 5d a4 41 c0 93 7d 2c 49 3a 00 52 83 3c c1 6c 25 e6 2e 9d 9f 20 e4 f0 f1 50 4e e0 12 2c d5 19 da 99 ab 16 4c 15 b7 fa 0e cf 02 a0 7a 4b 8a c6 31 8c ef c3 7d 5a 80 fb 69 5f 45 fb 3a 06 96 cc d4 b1 13 66 b4 95 b1 66 9e 12 b1 06 64 b1 7e f6 ed 9b 0e c7 6c 3d f7 ca 3d c6 c7 8c b0 4c c4 12 82 82 91 79 a7 75 3e c3 45 de 0d dc 93 d1 12 3b e2 9a 3c cd 5d 72 8c b5 8f 5c e6 a2 fc 3e 80 e7 69 5f ab 81 f4 43 7d ea 07 1a fb 38 bc dd 7e 7e 91 e5 57 cc 50 fc 67 ea 9b e6 cd bf 09 ad c1 58 71 88 42 e4 97 b8 b6 1a df 5b b9 b3 15 84 aa c7 2b 89 a5 cd 34 5a 99 3b 54 ec 1b ac dd c8 00 a4 ac 85 94 31 59 ce 18 7b 29 cf 4c bf b5 76 2a 4a 79 29 b8 1d 8c 4c cf 4c 58 cb c1 92 d2 4e 96 4e 93 00 40 28 31 4e 34 d6 30 bd ff 00 6e 9c 81 6e 3e 3a 38 Data Ascii: -I`]A},I:R<l%. PN,LzK1}Zi_E:ffd~l==Lyu>E;<]r\>i_C}8~~WPgXqB[+4Z;T1Y{)Lv*Jy)LLXNN@(1N40nn>:8
2024-04-26 15:33:25 UTC	1790	IN	Data Raw: be be ae f5 71 23 45 00 e6 f2 be d7 2c a3 83 1b 12 52 9f 73 d8 42 b2 95 25 49 ce 70 ad 75 bd 89 83 65 b8 cb 02 14 40 91 37 ea ac e3 2d 3a 0c d0 d9 e2 1e 43 a8 4a db 56 14 92 67 61 23 50 a5 9d 2c 33 18 ba 6f 98 38 96 1f 1e 0f 3e ba 5c e4 f4 a5 86 41 d3 e4 4b 53 af 75 57 fc dc 6f 3f 9e 8e 53 ee 74 f6 2b 10 6c 91 67 8f 69 cd f3 2f 17 33 66 0d f8 d3 d8 29 a5 fe f7 04 ce 30 50 ca 56 7a 62 06 ed 4f 6e 0e 25 a7 6c d1 e8 5e f1 94 8d 96 b8 ac 88 f3 99 25 94 73 42 4c 45 c3 d8 cb 7a 44 f6 05 6e fb 72 a8 97 4b b2 0e 3d 8c 07 5f 57 4e bd 79 1c 79 91 46 30 60 6e ad b7 f5 ee f2 82 99 1d 80 67 96 91 0e 57 cd bb 20 98 43 98 0c e6 dc ae 51 21 fa 13 98 28 b1 33 bf 2e b5 a9 68 30 a1 63 8f 41 24 a1 6a 6d 68 5a 3b c9 5e b4 de 21 e4 41 21 ec 79 c3 2f b6 65 6e c2 3f 86 82 c6 35 Data Ascii: q#E,RsB%Ipue@7-:CJVga#P,3o8>\AKSuWo?St+lgi/3f)0PVzbOn%l^%sBLEzDnrK=_WNyyF0`ngW CQ!(3.h0cA$jmhZ;^!A!y/en?5
2024-04-26 15:33:25 UTC	1398	IN	Data Raw: bf 5c 91 7f 2f 3f 15 f7 9c 6f 23 3e ef 0f 9b c3 f1 32 c5 fc 0f b3 bf e1 c0 fc ed 25 f7 24 27 f6 bf 42 c1 62 5a ea 82 96 de 16 d1 64 b6 18 a4 92 e6 7f cb ba d8 8b b3 d9 24 a4 09 73 bd ec 76 70 b1 be 60 32 b0 8b 7b 2a e6 c5 82 44 cd 32 6c 67 13 d7 2e a1 4d 38 e3 6a c7 e7 6a 4d 63 4a b2 54 99 3e 56 23 c7 27 64 e9 c8 c6 8f af c7 d5 22 fc 27 ea 9a 6e 9b 5b 65 9c 98 94 18 63 f0 15 73 59 5b 5f 22 82 a6 f6 66 92 8d 50 25 4b d7 19 cb 2f ad 2a 42 94 85 63 a2 b9 ad b4 f4 8d c7 08 91 3f 2b 1e 2e 23 5c d1 eb e8 6b 02 c4 b3 d4 ea c5 56 51 9c 32 b8 a0 15 8d 8d a2 01 f5 47 64 aa ed e5 b7 1d 69 c6 5c 71 b7 11 94 af 44 cb b3 19 75 69 97 97 dd 41 4c b6 43 4b 65 cc 75 6f 63 50 26 6a 53 26 2d c1 96 b0 7d 0d 63 0a 79 a4 e7 1d 71 03 a7 f5 eb b1 b1 65 b9 07 d5 f6 9a 43 2d a1 b4 Data Ascii: \/?o#>2%$'BbZd$svp`2{D2lg.M8jjMcJT>V#'d"'n[ecsY[_"fP%K/Bc?+.#\kVQ2Gdi\qDuiALCKeuocP&jS&-}cyqeC-
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: b1 ce 1c 6c 93 ee 91 a0 ef f2 66 48 bb 5d 93 37 2f 60 91 d8 21 9c b0 43 49 71 1b b3 66 1f 99 27 ab 50 e5 65 81 a3 2c 33 30 e6 34 60 52 0f 34 f5 0a c7 8b 5d 5a 32 51 6b c6 57 da 52 19 b4 26 bf 30 8c 7e 7b 4d 38 43 ad 34 da 7a af 5b d3 c4 a7 d6 83 19 ac 63 2f ee ad a6 55 6d 28 84 87 73 b8 71 72 f2 67 3a a7 89 3d e7 1c d7 5b 52 66 ab 28 33 25 be e1 51 ad 38 31 e1 a1 ce ea 5d 67 70 55 51 54 b8 18 d3 0d f7 46 fe cb f6 65 7f 0a 2a c0 c7 ed bf 08 83 e9 b6 36 73 8c e5 59 4a 90 ac a5 58 e9 9f 4f 67 c1 1d 7e e2 fb c9 c6 7b 93 ef a4 78 79 27 17 f4 24 57 87 24 0e 5a 7e 1a 1f c8 63 73 b4 ab 8e 22 3a 0d ac 67 a2 79 15 9e 92 b1 9c 8d 57 58 e0 b1 cd ef 8c 63 61 ca e7 9d 9a 41 6f d7 e7 4d 5a 71 d6 db 08 ec ec 09 d1 6c 9b ea ca cf 66 4f fc e3 8e 7e 4c aa fe ad e6 ba a4 39 Data Ascii: lfH]7/`!CIqf'Pe,304`R4]Z2QkWR&0~{M8C4z[c/Um(sqrg:=[Rf(3%Q81]gpUQTFe*6sYJXOg~{xy'$W$Z~cs":gyWXcaAoMZqlfO~L9
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: c7 5a 28 b4 f9 b0 3a 92 d6 8e 00 f8 c9 b3 ec 04 8e a4 46 49 be d9 32 52 0f b7 9e a8 d5 d2 ec c1 de 20 8d 7b a7 73 6b 54 65 61 ad 92 a5 a8 55 2c 6d 31 5b 3d 99 72 2c 07 36 a1 a3 66 cb 6c e9 53 c9 6f e8 44 fe 07 cb f1 0a ee ad 2a e9 cb 0c 32 f6 65 2a 16 66 19 78 7a 49 d8 c9 16 5d cb 2e 06 ee 1c 32 34 e8 ff 00 07 d6 c5 5b 3f dc 4a ce e6 b1 55 a1 c6 89 16 38 07 58 fc a1 ed 7f fc 16 23 93 33 e6 4d 4c bf 2e e2 1b 64 80 77 b5 c8 38 fc 06 e3 61 92 b9 b9 c9 3b 01 ee 9f 24 5a df 7e 2f 7b d9 e2 c0 14 16 a2 a2 d6 d2 fb 41 da 5c 6d 68 cc 2c 47 0d 2d c3 8c 28 b7 12 9c 2e bf 38 4d 72 6a 36 60 54 21 6f d8 26 c9 b1 cd 48 cc 14 84 21 fe ef fe 2c f3 bb ff 00 8b 3c ad ee 3b 6d 74 14 03 85 30 6b 16 ab 9c e5 c0 94 3d 26 47 54 72 a3 76 93 a6 fc b1 ea 0c 30 e7 b1 57 b6 c8 55 1c Data Ascii: Z(:FI2R {skTeaU,m1[=r,6flSoD2efxzI].24[?JU8X#3ML.dw8a;$Z~/{A\mh,G-(.8Mrj6`T!o&H!,<;mt0k=&GTrv0WU
2024-04-26 15:33:25 UTC	4096	IN	Data Raw: fb 1a b1 e0 a5 89 1f b0 31 01 54 0c 92 4c 70 0a 68 bd 5f 6e 2f 3c 00 17 fb cf aa d7 a2 fb cc fb 0c af 8f cb 30 82 57 51 50 c4 6e da 6e 5f 98 e3 a7 ca 28 2d 67 f0 af b9 66 a3 f5 55 99 a8 a8 d7 fa 10 41 82 6b 6b 5b ed b3 bf 0e 32 16 5e 32 11 b9 20 9a 84 0b 9a 41 04 7f cc 66 a0 54 6a dd f4 f6 c1 a7 62 d5 b9 00 b8 fb 22 33 b1 1e cc fe cd aa d4 25 44 8e e0 c7 19 95 20 07 03 19 6e f3 34 e7 6d b6 5a 32 9b a5 2f 90 69 04 29 f3 06 ad 39 88 2d 5e 4b e6 76 f3 51 3e c2 e3 cc b1 82 aa 8e f2 63 a0 61 a7 7f 99 5c 51 81 9c 22 89 e0 6f 4f fb ce e0 2d 56 9b 6b ec 1f 70 7c 87 d3 bd 87 a1 58 83 19 ba d1 99 e2 c4 56 27 af 53 5f fd e1 e6 54 87 c4 ce 76 af ec 6f 9d a8 83 24 cd a5 83 d8 41 8a 70 7f dc 41 fa 1a 26 b3 56 29 65 f0 53 35 15 32 37 ad 58 62 55 71 2a 3e c3 7a 4b e7 f5 Data Ascii: 1TLph_n/<0WQPnn_(-gfUAkk[2^2 AfTjb"3%D n4mZ2/i)9-^KvQ>ca\Q"oO-Vkp\|XV'S_Tvo$ApA&V)eS527XbUq*>zK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49819	52.151.208.67	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:25 UTC	555	OUT	GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D HTTP/1.1 Host: newdownload.seismic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:25 UTC	477	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 15:33:25 GMT Content-Type: application/octet-stream Content-Length: 373057 Connection: close Accept-Ranges: bytes Cache-Control: private, max-age=2592000 Last-Modified: Fri, 26 Apr 2024 15:33:25 GMT X-XSS-Protection: 1; mode=block Request-Id: 0HN30VGEQ1UBO:00000039 Content-Disposition: attachment; filename*=utf-8''9ae068b6-c5e0-4162-88d9-0fe8901271a8.Unknown Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-04-26 15:33:25 UTC	3619	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 0d 09 0a 0b 0a 08 0d 0b 0b 0b 0f 0e 0d 10 14 21 15 14 12 12 14 28 1d 1e 18 21 30 2a 32 31 2f 2a 2e 2d 34 3b 4b 40 34 38 47 39 2d 2e 42 59 42 47 4e 50 54 55 54 33 3f 5d 63 5c 52 62 4b 53 54 51 ff db 00 43 01 0e 0f 0f 14 11 14 27 15 15 27 51 36 2e 36 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 ff c0 00 11 08 05 28 03 fc 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFxxC!(!021/.-4;K@48G9-.BYBGNPTUT3?]c\RbKSTQC''Q6.6QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ("}!1AQa"q2
2024-04-26 15:33:25 UTC	3186	IN	Data Raw: 0b ff 00 23 7d 8f fd b4 ff 00 d1 6d 5c fd 74 1e 05 ff 00 91 be c7 fe da 7f e8 b6 a9 9f c2 c6 b7 3d 7a 8a 28 ae 13 70 ac ff 00 10 7f c8 bb a9 ff 00 d7 ac bf fa 01 ad 0a cf f1 07 fc 8b ba 9f fd 7a cb ff 00 a0 1a 6b 71 33 c4 68 a2 8a ef 30 0a 28 a2 80 0a 28 a2 80 0a 28 ae d7 48 d3 ac bc 37 a5 26 b9 ab c6 24 ba 90 66 d6 d8 f6 3d 89 f7 ef ed f5 a9 94 ac 34 ae 67 e9 7e 0d bd bb 83 ed 77 d2 a6 9d 69 8c f9 93 70 48 fa 71 8f c7 15 77 ec fe 07 b0 f9 65 b9 b9 bf 71 d7 66 40 fc 31 8f e6 6b 9e d6 75 bb fd 66 e0 cb 77 31 2b 9f 96 25 e1 13 e8 3f ad 67 52 e5 6f 76 3b a5 b1 d7 c9 a8 78 18 a1 09 a3 de ee ed f3 91 ff 00 b3 d4 7a 7f 83 6f 35 89 4d cc 51 1d 3e c5 ce 63 13 1d ef 8f 61 c6 7f 1c 55 af 00 f8 6d 2f 5f fb 56 f5 03 41 1b 62 28 d8 70 ec 3b 9f 61 fc fe 95 df ea 3a 85 Data Ascii: #}m\t=z(pzkq3h0(((H7&$f=4g~wipHqweqf@1kufw1+%?gRov;xzo5MQ>caUm/_VAb(p;a:
2024-04-26 15:33:26 UTC	4096	IN	Data Raw: fe 83 fc f1 5d 1e 8f a5 da 69 e4 79 31 fc fc e6 46 e5 8f e3 57 3c 31 ff 00 1e b6 ff 00 ef 9f e7 5c f2 ad 7f 84 be 4b 6e 6b 69 5e 1e d2 f4 90 0d ad aa f9 83 fe 5a bf cc e7 f1 3d 3f 0c 56 a5 14 56 0d b7 b9 a8 52 52 d2 52 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 01 68 a4 a2 80 23 b8 84 4d 1e d3 c1 1d 0f a5 67 00 c8 c5 58 60 8e b5 ab 5c ff 00 88 af 7c b7 10 c6 3e 6d bf 3b 74 e3 eb 49 8d 2b 90 6a 5a ad b5 b6 40 06 47 5e bb 7a 0f c6 b9 5b cf 13 5c bc b8 8d c4 69 dd 71 54 6e ef 43 96 1b f2 bb b8 00 63 15 56 5b de 4a f9 6b 9e b9 ef 51 7b 9a 28 d8 d4 87 5e 95 5f 69 9e 54 63 dc b9 61 f9 1a d4 b6 d6 ef 23 c1 9f ca 99 0f 46 1c 57 20 d7 8b 8c b5 b2 37 e6 08 a7 c1 7f 06 d2 bf 3c 44 f7 1c 8f c4 77 a5 a8 68 7a 25 ae a9 6d 72 06 1b 63 1e 30 Data Ascii: ]iy1FW<1\Knki^Z=?VVRRR((((((h#MgX`\\|>m;tI+jZ@G^z[\iqTnCcV[JkQ{(^_iTca#FW 7<Dwhz%mrc0
2024-04-26 15:33:26 UTC	3144	IN	Data Raw: d1 ef 74 ff 00 12 e9 71 dc c4 04 a6 78 dd a3 53 b9 91 77 8e 5b 1d 2b ab f8 99 14 92 69 b6 65 23 66 0b 29 27 68 ce 38 af 3d 8a fa f2 09 1e 48 6e e7 8d e4 fb ec 92 10 5b ea 47 5a 94 ea fa a1 04 1d 4a ec 83 d4 19 db fc 68 71 6d a6 17 56 b1 5a de 79 2d ae 62 b8 88 e2 48 9c 3a 9f 42 0e 45 7a c0 93 4e f1 a7 87 8c 42 40 ae 40 25 47 2d 0b fa e3 d3 af d4 57 91 d4 90 5c 4d 6d 28 96 de 67 8a 41 d1 91 8a 91 f8 8a 73 87 36 a0 9d 8e 96 6f 01 6b 89 31 48 d6 19 53 3c 38 90 01 f9 1e 6a 9e a5 a4 da e8 6a 91 dd dc a5 cd f9 60 4c 30 9c ac 4a 0e 4e e3 dc 9e 98 aa b2 78 87 5a 96 23 1b ea 77 25 4f 04 79 84 67 f1 ac d2 49 24 93 92 7b d0 94 ba b1 3b 74 3d 5f c5 f6 52 eb de 19 8d b4 dc 4d 87 59 94 29 fb eb 82 38 fc ff 00 4a e3 bc 3f a4 5c e9 9a c5 9d f6 a8 a6 ce 25 99 55 04 9c 34 Data Ascii: tqxSw[+ie#f)'h8=Hn[GZJhqmVZy-bH:BEzNB@@%G-W\Mm(gAs6ok1HS<8jj`L0JNxZ#w%OygI${;t=_RMY)8J?\%U4
2024-04-26 15:33:26 UTC	4096	IN	Data Raw: ed f9 d7 52 7c 51 a7 1e d3 7f df 03 fc 6b 9a b5 3a 92 76 48 b8 ca 2b a9 7e e7 ee 9a e7 a7 ff 00 8f ca b7 37 88 ac 5d 48 02 5f fb e4 7f 8d 64 c9 a8 c0 d7 1b c0 7c 7d 2b 0f ab d5 fe 53 45 52 3d cd 78 ba 55 85 ac 84 d5 ed 54 72 24 fc aa 51 ad d9 8e d2 7f df 3f fd 7a 3e af 57 f9 58 7b 48 f7 37 f4 cf f5 b2 7f bb 59 97 bf f2 16 3f 4a 65 9f 88 ac 60 77 2e 25 c1 18 e1 47 f8 d5 2b 8d 62 d2 4b e3 32 89 36 e3 1c af 34 7d 5e af f2 87 b4 8f 73 66 1f bf fe 7d 2a 97 86 4e 2d 21 ff 00 ae ad fc ea 18 f5 db 35 6c 91 2f fd f3 ff 00 d7 aa 9a 56 ab 05 9d aa c6 fb f7 07 2d c0 f5 34 fd 85 5f e5 13 9c 7b 9d a4 93 85 7c 13 52 2c ca dd 0d 72 52 eb b6 ae 73 99 73 fe ef ff 00 5e 92 2d 7e 08 cf fc b4 3f 85 47 b0 ad fc ac 3d ac 4e b4 1c b7 5a 93 35 cb c3 e2 6b 45 6c b8 97 f0 5f fe bd Data Ascii: R\|Qk:vH+~7]H_d\|}+SER=xUTr$Q?z>WX{H7Y?Je`w.%G+bK264}^sf}*N-!5l/V-4_{\|R,rRss^-~?G=NZ5kEl_
2024-04-26 15:33:26 UTC	4096	IN	Data Raw: f2 33 c6 0f e1 d6 b8 c9 b5 ad 4e 74 91 25 bc 91 92 40 43 29 c6 08 fa 54 53 a9 56 a5 ed 6d 18 dc 62 ac d9 34 1e 1d d5 26 84 cd f6 7f 2e 30 bb b7 48 c0 71 f4 eb 51 d8 e8 7a 95 fa 07 82 d8 f9 67 f8 dc ed 07 e9 9e bf 85 75 7e 0f 62 7c 3b 2e 79 c4 8f c1 e7 b0 ae 32 7b fb c9 e4 df 2d cc ac 7b 7c c4 01 f4 1d aa a3 52 72 94 a2 ad a0 9c 62 a2 99 6b 50 d0 75 1d 3a 1f 3a 78 41 88 70 5d 1b 20 7d 6b 32 bb fd 3a 67 bd f0 64 8d 70 c6 46 f2 64 52 5b 92 71 9c 57 01 55 46 a4 a5 75 2d d0 4e 29 24 d7 50 ab fa 25 b2 dc ea 71 f9 bf ea 62 cc b2 1f f6 57 93 54 2b 5a 0f f4 2f 0e cf 3f 49 6f 1f ca 4f f7 07 2c 7f 3c 0a ba 8e ca cb a9 11 57 7a 9d 6e b2 89 ac f8 60 cf 10 e7 60 99 07 a1 1d 47 f3 15 e7 95 dc 78 22 ec 4d a7 4b 66 e7 26 26 c8 07 fb a7 ff 00 af 9f ce b9 3d 5e d0 d8 ea 97 Data Ascii: 3Nt%@C)TSVmb4&.0HqQzgu~b\|;.y2{-{\|RrbkPu::xAp] }k2:gdpFdR[qWUFu-N)$P%qbWT+Z/?IoO,<Wzn``Gx"MKf&&=^
2024-04-26 15:33:26 UTC	4096	IN	Data Raw: 40 dc ec 33 d0 b1 fe 98 ad 0d 0f 57 d3 e5 d0 db 4b bf 97 c9 3b 59 37 1e 84 1f 7f 5e 6b 31 46 95 a4 5d c7 3c 57 66 fe 54 60 55 55 36 aa f3 d4 9c f2 7e 95 37 72 94 94 d7 a7 60 b2 51 4d 1a 9e 3d fb f6 3f 47 fe 95 77 c4 f1 fd ab c2 f1 4d 17 2a 9b 24 e3 d3 18 fe b5 47 c4 f7 5a 66 a9 69 0c f1 6a 0a 1e 20 d8 8f 61 25 b3 8e 3d ba 54 1e 1e f1 1c 36 d6 bf 60 d4 54 b4 1c 85 7c 67 00 f6 23 d2 b2 8c 25 ec e2 d2 d6 2c b7 25 ce ef b3 39 8a 2b a8 b9 d3 bc 2e 58 cc 9a 93 a2 1e 7c b4 39 fc b8 cd 64 5e 4b 63 71 34 76 d6 68 b6 d6 ca 4f ef 65 c9 66 3e a7 00 9f c0 57 64 6a f3 6c 99 93 8d ba 9d 57 89 ff 00 e4 54 8b fe d9 ff 00 2a e1 57 ef 0f ad 76 1a ce a9 a5 df e8 8b 65 15 fa 09 17 6f 2d 1c 98 38 ff 00 80 d7 27 6c 89 24 ea b2 4c 90 af 52 ec 09 1f a0 26 b2 c3 27 18 bb ae a5 54 Data Ascii: @3WK;Y7^k1F]<WfT`UU6~7r`QM=?GwM$GZfij a%=T6`T\|g#%,%9+.X\|9d^Kcq4vhOef>WdjlWTWveo-8'l$LR&'T
2024-04-26 15:33:26 UTC	2192	IN	Data Raw: 6a 21 9a 04 04 a4 40 e3 7e 3d 4f d7 8a 86 c7 50 b1 ba bd 8e de eb 4b b5 48 24 60 bb a3 05 59 73 d0 e7 3c d1 ed 75 6a 2a f6 0e 5d 2e cc 4a 2b ab d5 2c 74 8d 08 ec 92 ce 6b 83 32 37 97 23 38 21 4f a6 38 e9 c5 49 e1 5d 37 4a bf b4 69 64 b3 2d 2c 64 2b 17 72 c0 9c 75 c7 15 0f 10 b9 39 ec ec 57 b3 77 e5 ea 72 14 57 51 6c 3c 3d a6 3b 47 7a 3e d3 72 49 de 15 77 24 7e de 87 f5 ac fb 79 74 58 ee 2f a7 9e dd a6 4d ff 00 e8 d1 02 54 11 93 d7 f4 aa 55 6f 7b 26 27 0b 75 31 e8 ad ab 7d 56 c1 ee 12 39 f4 7b 51 03 36 0e cc ee 03 eb 9e 6a cf 8a b4 38 34 d1 15 cd a6 56 29 1b 69 42 73 b4 f5 e0 d1 ed 6d 25 19 2b 5c 39 6e 9b 47 39 45 75 fe 15 d3 74 bb fb 46 96 4b 32 d2 c6 42 b1 77 2c 09 c7 5c 71 59 88 fa 1d 84 ee 93 5b cb 7b 20 62 18 e7 62 2f b0 1d 4f e3 4b db 27 27 14 9d d0 Data Ascii: j!@~=OPKH$`Ys<uj*].J+,tk27#8!O8I]7Jid-,d+ru9WwrWQl<=;Gz>rIw$~ytX/MTUo{&'u1}V9{Q6j84V)iBsm%+\9nG9EutFK2Bw,\qY[{ bb/OK''
2024-04-26 15:33:26 UTC	4096	IN	Data Raw: 00 d9 ab 9d ff 00 bb c7 d7 fc cd bf e5 e9 c2 57 76 9f f2 20 9f fa e0 7f 9d 70 95 dd a7 fc 88 5f f6 c0 ff 00 3a e8 c5 6d 1f 53 2a 3f 11 8d e0 7f f9 0d 49 ff 00 5c 4f f3 15 5b c5 bf f2 31 5c fd 17 ff 00 41 15 67 c0 ff 00 f2 1a 93 fe b8 9f e6 2a b7 8b 7f e4 62 b9 fa 2f fe 82 29 2f f7 8f 90 2f e1 bf 52 ff 00 81 3f e3 fe e7 fe b9 0f e7 59 5e 22 ff 00 91 82 f3 fe ba 7f 4a d5 f0 1f fc 7f dc ff 00 d7 21 fc eb 2b c4 5f f2 30 5e 7f d7 4f e9 4e 3f ef 0f d0 3f e5 d7 cc e9 fc 69 ff 00 20 18 3f eb aa ff 00 e8 26 ab f8 0b fd 55 ef d5 3f ad 58 f1 a7 fc 80 60 ff 00 ae ab ff 00 a0 9a af e0 2f f5 57 bf ef 27 f5 ae 65 fe ed 2f 5f d5 16 ff 00 89 13 96 d4 bf e4 27 75 ff 00 5d 5f f9 9a eb fc 0b ff 00 20 cb 8f fa eb fd 05 72 1a 97 fc 84 ee bf eb ab ff 00 33 5d 7f 81 7f e4 19 71 Data Ascii: Wv p_:mS?I\O[1\Agb/)//R?Y^"J!+_0^ON??i ?&U?X`/W'e/_'u]_ r3]q
2024-04-26 15:33:26 UTC	4096	IN	Data Raw: 8c f7 41 d0 1f c7 fa 8a ab 7e 20 d7 b4 f1 75 00 0b 7d 10 c4 a0 0e b8 e8 4f d6 bc 7c 42 6e 6e 47 54 1a b2 8a 31 05 d4 d1 c1 e4 24 c7 67 39 1d 3a d5 36 2a 06 0a e0 7d 6a 27 6c 12 18 15 61 c1 07 b5 44 cc c3 be 45 73 9a 58 73 98 72 7e 43 f5 53 51 6e da 72 8c c3 e8 68 27 3f 5a 61 f9 4f b5 03 24 2e 5f ef 9c 9f 5a 50 cd 19 8e 45 24 32 9c 82 3d 45 34 0c f4 e8 6a 5f 2d a4 da 8a 0b 33 10 00 1d c9 a0 47 ba 58 dd 8b 8b 18 26 ff 00 9e b1 ab fe 63 35 37 9a 7d 2b 3e ca 28 f4 dd 2e d6 19 e5 55 31 44 a8 49 3d 48 18 aa b7 5a f4 49 f2 c2 bb 8f f7 98 71 50 93 7b 0d b4 b7 37 e2 60 7e 63 c1 aa 97 e8 04 ab 20 e8 c3 07 ea 2b 9b fe db ba 49 09 37 08 47 56 05 46 10 7b 9a c1 d4 f5 9b eb f8 1e 65 92 49 6d 55 88 c0 18 fc 71 dc 7b d5 a8 32 1d 45 d0 eb 6e 75 4b 2b 45 2d 24 ea 4a 9c 15 Data Ascii: A~ u}O\|BnnGT1$g9:6*}j'laDEsXsr~CSQnrh'?ZaO$._ZPE$2=E4j_-3GX&c57}+>(.U1DI=HZIqP{7`~c +I7GVF{eImUq{2EnuK+E-$J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49825	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:32 UTC	786	OUT	POST /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58644&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 435 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://eng2e.seismic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:32 UTC	435	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 31 39 6b 2c 34 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 34 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 34 3b 36 2c 27 63 6c 73 2c 30 2e 30 30 30 32 38 30 30 31 37 32 38 34 39 39 34 37 34 35 37 37 3b 65 2c 27 66 63 70 2c 61 30 34 2c 37 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 31 30 39 38 2e 33 39 39 39 39 39 39 39 39 39 39 34 32 3b 36 2c 27 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 2c 31 31 38 36 36 2e 31 39 39 39 39 39 39 39 39 39 38 33 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 63 6f 6d 70 6c 65 74 65 3b 35 2c 31 2c 32 3b 36 2c 33 2c 34 30 30 2e 3b 36 2c 34 2c 31 2e 34 3b 36 2c 35 2c 30 2e 30 30 30 32 38 30 30 31 37 32 38 34 39 39 34 37 34 Data Ascii: bel.6;e,'fp,19k,4;5,'net-etype,'3g;6,'net-rtt,400.;6,'net-dlink,1.4;6,'cls,0.00028001728499474577;e,'fcp,a04,7;6,'timeToFirstByte,1098.3999999999942;6,'firstByteToFCP,11866.199999999983;5,'loadState,'complete;5,1,2;6,3,400.;6,4,1.4;6,5,0.00028001728499474
2024-04-26 15:33:32 UTC	315	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:32 GMT content-type: image/gif access-control-allow-origin: https://eng2e.seismic.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760095-MIA
2024-04-26 15:33:32 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49826	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:32 UTC	789	OUT	POST /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58647&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 5989 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://eng2e.seismic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:32 UTC	5989	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 73 65 72 76 69 63 65 2d 64 69 73 63 6f 76 65 72 79 2e 73 65 69 73 6d 69 63 2e 63 6f 6d 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 73 65 72 76 69 63 65 2d 64 69 73 63 6f 76 65 72 79 2e 73 65 69 73 6d 69 63 2e 63 6f 6d 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 61 70 69 2f 73 64 73 2f 76 31 2f 74 65 6e 61 6e 74 73 2f 62 38 31 37 64 38 30 63 2d 65 39 34 32 2d 34 30 62 30 2d 38 36 39 38 2d 32 65 30 35 38 62 33 37 35 65 62 38 2f 73 65 72 76 69 63 65 73 22 2c 22 70 61 72 73 65 64 4f 72 69 67 69 6e 22 3a 7b 22 70 6f 72 74 22 3a 22 34 34 Data Ascii: {"xhr":[{"params":{"status":200,"hostname":"service-discovery.seismic.com","port":"443","protocol":"https","host":"service-discovery.seismic.com:443","pathname":"/api/sds/v1/tenants/b817d80c-e942-40b0-8698-2e058b375eb8/services","parsedOrigin":{"port":"44
2024-04-26 15:33:32 UTC	315	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:32 GMT content-type: image/gif access-control-allow-origin: https://eng2e.seismic.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760085-MIA
2024-04-26 15:33:32 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49827	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:32 UTC	787	OUT	POST /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58648&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1051 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://eng2e.seismic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:32 UTC	1051	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 2c 76 67 2c 6d 66 2c 2c 2c 2c 35 6b 2c 27 73 65 72 76 69 63 65 2d 64 69 73 63 6f 76 65 72 79 2e 73 65 69 73 6d 69 63 2e 63 6f 6d 3a 34 34 33 2c 27 2f 61 70 69 2f 73 64 73 2f 76 31 2f 74 65 6e 61 6e 74 73 2f 62 38 31 37 64 38 30 63 2d 65 39 34 32 2d 34 30 62 30 2d 38 36 39 38 2d 32 65 30 35 38 62 33 37 35 65 62 38 2f 73 65 72 76 69 63 65 73 2c 2c 61 30 32 2c 2c 27 30 2c 21 21 21 3b 32 2c 2c 31 6d 73 2c 31 76 69 2c 2c 2c 2c 35 6b 2c 27 65 6e 67 32 65 2e 73 65 69 73 6d 69 63 2e 63 6f 6d 3a 34 34 33 2c 27 2f 6c 73 2f 61 70 69 2f 76 31 2f 65 6e 67 61 67 65 6d 65 6e 74 73 2f 6c 69 6e 6b 73 2f 4b 65 4b 53 70 35 76 39 5f 72 72 35 35 56 36 30 2c 2c 33 61 73 2c 2c 32 2c 21 21 21 3b 32 2c 2c 31 6d 74 2c 31 75 79 2c 2c 2c 2c 35 6b 2c 27 63 64 Data Ascii: bel.7;2,,vg,mf,,,,5k,'service-discovery.seismic.com:443,'/api/sds/v1/tenants/b817d80c-e942-40b0-8698-2e058b375eb8/services,,a02,,'0,!!!;2,,1ms,1vi,,,,5k,'eng2e.seismic.com:443,'/ls/api/v1/engagements/links/KeKSp5v9_rr55V60,,3as,,2,!!!;2,,1mt,1uy,,,,5k,'cd
2024-04-26 15:33:32 UTC	315	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:32 GMT content-type: image/gif access-control-allow-origin: https://eng2e.seismic.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760020-MIA
2024-04-26 15:33:32 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49828	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:32 UTC	530	OUT	GET /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58644&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:33 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:32 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760096-MIA
2024-04-26 15:33:33 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49829	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:32 UTC	532	OUT	GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58647&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:33 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:32 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760033-MIA
2024-04-26 15:33:33 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49830	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:32 UTC	530	OUT	GET /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58648&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:33 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:32 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760054-MIA
2024-04-26 15:33:33 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49832	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:42 UTC	788	OUT	POST /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=68654&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 771 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://eng2e.seismic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:42 UTC	771	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 65 76 65 6e 74 73 2f 31 2f 33 33 65 33 37 61 61 38 65 61 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 32 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 31 34 38 36 2c 22 6d 69 6e 22 3a 34 33 35 2c 22 6d 61 78 22 3a 31 30 35 31 2c 22 73 6f 73 22 3a 31 32 39 33 38 32 36 2c 22 63 22 3a 32 7d 2c Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/events/1/33e37aa8ea","status":200},"metrics":{"count":2,"txSize":{"t":1486,"min":435,"max":1051,"sos":1293826,"c":2},
2024-04-26 15:33:42 UTC	315	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:42 GMT content-type: image/gif access-control-allow-origin: https://eng2e.seismic.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760069-MIA
2024-04-26 15:33:42 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49833	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:42 UTC	532	OUT	GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=68654&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:43 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:42 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760086-MIA
2024-04-26 15:33:43 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49834	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:52 UTC	788	OUT	POST /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=78669&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 293 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://eng2e.seismic.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eng2e.seismic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:52 UTC	293	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 6a 73 65 72 72 6f 72 73 2f 31 2f 33 33 65 33 37 61 61 38 65 61 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 37 37 31 7d 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 32 34 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 35 35 31 7d 2c 22 Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/jserrors/1/33e37aa8ea","status":200},"metrics":{"count":1,"txSize":{"t":771},"rxSize":{"t":24},"duration":{"t":551},"
2024-04-26 15:33:52 UTC	315	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:52 GMT content-type: image/gif access-control-allow-origin: https://eng2e.seismic.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760054-MIA
2024-04-26 15:33:52 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49835	162.247.243.29	443	1508	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 15:33:52 UTC	532	OUT	GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=78669&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 15:33:53 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Fri, 26 Apr 2024 15:33:53 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-mia-kmia1760047-MIA
2024-04-26 15:33:53 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Target ID:	0
Start time:	17:32:23
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:32:28
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2384,i,13309312840750829887,16417824520483540368,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:32:30
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=acb392a2-86c9-4b24-95db-2636493585ad&et=20240426193248&sig=gwhayKnReUcWvOAMK22RmzWqYRsgaF5wky3R3i2mCJ0%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware&id=42a9afb0-4e23-4a15-8f0a-491943de840e&et=20240426185005&sig=%2BU%2Fbf4l7Wt4vTYCCuUby8M14m72iv%2FhGKsN1B0m9KrY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-full-1.257.0.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://eng2e.seismic.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eng2e.seismic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=47820&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60&af=err,xhr,stn,ins&be=1098&fe=71&dc=42&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1714145552462,%22n%22:0,%22f%22:4,%22dn%22:334,%22dne%22:334,%22c%22:334,%22s%22:335,%22ce%22:620,%22rq%22:620,%22rp%22:1098,%22rpe%22:1101,%22di%22:1140,%22ds%22:1140,%22de%22:1140,%22dc%22:1168,%22l%22:1168,%22le%22:1169%7D,%22navigation%22:%7B%7D%7D&fp=1640&fcp=12964 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=2acae5d3-2811-4025-aea0-7972a7f5879b&et=20240426185012&isfullcontainername=True&sig=oGhRNaO96VhOfEJXMV4MXVgxs6ivJwFGnjPvm8fZfgg%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=551b630b-f274-454a-a270-9fbd8cbd7632&et=20240426185012&isfullcontainername=True&sig=HRtJpGlXjXBYT5eLg%2FzXs4J%2Frot%2F%2BMIZVCBYJPgcCgY%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=93b6e874-5233-482c-8362-ef68a6f3547b&et=20240426185012&isfullcontainername=True&sig=1n%2BweGZwFmtv9zXN%2F0Iu88%2BvLq%2FDHY1glGlTP%2F6BTMQ%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=55c0f2a0-d164-4d6c-871f-2c0a754f72b0&et=20240426185012&isfullcontainername=True&sig=DMbSAwSFNjPgr6Ia5%2FtvoGFeACUX9lbY%2F25LmFuhi9I%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/download/v1/blob?t=onestreamsoftware&c=onestreamsoftware-collaboration&id=9ae068b6-c5e0-4162-88d9-0fe8901271a8&et=20240426185012&isfullcontainername=True&sig=qhxabv2STg56bKO7iUzglC4NtauzI8aIhWcSpiVKkrc%3D HTTP/1.1Host: newdownload.seismic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58644&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58647&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=58648&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=68654&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jserrors/1/33e37aa8ea?a=937843118&sa=1&v=1.257.0&t=Unnamed%20Transaction&rst=78669&ck=0&s=3102a23c86424843&ref=https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: eng2e.seismic.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: service-discovery.seismic.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn-prod.seismic.com
Source: global traffic	DNS traffic detected: DNS query: newdownload.seismic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: api.seismic.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
https://eng2e.seismic.com/ls/b817d80c-e942-40b0-8698-2e058b375eb8/KeKSp5v9_rr55V60