Edit tour

Windows Analysis Report
http://micr.tech-arnericas.com

Overview

General Information

Sample URL:	http://micr.tech-arnericas.com
Analysis ID:	1473781
Infos:

Detection

Fake Captcha, HTMLPhisher

Score:	92
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Phishing site detected (based on favicon image match)

Snort IDS alert for network traffic

Yara detected Fake Captcha

Yara detected HtmlPhish54

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site detected (based on shot match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1852,i,3033810252711794878,9399344889612055035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5644 --field-trial-handle=1852,i,3033810252711794878,9399344889612055035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://micr.tech-arnericas.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.3.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.14.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.0.pages.csv	JoeSecurity_FakeCaptcha	Yara detected Fake Captcha	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.1.pages.csv	JoeSecurity_FakeCaptcha	Yara detected Fake Captcha	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 3 entries

Snort Signatures

ETPRO CURRENT_EVENTS JS/PsyduckPockeball Payload Inbound - Source IP: 139.28.37.60 - Destination IP: 192.168.2.4

Timestamp:	07/15/24-21:11:03.631357
SID:	2857090
Source Port:	443
Destination Port:	49739
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://micr.tech-arnericas.com	LLM: Score: 8 brands: Microsoft Reasons: The URL 'https://micr.tech-arnericas.com' is suspicious because it does not match the legitimate domain 'microsoft.com' associated with the brand Microsoft. The domain uses a common phishing technique of slightly altering the brand name (e.g., 'micr' instead of 'microsoft') and adding a subdomain ('tech-arnericas') to mislead users. The presence of a CAPTCHA alone does not indicate legitimacy, and there is no prominent login form visible in the image. The combination of these factors strongly suggests that this is a phishing site. DOM: 0.0.pages.csv
Source: https://micr.tech-arnericas.com	LLM: Score: 9 brands: Microsoft Reasons: The URL 'https://micr.tech-arnericas.com' is suspicious because it does not match the legitimate domain 'microsoft.com'. The use of 'micr' instead of 'microsoft' is a common social engineering technique to mislead users. The page prominently displays a login form, which is typical for phishing sites attempting to harvest credentials. Additionally, the link 'Create one!' and 'Can't access your account?' are often used in phishing sites to appear legitimate. There is no captcha present, which is not necessarily indicative of phishing but is worth noting. Overall, the combination of a suspicious domain, prominent login form, and social engineering techniques strongly suggests that this is a phishing site. DOM: 2.5.pages.csv

Phishing site detected (based on favicon image match)

Source: https://tech-arnericas.com	Matcher: Template: microsoft matched with high similarity
Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true	Matcher: Template: microsoft matched with high similarity

Yara detected Fake Captcha

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected HtmlPhish54

Source: Yara match	File source: 1.3.id.script.csv, type: HTML
Source: Yara match	File source: 2.14.i.script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Matcher: Template: microsoft matched

Phishing site detected (based on shot match)

Source: https://micr.tech-arnericas.com/	Matcher: Template: captcha matched
Source: https://micr.tech-arnericas.com/	Matcher: Template: captcha matched

HTTP Parser: Number of links: 0

Source: https://micr.tech-arnericas.com/

HTTP Parser: Base64 decoded: a[href="http://www.salidzini.lv/"][style="display: block; width: 120px; height: 40px; overflow: hidden; position: relative;"]

HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0	HTTP Parser: No favicon
Source: https://7f5d37dd-e3b309ea.tech-arnericas.com/?session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	HTTP Parser: No favicon
Source: https://f82580a6-e3b309ea.tech-arnericas.com/index.html	HTTP Parser: No favicon
Source: https://f82580a6-e3b309ea.tech-arnericas.com/index.html	HTTP Parser: No favicon
Source: https://f82580a6-e3b309ea.tech-arnericas.com/index.html	HTTP Parser: No favicon

Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49745 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2857090 ETPRO CURRENT_EVENTS JS/PsyduckPockeball Payload Inbound 139.28.37.60:443 -> 192.168.2.4:49739

Source: global traffic

TCP traffic: 192.168.2.4:59912 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.147
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.147
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: micr.tech-arnericas.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: micr.tech-arnericas.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: 0ffice.tech-arnericas.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0 HTTP/1.1Host: micr.tech-arnericas.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://micr.tech-arnericas.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632ESec-WebSocket-Key: 0h/Jfkh7+ycDufWGivUfFg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true HTTP/1.1Host: micr.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: micr.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://micr.tech-arnericas.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://micr.tech-arnericas.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://micr.tech-arnericas.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1Sec-WebSocket-Key: y7HqzpMM26Rxm7M206ic7w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0Sec-WebSocket-Key: mNxLLY1ZXj9QGibzJTlCCQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084Sec-WebSocket-Key: 5065r+pFgYKfesvHYOLICg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1Host: 0a0de824-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
Source: global traffic	HTTP traffic detected: GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1Host: 20b67e16-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641Sec-WebSocket-Key: dF3lFOQBX1zrjEoePTJ6PA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&scope=openid+profile+https%3a%2f%2f0ffice.tech-arnericas.com%2fv2%2fOfficeHome.All&redirect_uri=https%3a%2f%2f0ffice.tech-arnericas.com%2flandingv2&response_type=code+id_token&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&x-client-SKU=ID_NET8_0&x-client-Ver=7.3.1.0&uaid=0853e4491dc04151a3843791d98eff72&msproxy=1&issuer=mso&tenant=common&ui_locales=en-US&signup=1&lw=1&fl=easi2&epct=PAQABDgEAAAApTwJmzXqdR4BN2miheQMYdkdLelxKwyI0GTpluNaHY18gRmw2YsMzLWyXLtrovTXJbSMstGAVcUmTa2AqnEpFjRSLRyzuF-2zoeZTqY-VxEz-_2DRO8BA1I1--3Af0PJ6ch8x_oSS3GpQHKzlol00EuJ-SEM1mzsnWpMwBQKl_tGYVUTmc6p0ptI1h7YxsdcTWZp6GFSK5LfkykTlJW37ZBwAFgY32-RLXvuWbQLekSAA&jshs=0 HTTP/1.1Host: l1ve.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /signup?sru=https://l1ve.tech-arnericas.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca HTTP/1.1Host: signup.tech-arnericas.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /login.srf?wa=wsignin1.0&rpsnv=155&checkda=1&ct=1721070706&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.tech-arnericas.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.tech-arnericas.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d4765445b-32c6-49b0-83e6-1d93765276ca%2526mkt%253dEN-US%2526opid%253dE99ED959906A30F1%2526opidt%253d1721070704%2526uaid%253d0853e4491dc04151a3843791d98eff72%2526contextid%253dDD0369FD4B0F07C8%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D4765445b-32c6-49b0-83e6-1d93765276ca%26uaid%3D0853e4491dc04151a3843791d98eff72%26suc%3D4765445b-32c6-49b0-83e6-1d93765276ca%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=0853e4491dc04151a3843791d98eff72 HTTP/1.1Host: l1ve.tech-arnericas.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /signup?sru=https%3a%2f%2fl1ve.tech-arnericas.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca&lic=1 HTTP/1.1Host: signup.tech-arnericas.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641Sec-WebSocket-Key: ebpwTjqCMaR1FxzGlqijmQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1Host: 58c68845-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.tech-arnericas.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641Sec-WebSocket-Key: PD1Z52DaoafnWIKMGgBu8g==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1Host: 58c68845-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1Host: 58c68845-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.tech-arnericas.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: 58c68845-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: 58c68845-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /?session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU HTTP/1.1Host: 7f5d37dd-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://signup.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: f82580a6-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://signup.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /API/EvaluateExperimentAssignments HTTP/1.1Host: signup.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1Host: 58c68845-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1Host: 58c68845-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1Host: 58c68845-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /Images/Clear.PNG?ctx=jscb1.0&session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=YnVhPU1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiZvcz1XaW4zMiZscHJvYz00Jm9sPXRydWUmcnR0PTEzMDAmY2hybT10cnVlJnByb3N1Yj0yMDAzMDEwNyZldmFsPTMzJmFwcHY9NS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiZscz10cnVlJmRtPTgmbXRwPTAmbmM9NzQmcHI9MSZzcj0xMjgweDEwMjQmc2NkPTI0JmFzcj0xMjgweDk4NCZ0ej0tMzAwJmRzdD02MCZ0em89LTI0MCZibD1lbi1VUyZtdGg9MjdmNTFkMzE0OWU2YmYyMDliNjZiZDM4N2IwYWYzYzQmbXRuPTImcG49NSZwaD1mM2FjMjJhYzU5YzZkY2I4NzQxMDlkMDkzYzUyNTVlOCZwPXBsdWdpbl9mbGFzaCUzRGZhbHNlJTI2cGx1Z2luX3dpbmRvd3NfbWVkaWFfcGxheWVyJTNEZmFsc2UlMjZwbHVnaW5fYWRvYmVfYWNyb2JhdCUzRGZhbHNlJTI2cGx1Z2luX3NpbHZlcmxpZ2h0JTNEZmFsc2UlMjZwbHVnaW5fcXVpY2t0aW1lJTNEZmFsc2UlMjZwbHVnaW5fc2hvY2t3YXZlJTNEZmFsc2UlMjZwbHVnaW5fcmVhbHBsYXllciUzRGZhbHNlJTI2cGx1Z2luX3ZsY19wbGF5ZXIlM0RmYWxzZSUyNnBsdWdpbl9kZXZhbHZyJTNEZmFsc2UlMjZwbHVnaW5fc3ZnX3ZpZXdlciUzRGZhbHNlJTI2cGx1Z2luX2phdmElM0RmYWxzZSZmaD0yYTI5ODQ5YWYwN2RkMTYxZGRjNzMwNDBiZTI1ZjNmMCZmbj0xMTImbGg9aHR0cHMlM0ElMkYlMkY3ZjVkMzdkZC1lM2IzMDllYS50ZWNoLWFybmVyaWNhcy5jb20lMkYlM0ZzZXNzaW9uX2lkJTNEMDg1M2U0NDkxZGMwNDE1MWEzODQzNzkxZDk4ZWZmNzIlMjZDdXN0b21lcklkJTNEMzNlMDE5MjEtNGQ2NC00ZjhjLWEwNTUtNWJkYWZmZDVlMzNkJTI2UGFnZUlkJTNEU1UmZHI9aHR0cHMlM0ElMkYlMkZzaWdudXAudGVjaC1hcm5lcmljYXMuY29tJTJGJnc9OERDQTUwMUZGMEREMzFEJmlkPTU5NWE4Mzg5LWUxMzAtYTZhOC00NGJkLThlNzZiMzhkNzM0MyZhPSZjPWIwZWFkYjkzNDE2NmI2OTYwN2I4MjU5MjIzMzYxNzZk&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132) HTTP/1.1Host: 7f5d37dd-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://7f5d37dd-e3b309ea.tech-arnericas.com/?session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SUAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /Clear.HTML?ctx=Ls1.0&wl=False&session_id=0853e4491dc04151a3843791d98eff72&id=595a8389-e130-a6a8-44bd-8e76b38d7343&w=8DCA501FF0DD31D&tkt=taBcrIH61PuCVH7eNCyH0FC0izOzUpX5wN2Z%252b5egc%252f5vTMJsXnEHP%252froqFKakebbmG0WLaq7OFGfIOOSz7l88QUN3tl1sQcPBDXEiyUiLg3zSvbtLFtlY32NW%252fH86ePXnIbWg4rcqnIgiULp0U1bMDBbWnpwJx78bMOeKUIz2wE1A6YcPP1JkcCMh9EdJVs41m0Mkl18%252fqsAfSZwLmJ7%252bA8d4nkiyhElYUo9fnol89V%252f7sNYssdqa1G6DmWu0UReXw%252bVXQ7%252fwJAT1aGhDHZSgeMU4ZDar3i%252f9Rqky18bNwdBEMPjs0%252fCT%252bZ%252f%252b8sLAYvu&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d HTTP/1.1Host: 1151e42c-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://7f5d37dd-e3b309ea.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /PXzC5j78di/main.min.js HTTP/1.1Host: 7bd8dcb6-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://f82580a6-e3b309ea.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /error.aspx?e=404 HTTP/1.1Host: signup.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MicrosoftApplicationsTelemetryDeviceId=201b582f-659e-4245-a1b9-7b00185c5c02; ai_session=C64Vgh5GZFWAqIjOa7hxc+\|1721070716072\|1721070716072
Source: global traffic	HTTP traffic detected: GET /Images/Clear.PNG?ctx=jscb1.0&session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132) HTTP/1.1Host: 7f5d37dd-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /PXzC5j78di/main.min.js HTTP/1.1Host: 7bd8dcb6-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: c4845aa4-e3b309ea.tech-arnericas.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641; pxcts=1d4485d8-42de-11ef-af3f-82ad13e305f1; _pxvid=1d447caa-42de-11ef-af3e-19451d23aeee; _pxde=d58d4d78c1163d1a1769a5621c592fcd3bd2557414fdf3a4f2d52f89bc21c2aa:eyJ0aW1lc3RhbXAiOjE3MjEwNzA3MjEzMTcsImZfa2IiOjAsImlwY19pZCI6W119Sec-WebSocket-Key: 0SBpWY5ZS3ayvDdeGCCxwQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: c4845aa4-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /api/v2/msft HTTP/1.1Host: collector-pxzc5j78di.hsprotect.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1Host: 0df22540-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1Host: 0df22540-e3b309ea.tech-arnericas.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
Source: global traffic	HTTP traffic detected: GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1Host: micr.tech-arnericas.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://micr.tech-arnericas.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641; pxcts=1d4485d8-42de-11ef-af3f-82ad13e305f1; _pxvid=1d447caa-42de-11ef-af3e-19451d23aeee; _px3=b1722661f1fc7589b14e1626bfb84cd099e0d5fe7b17a9561ab34199b864928b:oxR4jfg1SgZIQkxAA4EGtWCSbVsF8aIR8ZcTnk4KEhWGNy4lBKX3NFNcJ0ZLh64FR869LSMoL4jfDIzVM/VKQA==:1000:fH25VN9Y3wlGXY/ynhGB1EqEUtTA4kJ8jXwTD8DvInaHROtslqk8TyZzW2XFHxxRnRln4p1xM1L5FYsXPVKU6Ob12aBNLtZIRw7sGfWqU69kQMc/Orr42jUtxxgbrsN7dnSWV4/zYuBDjECcJ59dkL+198HCJC3mA/sev4iphXcdTs/rgejjSHBA7KKNtHAqxz0DYsytWshqfx4ccNGCq/Zlsz9WII32YhS/W7xJaOE=; _pxde=fd5d05e85c91dd4384f9e1d8c5a8aa81b9a50654ecc533352d59b54538229c9b:eyJ0aW1lc3RhbXAiOjE3MjEwNzA3MjMzOTcsImZfa2IiOjAsImlwY19pZCI6W119Sec-WebSocket-Key: 1CtyrKiRSkoBhkIYNnLDkg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: micr.tech-arnericas.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: micr.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 0ffice.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 0a0de824-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 4925f123-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: d2165062-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: l1ve.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 20b67e16-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: signup.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 32340637-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 58c68845-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: a3d530d8-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: af56a4af-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 7f5d37dd-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: f82580a6-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 1151e42c-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 7bd8dcb6-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: 0df22540-e3b309ea.tech-arnericas.com
Source: global traffic	DNS traffic detected: DNS query: collector-pxzc5j78di.hsprotect.net
Source: global traffic	DNS traffic detected: DNS query: c4845aa4-e3b309ea.tech-arnericas.com

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Host: micr.tech-arnericas.comConnection: keep-aliveContent-Length: 4121Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://micr.tech-arnericas.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://micr.tech-arnericas.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:11:16 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 57696694-1cdf-4551-a9ef-492c189f1e00x-ms-ests-server: 2.1.18517.10 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:11:17 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: e3ebe31f-8ddc-45ef-924c-504f1fd12200x-ms-ests-server: 2.1.18517.10 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:11:22 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: d6fe0c38-2095-465a-9126-9cbc5b090000x-ms-ests-server: 2.1.18463.4 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:11:26 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 380c79f3-7844-46cc-98eb-625eff1ab300x-ms-ests-server: 2.1.18463.4 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:11:33 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: cda6aa4b-4dd0-4fa7-9977-c3695bbe1000x-ms-ests-server: 2.1.18517.10 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:11:41 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 9388f06d-9149-4c21-8b6e-5913cdef2a00x-ms-ests-server: 2.1.18463.4 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:11:51 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 93085862-e4da-4c47-9f92-17ecd3e52600x-ms-ests-server: 2.1.18463.4 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:11:54 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 9c229785-5183-43dd-a199-d50c412eb000x-ms-ests-server: 2.1.18463.4 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:12:03 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 3c66fba4-970e-4458-8ef2-d96fe8e50a00x-ms-ests-server: 2.1.18517.10 - WEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Mon, 15 Jul 2024 19:12:18 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 85670cff-f434-4c4d-b56d-11ee2239a400x-ms-ests-server: 2.1.18463.4 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 59949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59946
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59948
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59943
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59945
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59944
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59950
Source: unknown	Network traffic detected: HTTP traffic on port 59935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59952
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59957
Source: unknown	Network traffic detected: HTTP traffic on port 59917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59954
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59955
Source: unknown	Network traffic detected: HTTP traffic on port 59938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 59919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 59922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 59951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 59945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 59916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 59948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59916
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59915
Source: unknown	Network traffic detected: HTTP traffic on port 59931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 59924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 59918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59928
Source: unknown	Network traffic detected: HTTP traffic on port 59943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59924
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59920
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59922
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59930
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 59921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59939
Source: unknown	Network traffic detected: HTTP traffic on port 59946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59935
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59938
Source: unknown	Network traffic detected: HTTP traffic on port 59915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59937
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59934
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59933
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59941
Source: unknown	Network traffic detected: HTTP traffic on port 59932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: classification engine

Classification label: mal92.phis.win@25/77@60/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1852,i,3033810252711794878,9399344889612055035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://micr.tech-arnericas.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5644 --field-trial-handle=1852,i,3033810252711794878,9399344889612055035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1852,i,3033810252711794878,9399344889612055035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5644 --field-trial-handle=1852,i,3033810252711794878,9399344889612055035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://micr.tech-arnericas.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://1151e42c-e3b309ea.tech-arnericas.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=0853e4491dc04151a3843791d98eff72&id=595a8389-e130-a6a8-44bd-8e76b38d7343&w=8DCA501FF0DD31D&tkt=taBcrIH61PuCVH7eNCyH0FC0izOzUpX5wN2Z%252b5egc%252f5vTMJsXnEHP%252froqFKakebbmG0WLaq7OFGfIOOSz7l88QUN3tl1sQcPBDXEiyUiLg3zSvbtLFtlY32NW%252fH86ePXnIbWg4rcqnIgiULp0U1bMDBbWnpwJx78bMOeKUIz2wE1A6YcPP1JkcCMh9EdJVs41m0Mkl18%252fqsAfSZwLmJ7%252bA8d4nkiyhElYUo9fnol89V%252f7sNYssdqa1G6DmWu0UReXw%252bVXQ7%252fwJAT1aGhDHZSgeMU4ZDar3i%252f9Rqky18bNwdBEMPjs0%252fCT%252bZ%252f%252b8sLAYvu&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://20b67e16-e3b309ea.tech-arnericas.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	0%	Avira URL Cloud	safe
https://58c68845-e3b309ea.tech-arnericas.com/shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js	0%	Avira URL Cloud	safe
https://58c68845-e3b309ea.tech-arnericas.com/shared/5/images/2_bc3d32a696895f78c19d.svg	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://58c68845-e3b309ea.tech-arnericas.com/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	0%	Avira URL Cloud	safe
https://58c68845-e3b309ea.tech-arnericas.com/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js	0%	Avira URL Cloud	safe
https://0df22540-e3b309ea.tech-arnericas.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js	0%	Avira URL Cloud	safe
https://0ffice.tech-arnericas.com/login	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js	0%	Avira URL Cloud	safe
https://signup.tech-arnericas.com/signup?sru=https://l1ve.tech-arnericas.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca	0%	Avira URL Cloud	safe
https://micr.tech-arnericas.com/favicon.ico	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
http://micr.tech-arnericas.com/	0%	Avira URL Cloud	safe
https://micr.tech-arnericas.com/e3b309ea9e6447eda76b3c74aadd9952/	0%	Avira URL Cloud	safe
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	0%	Avira URL Cloud	safe
https://l1ve.tech-arnericas.com/login.srf?wa=wsignin1.0&rpsnv=155&checkda=1&ct=1721070706&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.tech-arnericas.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.tech-arnericas.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d4765445b-32c6-49b0-83e6-1d93765276ca%2526mkt%253dEN-US%2526opid%253dE99ED959906A30F1%2526opidt%253d1721070704%2526uaid%253d0853e4491dc04151a3843791d98eff72%2526contextid%253dDD0369FD4B0F07C8%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D4765445b-32c6-49b0-83e6-1d93765276ca%26uaid%3D0853e4491dc04151a3843791d98eff72%26suc%3D4765445b-32c6-49b0-83e6-1d93765276ca%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=0853e4491dc04151a3843791d98eff72	0%	Avira URL Cloud	safe
https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	Avira URL Cloud	safe
https://signup.tech-arnericas.com/error.aspx?e=404	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js	0%	Avira URL Cloud	safe
https://7bd8dcb6-e3b309ea.tech-arnericas.com/PXzC5j78di/main.min.js	0%	Avira URL Cloud	safe
https://20b67e16-e3b309ea.tech-arnericas.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1721070702302&ext.intweb.msfpc=GUID%3D54635a4c58984395a18518c706757c40%26HASH%3D5463%26LV%3D202407%26V%3D4%26LU%3D1721070696641&time-delta-to-apply-millis=4525&w=0&NoResponseBody=true	0%	Avira URL Cloud	safe
https://l1ve.tech-arnericas.com/Me.htm?v=3	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	0%	Avira URL Cloud	safe
https://c4845aa4-e3b309ea.tech-arnericas.com/images/favicon.ico?v=2	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
58c68845-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
c4845aa4-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
signup.tech-arnericas.com	139.28.37.60	true	true	unknown
1151e42c-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
f82580a6-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
7f5d37dd-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
0a0de824-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
4925f123-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
a3d530d8-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
0df22540-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
af56a4af-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
d2165062-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
20b67e16-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
inbound-weighted.protechts.net	35.190.10.96	true	false	unknown
micr.tech-arnericas.com	139.28.37.60	true	true	unknown
32340637-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
0ffice.tech-arnericas.com	139.28.37.60	true	true	unknown
www.google.com	142.250.185.164	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.205.0	true	false	unknown
l1ve.tech-arnericas.com	139.28.37.60	true	true	unknown
7bd8dcb6-e3b309ea.tech-arnericas.com	139.28.37.60	true	true	unknown
collector-pxzc5j78di.hsprotect.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://58c68845-e3b309ea.tech-arnericas.com/shared/5/images/2_bc3d32a696895f78c19d.svg	true	Avira URL Cloud: safe	unknown
https://58c68845-e3b309ea.tech-arnericas.com/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg	true	Avira URL Cloud: safe	unknown
https://7f5d37dd-e3b309ea.tech-arnericas.com/?session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	false		unknown
https://20b67e16-e3b309ea.tech-arnericas.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	true	Avira URL Cloud: safe	unknown
https://58c68845-e3b309ea.tech-arnericas.com/shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js	true	Avira URL Cloud: safe	unknown
https://1151e42c-e3b309ea.tech-arnericas.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=0853e4491dc04151a3843791d98eff72&id=595a8389-e130-a6a8-44bd-8e76b38d7343&w=8DCA501FF0DD31D&tkt=taBcrIH61PuCVH7eNCyH0FC0izOzUpX5wN2Z%252b5egc%252f5vTMJsXnEHP%252froqFKakebbmG0WLaq7OFGfIOOSz7l88QUN3tl1sQcPBDXEiyUiLg3zSvbtLFtlY32NW%252fH86ePXnIbWg4rcqnIgiULp0U1bMDBbWnpwJx78bMOeKUIz2wE1A6YcPP1JkcCMh9EdJVs41m0Mkl18%252fqsAfSZwLmJ7%252bA8d4nkiyhElYUo9fnol89V%252f7sNYssdqa1G6DmWu0UReXw%252bVXQ7%252fwJAT1aGhDHZSgeMU4ZDar3i%252f9Rqky18bNwdBEMPjs0%252fCT%252bZ%252f%252b8sLAYvu&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d	true	Avira URL Cloud: safe	unknown
https://micr.tech-arnericas.com/	true		unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	true	Avira URL Cloud: safe	unknown
https://signup.tech-arnericas.com/signup?sru=https%3a%2f%2fl1ve.tech-arnericas.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca&lic=1	false		unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	true	Avira URL Cloud: safe	unknown
https://58c68845-e3b309ea.tech-arnericas.com/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js	true	Avira URL Cloud: safe	unknown
https://0df22540-e3b309ea.tech-arnericas.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0	true	Avira URL Cloud: safe	unknown
https://0ffice.tech-arnericas.com/login	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js	true	Avira URL Cloud: safe	unknown
https://signup.tech-arnericas.com/signup?sru=https://l1ve.tech-arnericas.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	Avira URL Cloud: safe	unknown
https://micr.tech-arnericas.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js	true	Avira URL Cloud: safe	unknown
http://micr.tech-arnericas.com/	true	Avira URL Cloud: safe	unknown
https://micr.tech-arnericas.com/e3b309ea9e6447eda76b3c74aadd9952/	true	Avira URL Cloud: safe	unknown
https://collector-pxzc5j78di.hsprotect.net/api/v2/msft	false	Avira URL Cloud: safe	unknown
https://l1ve.tech-arnericas.com/login.srf?wa=wsignin1.0&rpsnv=155&checkda=1&ct=1721070706&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.tech-arnericas.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.tech-arnericas.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d4765445b-32c6-49b0-83e6-1d93765276ca%2526mkt%253dEN-US%2526opid%253dE99ED959906A30F1%2526opidt%253d1721070704%2526uaid%253d0853e4491dc04151a3843791d98eff72%2526contextid%253dDD0369FD4B0F07C8%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D4765445b-32c6-49b0-83e6-1d93765276ca%26uaid%3D0853e4491dc04151a3843791d98eff72%26suc%3D4765445b-32c6-49b0-83e6-1d93765276ca%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=0853e4491dc04151a3843791d98eff72	true	Avira URL Cloud: safe	unknown
https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	true	Avira URL Cloud: safe	unknown
https://20b67e16-e3b309ea.tech-arnericas.com/OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1721070702302&ext.intweb.msfpc=GUID%3D54635a4c58984395a18518c706757c40%26HASH%3D5463%26LV%3D202407%26V%3D4%26LU%3D1721070696641&time-delta-to-apply-millis=4525&w=0&NoResponseBody=true	true	Avira URL Cloud: safe	unknown
https://f82580a6-e3b309ea.tech-arnericas.com/index.html	false		unknown
https://signup.tech-arnericas.com/error.aspx?e=404	true	Avira URL Cloud: safe	unknown
https://7bd8dcb6-e3b309ea.tech-arnericas.com/PXzC5j78di/main.min.js	true	Avira URL Cloud: safe	unknown
https://l1ve.tech-arnericas.com/Me.htm?v=3	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js	true	Avira URL Cloud: safe	unknown
https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	Avira URL Cloud: safe	unknown
https://c4845aa4-e3b309ea.tech-arnericas.com/images/favicon.ico?v=2	true	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
35.190.10.96	inbound-weighted.protechts.net	United States	15169	GOOGLEUS	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
139.28.37.60	58c68845-e3b309ea.tech-arnericas.com	Ukraine	42331	FREEHOSTUA	true

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1473781
Start date and time:	2024-07-15 21:10:01 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://micr.tech-arnericas.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal92.phis.win@25/77@60/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://l1ve.tech-arnericas.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&scope=openid+profile+https%3a%2f%2f0ffice.tech-arnericas.com%2fv2%2fOfficeHome.All&redirect_uri=https%3a%2f%2f0ffice.tech-arnericas.com%2flandingv2&response_type=code+id_token&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&x-client-SKU=ID_NET8_0&x-client-Ver=7.3.1.0&uaid=0853e4491dc04151a3843791d98eff72&msproxy=1&issuer=mso&tenant=common&ui_locales=en-US&signup=1&lw=1&fl=easi2&epct=PAQABDgEAAAApTwJmzXqdR4BN2miheQMYdkdLelxKwyI0GTpluNaHY18gRmw2YsMzLWyXLtrovTXJbSMstGAVcUmTa2AqnEpFjRSLRyzuF-2zoeZTqY-VxEz-_2DRO8BA1I1--3Af0PJ6ch8x_oSS3GpQHKzlol00EuJ-SEM1mzsnWpMwBQKl_tGYVUTmc6p0ptI1h7YxsdcTWZp6GFSK5LfkykTlJW37ZBwAFgY32-RLXvuWbQLekSAA&jshs=0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.186.78, 142.250.110.84, 34.104.35.123, 40.68.123.157, 87.248.205.0, 13.85.23.206, 192.229.221.95, 20.242.39.171, 142.250.185.202, 142.250.181.234, 142.250.185.106, 172.217.16.202, 142.250.185.170, 142.250.186.170, 172.217.18.106, 172.217.16.138, 142.250.186.106, 142.250.186.42, 172.217.18.10, 142.250.185.138, 172.217.23.106, 142.250.186.138, 142.250.184.202, 142.250.185.234, 142.250.186.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://micr.tech-arnericas.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 448798
Category:	dropped
Size (bytes):	121953
Entropy (8bit):	7.99746321364116
Encrypted:	true
SSDEEP:	3072:/kD8eLL8i52T0P7xzGptxkwXYuO+AYO+wV9FU1K8IO8:cVHVgTEGpPk6ODD+4FU1K8M
MD5:	7B3B9DA072C36AB325B7AE3A84020F62
SHA1:	D30D2878EF0B5BEACFEB24D4AC9E27AF39936D1C
SHA-256:	6F1EC87B4407E51B64CAD995BBBA42DD80923E295D96BA4BC20CEB5FF92CDE41
SHA-512:	542957CAC4F25636F7D47C7A739DBCBECDBC666729DF9EB7C019D10E73F9DF5D1AA75EFBD4A2776E61C0F7468879845752A078BAE2B1FDD13CD9C366C6AA7154
Malicious:	false
Reputation:	low
Preview:	...........m[.H....~...1v#\......@.....K1<..6jd.+........R.LU...=.\.laeF.EFFFDFF~.e....R........uepR..rzuT.....\..O..?^.6.....'.......9..QX....Q<.b'eIe....T.q4....2..?..&..OR(4bA.\.Bu.W.t...rzY.C..j.'~...h.....J....*N.Qm.\|....C.....}...n.%.8...e..4..!..^qbVIXZ.Gq...Q...R.P3.....O....i../.....9...Da.ZW:.U..-...F..h.z....'...4.v0=......^.f..'.b.T"..+....^a/3.H...$vBD.l.&..MY..<FEG...:......K.h6c..-U..'...R.3..F..Rm.fg.h..f.g=..,.>\|....\|TO.....!P..$u7.~..$p.....c.>..pp..g..q.Y....:T9...../..8-L....L.....B.......Xp.\|...C.;Ve...]..!\|Eq....}=..[.N..y.'......A.1..,......N....N..p....(}.......C@..m.] ......m....v.y.P..h.....8...@...CU.z.UV.mzg..O.j.=..+{Zs..?N..jm).h/..c/.-.X.dh.......w....8...:.-...J.d/\|+..k..E..X..D!.....,..z.;..G`o.y..D.B.......jj...yU2.\.....:.0.M~k[6.EcZn..!.f....5...1 O.Pge...."{M.Wb..p..(......q..(`Z......x2.e..f.P......~..e........,b.zH.Swf....Y.@E"1R..'...`\.a.....Z6].....R....5=V..y../k......s<.....}NXz...K>.^;..g...i5\o.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://58c68845-e3b309ea.tech-arnericas.com/shared/5/images/2_bc3d32a696895f78c19d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 90693
Category:	downloaded
Size (bytes):	32839
Entropy (8bit):	7.992613918035336
Encrypted:	true
SSDEEP:	768:hkVCZKeGZ6ByyvMzMozoA9c/W0rPQ/RAVeyiba7z74T5cOT8EGHlo:imCZhyUwoo0Z0rQ/RAVk18EGHlo
MD5:	BD19C19DB8D9A8FC79DF9714B70F02D9
SHA1:	3C189FDE7C4AFC56BB4E78236DBF02DFDCD1DB62
SHA-256:	2CF1E4D78A52BCD95EF3F95440329088EEF51368CF38F852A6E5F7E399BFF4A2
SHA-512:	527EA859A1221BC01671FE48F17571BEE58612E013A1E0B1F58939BE7E45F225C24615900959E37A2AC2342983E973892DF0E1AEBD4F0143EDBD067D0F856423
Malicious:	false
Reputation:	low
URL:	https://58c68845-e3b309ea.tech-arnericas.com/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js
Preview:	...........kW.H.?..\|.[g.[...$3..x%.L..&....f......H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G........6.G..i...<...'2...w..n.;..._..../o.V.,......t....ht.}>O.N..x,.".nN.8.S:....bqt.tf...?:.\|.;...{..=.O...C..!E......(:c_....n..g.E..f....f..gI.K..T...0..j..-.....{/v..4T.HM=#0....Ev.?...IC.q....t>nj.e...E<m...l)..+.......8:K.&.Mzv&..j.X..+........../3..Tk....Z.<.GQ6....Ji._.\|v.Bf.[?...T.M:j(.%F.....@^...'...8.>..DN..8....B..?..~...K.x.q.--.f.~....z..&t...g.LfE,.;.d...n.....2..FH?#.Y,.N.._..j'..a.....cSo_Qo?F.\|.'M....O......h.j.-....n#.S..4....(.F...N...d.{.w@.&9k.P..q.4..Y...d4J..`>..v..\|.\1M.B6...7t.:z.......c...dF.;B....>...9....8)~..~.n.7<.O.y..1_d.e0...V.z...q..J"."..y2.....D..q...Qg..EZ...Q...G.$(.)=.7.:...p.9....d..W[c?)..0.7.I....4...y9?..:1.\T...)l..f..7.&...K:.."....0.m~.<..............d>......Wi<nu.Y......{...............=......<.Nq...A@.N.+2t2..lj..u.-d..u+.w$o.w..M.$....2.6t..bAQt.j.Q...R.*

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141453
Category:	downloaded
Size (bytes):	49707
Entropy (8bit):	7.994745113308483
Encrypted:	true
SSDEEP:	1536:mz1VSD19Cj8B9nf0vtzmisGVhYLF5tzKMoL3DUegU0:mz1VY9Cj8rEsdfN7+3DUc0
MD5:	651849382EEE7CBB0C39659D7B8272E9
SHA1:	3A2310E0D3FA0E1A6E14060DD5FBBACD385DCA83
SHA-256:	7C9977AF1B66F33388442507EBBBD2101A240CB543AD130315E42F96A6258708
SHA-512:	AD6C9547BA149363B190ECA4FF10E4B611A76B9D0FCD93944FE27A1F32C9AB6B5F8A881DC4CEFB468F25D18389268376BAB996224FA595E17118E696B8793070
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js
Preview:	............[.8.8...+.w..OL..hp._..nf.0$.......t....e .o?u.l.q.../g..J.T.U.J..k.S......T.......T.~9:?.........h.........;?.L.......W..J.U.`.F.0r..W..o...$..+....O1N....(4...R..".r.F.s...C..j.o..J...3<.%. L.....G.M.%.Ee.x".<....?..8.$.H.........Uq#Q.ER..Qr..W..)k..3.........N....:.....:.e.`.\...V........p.[....n+.......Yu..o>N.n."z.&N......!+.W......s.6r.D.....{..q/.....:z...3h....8.g31.....X...T..a...W..Fsg....h..u.$...............@.c7....M/..N..z2..}.6...O7....1....G..Ax......>.G..8S...P...U.].O..[fAn.\..16....\.....Q.....".w.....O....5w..;.{.>..mr.k53r.......@.I.<.D......d&...c .jhE..zx.]....y\|W....i...`....k~W...@.Uq.\;..1............z\|.O..Y5...........XtR,....R...k3..<..\.....;T..$...kj.5-.i.,..YH`!jb..Z..=.&.L..F...$[..y....k5qzQ.>k.1r......0..P...@..L.".u.x..!.0..w.:+...n..5..I". .....S.....h....8....v.\.[M.0..q..c;.....0..*.8.......l.\...n "..km..3..T..].k.+0.....P.V...4-W.C....0-/.S;.w......k.z+..)I.....=u.E.@ .Dv.z..

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HoMDhRn:IURn
MD5:	C56EB54F69EB059B7CE41FF5ABEF35E6
SHA1:	CCD01B565595769C7FA3DE585C6B39AA9D7699A9
SHA-256:	B88FE70B99FF6E92C57579BA3ECCDD5DFD6C8A19141BF2FB943C729ADF17F23D
SHA-512:	24E48F4C8934D89B7D0857BFE5E1DE5633030B06DD6328817C02C81D741D402227FD858A19933C44FB8B604EE764B962B85957DE235107AE9BF8A68564DA2541
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk-HgMHJTQX1BIFDdbBmF8=?alt=proto
Preview:	CgkKBw3WwZhfGgA=

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 55504
Category:	dropped
Size (bytes):	15943
Entropy (8bit):	7.985634884217725
Encrypted:	false
SSDEEP:	192:uZKTeS2lyUQQPPP4JltjEp/9zueWKO1URgI8VTR1GxtbAAPSv1xfTszfqfX7t7pC:aseN8UpnQFwol5VGtb6f7CZWQFsWn
MD5:	99326B305E51129B40EB2F306776D161
SHA1:	AFAFE7513D517B0E22F058D6C93877D3FA15A0C9
SHA-256:	46CCFD748507B78239186BBF8D35BF4685768942218D88FAA3C30B04A1673D0B
SHA-512:	D4678A04B83FBCE4DFC7D5ED43B89D99B1E700C06E9C525771EE707399AC0D99C1F3E267694975F937F4255FA9600FDEFC74062D4C66A0A3B829FEB51AE6751C
Malicious:	false
Reputation:	low
Preview:	...........}Ms#G.....u...z \|..#h........C)$....`/.n...p..8...;.j.\|..G_\|.O.........n..How...!..+++++3+3.w7k..{..R.=.......~....E.......O. ......7.U.Q..?~v.Y.w..;....._...N...e.zpb'.....7k....\|.a...((-...J........,.}~.c2.'p<..eu.................9n#,.......7.\?...^6...^.3..^.h.....R(.^..p...xY...c..D..l2..'#o.W..7iB...XL..S.(.B......i.D.M\p..`..Eg{.....7M..{...zh...'N]..L...s..2.A..u..."p.. Xx....w..'l..w..'c/^.FP....q.h4.R+X^{...d..M.C.J,..RP.7E.T......8 .v....Iw.X..?.r......nk./..?Wj..A.\|./........JAs.j......?.!..t.z.-..m.]..3y...S@...'.).).Aa..1.kQ.....l+.....-q..n.p../..l.H>G.^<.}..ID.][D..[!...........{O....9.C...8V>..=N..(.4.KXt../.1U...\F.*0..=.......p.-..kQ@P..(...-..ea&>.y.......:..Y.t[x..Xw:.QTp....ZE.u..\?`q......EhJ.A.L.......P..=.xk....(.wrL.."d.q`...$../.\...M.<_\|.<.~\|[....l....o...;p.(z.&.,~.....X....1?e1.1..v.L.........,.......?{...\fB....-.).Fb.;.p.N...n(..^....B.#D...g\|.E..8R\.0....7 ...C....QQ.fPB3."F..dN....%.s..%....'

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 141453
Category:	dropped
Size (bytes):	49707
Entropy (8bit):	7.994745113308483
Encrypted:	true
SSDEEP:	1536:mz1VSD19Cj8B9nf0vtzmisGVhYLF5tzKMoL3DUegU0:mz1VY9Cj8rEsdfN7+3DUc0
MD5:	651849382EEE7CBB0C39659D7B8272E9
SHA1:	3A2310E0D3FA0E1A6E14060DD5FBBACD385DCA83
SHA-256:	7C9977AF1B66F33388442507EBBBD2101A240CB543AD130315E42F96A6258708
SHA-512:	AD6C9547BA149363B190ECA4FF10E4B611A76B9D0FCD93944FE27A1F32C9AB6B5F8A881DC4CEFB468F25D18389268376BAB996224FA595E17118E696B8793070
Malicious:	false
Reputation:	low
Preview:	............[.8.8...+.w..OL..hp._..nf.0$.......t....e .o?u.l.q.../g..J.T.U.J..k.S......T.......T.~9:?.........h.........;?.L.......W..J.U.`.F.0r..W..o...$..+....O1N....(4...R..".r.F.s...C..j.o..J...3<.%. L.....G.M.%.Ee.x".<....?..8.$.H.........Uq#Q.ER..Qr..W..)k..3.........N....:.....:.e.`.\...V........p.[....n+.......Yu..o>N.n."z.&N......!+.W......s.6r.D.....{..q/.....:z...3h....8.g31.....X...T..a...W..Fsg....h..u.$...............@.c7....M/..N..z2..}.6...O7....1....G..Ax......>.G..8S...P...U.].O..[fAn.\..16....\.....Q.....".w.....O....5w..;.{.>..mr.k53r.......@.I.<.D......d&...c .jhE..zx.]....y\|W....i...`....k~W...@.Uq.\;..1............z\|.O..Y5...........XtR,....R...k3..<..\.....;T..$...kj.5-.i.,..YH`!jb..Z..=.&.L..F...$[..y....k5qzQ.>k.1r......0..P...@..L.".u.x..!.0..w.:+...n..5..I". .....S.....h....8....v.\.[M.0..q..c;.....0..*.8.......l.\...n "..km..3..T..].k.+0.....P.V...4-W.C....0-/.S;.w......k.z+..)I.....=u.E.@ .Dv.z..

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113813
Category:	dropped
Size (bytes):	35204
Entropy (8bit):	7.993347211515683
Encrypted:	true
SSDEEP:	768:5+6LvEwn9nnK7a8zh35Hsb5gnEZHVl4s0aH8MZcncxHEZtdJA:LK7/5k+EZ1lgiIcunA
MD5:	7B8CB924660B93BBA15B37A065CA7063
SHA1:	55D52F3279583C343D720FBB1BFBF26A041EFFC6
SHA-256:	306534329DC016AED5AD01973B0F973906A93A391764D91214C15ABDACA854FE
SHA-512:	EBE7AA03769FE0425176D49917FD4526034E1EDC18FF83E41A08DC6D77724078D7046AB24792AE00B9273D057ECAE29FD5F553D2837537BBE84ADC100C470248
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p....f..#. .....(]N. ....0......y..f..].....t..s..[9....x.'..L...;..-..?..O......S...#`..h..............ok...........m....U..../.%0\|^....A........:..x.>.y..u....N...\s...).......<?._.........%.jC..~..=.....O._j.h.,...O@..9.RN@.0.t>..K.....`......!^.........~.........g.$:.O...b>..m.M.........y_p.. .....V..No....V.;.b......yQ/......N<`...l._.k.....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...h8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1249
Category:	downloaded
Size (bytes):	703
Entropy (8bit):	7.7041446466278884
Encrypted:	false
SSDEEP:	12:XmV3CGqHMPxYOQ3JIW6MZ2BrM0S/+RO94n9co2u9ibKu5F47G:XmJCBHGYOQ3JRZ2ZAar9i7X47G
MD5:	73078438C931F3FECE31559806FCAD80
SHA1:	82283792DBCA7F206C0F3D878120FD11384C4A3D
SHA-256:	42E635A934E71315DDBB716163F19E7DBC5474289F2E00D0D6E2DA3AF7142565
SHA-512:	DA61235A6D5E42C4F0D2220D3B591C9853C3F13195348857DA20D0EC14DCA4F226035243447AE85D4F5D08788D3FE357DEA5B330543DCB9D381737C32B5D3188
Malicious:	false
Reputation:	low
URL:	https://f82580a6-e3b309ea.tech-arnericas.com/index.html
Preview:	...........T[o.0.~.`<..8.,.eI.>....-..N..v2.......$.}&@.j.C.s...\.....>...;.....\...x .r.(..8..d`.....0.{z.....$.xs..\i.9LI..B....p.....!..4m...@:.yCe.Ia.i.Q.<.,.v....q>O..0.+.. .b.D...R.P..j....+_..wq.....s.:...%..h].#"a.\|..~.....q..-.....s...3...eVR...- .a.....3..a7l...'gi..`>..fh....E.S]R.0_.(h...r.....D.(..t....2.....l.....\|.R-\|..v...p.....o...2....g.:D..B....XM..3.Zia...bN.^ ..o..Si..U+.....NH\|.7.:/.J..R......7.K..X.z..j...mw...............7..1v..U;8J..Gk.W.IF.+0..`F.9..mVwPu...]S.\+..B.Ph.....q.U...:P.... .2...n..l.k^.S!..?....5.k.u.F.I.l.3.[\.#i....m..An.Xe.c....~\.d?z1.6.};......./1&/zax..k..6t................j......x..."..Af.....q... .~h...p......

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407113
Category:	downloaded
Size (bytes):	116426
Entropy (8bit):	7.997437633367131
Encrypted:	true
SSDEEP:	3072:AfBECXKcs1g0hpbUawQ245V1uGwkjeFDOad/HW:AfXAfzbU9u5tSROe/HW
MD5:	5FE05579DEC495636C9F295FB336E4A4
SHA1:	57A699167B6A0967111F13E201F3A4C2FE29767B
SHA-256:	8208AF9321B0667E0F9291F2CA7229003A60EC2C4865B589270D36E92BCEE4DA
SHA-512:	654527CE3624E55B8A21CFB28908F96543BF9988EE71E762C91CB013100927EEB5106B60188A188D02F16093015D3F93CE2B6D56E19DAEE3B2815E6F3FC64EED
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js
Preview:	...........}[[.H........-...."#<$!=.$...{z..O.e..<.pi....Z....,.I.>..L...K....W.....l.._.....r.r...w.S............`...b.E..7....v#>..~%.+.?..Y..1.S..z.2..i%...,...A.U&^..G.\|..UL...VN.0~...Z...Cm....`.......7....Rm...#^I.!.+wco0.\|..a........n..(...&X..y%.qe...X..Q9.....-FT.:..............8K`..M.O..Z'....>T...$...x<....6...\|.U.].&....f..[..dR..xX.....~?....r..>N.j....9.r?f0y.>.~.x..t.F.<...Opm..;/......Q.._...n.:...f....q<...../.'.....n....Qc.L7.Ar3q#.....u....O._#...1uv.4...U..S..U..b....T-..,....B.....{X.l..y..C.\w.z.....&l.<../.Vc.Dc..r.....}0w......a^....c4c.Yh=.a.wB.m......."..X.?.f.e1.....U....8.C.ho.X...M.{......NE.d.....N.=..sc...v&>U.T&.I..$.+.4....M>..g<....f......D..#.0..\|..Jd.i]!.Dm.......?..;f0U1l.........B....4...g.].'.... ..-...h.......%.......Z...M.........3y.i1.z..+@.......i..../...-,k...p.}m..Y....F...XV...h....}...{.o..zyc@..mDoy.`_..~.....W..p..j/..6...c./Ym-..m..\|.........w../...>\..!l..>....h...q>....

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 448798
Category:	downloaded
Size (bytes):	121953
Entropy (8bit):	7.99746321364116
Encrypted:	true
SSDEEP:	3072:/kD8eLL8i52T0P7xzGptxkwXYuO+AYO+wV9FU1K8IO8:cVHVgTEGpPk6ODD+4FU1K8M
MD5:	7B3B9DA072C36AB325B7AE3A84020F62
SHA1:	D30D2878EF0B5BEACFEB24D4AC9E27AF39936D1C
SHA-256:	6F1EC87B4407E51B64CAD995BBBA42DD80923E295D96BA4BC20CEB5FF92CDE41
SHA-512:	542957CAC4F25636F7D47C7A739DBCBECDBC666729DF9EB7C019D10E73F9DF5D1AA75EFBD4A2776E61C0F7468879845752A078BAE2B1FDD13CD9C366C6AA7154
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js
Preview:	...........m[.H....~...1v#\......@.....K1<..6jd.+........R.LU...=.\.laeF.EFFFDFF~.e....R........uepR..rzuT.....\..O..?^.6.....'.......9..QX....Q<.b'eIe....T.q4....2..?..&..OR(4bA.\.Bu.W.t...rzY.C..j.'~...h.....J....*N.Qm.\|....C.....}...n.%.8...e..4..!..^qbVIXZ.Gq...Q...R.P3.....O....i../.....9...Da.ZW:.U..-...F..h.z....'...4.v0=......^.f..'.b.T"..+....^a/3.H...$vBD.l.&..MY..<FEG...:......K.h6c..-U..'...R.3..F..Rm.fg.h..f.g=..,.>\|....\|TO.....!P..$u7.~..$p.....c.>..pp..g..q.Y....:T9...../..8-L....L.....B.......Xp.\|...C.;Ve...]..!\|Eq....}=..[.N..y.'......A.1..,......N....N..p....(}.......C@..m.] ......m....v.y.P..h.....8...@...CU.z.UV.mzg..O.j.=..+{Zs..?N..jm).h/..c/.-.X.dh.......w....8...:.-...J.d/\|+..k..E..X..D!.....,..z.;..G`o.y..D.B.......jj...yU2.\.....:.0.M~k[6.EcZn..!.f....5...1 O.Pge...."{M.Wb..p..(......q..(`Z......x2.e..f.P......~..e........,b.zH.Swf....Y.@E"1R..'...`\.a.....Z6].....R....5=V..y../k......s<.....}NXz...K>.^;..g...i5\o.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.2917601481809733
Encrypted:	false
SSDEEP:	3:Ftt:Xt
MD5:	7029066C27AC6F5EF18D660D5741979A
SHA1:	46C6643F07AA7F6BFE7118DE926B86DEFC5087C4
SHA-256:	59869DB34853933B239F1E2219CF7D431DA006AA919635478511FABBFC8849D2
SHA-512:	7E8E93F4A89CE7FAE011403E14A1D53544C6E6F6B6010D61129DC27937806D2B03802610D7999EAB33A4C36B0F9E001D9D76001B8354087634C1AA9C740C536F
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 874171
Category:	dropped
Size (bytes):	220503
Entropy (8bit):	7.998385465759819
Encrypted:	true
SSDEEP:	6144:hWkv5+47xoWSEMINMf23sD888bgSNO/Zc38IyJNBpLr:tCWby8bFAO38IkNBpLr
MD5:	D5007B8673660EA6B73F58EE408F4FAA
SHA1:	3B7BE441E878D2B26D5F9EFF1272D4905E87F6A7
SHA-256:	4C2205841B7DF1A5D7C201147F834375CCC9201C968A2737E00313AC9FC0795E
SHA-512:	EAF06DE55FBA4423BAAAC1514180C6B4F721277C33C4A991EEAE385A19050C2A8D0E5914D49A60D0C8A977CB7906AA8AA6F88272EA52BB0889DC1869F3602FAB
Malicious:	false
Reputation:	low
Preview:	...........kw.H.(......+#M.N..} ..i 4...LN.b.m.-.IN.......r.g.y.9..."..Ju..j.].r.....y.1M.2+.F...b.Ti.m.2..R..t.-.;..H..2k../_.?{}..]}.6.z....-..~..W.I.!E%2Q.\.......{.)A..........o.8...=...<..L..p?...zw9.e.....\{..C9J...M...9-....u2..cY=...."=....A...E^.yg..._.Rs.2...cK.t.Z..l\MT..t..T.&EyI1^.dV...V.TY._....#..l.......i\|.......2.d.(.......,..~.M.e[.{r}./..E...").o....U!.!..Ot.:.ub.'qB8P.g..jC-i&..YT.b..aV./2....b....rv.OK1j~.T..".Wy!.N.7z..Gb.....d[~..EU...2 \...Q.B....A..Q..WE...,..[[.f.......>]..$^....V..I..{.T......3.B.x.T...O..I..M.%mF......:....I.Z....3..bk...lkkF......!.q...L.......[g.2\B....<.Z.?.%.r)...v..][..6..^Y....X.'ik.UR....V.H`...5S.).Q.K.u.oN"x..........i;.}..4(..%oZ7..j...-....U...JN%..V...t;{.o4.B\|K...=......d..u..yS1...Y>....1hn..G).Q\.{G...C]....jS1.W..`.h,......\...wMu.E..N..6.w..B.T.]X..Y.s<.U.=Xh7.;.....n.VcS..lo.....4.v......E...j.+......F..}q.X...<..u....q.`.Te..U.....v9m...1....l1......T.=Az.E.{.....+.HeH(.ET.<....$

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 90693
Category:	dropped
Size (bytes):	32839
Entropy (8bit):	7.992613918035336
Encrypted:	true
SSDEEP:	768:hkVCZKeGZ6ByyvMzMozoA9c/W0rPQ/RAVeyiba7z74T5cOT8EGHlo:imCZhyUwoo0Z0rQ/RAVk18EGHlo
MD5:	BD19C19DB8D9A8FC79DF9714B70F02D9
SHA1:	3C189FDE7C4AFC56BB4E78236DBF02DFDCD1DB62
SHA-256:	2CF1E4D78A52BCD95EF3F95440329088EEF51368CF38F852A6E5F7E399BFF4A2
SHA-512:	527EA859A1221BC01671FE48F17571BEE58612E013A1E0B1F58939BE7E45F225C24615900959E37A2AC2342983E973892DF0E1AEBD4F0143EDBD067D0F856423
Malicious:	false
Reputation:	low
Preview:	...........kW.H.?..\|.[g.[...$3..x%.L..&....f......H2.`..S..Z.H..>..5..Z....U.U..~m.^.Yk..d..V.L..2.4i.2..\.V..q..%....G........6.G..i...<...'2...w..n.;..._..../o.V.,......t....ht.}>O.N..x,.".nN.8.S:....bqt.tf...?:.\|.;...{..=.O...C..!E......(:c_....n..g.E..f....f..gI.K..T...0..j..-.....{/v..4T.HM=#0....Ev.?...IC.q....t>nj.e...E<m...l)..+.......8:K.&.Mzv&..j.X..+........../3..Tk....Z.<.GQ6....Ji._.\|v.Bf.[?...T.M:j(.%F.....@^...'...8.>..DN..8....B..?..~...K.x.q.--.f.~....z..&t...g.LfE,.;.d...n.....2..FH?#.Y,.N.._..j'..a.....cSo_Qo?F.\|.'M....O......h.j.-....n#.S..4....(.F...N...d.{.w@.&9k.P..q.4..Y...d4J..`>..v..\|.\1M.B6...7t.:z.......c...dF.;B....>...9....8)~..~.n.7<.O.y..1_d.e0...V.z...q..J"."..y2.....D..q...Qg..EZ...Q...G.$(.)=.7.:...p.9....d..W[c?)..0.7.I....4...y9?..:1.\T...)l..f..7.&...K:.."....0.m~.<..............d>......Wi<nu.Y......{...............=......<.Nq...A@.N.+2t2..lj..u.-d..u+.w$o.w..M.$....2.6t..bAQt.j.Q...R.*

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.873235826376328
Encrypted:	false
SSDEEP:	3:YA8rQaC:YAoQaC
MD5:	5FC018D9E6C56911BBC8DC5DDCD0C768
SHA1:	70979F57A85D527ED8ABCBF02CFF44640C58BDE6
SHA-256:	2E6D78A4AE644F3B60AFD3C33E66539FF6C5F6A8ED6ABC40A3AF06AC020EC020
SHA-512:	1E3B86274B3590E28366F2D2DE86A1844058E213BD225AAA05D992CA70523F65D2BD543F9F762A805A2C4D5961AA34F5A19EBE70E135939C9CD3C63F6B5F5524
Malicious:	false
Reputation:	low
Preview:	{"error":"Method Not Allowed"}.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.2917601481809733
Encrypted:	false
SSDEEP:	3:Ftt:Xt
MD5:	7029066C27AC6F5EF18D660D5741979A
SHA1:	46C6643F07AA7F6BFE7118DE926B86DEFC5087C4
SHA-256:	59869DB34853933B239F1E2219CF7D431DA006AA919635478511FABBFC8849D2
SHA-512:	7E8E93F4A89CE7FAE011403E14A1D53544C6E6F6B6010D61129DC27937806D2B03802610D7999EAB33A4C36B0F9E001D9D76001B8354087634C1AA9C740C536F
Malicious:	false
Reputation:	low
URL:	https://7f5d37dd-e3b309ea.tech-arnericas.com/Images/Clear.PNG?ctx=jscb1.0&session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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&eci=eyJ1dmRyIjoiR29vZ2xlIEluYy4gKEdvb2dsZSkiLCJ1cmRyIjoiQU5HTEUgKEdvb2dsZSwgVnVsa2FuIDEuMy4wIChTd2lmdFNoYWRlciBEZXZpY2UgKFN1Ynplcm8pICgweDAwMDBDMERFKSksIFN3aWZ0U2hhZGVyIGRyaXZlcikiLCJ2ZHIiOiJXZWJLaXQiLCJyZHIiOiJXZWJLaXQgV2ViR0wiLCJpZHVoIjoiMTViNmNhNDcyNjliZTQyODc1Njg1MDY5MzdlOTkxN2MifQ==&PageId=SU&u1=&u3=10.0.0&u4=x86&u5=64&u2=(Google%20Chrome%2C117.0.5938.132)%2C(Not%3BA%3DBrand%2C8.0.0.0)%2C(Chromium%2C117.0.5938.132)
Preview:	....................

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3566
Category:	downloaded
Size (bytes):	1423
Entropy (8bit):	7.878052810793601
Encrypted:	false
SSDEEP:	24:XRSjPTreNcIdpqmLo+1AzLS4WzCvuO9Aus2WZFtruH97Z86x8:XRSjPTyreqKdWe7vheud7G6x8
MD5:	94E83026B71893DFBDE80ADD223629AC
SHA1:	9B55B322C71C9BBC042BA395A050D85713D69939
SHA-256:	D6F322D3D7F6B0F91370474EF5CAD7D0FBCA7ED901F357A5E33290DCDED807A5
SHA-512:	24DD62C5284541F0B07789961E2B7F4634AA88D40BB95F0F6D3F8E9767866A4E345D54BFEF54F1693A1FB5FF9FDE5B13FE3B242A724229B3F9EB649359F89855
Malicious:	false
Reputation:	low
URL:	https://l1ve.tech-arnericas.com/Me.htm?v=3
Preview:	...........W.n.8.}.W.D...V....9LP.].E..U...j...mneJ i........n.>.!.<.9<g83.o..2.=.=..Y....6....'..\|....r,.x;O..a.gzR...S.Q..r...!{gp..{.Qx+...ka.Z..gW\|.Rm....0.mm..9.q.H..X.A...u.-B9K.G6.D.......}o.....v.$...Q....f.!".......bJYu...O....E.......Q..S.An..J..%..z_..C,.......I2..aO.E.I...J(..4.".k.DZ.....A$5..u#....o..Vf.."K....?......>).......=....).;.c ...J..o.A.nh2.g.j..N#..-.{..."1.N..i..FD."$-...-..F...MVi.KH.EM.....G.i#&.:.k.rn..I_6..RKh.l...-...2.:..S/1....f..R.....5Q..J...h...a.H...'.{y^...!..6........&..8..&.\TL.4..G$..F....nj.B.ff)..dF@a.]V..V......xY..S.K...m.~J?~xx..&/?.....^../+.U..7TH..&.^.Rgu.v'-+n.....uUamJ,-V...8.3a.C78..Q..r...$....,...vm....L.cw:..>..E..F.''..n..B*\|rb.Y.......M...[.s....L..2+..@ ....a...&gS]z..s#...e1.......,u..........X.4..}..HWY......Ux5......X.....b.i...)#......p..F..6-..m.A.s.AT...e................dm.~.p.4"V&.....IhR.[...../I....@..4.Q....V...../A1...2.......pus....qr."....E..b'g...5.... C......8....

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15770
Category:	dropped
Size (bytes):	5543
Entropy (8bit):	7.9656484689591345
Encrypted:	false
SSDEEP:	96:CTkyh0ApMcOpuXFNcSL9bWzwjORH5s2DthQ1dCrmb3F0bA6eF2ah5SL:2tLic1XFtxqzwjI6khQrCrXA+aq
MD5:	E76896EADC1FDC117F4F66CBABE9E2AC
SHA1:	3B29A08AEE7329350E9568EE41CC400F041F9283
SHA-256:	060E6F10B90E6ECB8229C44B26DBAB06D66E6DE886462639E96247EBF98BAEB8
SHA-512:	0AA923B94BC09D4E1D8D7635E429A1616BAD9861C351494E9114E28F2D6FEFD95F37A67B21829CC8965EAD5E02FEA27C3CD22C0270EDDF1FE985CE277978EAFC
Malicious:	false
Reputation:	low
Preview:	...........[}w.F...?.b.(..c.i....q....c.%..Mrt..I..(.l.....3 ..d...$...s..}....i.....G...{.e[..\7.+.}.>\.:.......7.6....9p...(.D..a..Q.\hS...n...h.....I...S...H.h...^3...+7I.Z......?.C..F..?OR-.R..57.$../...,.x..O..D...I$.Q.%\|..;l"f._.in.5.Sm.%.D.ai]......QHp...{@8....8........5Q....+dD.:.Z.i.h.Q_......6.r../..o6L..c.....A.E.O4.,A.k.!.....8qCby.....'.Oy.20.....Oc."O.4..(.y@w+....[..h.W...Y_.f\|wt.....cSMM.4.....O'.......MBH....0..z.l...'...../...._.Z..XgkW........\|..et...*..K\F....".....U.....~.A... v....a.S1.X\|.bZ.LL.O...\|a.....G.pH.28..0..\.#..L..ql...#..x\|o27C.Nb5...v...y......x2.......rI. ....3. .y....Z.PTq..,H..C]H...A;p..$.P..\..:$]L8..7..R.[RN......[a.v ....w.l.N...3......Cw.q"ny...w...4..w.........l..........Op...l..j..].....\.'...$.....>-......I-7I.....v......]...F...1.aP4..6...$8..m..K.D.m.q....$.......XSb6k..+......9.....=?...5.f.?.`.wjp.QQjC6..<...=..CJ7`.A.d....1O....._..0..)....v.d......apSc.i..z..8NR.7N.N..{...q..,yBV

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190283
Category:	dropped
Size (bytes):	61145
Entropy (8bit):	7.995588347401894
Encrypted:	true
SSDEEP:	1536:zw88KXbB/TgPQA9FqVMp3OwEGio/KOOUIC6/sUMtAOOQr/r:M8Fb1TgoAJ3gGiozOuAOO8T
MD5:	8A5263AEFB1DCB38B29C0BCCF0CBF3E0
SHA1:	427AF7381C4F76F5913A55D981E5FED0B4EC1D15
SHA-256:	4C9A7FD37DB4E50D1A3A2B3253480FDDA415BD3B5728A6941BE7C6B23CF18998
SHA-512:	36AFA9F66020DF5898020B8B11101855D2DDFE7475FC8188BA5342DEAF028F49E75BF1995F4BE574EF67D12B6C6FC517B2C130C65609D6DDF4EA3F68BC4593AA
Malicious:	false
Reputation:	low
Preview:	...........y[..8....F.\.t..M......p....Y......Jl.#........w-.f..}f..V.^]]]].{.'...]...."...e..0..c.&.`....s.=..c..l..?.}.j.DE.&...?..y.Zy..Q...v.....Gn.;?..9..p\|We..3V......S......a....<,...,.s....\.YN.0b..M..G...l6L..z\..iV_\|l..}..FP...7h..I..$..<...i..........YS.#3.1d..y=.u..q4f...e.Y..,4..a.........~Z.Wq.".^.@....c{"1.p2....\.V..K.C.2n.0....V.8...I.&.Y..H..bd...Q......VPm.C+.N.^'i^..nz.4.........p9....e......._+....F).7.F....&..b/.F..u..6....[Y.d..X...f......ee.2.4n.........q.8Koe]....m.%')`{.6..Y..b.^.....8G..O.e...z...NX..]..,...dr.=.'7....6.t.!.W..../,._.....A@4....(.h...&......t.f.p.d..\|?....e.?F....4.@.?..Q1.9l..E.../q1n.....h.....$8....z.>..i..5A;......p+....X..,K...e;. ...I..@oJ.=.l .....}.....Pnj.....`i#.i"h...h.........4......g..#.........M....M.2.!w.^lE..YS.-s......&.u......f...A....Mtg..R..?.M9^.....8.....3../..5@gY..n+...K?..%!m....2l5.0y..&g..q)e.h..6.....R..8..&.&.......~..............m...k..k...:.......k.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407113
Category:	dropped
Size (bytes):	116426
Entropy (8bit):	7.997437633367131
Encrypted:	true
SSDEEP:	3072:AfBECXKcs1g0hpbUawQ245V1uGwkjeFDOad/HW:AfXAfzbU9u5tSROe/HW
MD5:	5FE05579DEC495636C9F295FB336E4A4
SHA1:	57A699167B6A0967111F13E201F3A4C2FE29767B
SHA-256:	8208AF9321B0667E0F9291F2CA7229003A60EC2C4865B589270D36E92BCEE4DA
SHA-512:	654527CE3624E55B8A21CFB28908F96543BF9988EE71E762C91CB013100927EEB5106B60188A188D02F16093015D3F93CE2B6D56E19DAEE3B2815E6F3FC64EED
Malicious:	false
Reputation:	low
Preview:	...........}[[.H........-...."#<$!=.$...{z..O.e..<.pi....Z....,.I.>..L...K....W.....l.._.....r.r...w.S............`...b.E..7....v#>..~%.+.?..Y..1.S..z.2..i%...,...A.U&^..G.\|..UL...VN.0~...Z...Cm....`.......7....Rm...#^I.!.+wco0.\|..a........n..(...&X..y%.qe...X..Q9.....-FT.:..............8K`..M.O..Z'....>T...$...x<....6...\|.U.].&....f..[..dR..xX.....~?....r..>N.j....9.r?f0y.>.~.x..t.F.<...Opm..;/......Q.._...n.:...f....q<...../.'.....n....Qc.L7.Ar3q#.....u....O._#...1uv.4...U..S..U..b....T-..,....B.....{X.l..y..C.\w.z.....&l.<../.Vc.Dc..r.....}0w......a^....c4c.Yh=.a.wB.m......."..X.?.f.e1.....U....8.C.ho.X...M.{......NE.d.....N.=..sc...v&>U.T&.I..$.+.4....M>..g<....f......D..#.0..\|..Jd.i]!.Dm.......?..;f0U1l.........B....4...g.].'.... ..-...h.......%.......Z...M.........3y.i1.z..+@.......i..../...-,k...p.}m..Y....F...XV...h....}...{.o..zyc@..mDoy.`_..~.....W..p..j/..6...c./Ym-..m..\|.........w../...>\..!l..>....h...q>....

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 874171
Category:	downloaded
Size (bytes):	220503
Entropy (8bit):	7.998385465759819
Encrypted:	true
SSDEEP:	6144:hWkv5+47xoWSEMINMf23sD888bgSNO/Zc38IyJNBpLr:tCWby8bFAO38IkNBpLr
MD5:	D5007B8673660EA6B73F58EE408F4FAA
SHA1:	3B7BE441E878D2B26D5F9EFF1272D4905E87F6A7
SHA-256:	4C2205841B7DF1A5D7C201147F834375CCC9201C968A2737E00313AC9FC0795E
SHA-512:	EAF06DE55FBA4423BAAAC1514180C6B4F721277C33C4A991EEAE385A19050C2A8D0E5914D49A60D0C8A977CB7906AA8AA6F88272EA52BB0889DC1869F3602FAB
Malicious:	false
Reputation:	low
URL:	https://58c68845-e3b309ea.tech-arnericas.com/shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js
Preview:	...........kw.H.(......+#M.N..} ..i 4...LN.b.m.-.IN.......r.g.y.9..."..Ju..j.].r.....y.1M.2+.F...b.Ti.m.2..R..t.-.;..H..2k../_.?{}..]}.6.z....-..~..W.I.!E%2Q.\.......{.)A..........o.8...=...<..L..p?...zw9.e.....\{..C9J...M...9-....u2..cY=...."=....A...E^.yg..._.Rs.2...cK.t.Z..l\MT..t..T.&EyI1^.dV...V.TY._....#..l.......i\|.......2.d.(.......,..~.M.e[.{r}./..E...").o....U!.!..Ot.:.ub.'qB8P.g..jC-i&..YT.b..aV./2....b....rv.OK1j~.T..".Wy!.N.7z..Gb.....d[~..EU...2 \...Q.B....A..Q..WE...,..[[.f.......>]..$^....V..I..{.T......3.B.x.T...O..I..M.%mF......:....I.Z....3..bk...lkkF......!.q...L.......[g.2\B....<.Z.?.%.r)...v..][..6..^Y....X.'ik.UR....V.H`...5S.).Q.K.u.oN"x..........i;.}..4(..%oZ7..j...-....U...JN%..V...t;{.o4.B\|K...=......d..u..yS1...Y>....1hn..G).Q\.{G...C]....jS1.W..`.h,......\...wMu.E..N..6.w..B.T.]X..Y.s<.U.=Xh7.;.....n.VcS..lo.....4.v......E...j.+......F..}q.X...<..u....q.`.Te..U.....v9m...1....l1......T.=Az.E.{.....+.HeH(.ET.<....$

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 55504
Category:	downloaded
Size (bytes):	15943
Entropy (8bit):	7.985634884217725
Encrypted:	false
SSDEEP:	192:uZKTeS2lyUQQPPP4JltjEp/9zueWKO1URgI8VTR1GxtbAAPSv1xfTszfqfX7t7pC:aseN8UpnQFwol5VGtb6f7CZWQFsWn
MD5:	99326B305E51129B40EB2F306776D161
SHA1:	AFAFE7513D517B0E22F058D6C93877D3FA15A0C9
SHA-256:	46CCFD748507B78239186BBF8D35BF4685768942218D88FAA3C30B04A1673D0B
SHA-512:	D4678A04B83FBCE4DFC7D5ED43B89D99B1E700C06E9C525771EE707399AC0D99C1F3E267694975F937F4255FA9600FDEFC74062D4C66A0A3B829FEB51AE6751C
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js
Preview:	...........}Ms#G.....u...z \|..#h........C)$....`/.n...p..8...;.j.\|..G_\|.O.........n..How...!..+++++3+3.w7k..{..R.=.......~....E.......O. ......7.U.Q..?~v.Y.w..;....._...N...e.zpb'.....7k....\|.a...((-...J........,.}~.c2.'p<..eu.................9n#,.......7.\?...^6...^.3..^.h.....R(.^..p...xY...c..D..l2..'#o.W..7iB...XL..S.(.B......i.D.M\p..`..Eg{.....7M..{...zh...'N]..L...s..2.A..u..."p.. Xx....w..'l..w..'c/^.FP....q.h4.R+X^{...d..M.C.J,..RP.7E.T......8 .v....Iw.X..?.r......nk./..?Wj..A.\|./........JAs.j......?.!..t.z.-..m.]..3y...S@...'.).).Aa..1.kQ.....l+.....-q..n.p../..l.H>G.^<.}..ID.][D..[!...........{O....9.C...8V>..=N..(.4.KXt../.1U...\F.*0..=.......p.-..kQ@P..(...-..ea&>.y.......:..Y.t[x..Xw:.QTp....ZE.u..\?`q......EhJ.A.L.......P..=.xk....(.wrL.."d.q`...$../.\...M.<_\|.<.~\|[....l....o...;p.(z.&.,~.....X....1?e1.1..v.L.........,.......?{...\fB....-.).Fb.;.p.N...n(..^....B.#D...g\|.E..8R\.0....7 ...C....QQ.fPB3."F..dN....%.s..%....'

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:8Kiun9ks:8Kiun2s
MD5:	9F9FA94F28FE0DE82BC8FD039A7BDB24
SHA1:	6FE91F82974BD5B101782941064BCB2AFDEB17D8
SHA-256:	9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E
SHA-512:	34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmszUKX6eJjGxIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChIKBw3RW1FSGgAKBw1Xevf9GgA=

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 155030
Category:	downloaded
Size (bytes):	62260
Entropy (8bit):	7.995402331260021
Encrypted:	true
SSDEEP:	1536:Z/hvVVnq+Kn/mrR2wO8s0Aq8x4IbzcP7SNE1txh2+:Z/h9VHE/Q4tX0/bSN+q+
MD5:	1B32A4FDFE894D2BB755DBD36A2ADD30
SHA1:	2A77D2B42FC050490EE4B62DDFFE513E45D18B84
SHA-256:	38F4A2749663B33CB1B8898610B175AF6D35C3D9B9EE3B96D3F426F64A56C341
SHA-512:	B7CF49674539FFD8E7E546E6A58689F7CA317D1C602CEE9C776066B42604B0C04830B959DCE951947CE94963F5B2058A6B05C5E73B4D2D4A207F51356CD676B2
Malicious:	false
Reputation:	low
URL:	https://7bd8dcb6-e3b309ea.tech-arnericas.com/PXzC5j78di/main.min.js
Preview:	............v.8.(..>..V..,..`.a...C..gY.:..(.6E.%......$(1..}.:2......BUakk.\|.q.....N^".~.o.{....MS7+..............P...J...\r.V..A...F8.G.tc...c..A.o.!.N<w.a...0..x.8........8z.......c.;.\|.X...^.a.>..2..N...Rf..ub.%.7\H..x....".p.Fc;p.Ba=...O;....d.<.L...8i#...hA..1....._q..~3".8..q3X..v..X:...mI}..zC..~....4V,..OU....v-K.4.../.;vF...ZJ}.O....N.{.r.ni........ic?..H.......9..7.....,.\|J.....=f...........v\u.k..o...h-.KP...>..U.`4.Q.>m .......{ch.B...W#6...F."b.\'..f.. .8a..N.l..M(A.0?B..KB.N..9...l+(9..X..E...6N...U.U.EE.....*.S..(..p.]..U.Z-D.>...P......q......../_ON.._\^]...:v.........p.3......n..J..]o..,....>..4kb\..R.........D.....\|_KQ.S.6.....4..=.bO.Y^..../1..eCn2.. CKo..;\|.Z..U.[..ptr....N.h....Z..!..q2Y5m.@X....5.V.../.}....D.N6<...._.6/p.E!,...f..........nd.}....6....,.~.....Z...=...Ka.KA ...xXU..@.._....6.....k..4.IP?...t..D ..h...........x..F...#`k&...W.K..L.E...Z,....n..>...d.0..q7...X...}..`.D8.....J..4e-yt\.Wa.6.+.....

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 190283
Category:	downloaded
Size (bytes):	61145
Entropy (8bit):	7.995588347401894
Encrypted:	true
SSDEEP:	1536:zw88KXbB/TgPQA9FqVMp3OwEGio/KOOUIC6/sUMtAOOQr/r:M8Fb1TgoAJ3gGiozOuAOO8T
MD5:	8A5263AEFB1DCB38B29C0BCCF0CBF3E0
SHA1:	427AF7381C4F76F5913A55D981E5FED0B4EC1D15
SHA-256:	4C9A7FD37DB4E50D1A3A2B3253480FDDA415BD3B5728A6941BE7C6B23CF18998
SHA-512:	36AFA9F66020DF5898020B8B11101855D2DDFE7475FC8188BA5342DEAF028F49E75BF1995F4BE574EF67D12B6C6FC517B2C130C65609D6DDF4EA3F68BC4593AA
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........y[..8....F.\.t..M......p....Y......Jl.#........w-.f..}f..V.^]]]].{.'...]...."...e..0..c.&.`....s.=..c..l..?.}.j.DE.&...?..y.Zy..Q...v.....Gn.;?..9..p\|We..3V......S......a....<,...,.s....\.YN.0b..M..G...l6L..z\..iV_\|l..}..FP...7h..I..$..<...i..........YS.#3.1d..y=.u..q4f...e.Y..,4..a.........~Z.Wq.".^.@....c{"1.p2....\.V..K.C.2n.0....V.8...I.&.Y..H..bd...Q......VPm.C+.N.^'i^..nz.4.........p9....e......._+....F).7.F....&..b/.F..u..6....[Y.d..X...f......ee.2.4n.........q.8Koe]....m.%')`{.6..Y..b.^.....8G..O.e...z...NX..]..,...dr.=.'7....6.t.!.W..../,._.....A@4....(.h...&......t.f.p.d..\|?....e.?F....4.@.?..Q1.9l..E.../q1n.....h.....$8....z.>..i..5A;......p+....X..,K...e;. ...I..@oJ.=.l .....}.....Pnj.....`i#.i"h...h.........4......g..#.........M....M.2.!w.^lE..YS.-s......&.u......f...A....Mtg..R..?.M9^.....8.....3../..5@gY..n+...K?..%!m....2l5.0y..&g..q)e.h..6.....R..8..&.&.......~..............m...k..k...:.......k.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15770
Category:	downloaded
Size (bytes):	5543
Entropy (8bit):	7.9656484689591345
Encrypted:	false
SSDEEP:	96:CTkyh0ApMcOpuXFNcSL9bWzwjORH5s2DthQ1dCrmb3F0bA6eF2ah5SL:2tLic1XFtxqzwjI6khQrCrXA+aq
MD5:	E76896EADC1FDC117F4F66CBABE9E2AC
SHA1:	3B29A08AEE7329350E9568EE41CC400F041F9283
SHA-256:	060E6F10B90E6ECB8229C44B26DBAB06D66E6DE886462639E96247EBF98BAEB8
SHA-512:	0AA923B94BC09D4E1D8D7635E429A1616BAD9861C351494E9114E28F2D6FEFD95F37A67B21829CC8965EAD5E02FEA27C3CD22C0270EDDF1FE985CE277978EAFC
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js
Preview:	...........[}w.F...?.b.(..c.i....q....c.%..Mrt..I..(.l.....3 ..d...$...s..}....i.....G...{.e[..\7.+.}.>\.:.......7.6....9p...(.D..a..Q.\hS...n...h.....I...S...H.h...^3...+7I.Z......?.C..F..?OR-.R..57.$../...,.x..O..D...I$.Q.%\|..;l"f._.in.5.Sm.%.D.ai]......QHp...{@8....8........5Q....+dD.:.Z.i.h.Q_......6.r../..o6L..c.....A.E.O4.,A.k.!.....8qCby.....'.Oy.20.....Oc."O.4..(.y@w+....[..h.W...Y_.f\|wt.....cSMM.4.....O'.......MBH....0..z.l...'...../...._.Z..XgkW........\|..et...*..K\F....".....U.....~.A... v....a.S1.X\|.bZ.LL.O...\|a.....G.pH.28..0..\.#..L..ql...#..x\|o27C.Nb5...v...y......x2.......rI. ....3. .y....Z.PTq..,H..C]H...A;p..$.P..\..:$]L8..7..R.[RN......[a.v ....w.l.N...3......Cw.q"ny...w...4..w.........l..........Op...l..j..].....\.'...$.....>-......I-7I.....v......]...F...1.aP4..6...$8..m..K.D.m.q....$.......XSb6k..+......9.....=?...5.f.?.`.wjp.QQjC6..<...=..CJ7`.A.d....1O....._..0..)....v.d......apSc.i..z..8NR.7N.N..{...q..,yBV

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3566
Category:	downloaded
Size (bytes):	1424
Entropy (8bit):	7.864197708853266
Encrypted:	false
SSDEEP:	24:XKYJv91DHfk+4uC4y3abubjZ/QyNwRAW5ecmNxcCngHTMokexBtg1ZSppKt1zthU:XF91zfp8qwBQqw2xMtTMokGtPGTh0/
MD5:	1445843E4F4BE764A79922C95EEEA73E
SHA1:	1DE7185E3A06375818D2AB72437E74610E51CADA
SHA-256:	407ACFAD9D67E11A0AF5EA6CBB14F506E6006C4C05302F7E3C2EB8283CFED531
SHA-512:	3048D755A01DFF1E3E3EC02121948083EAB4B12F41EE92BBEB0235D083757A4996D72C4C4A47A01BC09D9C65F0AFC31595DD8270A326A4794DFF96F619A694DC
Malicious:	false
Reputation:	low
URL:	https://l1ve.tech-arnericas.com/Me.htm?v=3
Preview:	...........W.n.8.}.W.D...V...&(...i...}p..#Q6.2%.......f.j7p...X....3....:P"5=.=.....\..v....'.~........x.%..1..=!{....)...e.B...\....$...K.c..V.^.l.oi.....&..l.>#"t%........y.j...%j."H..1\|).h.i...7...... ..(..)E.p.....h...BV..N....M.").c.Wf=..r~~.1...B)5..S..R..E..._{..6......Q...I..pi. I..n.4..Bs.aw.Iu.@^..<?.....Y..Oc.p........s......z:..7..g}.....9.s@....... ..4.....(!WV-.g-..F.g..B...4IM-.....A...Ee..]+.&+....G..u....3K.)...X..."2../j.E...7.......R.X.xK./0...^.>..i...y@.Z..B.c..P...6.!"...<\H..dY.;.B....M.P..\|L.;fG..4!d\2.....$.Q...t.vb.\.fz...`.CaT.M..u+..O.S<_.<..t..Z...O.....]....\AOK.M.zRBo.B.....u..Z....hYq.5+.vm.i..+...$./....4......%.....!dg.g...[...L..<...C..)BV5.9;....%VB.3c..0l..}.po....U...a.x....q..ax....`r....07...`..r..&).K...\|J.r....m.$..}\.H6i".....Rex9...x...X.....\|.).7.I-.$..].p)WZh.6...L.@.. .Q..A..[..../X......H.;$[..[.s.>1".%...uB.\|..K..}I..n....L'1..$.(.r..W.x........e.E..U.}.#....C.^>N..G...Q.]T......%Q.0..[.Zp....

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 155030
Category:	dropped
Size (bytes):	62258
Entropy (8bit):	7.995334266351896
Encrypted:	true
SSDEEP:	768:wk0JUPBrbOuirxlYbFGEKRmiks1YVYALZCu0ucP3/N01EjBz0JX25y+Ep2staQoY:DrbOuzEZTQd6NNyW0JmnlzJdqgvf8
MD5:	810CDA6D8E9C787C7BEF1057539D9E55
SHA1:	0F0B882AE1667457B2C81CB8B2F4501167FBE7D1
SHA-256:	3200BCAB783E4F44DD749FC6C031D40A0CC014B7D09B1C7F84465EB07EC1B5A1
SHA-512:	8B8CCC0E57B3FF9AB2B7FA3AA2EEA558EF557614461F617EAB14D8F33EE5965C52F336A9D8236CFB21391EB90BDFDF89954AB24FF9D06ACD134CF467A3C44D17
Malicious:	false
Reputation:	low
Preview:	............v.8.(..>..V..,..`.a...C..gY.:..(.6E.%......$(1..}.:2......BUakk.\|.q.....N^".~.o.{....MS7+..............P...J...\r.V..A...F8.G.tc...c..A.o.!.N<w.a...0..x.8........8z.......c.;.\|.X...^.a.>..2..N...Rf..ub.%.7\H..x....".p.Fc;p.Ba=...O;....d.<.L...8i#...hA..1....._q..~3".8..q3X..v..X:...mI}..zC..~....4V,..OU....v-K.4.../.;vF...ZJ}.O....N.{.r.ni........ic?..H.......9..7.....,.\|J.....=f...........v\u.k..o...h-.KP...>..U.`4.Q.>m .......{ch.B...W#6...F."b.\'..f.. .8a..N.l..M(A.0?B..KB.N..9...l+(9..X..E...6N...U.U.EE.....*.S..(..p.]..U.Z-D.>...P......q......../_ON.._\^]...:v.........p.3......n..J..]o..,....>..4kb\..R.........D.....\|_KQ.S.6.....4..=.bO.Y^..../1..eCn2.. CKo..;\|.Z..U.[..ptr....N.h....Z..!..q2Y5m.@X....5.V.../.}....D.N6<...._.6/p.E!,...f..........nd.}....6....,.~.....Z...=...Ka.KA ...xXU..@.._....6.....k..4.IP?...t..D ..h...........x..F...#`k&...W.K..L.E...Z,....n..>...d.0..q7...X...}..`.D8.....J..4e-yt\.Wa.6.+.....

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113813
Category:	downloaded
Size (bytes):	35204
Entropy (8bit):	7.993347211515683
Encrypted:	true
SSDEEP:	768:5+6LvEwn9nnK7a8zh35Hsb5gnEZHVl4s0aH8MZcncxHEZtdJA:LK7/5k+EZ1lgiIcunA
MD5:	7B8CB924660B93BBA15B37A065CA7063
SHA1:	55D52F3279583C343D720FBB1BFBF26A041EFFC6
SHA-256:	306534329DC016AED5AD01973B0F973906A93A391764D91214C15ABDACA854FE
SHA-512:	EBE7AA03769FE0425176D49917FD4526034E1EDC18FF83E41A08DC6D77724078D7046AB24792AE00B9273D057ECAE29FD5F553D2837537BBE84ADC100C470248
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p....f..#. .....(]N. ....0......y..f..].....t..s..[9....x.'..L...;..-..?..O......S...#`..h..............ok...........m....U..../.%0\|^....A........:..x.>.y..u....N...\s...).......<?._.........%.jC..~..=.....O._j.h.,...O@..9.RN@.0.t>..K.....`......!^.........~.........g.$:.O...b>..m.M.........y_p.. .....V..No....V.;.b......yQ/......N<`...l._.k.....0)......+.Z..4...M. ...i...`.ml..-X.E.....d.. .}.e4.{6hz^..}....@....W.1...h8...>.@.....(.'[..`..A..?...yL.\|..QTF...-.='S@.Q.sM.`...}.t..$..y^..0J.kC

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://c4845aa4-e3b309ea.tech-arnericas.com/images/favicon.ico?v=2
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113355
Category:	downloaded
Size (bytes):	20390
Entropy (8bit):	7.979439840390925
Encrypted:	false
SSDEEP:	384:VkqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZl3v:gCGEiL/w7R8DW9Z5BU7UMZHqv
MD5:	02363E4C20BE02F305298C569681427C
SHA1:	EEEF3294F36805907EC217BE82022A71350AA7F5
SHA-256:	DE0591B9220B931A57F173CE64D7E14F041B979CA5BEC6127B4BCEC7C373AD1C
SHA-512:	7AD5AB34536709F0AA0C7FEDABF6432A6EB2F5D201BC71AA34E236E230D9FDF7C01EAE3A1800DE9F9AF01521B881478F259BE1574755C4FC17B8090E237BE9DA
Malicious:	false
Reputation:	low
URL:	https://0a0de824-e3b309ea.tech-arnericas.com/ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.6770058072183405
Encrypted:	false
SSDEEP:	12:XDQ7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:X86qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	ECC8894D3791BEDDB4E0226F8DAB065A
SHA1:	6510EB51E76A49746C526E432455549B50DE5AF1
SHA-256:	64C8C0A9EFBC27AD86EAEC90465B75C52AE8CD68F7E76FC9431DC6AE66072AC3
SHA-512:	02B20BE98C22EBF7886FE68008C4ED42E3F8FF6ADC8DD7BC1A43A8C4F6FD56CC932EFC5500249A4FAA5024574A841AD10FC8DDB8221CB7226E0E16DEA63F7052
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://58c68845-e3b309ea.tech-arnericas.com/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 23709
Category:	downloaded
Size (bytes):	10164
Entropy (8bit):	7.973650788870871
Encrypted:	false
SSDEEP:	192:VFbnohjJLY6Sq9Y9/QCbaxz9EYnAekRWiYPl++CByu5UNYqs1jjmB22Gs:VhohjJLY6Sq9S/b+xBhAekRuP7CrgQj2
MD5:	7E1A90925DE5DF42D1C7DD136257E3F3
SHA1:	80E802B87AD667306B5975B86E363EFC04A2D648
SHA-256:	DA7E3C9333DCAAA258CA945B88EC44CD7027BDE0894255403C7EC37569F1D58B
SHA-512:	C9526BC12DF6DDB25230FF333C51B6E10ED5C37B6D07DD5E500FD70179648B817D600634A7B789058ADA19A50A2765CF86BD1E8E3A2FE0369BC894E5D3B8CB4A
Malicious:	false
Reputation:	low
URL:	https://7f5d37dd-e3b309ea.tech-arnericas.com/?session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	...........\|ys#.......].....t.n.X...d7/.`.b....T.P...$.I..>.Z.......O..;...mYc.Xky?...d.{<...G...:P8.gG...<^.\|.{......k.......7.....D....i.............b.v...z.~....\|0.:.M.%..Lvg.v..6.m..xw...2.f65..<.&Av....;.j..c.VQ.3-.v/.9.s.....v..M..&.e.....N[3....;.m.B.q.pn.........;.M.V..R..w.R.p.b.T..^c.^-`..>s......$onJ..Ey.....^...Z.V.1.(.V.J.N...V...K...{..l.......U.....[U..6.6.$........^.?+...2..A/.....G.....w.g...3.j..J.w.g......~.y..p.W.L..B.`u..1:2v...a.........C.g.Va......n.i?......@:.[.......E....g......7......\|...ot.=pKr_.=3.....]..o....U..Vj..uf.z...#..[.Y.?.C...c..<....C_::d............V..v....F..v.Jo.kN..}..gg#...;.n..<u%... 8.u.XswV....b..U,2I...\.S).Jz...r9Wnu4].Y....\..n.Y....fx.s...2U'..[-j._ k}.z.3..]8..b.8.).....Lt...m..,;.v....;h.$.N tr. KU...,..a..1.)./.'B..S...........M%..V..t.E..:...J..8...+.-,xy.Y]....6..%#Z. .....+.0d..[OY.[N[YU..~.NuSs{.......`.{.g.C;...9..i...N..c.4o...0..1.non.3.t.>.;.g...a.Y4.H...

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/15/24-21:11:03.631357	TCP	2857090	ETPRO CURRENT_EVENTS JS/PsyduckPockeball Payload Inbound	443	49739	139.28.37.60	192.168.2.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 15, 2024 21:10:51.998600006 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 15, 2024 21:11:00.687598944 CEST	49735	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:00.687999010 CEST	49736	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:00.692596912 CEST	80	49735	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:00.692936897 CEST	80	49736	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:00.693025112 CEST	49735	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:00.693207026 CEST	49736	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:00.693207026 CEST	49736	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:00.703021049 CEST	80	49736	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:01.373995066 CEST	80	49736	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:01.488430977 CEST	49736	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:01.558996916 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:01.559097052 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:01.559190989 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:01.559498072 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:01.559530973 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:01.606961012 CEST	49675	443	192.168.2.4	173.222.162.32
Jul 15, 2024 21:11:02.286789894 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:02.287084103 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:02.287148952 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:02.288639069 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:02.288712025 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:02.290009022 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:02.290118933 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:02.290359020 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:02.290376902 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:02.341007948 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.209462881 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.209496975 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.209507942 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.209609985 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.209610939 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.209651947 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.209676981 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.209702969 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.250116110 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.347482920 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.347496986 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.347587109 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.347626925 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.347651958 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.347651958 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.347692966 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.347728014 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.348033905 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.389672041 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:03.389756918 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:03.389847040 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:03.390211105 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:03.390242100 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:03.454067945 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.454092026 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.454170942 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.454199076 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.454407930 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.461776018 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.461796999 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.461882114 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.461883068 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.461911917 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.461951971 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.461972952 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.462716103 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.462799072 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.468452930 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.468492031 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.468522072 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.468549013 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.468581915 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.468625069 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.538865089 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.538893938 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.538940907 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.539002895 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.539048910 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.539048910 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.562700033 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.562721968 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.562777996 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.562799931 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.562827110 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.562844992 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.568175077 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.568197012 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.568257093 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.568270922 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.568300009 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.568316936 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.572588921 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.572611094 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.572676897 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.572690010 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.572721958 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.572916031 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.631267071 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.631294012 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.631411076 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.631428003 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.631506920 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.649470091 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.649494886 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.649571896 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.649590969 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.649646997 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.653987885 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.654010057 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.654062033 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.654074907 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.654115915 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.654153109 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.658030033 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.658111095 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.658129930 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.658179998 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.658191919 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.658262014 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.658262014 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.658308029 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.658926964 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.659001112 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.659012079 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.659055948 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:03.659100056 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.663364887 CEST	49739	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:03.663398027 CEST	443	49739	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:04.090444088 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:04.137427092 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:04.507584095 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:04.507663012 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:04.511645079 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:04.511737108 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:04.549638033 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:04.549829960 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:04.590778112 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:04.590801001 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:04.643894911 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:04.927063942 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:04.927150965 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:04.927238941 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:04.930088997 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:04.930124998 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:05.365618944 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:05.365668058 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:05.365724087 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:05.366112947 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:05.366179943 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:05.366229057 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:05.367810011 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:05.367824078 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:05.367958069 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:05.367975950 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:05.609066010 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:05.609150887 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:05.674475908 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:05.674506903 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:05.674825907 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:05.718339920 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:05.852849007 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:05.896527052 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:06.100491047 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:06.100581884 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:06.100728035 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:06.100728035 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:06.100835085 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:06.100886106 CEST	49741	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:06.100904942 CEST	443	49741	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:06.106152058 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.109148979 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.125144005 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.125164032 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.125344992 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.125390053 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.126341105 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.126516104 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.128354073 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.128552914 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.128674984 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.128863096 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.128940105 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.128964901 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.128989935 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.161113024 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:06.161215067 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:06.161303997 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:06.161652088 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:06.161690950 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:06.169678926 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.692111969 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.692297935 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.692878962 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.693156004 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.693192959 CEST	443	49743	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:06.693206072 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.693334103 CEST	49743	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.843111038 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:06.884530067 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:07.074986935 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:07.075079918 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:07.076980114 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:07.077033997 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:07.077255964 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:07.078501940 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:07.124520063 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:07.346147060 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:07.346200943 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:07.346308947 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:07.353940010 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:07.353940010 CEST	49745	443	192.168.2.4	2.19.244.127
Jul 15, 2024 21:11:07.353993893 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:07.354022980 CEST	443	49745	2.19.244.127	192.168.2.4
Jul 15, 2024 21:11:08.369899035 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.369961023 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.369981050 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.370017052 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.370019913 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.370037079 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.370054007 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.370070934 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.370071888 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.370081902 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.370106936 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.370106936 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.372374058 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.372446060 CEST	443	49744	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.372529030 CEST	49744	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.393978119 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.394092083 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:08.394176006 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.394447088 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:08.394485950 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:09.129446030 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:09.129690886 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:09.129764080 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:09.130734921 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:09.130805969 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:09.134747028 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:09.134814024 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:09.134937048 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:09.180512905 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:09.183907986 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:09.183928013 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:09.231102943 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:10.689727068 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:10.689805031 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:10.689838886 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:10.689899921 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:10.690033913 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:10.690363884 CEST	49746	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:10.690386057 CEST	443	49746	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:10.693116903 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:10.693182945 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:10.693273067 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:10.693504095 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:10.693519115 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:11.431396961 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:11.432313919 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:11.432343960 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:11.433367968 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:11.433437109 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:11.438527107 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:11.438612938 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:11.439116955 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:11.439127922 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:11.481458902 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.665005922 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.665029049 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.665035963 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.665056944 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.665085077 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.665110111 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.665122986 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.665136099 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.665160894 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.790276051 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.790292025 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.790378094 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.790391922 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.790437937 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.902292967 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.902308941 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.902389050 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.902400970 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.902440071 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.904723883 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.904782057 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.904786110 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.904798985 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.904850960 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.912518978 CEST	49747	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.912538052 CEST	443	49747	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.980952978 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.981005907 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:12.981487989 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.982691050 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:12.982706070 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:13.701308966 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:13.701533079 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:13.701562881 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:13.702538967 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:13.702610970 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:13.704267979 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:13.704317093 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:13.704794884 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:13.704802990 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:13.748430014 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:13.906032085 CEST	49672	443	192.168.2.4	173.222.162.32
Jul 15, 2024 21:11:13.906064987 CEST	443	49672	173.222.162.32	192.168.2.4
Jul 15, 2024 21:11:13.954214096 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:13.954288006 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:13.954333067 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:14.995969057 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:14.995987892 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:14.995995045 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:14.996028900 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:14.996062040 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:14.996073008 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:14.996110916 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:14.996136904 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.037003994 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.111841917 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.111851931 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.111881018 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.111905098 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.111913919 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.111932039 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.111953974 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.112638950 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.224201918 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.224219084 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.224311113 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.224328041 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.224827051 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.224848032 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.224854946 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.224872112 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.224884033 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.224935055 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.240778923 CEST	49748	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.240797997 CEST	443	49748	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.356472969 CEST	49750	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.356508017 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.356683969 CEST	49750	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.359036922 CEST	49750	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.359045982 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.387583017 CEST	49740	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:11:15.387605906 CEST	443	49740	142.250.185.164	192.168.2.4
Jul 15, 2024 21:11:15.388181925 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.388236046 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.388869047 CEST	49752	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.388878107 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.388942957 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.388942957 CEST	49752	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.389163971 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.389174938 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.389738083 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.396717072 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.396725893 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.396936893 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.397500992 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.397500992 CEST	49752	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.397524118 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.397541046 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.398658037 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.398667097 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.399049044 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.399055004 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.679042101 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.679094076 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:15.679311037 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.680102110 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:15.680114031 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.110156059 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.111906052 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.112963915 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.113925934 CEST	49750	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.113948107 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.114147902 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.114176035 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.114291906 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.114294052 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.114300966 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.114490986 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.114605904 CEST	49750	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.114653111 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.114751101 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.114757061 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.114969969 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.115415096 CEST	49750	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.115654945 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.116415977 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.116471052 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.116552114 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.117356062 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.117432117 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.117480993 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.117732048 CEST	49752	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.117741108 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.117952108 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.118006945 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.119446993 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.119580030 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.119613886 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.119654894 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.120584965 CEST	49752	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.120673895 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.138470888 CEST	49752	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.138536930 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.160499096 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.170794010 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.170794010 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.170794010 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.170821905 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.170823097 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.217767954 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.218002081 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.404134989 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.469008923 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.472903013 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.472918034 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.473853111 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.473864079 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.473941088 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.474874973 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.474937916 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.476331949 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:16.476341963 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:16.500619888 CEST	49723	80	192.168.2.4	199.232.214.172
Jul 15, 2024 21:11:16.506263971 CEST	80	49723	199.232.214.172	192.168.2.4
Jul 15, 2024 21:11:16.506335974 CEST	49723	80	192.168.2.4	199.232.214.172
Jul 15, 2024 21:11:16.516988039 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.069492102 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.069981098 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.070082903 CEST	49752	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.071768999 CEST	49752	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.071811914 CEST	443	49752	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.121077061 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.121162891 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.121248960 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.121584892 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.121617079 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.183640957 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.183696985 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.183764935 CEST	49750	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.183882952 CEST	49750	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.183923006 CEST	443	49750	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.562410116 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.562448978 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.562464952 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.562505960 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.562537909 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.562550068 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.562568903 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.582576036 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.582612038 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.582905054 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.583399057 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.583412886 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.664694071 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.664717913 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.664725065 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.664788008 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.664829016 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.664869070 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.679030895 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.679049015 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.679102898 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.679133892 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.679142952 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.679160118 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.679172039 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.679178953 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.679187059 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.679193974 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.679214954 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.692830086 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.692858934 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.693051100 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.693649054 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.693658113 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.693753004 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.694097042 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.694116116 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.694462061 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.694472075 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.708172083 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.708193064 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.708239079 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.708261013 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.708281040 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.708302021 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.723495007 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.723512888 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.723577023 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.723862886 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.723884106 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.782499075 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.782510996 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.782562971 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.782584906 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.782594919 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.782618046 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.782624006 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.782628059 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.782659054 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.796886921 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.796952009 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.796977997 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.797008038 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.797024012 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.797066927 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.799154997 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.799221992 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.799228907 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.799314022 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.799318075 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.799490929 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.799530029 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.799546003 CEST	443	49751	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.799554110 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.799587965 CEST	49751	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.812706947 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.812731028 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.812777042 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.812794924 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.812823057 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.812839985 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.858563900 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.858810902 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.858860016 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.860344887 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.860419035 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.861398935 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.861460924 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.861602068 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.896729946 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.896790981 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.896812916 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.896815062 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.896940947 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.897326946 CEST	49755	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.897345066 CEST	443	49755	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.908500910 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.913022995 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:17.913043022 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:17.959604979 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.563306093 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.563343048 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.563663006 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.563694000 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.563815117 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.563894987 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.564028025 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.564218998 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.564503908 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.564579010 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.564829111 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.564904928 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.564976931 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.565042019 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.565772057 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.566096067 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.566112041 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.567876101 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.567959070 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.568402052 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.568504095 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.568509102 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.568576097 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.568778992 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.568794012 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.571647882 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.571721077 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.572633982 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.572719097 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.572771072 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.612498999 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.612515926 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.612541914 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.620415926 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.620479107 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.620492935 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.620532990 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.620549917 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.673417091 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.673546076 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.912060976 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.912337065 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.912431955 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.912617922 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.912625074 CEST	443	49759	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.912672997 CEST	49759	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.913094044 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.913136005 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:18.913186073 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.913453102 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:18.913467884 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.617084026 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.666388035 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.676520109 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.676527977 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.677584887 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.677661896 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.678596020 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.678653955 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.678761005 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.678767920 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.678782940 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.724512100 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.725608110 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.800348043 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.800375938 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.800385952 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.800446033 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.800472975 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.800491095 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.800499916 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.800513029 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.800524950 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.800535917 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.800579071 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.801835060 CEST	49761	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.801848888 CEST	443	49761	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.806308985 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.806328058 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.806400061 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.806600094 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.806616068 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.820992947 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.821016073 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.821037054 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.821069002 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.821098089 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.821113110 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.821142912 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.822243929 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.822300911 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.822336912 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.822354078 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.823106050 CEST	49760	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.823118925 CEST	443	49760	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.884443045 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.884474993 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.884536028 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:19.884536982 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.884589911 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.885332108 CEST	49764	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:19.885354996 CEST	443	49764	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.677333117 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.677364111 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.677398920 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.677448034 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.677493095 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.677511930 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.691207886 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.694705009 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.694732904 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.695027113 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.695424080 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.695489883 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.695550919 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.715187073 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.715207100 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.715279102 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.715308905 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.726357937 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.726377964 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.726510048 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.726558924 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.735599995 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.735619068 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.735701084 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.735724926 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.736538887 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.740138054 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.740197897 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.740209103 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.744951963 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.744971037 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.745049953 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.745062113 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.745106936 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.752088070 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.752146959 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.752159119 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.752198935 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.752217054 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.752265930 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.757169008 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.757210970 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.757246017 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.757255077 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.757286072 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.757299900 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.759978056 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.760071039 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.760080099 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.760152102 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.760261059 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.763082027 CEST	49762	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.763115883 CEST	443	49762	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.798738956 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.812017918 CEST	49769	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.812055111 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.812117100 CEST	49769	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.812593937 CEST	49769	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.812612057 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.830005884 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.830013990 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.830071926 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.830435038 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:20.830444098 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:20.844499111 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.527446985 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.527700901 CEST	49769	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:21.527729034 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.528047085 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.528418064 CEST	49769	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:21.528472900 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.528799057 CEST	49769	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:21.555089951 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.555352926 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:21.555361032 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.556437016 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.556731939 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:21.556900978 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.556906939 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:21.572496891 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.600538015 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:21.604887009 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.011318922 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.011339903 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.011357069 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.011415005 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.011460066 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.011480093 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.011507034 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.011538982 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.012895107 CEST	49768	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.012914896 CEST	443	49768	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.169006109 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.169051886 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.169060946 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.169099092 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.169127941 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.169132948 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.169138908 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.169208050 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.169248104 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.169248104 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.169249058 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.218231916 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.288824081 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.288841009 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.288863897 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.288875103 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.288913965 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.288992882 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.289031982 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.289056063 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.398308039 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.398348093 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.398396015 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.398422003 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.398454905 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.398474932 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.404143095 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.404180050 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.404242039 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.404275894 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.404319048 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.404319048 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.404791117 CEST	49754	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.404833078 CEST	443	49754	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.409647942 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.409753084 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.409826994 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.410053015 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.410072088 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.452296019 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.452358007 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.452510118 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.452858925 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.452877045 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.480700016 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.480803967 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.480962992 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.481209040 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.481245041 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.783409119 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.783490896 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:22.783565044 CEST	49769	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.802740097 CEST	49769	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:22.802763939 CEST	443	49769	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.112293959 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.116631031 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.116723061 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.117095947 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.117909908 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.118000984 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.118210077 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.160545111 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.240353107 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.240638971 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.240673065 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.241132021 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.241446018 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.241528034 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.241604090 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.248889923 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.249109030 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.249152899 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.249469042 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.249784946 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.249847889 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.249965906 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.288494110 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.294078112 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.296503067 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.302742958 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.302809000 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.302829981 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.302866936 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.302869081 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.302898884 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.302916050 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.302917004 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.302953005 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.356580019 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.419543028 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.419574022 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.419616938 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.419617891 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.419636965 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.419658899 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.419672012 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.419684887 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.419715881 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.528263092 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.528323889 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.528351068 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.528368950 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.528426886 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.533485889 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.533526897 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.533566952 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.533571005 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.533601999 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.533611059 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.534288883 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.534351110 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.538800001 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.538841963 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.538861036 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.538866997 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.538899899 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.538922071 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.576364040 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.576668978 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.576714993 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.576725960 CEST	443	49766	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.576735020 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.576783895 CEST	49766	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.618367910 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.618446112 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.618453026 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.618490934 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.618515015 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.618535042 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.647569895 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.647614002 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.647648096 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.647653103 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.647696972 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.649332047 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.649401903 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.649405956 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.649487019 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:23.649553061 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.649693966 CEST	49770	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:23.649703979 CEST	443	49770	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.281092882 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.281128883 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.281400919 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.281503916 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.281503916 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.323714972 CEST	49772	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.323744059 CEST	443	49772	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.439187050 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.439244032 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.439460039 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.471262932 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.471350908 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.668073893 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.668088913 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.668342113 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.668395996 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.669320107 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.782123089 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.782156944 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.782205105 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.782247066 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.782289982 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.782330036 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.782398939 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.812283993 CEST	49775	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.812320948 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.812521935 CEST	49775	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.812994957 CEST	49775	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.813004971 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.824680090 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.824726105 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.824842930 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.824842930 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.824879885 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.825397968 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.879185915 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.879211903 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.879257917 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.879363060 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.879431963 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.879481077 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.899386883 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.899430037 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.899585962 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.899586916 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.899658918 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.900156975 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.900398016 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.900556087 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.900571108 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.900616884 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.901226044 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.901247025 CEST	443	49771	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:24.901294947 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.902179003 CEST	49771	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:24.935198069 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.015444994 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.015456915 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.015506983 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.015557051 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.015616894 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.015638113 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.015659094 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.127393961 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.127422094 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.127562046 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.127562046 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.127600908 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.127645969 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.131547928 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.131570101 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.131603003 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.131630898 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.131649017 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.131679058 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.131701946 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.135936975 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.135962963 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.136010885 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.136027098 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.136054993 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.136077881 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.138252020 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.138305902 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.138333082 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.138345003 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.138375998 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.138395071 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.175385952 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.176414967 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.176455021 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.176798105 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.177635908 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.177700043 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.178129911 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.224500895 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.248128891 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.248162031 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.248195887 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.248298883 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.248305082 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.248305082 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.248367071 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.250128984 CEST	49773	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.250153065 CEST	443	49773	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.524229050 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.527399063 CEST	49775	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.527419090 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.527698994 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.528575897 CEST	49775	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.528628111 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.528939962 CEST	49775	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.576498985 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.932780981 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.932800055 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.933031082 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.933837891 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.933854103 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.934730053 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.934760094 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.935015917 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.950561047 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.950567961 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.951097012 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.963875055 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.963885069 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.964297056 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.964310884 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.998573065 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:25.998588085 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:25.998902082 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.014245033 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.014256954 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.208569050 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.208581924 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.208761930 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.208817005 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.209212065 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.209281921 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.261317968 CEST	49774	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.261369944 CEST	443	49774	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.650155067 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.697768927 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.756509066 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.758439064 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.759040117 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.806617975 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.806636095 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.806642056 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.841408014 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.841418982 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.841809034 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.841819048 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.842263937 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.842268944 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.842819929 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.842873096 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.842915058 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.842921019 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.843453884 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.843533039 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.843553066 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.843596935 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.855732918 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.855905056 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.856798887 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.856954098 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.886101961 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.886254072 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.892076969 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.892255068 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.892637968 CEST	49775	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.897524118 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.897531986 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:26.897569895 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:26.939594984 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.105968952 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.106410027 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:27.107019901 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.107314110 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:27.155807018 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.155836105 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.259845018 CEST	49775	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.259871006 CEST	443	49775	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:27.260685921 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.260804892 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.260859013 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.260936022 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:27.304577112 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:27.308492899 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:27.308495998 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:27.308501005 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.203336000 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.205204964 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.205400944 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.205413103 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.205583096 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.205590010 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.205697060 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.205766916 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.260226965 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.260299921 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.260319948 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.260356903 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.260376930 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.260390043 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.260746956 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.260816097 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.360786915 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.360842943 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.361077070 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.361098051 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.361118078 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.361166954 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.371922016 CEST	49776	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.371946096 CEST	443	49776	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.384862900 CEST	49778	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.384881973 CEST	443	49778	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:28.992101908 CEST	49777	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:28.992135048 CEST	443	49777	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.012166023 CEST	49780	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.012193918 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.012249947 CEST	49780	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.012659073 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.012689114 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.012770891 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.012885094 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.012895107 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.012975931 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.014668941 CEST	49780	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.014683008 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.014892101 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.014906883 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.015013933 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.015027046 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.118004084 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.118024111 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.118031979 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.118124962 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.118139029 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.118216038 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.198338985 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.198355913 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.198370934 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.198376894 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.198400974 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.198410034 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.198427916 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.198487043 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.198487043 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.239393950 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.239419937 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.239510059 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.239510059 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.239520073 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.239618063 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.312438011 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.312458038 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.312535048 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.312544107 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.312582970 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.314464092 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.314503908 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.314544916 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.314552069 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.314599037 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.354255915 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.354306936 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.354351997 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.354370117 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.354387045 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.354430914 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.357692957 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.357712984 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.357788086 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.357803106 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.357863903 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.426635027 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.426656961 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.426698923 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.426758051 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.426758051 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.426765919 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.426790953 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.426846027 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.427944899 CEST	49779	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.427967072 CEST	443	49779	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.637411118 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.637455940 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.637521029 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.637866020 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.637878895 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.638416052 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.638422966 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.638472080 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.651010036 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.651021957 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.651546001 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.651576042 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.651789904 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.651789904 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.651823044 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.717962980 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.720743895 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.720958948 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.735732079 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.735742092 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.735785961 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.735794067 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.735898972 CEST	49780	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.735927105 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.736474037 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.736920118 CEST	49780	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.737015009 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.737071991 CEST	49780	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.737086058 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.737087011 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.737927914 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.737927914 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.738080978 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.738080978 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.738089085 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.738100052 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.738106966 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.738157034 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.784504890 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:29.787014008 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:29.787014008 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.324781895 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.325305939 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.325330019 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.326416969 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.326757908 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.326925039 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.334158897 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.349176884 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.349740982 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.349754095 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.350229025 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.351074934 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.351161957 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.351794958 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.373277903 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.380497932 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.395241022 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.395253897 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.396296978 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.396346092 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.396490097 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.598304033 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.598398924 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.599000931 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.599013090 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.661374092 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.765440941 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.770215988 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.770342112 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.770375013 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.770395041 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.770402908 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.770437956 CEST	49780	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.770586967 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.770654917 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.771505117 CEST	49780	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.771527052 CEST	443	49780	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.775494099 CEST	49781	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.775516033 CEST	443	49781	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.784187078 CEST	49786	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.784208059 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.784384966 CEST	49786	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.784574032 CEST	49786	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.784584999 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.785197973 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.785238028 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.785299063 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.785521030 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.785537958 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.988848925 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.988925934 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.989026070 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:30.989037037 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.989068031 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:30.989170074 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.060674906 CEST	49782	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.060693026 CEST	443	49782	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.355863094 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.355896950 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.355973005 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.356422901 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.356436014 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.399712086 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.399749041 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.399806023 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.400094986 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.400110006 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.409687042 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.409742117 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.409806013 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.409818888 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.410058022 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.410105944 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.414172888 CEST	49784	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.414197922 CEST	443	49784	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.465735912 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.467920065 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.467983961 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.468002081 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.468041897 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.468060017 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.468137026 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.468179941 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.481986046 CEST	49783	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.482002974 CEST	443	49783	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.509548903 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.514831066 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.514918089 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.514920950 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.514969110 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.523082972 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.523262978 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.523339033 CEST	49786	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.523349047 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.523452997 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.523478985 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.524590969 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.524626017 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.524882078 CEST	49786	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.525063992 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.525182009 CEST	49786	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.525394917 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.525475025 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.525563955 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.527256966 CEST	49785	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.527265072 CEST	443	49785	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.568512917 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.575697899 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.733390093 CEST	49791	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.733412981 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:31.733545065 CEST	49791	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.733786106 CEST	49791	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:31.733793020 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.059859037 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.060229063 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.060235977 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.061383963 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.061728954 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.061868906 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.061872959 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.061902046 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.126686096 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.126909018 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.126930952 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.128010035 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.128424883 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.128566027 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.128571987 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.128618956 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.169960976 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.225317001 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.453213930 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.453886986 CEST	49791	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.453896046 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.454193115 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.454762936 CEST	49791	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.454827070 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.455866098 CEST	49791	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.500488997 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.531085968 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.531152010 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.531258106 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.531318903 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.532680988 CEST	49787	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.532696962 CEST	443	49787	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.662856102 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.666985035 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:32.668226004 CEST	49786	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.703449965 CEST	49786	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:32.703465939 CEST	443	49786	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.114659071 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.118531942 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.118608952 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.119040012 CEST	49788	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.119062901 CEST	443	49788	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.144969940 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.145004034 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.145209074 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.145932913 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.145945072 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.154968977 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.155014038 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.155106068 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.155277014 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.155292034 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.354051113 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.354080915 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.354090929 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.354116917 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.354140997 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.354175091 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.354185104 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.354228973 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.471235037 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.471257925 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.471313000 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.471323967 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.471359968 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.471883059 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.471925974 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.471930027 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.471954107 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.475085974 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.547477961 CEST	49789	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.547488928 CEST	443	49789	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.579247952 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.579284906 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.579329014 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.579612970 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.579627991 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.623198032 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.623285055 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.623413086 CEST	49791	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.623756886 CEST	49791	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.623765945 CEST	443	49791	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.842047930 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.842906952 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.842916965 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.843903065 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.843971014 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.849844933 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.849896908 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.850228071 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.850234032 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.872988939 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.877348900 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.877372026 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.877831936 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.879446983 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.879523993 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:33.879569054 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.904781103 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:33.924498081 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:34.067631006 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:34.299695969 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:34.303756952 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:34.303767920 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:34.305913925 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:34.312796116 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:34.312993050 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:34.313117981 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:34.360491037 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:34.920892954 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:34.924412966 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:34.924475908 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:34.925185919 CEST	49793	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:34.925199986 CEST	443	49793	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.181958914 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.182048082 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.182410002 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.182554960 CEST	49792	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.182574987 CEST	443	49792	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.183482885 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.183506012 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.183588982 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.183809996 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.183819056 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.562716961 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.562777996 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.562850952 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.562871933 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.563203096 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.678759098 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.678782940 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.678822041 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.678879976 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.678891897 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.678911924 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.678926945 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.708569050 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.708610058 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.708698034 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.708698034 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.708704948 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.708764076 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.709165096 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.895601988 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.917459011 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.917515039 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.917941093 CEST	49795	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.917970896 CEST	443	49795	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.918535948 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.918612957 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.919374943 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.919450998 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.919742107 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.919820070 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:35.919840097 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:35.965817928 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.129636049 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.129973888 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.130053043 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.135632992 CEST	49796	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.135677099 CEST	443	49796	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.230149984 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.230182886 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.230249882 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.230787992 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.230801105 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.936422110 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.936666965 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.936677933 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.940769911 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.940834045 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.941122055 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.941255093 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.941258907 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.941308022 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:37.981646061 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:37.981652021 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:38.028518915 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:39.069704056 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:39.069986105 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:39.070210934 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:39.071019888 CEST	49797	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:39.071037054 CEST	443	49797	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:39.626714945 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:39.626766920 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:39.626823902 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:39.627090931 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:39.627100945 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:40.179595947 CEST	59912	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:40.184623003 CEST	53	59912	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:40.184705019 CEST	59912	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:40.185421944 CEST	59912	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:40.190320969 CEST	53	59912	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:40.380439997 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:40.380673885 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:40.380685091 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:40.380995989 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:40.381349087 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:40.381405115 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:40.381535053 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:40.428499937 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:40.651042938 CEST	53	59912	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:40.651787043 CEST	59912	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:40.659048080 CEST	53	59912	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:40.659121037 CEST	59912	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:41.428359985 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:41.428555012 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:41.428579092 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:41.428613901 CEST	443	49798	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:41.428641081 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:41.428730965 CEST	49798	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.333396912 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.333445072 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:43.333690882 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.335525036 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.335551023 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:43.335995913 CEST	59916	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.336004019 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:43.336030006 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.336141109 CEST	59916	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.339956999 CEST	59916	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.339972973 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:43.340255022 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.340262890 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:43.340281963 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:43.340296030 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.049964905 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.050247908 CEST	59916	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.050317049 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.050812006 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.051199913 CEST	59916	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.051290989 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.051417112 CEST	59916	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.051457882 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.110785007 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.111413002 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.112709045 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.112729073 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.113213062 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.113287926 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.113970995 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.114391088 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.114813089 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.114981890 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.115498066 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.115734100 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.116126060 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.116172075 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:44.116199970 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:44.155560017 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.153276920 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:45.153403044 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:45.154280901 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.154311895 CEST	443	59914	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:45.154340029 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.155325890 CEST	59914	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.259757996 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:45.259928942 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:45.260011911 CEST	59916	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.262044907 CEST	59916	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.262075901 CEST	443	59916	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:45.314044952 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.314069986 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:45.314229012 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.314810991 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.314821959 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:45.702141047 CEST	49735	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:45.707463026 CEST	80	49735	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:46.004209995 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:46.004494905 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:46.004518032 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:46.005928993 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:46.005990028 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:46.007205963 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:46.007283926 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:46.007375002 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:46.007380962 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:46.048214912 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:46.375308037 CEST	49736	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:46.380676985 CEST	80	49736	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:47.153755903 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:47.153831959 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:47.153856993 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:47.154025078 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:47.154076099 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:47.157320023 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:47.157334089 CEST	443	59917	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:47.157342911 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:47.157377005 CEST	59917	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:47.159266949 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:47.159323931 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:48.439790010 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:48.439877987 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:48.440109968 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:48.466730118 CEST	59915	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:48.466746092 CEST	443	59915	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:48.475378036 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:48.475394964 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:48.475456953 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:48.475821018 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:48.475831985 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:49.178992987 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:49.179431915 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:49.179457903 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:49.179939985 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:49.181221962 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:49.181297064 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:49.181540966 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:49.224530935 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:49.233130932 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:49.784152031 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:49.784264088 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:49.784359932 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:49.784743071 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:49.784786940 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:50.556005001 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:50.556809902 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:50.556883097 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:50.557184935 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:50.557903051 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:50.557972908 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:50.558706045 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:50.600538969 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.009509087 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.009567976 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.009588957 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.009629011 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.009648085 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.009665012 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.009700060 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.009700060 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.009700060 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.009726048 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.009825945 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.054828882 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.129187107 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.129216909 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.129266024 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.129304886 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.129304886 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.129312992 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.129396915 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.129448891 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.129638910 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.130480051 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.130615950 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.130620003 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.130669117 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.130781889 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.130781889 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.222018003 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.222141027 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.222582102 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.222867012 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.222901106 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.230952024 CEST	59921	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.230983019 CEST	443	59921	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.232022047 CEST	59921	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.235285997 CEST	59921	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.235301018 CEST	443	59921	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.443319082 CEST	59918	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.443351030 CEST	443	59918	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.721045971 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.721137047 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.721337080 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.721337080 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.931688070 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.932413101 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.932476044 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.935837030 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.937230110 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.938604116 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.938604116 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.938640118 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.938683033 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.950545073 CEST	443	59921	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.950958967 CEST	59921	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.950973034 CEST	443	59921	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.951843023 CEST	443	59921	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.952529907 CEST	59921	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.955180883 CEST	59921	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.955234051 CEST	443	59921	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.983728886 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.983747005 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:51.998651981 CEST	59921	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:51.998661995 CEST	443	59921	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:52.030082941 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:52.030113935 CEST	59919	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:52.030157089 CEST	443	59919	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:52.045290947 CEST	59921	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:52.802155972 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:52.802187920 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:52.802362919 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:52.802443027 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:52.802449942 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:53.639605045 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:53.639926910 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:53.639946938 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:53.640232086 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:53.640543938 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:53.640600920 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:53.640738964 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:53.688520908 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.367609024 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.367650032 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.367674112 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.367691994 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.367718935 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.367723942 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.367737055 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.367785931 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.367786884 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.367785931 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.367851973 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.418579102 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.498239994 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.498260975 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.498303890 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.498325109 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.498349905 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.498404026 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.498426914 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.498636007 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.595161915 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.595230103 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.595282078 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.595314980 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.595416069 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.596270084 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.603275061 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.603317022 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.603359938 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.603377104 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.603395939 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.603574038 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.610208988 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.610251904 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.610888958 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.610905886 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.611135006 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.686115026 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.686163902 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.686213017 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.686228037 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.686255932 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.686268091 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.686299086 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.686311007 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.686459064 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.688391924 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.688497066 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.689409971 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.689409971 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.689428091 CEST	443	59922	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.689960003 CEST	59922	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.713862896 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.713907957 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.713944912 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.713958979 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.714031935 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.714201927 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.719521046 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.719602108 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.719614029 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.719629049 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.719670057 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.719825983 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.724580050 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.724653959 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.724703074 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.724716902 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.724766970 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.725611925 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.728981018 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.729022980 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.729067087 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.729079962 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.729180098 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.729434013 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.784960032 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.785015106 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.785057068 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.785063982 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.785188913 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.785288095 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.789277077 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.789319038 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.789361000 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.789366961 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.789485931 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.789720058 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.800353050 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.800395012 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.800435066 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.800441980 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.800477982 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.800556898 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.824064970 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.824210882 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.824225903 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.824243069 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.824525118 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.824928999 CEST	59920	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.824960947 CEST	443	59920	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.857897043 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.857925892 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.859141111 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.863327026 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.863342047 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.868046999 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.868093014 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.868406057 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.868839979 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.868870020 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.906584024 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.906671047 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.906996012 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.907617092 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.907651901 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.925524950 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.925524950 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.925559044 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.925573111 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.926079988 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.926316023 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.926316023 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.926330090 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:54.926697016 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:54.926708937 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.321840048 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.321861982 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.321927071 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.322158098 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.322171926 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.327883005 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.327909946 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.327979088 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.328202009 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.328217030 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.561130047 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.561357021 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.561371088 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.562829971 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.562903881 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.572997093 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.573079109 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.573191881 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.573204994 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.583761930 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.584000111 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.584045887 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.584518909 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.584794998 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.584881067 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.584899902 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.625935078 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.626008034 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.626033068 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.628067970 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.630099058 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.630120039 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.631850004 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.632153034 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.632170916 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.633033037 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.633084059 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.633650064 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.633677959 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.633698940 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.633733988 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.634258032 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.634424925 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.634643078 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.634653091 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.634793997 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.634799957 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.642304897 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.642501116 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.642519951 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.643660069 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.644119024 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.644310951 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.644311905 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.644335032 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.644432068 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:55.685300112 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.685300112 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:55.685306072 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.131609917 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.131948948 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.132013083 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.132931948 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.133121014 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.133959055 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.134037971 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.134634972 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.134656906 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.147238970 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.148685932 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.148700953 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.151767969 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.152575970 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.152786016 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.152786016 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.152801991 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.152863979 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.183686018 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.199116945 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.199126959 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.245419979 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.594494104 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.594635963 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.594813108 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.596467018 CEST	59926	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.596515894 CEST	443	59926	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.621153116 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.621247053 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.621362925 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.621623039 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.621655941 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.744848013 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.786292076 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.833669901 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.833749056 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.833770037 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.833807945 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.833854914 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.833915949 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.834817886 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.862713099 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.862791061 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.862819910 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.863250971 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.863250971 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.870009899 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.870341063 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.870651007 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.870686054 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.870721102 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.870764971 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.870960951 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.870970964 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:56.872299910 CEST	59928	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:56.872311115 CEST	443	59928	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.016621113 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.016684055 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.016745090 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.016813040 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.016849041 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.016859055 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.016870022 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.016891956 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.016942978 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.016961098 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.017047882 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.017103910 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.060143948 CEST	59925	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.060177088 CEST	443	59925	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.081748962 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.081780910 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.081832886 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.082082987 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.082098007 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.084152937 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.084203005 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.084278107 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.084427118 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.084455967 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.168551922 CEST	59927	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.168567896 CEST	443	59927	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.444201946 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.444447041 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.444524050 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.448028088 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.448102951 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.448652983 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.448652983 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.448684931 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.448826075 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.496900082 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.496932030 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.542597055 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.622356892 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.622997046 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.623014927 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.624100924 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.624464035 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.624679089 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.624703884 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.665637970 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.665659904 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.766625881 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.766659975 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.766670942 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.766746044 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.766787052 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.766791105 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.766838074 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.766860962 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.775486946 CEST	59930	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.775517941 CEST	443	59930	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.813740969 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.814245939 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.814264059 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.815325022 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.815942049 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.816096067 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.816106081 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.818133116 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.818514109 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.818548918 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.819684982 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.819750071 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.820641994 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.820724010 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.820772886 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.858788013 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.858795881 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.868509054 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.874798059 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.874826908 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.920043945 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.935820103 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.935981035 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.936032057 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.942126036 CEST	59931	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.942138910 CEST	443	59931	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.966983080 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.967010975 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.967021942 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.967040062 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.967051029 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.967051983 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.967062950 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.967084885 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:57.967093945 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:57.967108965 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.023118019 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.074882030 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.074893951 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.074918985 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.074929953 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.074997902 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.074997902 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.075005054 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.075180054 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.188618898 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.188642025 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.188863993 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.188874006 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.189045906 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.190315008 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.190344095 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.190419912 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.190419912 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.190427065 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.190989017 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.192106962 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.192126036 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.192255020 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.192260027 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.192648888 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.193917036 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.193936110 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.194000006 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.194024086 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.194024086 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.194029093 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.194039106 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.248980999 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.305380106 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.305402994 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.305609941 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.305628061 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.305768967 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.306494951 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.306513071 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.306678057 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.306683064 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.306870937 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.308406115 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.308429003 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.308806896 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.308814049 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.309108019 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.310087919 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.310102940 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.310175896 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.310175896 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.310182095 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.310422897 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.364953041 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.364969969 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.365206003 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.365211964 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.365601063 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.391843081 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.391861916 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.392276049 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.392285109 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.392405033 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.393735886 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.393752098 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.394078970 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.394084930 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.394368887 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.421225071 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.421336889 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.421384096 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.421652079 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.422314882 CEST	59924	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.422332048 CEST	443	59924	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.464046955 CEST	59936	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.464133978 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.464528084 CEST	59936	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.464528084 CEST	59936	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.464610100 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.484206915 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.484262943 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.484724998 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.484958887 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.484985113 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.502815008 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.503036022 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.503222942 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.520531893 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.520565033 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.520761013 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.521197081 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.521212101 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.535125971 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.535166979 CEST	443	59932	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.535222054 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.535301924 CEST	59932	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.536624908 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.536652088 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.536767960 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.537014961 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.537045002 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.544074059 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.589874983 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.590140104 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.590148926 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.590169907 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.590348005 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.590636015 CEST	59933	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.590642929 CEST	443	59933	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.727534056 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.763492107 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:58.763679981 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.764106035 CEST	59934	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:58.764122963 CEST	443	59934	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.018249989 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.018270969 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.018280029 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.018306971 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.018317938 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.018327951 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.018351078 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.018373966 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.018393040 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.063358068 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.136369944 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.136379004 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.136414051 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.136421919 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.136567116 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.136567116 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.136636019 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.136693001 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.136773109 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.136830091 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.136846066 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.136868000 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.136913061 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.140649080 CEST	59935	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.140682936 CEST	443	59935	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.168032885 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.168771029 CEST	59936	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.168836117 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.169584036 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.173032045 CEST	59936	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.173104048 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.173418045 CEST	59936	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.173456907 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.177265882 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.178015947 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.178040028 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.181404114 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.181461096 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.183106899 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.183185101 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.183296919 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.183305979 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.216525078 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.217820883 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.217832088 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.220938921 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.221010923 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.222038031 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.222117901 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.222232103 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.222239971 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.233201027 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.260759115 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.261344910 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.261409998 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.261944056 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.263220072 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.263320923 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.263333082 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.269021034 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.305049896 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.305114031 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.516511917 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.516613960 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.516695976 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.516882896 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.516917944 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.593417883 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.593530893 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:11:59.593595982 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.593864918 CEST	59937	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:11:59.593882084 CEST	443	59937	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.231108904 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.231385946 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.231451035 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.235017061 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.235160112 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.236139059 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.236323118 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.236350060 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.276539087 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.281197071 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.281244993 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.328409910 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.422522068 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.422576904 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.422595978 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.422632933 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.422677040 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.422677040 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.422683954 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.422710896 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.422729015 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.422729015 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.467926025 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.538295984 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.538326025 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.538371086 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.538381100 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.538423061 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.538454056 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.538454056 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.538465977 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.538510084 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.645189047 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.645281076 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.645474911 CEST	59936	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.645916939 CEST	59936	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.645962954 CEST	443	59936	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.651717901 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.651766062 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.651859045 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.651859045 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.651889086 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.651962042 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.652935982 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.653042078 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.653064013 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.653079987 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.653125048 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.653125048 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.653136015 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.653208017 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.653336048 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.653513908 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.653513908 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.653536081 CEST	443	59938	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.653585911 CEST	59938	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.666850090 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.666949034 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.667145014 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.667319059 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.667352915 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.669250011 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.669289112 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.670381069 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.670573950 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.670603037 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.697719097 CEST	49735	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.704688072 CEST	80	49735	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.704768896 CEST	49735	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.707531929 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:00.707581997 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:00.707664967 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:00.707998037 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:00.708019018 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:00.731306076 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.731394053 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:00.731475115 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.732227087 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:00.732261896 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.122868061 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.122924089 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.227150917 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.227168083 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.227252960 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.227318048 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.227349043 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.227466106 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.234798908 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.235096931 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.235161066 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.236851931 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.236920118 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.238059044 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.238152981 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.238343000 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.238359928 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.279926062 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.338466883 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.338476896 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.338563919 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.338567972 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.338624954 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.338670015 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.338670015 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.358290911 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.360651016 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.360716105 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.363157988 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.363236904 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.363554955 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.363714933 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.363814116 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.363833904 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.368561983 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.368581057 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.368649960 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.368665934 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.368743896 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.379235983 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.384013891 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.384037971 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.384599924 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.384808064 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.385531902 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.385601997 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.385732889 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.399959087 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.400044918 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.401302099 CEST	59944	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.401352882 CEST	443	59944	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.402028084 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.402044058 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.404928923 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.431772947 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.443016052 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.443212032 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.443239927 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.444097996 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.444175005 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.445066929 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.445120096 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.445389986 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.445401907 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.451272964 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.451294899 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.451342106 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.451353073 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.451387882 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.451397896 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.452590942 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.452653885 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.452682018 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.452697039 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.452740908 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.460505009 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.460592985 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.460695982 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.460912943 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.460952997 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.481636047 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.481656075 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.481684923 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.481704950 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.481749058 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.481781006 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.481786966 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.481817961 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.481839895 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.482570887 CEST	59939	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.482601881 CEST	443	59939	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.497885942 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.710216045 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.710401058 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.710480928 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.710751057 CEST	59941	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.710809946 CEST	443	59941	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.711728096 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.711762905 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.711878061 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.712230921 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.712246895 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.795325994 CEST	59948	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.795387030 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.795483112 CEST	59948	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.795861959 CEST	59948	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:01.795895100 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:01.956326008 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.956686020 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.956754923 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.959724903 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.959791899 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.960158110 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.960249901 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:01.960326910 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:01.960350037 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:02.013078928 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:02.137026072 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:02.137240887 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:02.137523890 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:02.137815952 CEST	59946	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:02.137859106 CEST	443	59946	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:02.456403017 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.456841946 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.456861019 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.457715988 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.457773924 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.458823919 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.458877087 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.459297895 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.459309101 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.459364891 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.459381104 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.496788025 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.506623983 CEST	59948	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.506644964 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.507735014 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.509650946 CEST	59948	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.509824038 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.509984970 CEST	59948	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.542674065 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.542704105 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.542712927 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.542767048 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.542798042 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.542845011 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.542855978 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.542865992 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.542879105 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.552575111 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.560724974 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.560739040 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.560782909 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.560803890 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.560853958 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.560889959 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.570559025 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.570579052 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.570620060 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.570636988 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.570655107 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.575721025 CEST	59945	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.575747013 CEST	443	59945	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.622442007 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.665222883 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.665251970 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.665308952 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.665704012 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.665718079 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.684097052 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.684120893 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.684175968 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.684186935 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.684215069 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.684218884 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.684230089 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.684231997 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.684281111 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.685651064 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.685729027 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.685734987 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.685774088 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.685802937 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.685817957 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.685822010 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.685950994 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.686150074 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.686574936 CEST	59943	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.686589003 CEST	443	59943	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.790960073 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.791491985 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.791578054 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.795981884 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:02.796094894 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:02.796253920 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:02.797396898 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:02.797436953 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:02.800682068 CEST	59942	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:02.800728083 CEST	443	59942	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:02.801712036 CEST	49724	80	192.168.2.4	173.222.108.147
Jul 15, 2024 21:12:02.806874037 CEST	80	49724	173.222.108.147	192.168.2.4
Jul 15, 2024 21:12:02.806947947 CEST	49724	80	192.168.2.4	173.222.108.147
Jul 15, 2024 21:12:03.270422935 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.270716906 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.270750046 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.271213055 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.271552086 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.271616936 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.271686077 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.271740913 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.271761894 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.378252983 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.378582001 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.378595114 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.380217075 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.380280972 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.380723953 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.380805969 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.381031990 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.381040096 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.435012102 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.453140020 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.453689098 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.454188108 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.454358101 CEST	59950	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.454381943 CEST	443	59950	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.525589943 CEST	59951	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:12:03.525626898 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:03.525682926 CEST	59951	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:12:03.525918961 CEST	59951	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:12:03.525934935 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:03.531526089 CEST	59952	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.531544924 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.531771898 CEST	59952	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.532192945 CEST	59952	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.532205105 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.681713104 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.681904078 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.682009935 CEST	59948	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.798141003 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.798568964 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.798728943 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.922022104 CEST	59948	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.922041893 CEST	443	59948	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.927158117 CEST	59947	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.927172899 CEST	443	59947	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.944278002 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.944366932 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.944478989 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.947860956 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.947897911 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.996340036 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.996953011 CEST	59952	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.996967077 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.997479916 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.997520924 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.997809887 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.998064995 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.998619080 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:03.998641968 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:03.999293089 CEST	59952	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:03.999490023 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:03.999614000 CEST	59952	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:04.044509888 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:04.112642050 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:04.113250971 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:04.113310099 CEST	59952	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:04.114698887 CEST	59952	443	192.168.2.4	35.190.10.96
Jul 15, 2024 21:12:04.114727020 CEST	443	59952	35.190.10.96	192.168.2.4
Jul 15, 2024 21:12:04.185535908 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:04.186099052 CEST	59951	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:12:04.186116934 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:04.186459064 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:04.187495947 CEST	59951	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:12:04.187556982 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:04.232348919 CEST	59951	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:12:04.420903921 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.420979977 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.421029091 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.421042919 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.421242952 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.421291113 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.422787905 CEST	59949	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.422805071 CEST	443	59949	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.672027111 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.672435045 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.672518015 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.672818899 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.673563957 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.673629045 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.674391031 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.674423933 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.674896002 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.674928904 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.705127954 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.705732107 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.705751896 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.706892014 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.706962109 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.708493948 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.708550930 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.709470987 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:04.709487915 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:04.763490915 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.085757017 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.085977077 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.086136103 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.093369007 CEST	59953	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.093419075 CEST	443	59953	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.158742905 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.158850908 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.158968925 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.162828922 CEST	59954	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.162847042 CEST	443	59954	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.164652109 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.164767027 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.164870024 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.165353060 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.165397882 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.379525900 CEST	80	49736	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.379751921 CEST	49736	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.852386951 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.852803946 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.852874041 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.853986979 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.854479074 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.854649067 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:06.854662895 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.900506020 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:06.905167103 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:07.283272982 CEST	49736	80	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:07.291621923 CEST	80	49736	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:08.190815926 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:08.191101074 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:08.191437006 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:08.193784952 CEST	59955	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:08.193835020 CEST	443	59955	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:14.117767096 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:14.117933035 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:14.117990017 CEST	59951	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:12:15.282162905 CEST	59951	443	192.168.2.4	142.250.185.164
Jul 15, 2024 21:12:15.282193899 CEST	443	59951	142.250.185.164	192.168.2.4
Jul 15, 2024 21:12:16.027710915 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:16.027930021 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:16.028116941 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:16.826744080 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:16.826843023 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:16.827388048 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:16.827497959 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:16.827529907 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:17.281171083 CEST	49753	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:17.281244040 CEST	443	49753	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:17.521692991 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:17.521981955 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:17.522023916 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:17.522491932 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:17.522962093 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:17.523047924 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:17.523679018 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:17.523716927 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:18.478940964 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:18.479131937 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:18.479152918 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:18.479182005 CEST	443	59956	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:18.479197979 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:18.479223967 CEST	59956	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:22.796610117 CEST	59957	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:22.796708107 CEST	443	59957	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:22.797045946 CEST	59957	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:22.797179937 CEST	59957	443	192.168.2.4	139.28.37.60
Jul 15, 2024 21:12:22.797214985 CEST	443	59957	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:23.491559982 CEST	443	59957	139.28.37.60	192.168.2.4
Jul 15, 2024 21:12:23.544816017 CEST	59957	443	192.168.2.4	139.28.37.60

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 15, 2024 21:10:58.789216995 CEST	53	57162	1.1.1.1	192.168.2.4
Jul 15, 2024 21:10:58.899147987 CEST	53	59603	1.1.1.1	192.168.2.4
Jul 15, 2024 21:10:59.910645962 CEST	53	64869	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:00.612601995 CEST	57497	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:00.616218090 CEST	52755	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:00.681664944 CEST	53	57497	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:00.685766935 CEST	53	52755	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:01.376111984 CEST	62546	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:01.376241922 CEST	58436	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:01.414210081 CEST	53	58436	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:01.554019928 CEST	53	62546	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:03.355690956 CEST	59470	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:03.355796099 CEST	65417	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:03.365084887 CEST	53	59470	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:03.365503073 CEST	53	65417	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:08.374566078 CEST	64890	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:08.374798059 CEST	64866	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:08.386992931 CEST	53	64866	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:08.393529892 CEST	53	64890	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:12.949747086 CEST	62432	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:12.950136900 CEST	53491	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:12.966392040 CEST	53	62432	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:12.998321056 CEST	53	53491	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:14.526439905 CEST	138	138	192.168.2.4	192.168.2.255
Jul 15, 2024 21:11:15.489970922 CEST	65147	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:15.490315914 CEST	49356	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:15.527708054 CEST	53	49356	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:15.675350904 CEST	53	65147	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:17.068006039 CEST	53	57482	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:17.070677996 CEST	63449	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:17.071001053 CEST	62078	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:17.095853090 CEST	53	62078	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:17.120454073 CEST	53	63449	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:17.586307049 CEST	54912	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:17.586483955 CEST	65096	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:17.597706079 CEST	53	54912	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:17.597989082 CEST	53	65096	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:17.691348076 CEST	52696	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:17.691523075 CEST	63188	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:17.709604025 CEST	53	52696	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:17.732836008 CEST	53	63188	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:31.490381002 CEST	53	65279	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:33.111512899 CEST	58855	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:33.111838102 CEST	54625	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:33.123116970 CEST	53	54625	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:33.139107943 CEST	53	58855	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:36.090569973 CEST	53	65477	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:37.208745003 CEST	51604	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:37.209275961 CEST	57949	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:37.219975948 CEST	53	57949	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:37.228270054 CEST	53	51604	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:40.179064035 CEST	53	54999	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:45.262044907 CEST	59144	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:45.262262106 CEST	52513	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:45.302545071 CEST	53	52513	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:45.313443899 CEST	53	59144	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:51.191431999 CEST	53418	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:51.193129063 CEST	59795	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:51.194061041 CEST	49692	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:51.194957018 CEST	51910	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:51.205728054 CEST	53	59795	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:51.210484028 CEST	53	51910	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:51.221537113 CEST	53	49692	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:51.224220991 CEST	52327	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:51.224615097 CEST	64077	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:51.230022907 CEST	53	53418	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:51.235289097 CEST	52233	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:51.235466957 CEST	53599	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:51.235881090 CEST	53	64077	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:51.257174015 CEST	53	52233	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:51.269119978 CEST	53	52327	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:51.279263973 CEST	53	53599	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:54.829902887 CEST	55391	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:54.829902887 CEST	51358	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:54.849831104 CEST	53	55391	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:54.883337975 CEST	53	51358	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:55.305145979 CEST	56008	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:55.305252075 CEST	64951	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:55.306112051 CEST	60383	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:55.306253910 CEST	50435	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:55.315967083 CEST	53	56008	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:55.320106030 CEST	53	60383	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:55.322118044 CEST	53	64951	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:55.326591015 CEST	53	50435	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:56.604593039 CEST	60708	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:56.604593039 CEST	62447	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:56.619625092 CEST	53	62447	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:56.620716095 CEST	53	60708	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:58.467447042 CEST	62353	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:58.467447996 CEST	64495	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:58.473840952 CEST	62525	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:58.474381924 CEST	59092	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:58.480696917 CEST	53	64495	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:58.482177973 CEST	53	62353	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:58.498940945 CEST	53	62525	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:58.521138906 CEST	53	59092	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:58.634886980 CEST	53	59320	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:59.489628077 CEST	61798	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:59.489830971 CEST	57779	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:11:59.503631115 CEST	53	61798	1.1.1.1	192.168.2.4
Jul 15, 2024 21:11:59.530955076 CEST	53	57779	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:00.649769068 CEST	64877	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:00.649910927 CEST	49622	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:00.657563925 CEST	63708	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:00.657686949 CEST	53615	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:00.661070108 CEST	53	64877	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:00.665802002 CEST	53	53615	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:00.668658972 CEST	53	63708	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:00.687621117 CEST	53	49622	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:00.698044062 CEST	58611	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:00.698447943 CEST	55072	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:00.706856966 CEST	53	58611	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:00.706907988 CEST	53	55072	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:00.713424921 CEST	50482	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:00.713558912 CEST	55510	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:00.729563951 CEST	53	55510	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:00.730835915 CEST	53	50482	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:01.447134018 CEST	63550	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:01.447490931 CEST	63578	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:01.455383062 CEST	53	63550	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:01.459988117 CEST	53	63578	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:02.651582003 CEST	59321	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:02.651953936 CEST	64165	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:02.663259029 CEST	53	59321	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:02.664544106 CEST	53	64165	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:03.963022947 CEST	62869	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:03.963649988 CEST	51077	53	192.168.2.4	1.1.1.1
Jul 15, 2024 21:12:03.977205992 CEST	53	62869	1.1.1.1	192.168.2.4
Jul 15, 2024 21:12:03.996421099 CEST	53	51077	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 15, 2024 21:11:12.998418093 CEST	192.168.2.4	1.1.1.1	c254	(Port unreachable)	Destination Unreachable
Jul 15, 2024 21:11:17.732928991 CEST	192.168.2.4	1.1.1.1	c247	(Port unreachable)	Destination Unreachable
Jul 15, 2024 21:11:51.283519983 CEST	192.168.2.4	1.1.1.1	c254	(Port unreachable)	Destination Unreachable
Jul 15, 2024 21:11:54.883527994 CEST	192.168.2.4	1.1.1.1	c254	(Port unreachable)	Destination Unreachable
Jul 15, 2024 21:11:58.521250963 CEST	192.168.2.4	1.1.1.1	c254	(Port unreachable)	Destination Unreachable
Jul 15, 2024 21:11:59.531155109 CEST	192.168.2.4	1.1.1.1	c254	(Port unreachable)	Destination Unreachable
Jul 15, 2024 21:12:00.687716961 CEST	192.168.2.4	1.1.1.1	c254	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 15, 2024 21:11:00.612601995 CEST	192.168.2.4	1.1.1.1	0xad4c	Standard query (0)	micr.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:00.616218090 CEST	192.168.2.4	1.1.1.1	0x40c3	Standard query (0)	micr.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:01.376111984 CEST	192.168.2.4	1.1.1.1	0x7f65	Standard query (0)	micr.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:01.376241922 CEST	192.168.2.4	1.1.1.1	0x9bcb	Standard query (0)	micr.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:03.355690956 CEST	192.168.2.4	1.1.1.1	0x6e2c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:03.355796099 CEST	192.168.2.4	1.1.1.1	0x5324	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:08.374566078 CEST	192.168.2.4	1.1.1.1	0xbcb6	Standard query (0)	0ffice.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:08.374798059 CEST	192.168.2.4	1.1.1.1	0x968f	Standard query (0)	0ffice.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:12.949747086 CEST	192.168.2.4	1.1.1.1	0x1e06	Standard query (0)	0a0de824-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:12.950136900 CEST	192.168.2.4	1.1.1.1	0x7f79	Standard query (0)	0a0de824-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:15.489970922 CEST	192.168.2.4	1.1.1.1	0x5712	Standard query (0)	0a0de824-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:15.490315914 CEST	192.168.2.4	1.1.1.1	0xe96f	Standard query (0)	0a0de824-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:17.070677996 CEST	192.168.2.4	1.1.1.1	0x8213	Standard query (0)	4925f123-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:17.071001053 CEST	192.168.2.4	1.1.1.1	0xbb20	Standard query (0)	4925f123-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:17.586307049 CEST	192.168.2.4	1.1.1.1	0x8aea	Standard query (0)	d2165062-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:17.586483955 CEST	192.168.2.4	1.1.1.1	0xfbd4	Standard query (0)	d2165062-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:17.691348076 CEST	192.168.2.4	1.1.1.1	0xbfea	Standard query (0)	l1ve.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:17.691523075 CEST	192.168.2.4	1.1.1.1	0x873a	Standard query (0)	l1ve.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:33.111512899 CEST	192.168.2.4	1.1.1.1	0x2067	Standard query (0)	20b67e16-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:33.111838102 CEST	192.168.2.4	1.1.1.1	0x20d4	Standard query (0)	20b67e16-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:37.208745003 CEST	192.168.2.4	1.1.1.1	0x8aa0	Standard query (0)	20b67e16-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:37.209275961 CEST	192.168.2.4	1.1.1.1	0x22e7	Standard query (0)	20b67e16-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:45.262044907 CEST	192.168.2.4	1.1.1.1	0x2f8d	Standard query (0)	signup.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:45.262262106 CEST	192.168.2.4	1.1.1.1	0xf751	Standard query (0)	signup.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:51.191431999 CEST	192.168.2.4	1.1.1.1	0xc62b	Standard query (0)	32340637-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:51.193129063 CEST	192.168.2.4	1.1.1.1	0xd6f9	Standard query (0)	32340637-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:51.194061041 CEST	192.168.2.4	1.1.1.1	0x25c9	Standard query (0)	58c68845-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:51.194957018 CEST	192.168.2.4	1.1.1.1	0x2d7c	Standard query (0)	58c68845-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:51.224220991 CEST	192.168.2.4	1.1.1.1	0xbc50	Standard query (0)	a3d530d8-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:51.224615097 CEST	192.168.2.4	1.1.1.1	0x9364	Standard query (0)	a3d530d8-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:51.235289097 CEST	192.168.2.4	1.1.1.1	0xe79a	Standard query (0)	af56a4af-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:51.235466957 CEST	192.168.2.4	1.1.1.1	0x7b5a	Standard query (0)	af56a4af-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:54.829902887 CEST	192.168.2.4	1.1.1.1	0xc86a	Standard query (0)	58c68845-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:54.829902887 CEST	192.168.2.4	1.1.1.1	0x3432	Standard query (0)	58c68845-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:55.305145979 CEST	192.168.2.4	1.1.1.1	0xb024	Standard query (0)	7f5d37dd-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:55.305252075 CEST	192.168.2.4	1.1.1.1	0x53f8	Standard query (0)	7f5d37dd-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:55.306112051 CEST	192.168.2.4	1.1.1.1	0xe7ed	Standard query (0)	f82580a6-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:55.306253910 CEST	192.168.2.4	1.1.1.1	0xfdff	Standard query (0)	f82580a6-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:56.604593039 CEST	192.168.2.4	1.1.1.1	0x64aa	Standard query (0)	signup.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:56.604593039 CEST	192.168.2.4	1.1.1.1	0xf994	Standard query (0)	signup.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:58.467447042 CEST	192.168.2.4	1.1.1.1	0x5e44	Standard query (0)	1151e42c-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:58.467447996 CEST	192.168.2.4	1.1.1.1	0x61c	Standard query (0)	1151e42c-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:58.473840952 CEST	192.168.2.4	1.1.1.1	0xb7a7	Standard query (0)	7bd8dcb6-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:58.474381924 CEST	192.168.2.4	1.1.1.1	0xc95b	Standard query (0)	7bd8dcb6-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:11:59.489628077 CEST	192.168.2.4	1.1.1.1	0x69df	Standard query (0)	0df22540-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:59.489830971 CEST	192.168.2.4	1.1.1.1	0x1a26	Standard query (0)	0df22540-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:12:00.649769068 CEST	192.168.2.4	1.1.1.1	0x6a14	Standard query (0)	7f5d37dd-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:00.649910927 CEST	192.168.2.4	1.1.1.1	0xa748	Standard query (0)	7f5d37dd-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:12:00.657563925 CEST	192.168.2.4	1.1.1.1	0xeb90	Standard query (0)	7bd8dcb6-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:00.657686949 CEST	192.168.2.4	1.1.1.1	0x8e8b	Standard query (0)	7bd8dcb6-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:12:00.698044062 CEST	192.168.2.4	1.1.1.1	0xe596	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:00.698447943 CEST	192.168.2.4	1.1.1.1	0xec27	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Jul 15, 2024 21:12:00.713424921 CEST	192.168.2.4	1.1.1.1	0xf3fa	Standard query (0)	c4845aa4-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:00.713558912 CEST	192.168.2.4	1.1.1.1	0x6433	Standard query (0)	c4845aa4-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:12:01.447134018 CEST	192.168.2.4	1.1.1.1	0x83ca	Standard query (0)	collector-pxzc5j78di.hsprotect.net	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:01.447490931 CEST	192.168.2.4	1.1.1.1	0x3a05	Standard query (0)	collector-pxzc5j78di.hsprotect.net	65	IN (0x0001)	false
Jul 15, 2024 21:12:02.651582003 CEST	192.168.2.4	1.1.1.1	0x82ee	Standard query (0)	c4845aa4-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:02.651953936 CEST	192.168.2.4	1.1.1.1	0xd234	Standard query (0)	c4845aa4-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false
Jul 15, 2024 21:12:03.963022947 CEST	192.168.2.4	1.1.1.1	0xda76	Standard query (0)	0df22540-e3b309ea.tech-arnericas.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:03.963649988 CEST	192.168.2.4	1.1.1.1	0xec7f	Standard query (0)	0df22540-e3b309ea.tech-arnericas.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 15, 2024 21:11:00.681664944 CEST	1.1.1.1	192.168.2.4	0xad4c	No error (0)	micr.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:01.554019928 CEST	1.1.1.1	192.168.2.4	0x7f65	No error (0)	micr.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:03.365084887 CEST	1.1.1.1	192.168.2.4	0x6e2c	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:03.365503073 CEST	1.1.1.1	192.168.2.4	0x5324	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 15, 2024 21:11:08.393529892 CEST	1.1.1.1	192.168.2.4	0xbcb6	No error (0)	0ffice.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:12.966392040 CEST	1.1.1.1	192.168.2.4	0x1e06	No error (0)	0a0de824-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:15.675350904 CEST	1.1.1.1	192.168.2.4	0x5712	No error (0)	0a0de824-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:15.746032000 CEST	1.1.1.1	192.168.2.4	0xad7d	No error (0)	windowsupdatebg.s.llnwi.net		87.248.205.0	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:17.120454073 CEST	1.1.1.1	192.168.2.4	0x8213	No error (0)	4925f123-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:17.597706079 CEST	1.1.1.1	192.168.2.4	0x8aea	No error (0)	d2165062-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:17.709604025 CEST	1.1.1.1	192.168.2.4	0xbfea	No error (0)	l1ve.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:17.765902042 CEST	1.1.1.1	192.168.2.4	0xebc9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 21:11:17.765902042 CEST	1.1.1.1	192.168.2.4	0xebc9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:32.178415060 CEST	1.1.1.1	192.168.2.4	0xb145	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 21:11:32.178415060 CEST	1.1.1.1	192.168.2.4	0xb145	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:33.139107943 CEST	1.1.1.1	192.168.2.4	0x2067	No error (0)	20b67e16-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:37.228270054 CEST	1.1.1.1	192.168.2.4	0x8aa0	No error (0)	20b67e16-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:45.313443899 CEST	1.1.1.1	192.168.2.4	0x2f8d	No error (0)	signup.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:51.221537113 CEST	1.1.1.1	192.168.2.4	0x25c9	No error (0)	58c68845-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:51.230022907 CEST	1.1.1.1	192.168.2.4	0xc62b	No error (0)	32340637-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:51.257174015 CEST	1.1.1.1	192.168.2.4	0xe79a	No error (0)	af56a4af-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:51.269119978 CEST	1.1.1.1	192.168.2.4	0xbc50	No error (0)	a3d530d8-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:54.849831104 CEST	1.1.1.1	192.168.2.4	0xc86a	No error (0)	58c68845-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:55.315967083 CEST	1.1.1.1	192.168.2.4	0xb024	No error (0)	7f5d37dd-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:55.320106030 CEST	1.1.1.1	192.168.2.4	0xe7ed	No error (0)	f82580a6-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:56.619625092 CEST	1.1.1.1	192.168.2.4	0xf994	No error (0)	signup.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:58.482177973 CEST	1.1.1.1	192.168.2.4	0x5e44	No error (0)	1151e42c-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:58.498940945 CEST	1.1.1.1	192.168.2.4	0xb7a7	No error (0)	7bd8dcb6-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:11:59.503631115 CEST	1.1.1.1	192.168.2.4	0x69df	No error (0)	0df22540-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:00.661070108 CEST	1.1.1.1	192.168.2.4	0x6a14	No error (0)	7f5d37dd-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:00.668658972 CEST	1.1.1.1	192.168.2.4	0xeb90	No error (0)	7bd8dcb6-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:00.706856966 CEST	1.1.1.1	192.168.2.4	0xe596	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 21:12:00.706856966 CEST	1.1.1.1	192.168.2.4	0xe596	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:00.706907988 CEST	1.1.1.1	192.168.2.4	0xec27	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 21:12:00.730835915 CEST	1.1.1.1	192.168.2.4	0xf3fa	No error (0)	c4845aa4-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:01.455383062 CEST	1.1.1.1	192.168.2.4	0x83ca	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 21:12:01.455383062 CEST	1.1.1.1	192.168.2.4	0x83ca	No error (0)	inbound-weighted.protechts.net		35.190.10.96	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:01.459988117 CEST	1.1.1.1	192.168.2.4	0x3a05	No error (0)	collector-pxzc5j78di.hsprotect.net	inbound-weighted.protechts.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 21:12:02.663259029 CEST	1.1.1.1	192.168.2.4	0x82ee	No error (0)	c4845aa4-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:03.977205992 CEST	1.1.1.1	192.168.2.4	0xda76	No error (0)	0df22540-e3b309ea.tech-arnericas.com		139.28.37.60	A (IP address)	IN (0x0001)	false
Jul 15, 2024 21:12:24.136279106 CEST	1.1.1.1	192.168.2.4	0x446b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 21:12:24.136279106 CEST	1.1.1.1	192.168.2.4	0x446b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

micr.tech-arnericas.com

https:

0ffice.tech-arnericas.com

0a0de824-e3b309ea.tech-arnericas.com

l1ve.tech-arnericas.com

20b67e16-e3b309ea.tech-arnericas.com

58c68845-e3b309ea.tech-arnericas.com

signup.tech-arnericas.com

7f5d37dd-e3b309ea.tech-arnericas.com

f82580a6-e3b309ea.tech-arnericas.com

1151e42c-e3b309ea.tech-arnericas.com

7bd8dcb6-e3b309ea.tech-arnericas.com

collector-pxzc5j78di.hsprotect.net

c4845aa4-e3b309ea.tech-arnericas.com

0df22540-e3b309ea.tech-arnericas.com

fs.microsoft.com

4925f123-e3b309ea.tech-arnericas.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	139.28.37.60	80	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 15, 2024 21:11:00.693207026 CEST	438	OUT	GET / HTTP/1.1 Host: micr.tech-arnericas.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 15, 2024 21:11:01.373995066 CEST	365	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Mon, 15 Jul 2024 19:11:01 GMT Content-Type: text/html Content-Length: 164 Connection: keep-alive Location: https://micr.tech-arnericas.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 37 20 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>307 Temporary Redirect</title></head><body><center><h1>307 Temporary Redirect</h1></center><hr><center>nginx</center></body></html>
Jul 15, 2024 21:11:46.375308037 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	139.28.37.60	80	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 15, 2024 21:11:45.702141047 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:02 UTC	666	OUT	GET / HTTP/1.1 Host: micr.tech-arnericas.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:03 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-07-15 19:11:03 UTC	14340	IN	Data Raw: 33 37 66 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 45 28 54 2c 64 29 7b 76 61 72 20 6b 3d 61 30 78 28 29 3b 72 65 74 75 72 6e 20 61 30 45 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 78 29 7b 61 3d 61 2d 30 78 65 66 3b 76 61 72 20 45 3d 6b 5b 61 5d 3b 72 65 74 75 72 6e 20 45 3b 7d 2c 61 30 45 28 54 2c 64 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 54 2c 64 29 7b 76 61 72 20 6b 52 3d 61 30 45 2c 6b 3d 54 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 61 3d 70 61 72 73 65 49 6e 74 28 6b 52 28 30 78 33 61 66 29 29 2f 30 Data Ascii: 37fc<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0E(T,d){var k=a0x();return a0E=function(a,x){a=a-0xef;var E=k[a];return E;},a0E(T,d);}(function(T,d){var kR=a0E,k=T();while(!![]){try{var a=parseInt(kR(0x3af))/0
2024-07-15 19:11:03 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 78 31 28 30 78 33 36 31 29 5d 7c 7c 51 26 26 51 5b 27 73 68 61 6d 27 5d 29 26 26 6d 28 55 2c 78 31 28 30 78 33 36 31 29 2c 21 30 78 30 29 2c 66 28 43 2c 7a 2c 55 2c 71 29 3b 7d 7d 65 6c 73 65 7b 76 61 72 20 58 3d 6b 28 30 78 35 63 62 29 3b 66 5b 78 31 28 30 78 34 34 62 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 42 29 7b 76 61 72 20 78 32 3d 78 31 3b 72 65 74 75 72 6e 20 78 32 28 30 78 32 64 65 29 3d 3d 74 79 70 65 6f 66 20 42 3f 6e 75 6c 6c 21 3d 3d 42 3a 58 28 42 29 3b 7d 3b 7d 7d 3b 7d 2c 30 78 32 31 31 39 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 78 33 3d 61 30 45 3b 63 5b 78 33 28 30 78 34 34 62 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 70 28 29 3b 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 Data Ascii: 3ffax1(0x361)]\|\|Q&&Q['sham'])&&m(U,x1(0x361),!0x0),f(C,z,U,q);}}else{var X=k(0x5cb);f[x1(0x44b)]=function(B){var x2=x1;return x2(0x2de)==typeof B?null!==B:X(B);};}};},0x2119:function(c){var x3=a0E;c[x3(0x44b)]=function(p){try{return!!p();}catch(r){retur
2024-07-15 19:11:03 UTC	16384	IN	Data Raw: 0d 0a 34 30 30 30 0d 0a 62 30 29 5d 28 56 29 3b 7d 3b 7d 4e 5b 45 74 28 30 78 34 34 62 29 5d 3d 6a 3b 7d 2c 30 78 34 39 35 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 70 2c 4e 29 7b 76 61 72 20 59 3d 4e 28 30 78 31 66 62 38 29 2c 76 3d 54 79 70 65 45 72 72 6f 72 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 76 61 72 20 45 6f 3d 61 30 45 2c 66 2c 4d 3b 74 68 69 73 5b 45 6f 28 30 78 32 39 38 29 5d 3d 6e 65 77 20 6d 28 66 75 6e 63 74 69 6f 6e 28 67 2c 62 29 7b 76 61 72 20 45 5a 3d 45 6f 3b 69 66 28 45 5a 28 30 78 33 34 38 29 3d 3d 3d 45 5a 28 30 78 32 39 61 29 29 7b 76 61 72 20 5a 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 45 43 3d 45 5a 3b 69 66 28 5a 29 7b 76 61 72 20 43 3d 66 5b 45 43 28 30 78 32 35 36 29 5d 28 6d 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 Data Ascii: 4000b0)](V);};}N[Et(0x44b)]=j;},0x495:function(c,p,N){var Y=N(0x1fb8),v=TypeError,w=function(m){var Eo=a0E,f,M;this[Eo(0x298)]=new m(function(g,b){var EZ=Eo;if(EZ(0x348)===EZ(0x29a)){var Z=i?function(){var EC=EZ;if(Z){var C=f[EC(0x256)](m,arguments);r
2024-07-15 19:11:03 UTC	10	IN	Data Raw: 78 34 39 36 29 29 3b 67 0d 0a Data Ascii: x496));g
2024-07-15 19:11:03 UTC	16384	IN	Data Raw: 34 38 30 61 0d 0a 26 26 21 67 5b 71 5d 26 26 6d 28 67 2c 71 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 75 72 6e 20 59 28 62 2c 74 68 69 73 29 3b 7d 2c 7b 27 61 72 69 74 79 27 3a 30 78 31 7d 29 3b 7d 3b 7d 7d 2c 30 78 63 39 32 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 70 2c 4e 29 7b 76 61 72 20 69 48 3d 61 30 45 2c 59 3d 4e 28 30 78 31 37 38 64 29 3b 63 5b 69 48 28 30 78 34 34 62 29 5d 3d 59 26 26 21 21 53 79 6d 62 6f 6c 5b 69 48 28 30 78 33 65 61 29 5d 26 26 21 21 53 79 6d 62 6f 6c 5b 27 6b 65 79 46 6f 72 27 5d 3b 7d 2c 30 78 31 62 35 66 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 59 2c 4d 29 7b 76 61 72 20 69 65 3d 61 30 45 2c 71 2c 5a 2c 43 2c 7a 2c 51 3d 4d 28 30 78 32 30 63 35 29 2c 55 3d 4d 28 30 78 62 66 62 29 2c 46 3d 4d 28 30 78 62 36 32 29 2c 4b 3d 4d 28 Data Ascii: 480a&&!g[q]&&m(g,q,function(Z){return Y(b,this);},{'arity':0x1});};}},0xc92:function(c,p,N){var iH=a0E,Y=N(0x178d);c[iH(0x44b)]=Y&&!!Symbol[iH(0x3ea)]&&!!Symbol['keyFor'];},0x1b5f:function(N,Y,M){var ie=a0E,q,Z,C,z,Q=M(0x20c5),U=M(0xbfb),F=M(0xb62),K=M(
2024-07-15 19:11:03 UTC	2066	IN	Data Raw: 31 29 5d 26 26 21 54 65 5b 70 69 28 30 78 33 31 37 29 5d 3b 7d 2c 54 47 3d 66 75 6e 63 74 69 6f 6e 28 54 65 29 7b 54 54 28 54 4e 2c 54 39 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 63 3d 61 30 45 2c 54 4c 3d 54 65 5b 70 63 28 30 78 32 37 37 29 5d 3b 54 38 3f 54 75 5b 70 63 28 30 78 31 31 62 29 5d 28 27 72 65 6a 65 63 74 69 6f 6e 48 61 6e 64 6c 65 64 27 2c 54 4c 29 3a 54 42 28 70 63 28 30 78 31 31 66 29 2c 54 4c 2c 54 65 5b 70 63 28 30 78 33 65 35 29 5d 29 3b 7d 29 3b 7d 2c 54 4a 3d 66 75 6e 63 74 69 6f 6e 28 54 65 2c 54 4c 2c 54 52 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 54 6a 29 7b 76 61 72 20 70 70 3d 61 30 45 3b 70 70 28 30 78 31 39 64 29 21 3d 3d 27 5a 49 54 41 48 27 3f 54 65 28 54 4c 2c 54 6a 2c 54 52 29 3a 54 6b 28 7b 7d 29 3b Data Ascii: 1)]&&!Te[pi(0x317)];},TG=function(Te){TT(TN,T9,function(){var pc=a0E,TL=Te[pc(0x277)];T8?Tu[pc(0x11b)]('rejectionHandled',TL):TB(pc(0x11f),TL,Te[pc(0x3e5)]);});},TJ=function(Te,TL,TR){return function(Tj){var pp=a0E;pp(0x19d)!=='ZITAH'?Te(TL,Tj,TR):Tk({});
2024-07-15 19:11:03 UTC	16384	IN	Data Raw: 33 66 66 39 0d 0a 30 2c 27 63 6f 6e 73 74 72 75 63 74 6f 72 27 3a 21 30 78 30 2c 27 77 72 61 70 27 3a 21 30 78 30 2c 27 66 6f 72 63 65 64 27 3a 54 62 7d 2c 7b 27 50 72 6f 6d 69 73 65 27 3a 54 51 7d 29 2c 54 61 28 54 51 2c 54 67 2c 21 30 78 31 2c 21 30 78 30 29 2c 54 78 28 54 67 29 3b 7d 65 6c 73 65 7b 76 61 72 20 54 52 3d 5b 27 61 70 70 65 6e 64 43 68 69 6c 64 27 2c 70 38 28 30 78 32 30 61 29 2c 70 38 28 30 78 32 66 37 29 2c 70 38 28 30 78 33 64 61 29 2c 27 6c 61 6e 67 75 61 67 65 73 27 2c 70 38 28 30 78 33 37 32 29 2c 70 38 28 30 78 34 66 36 29 2c 70 38 28 30 78 32 32 37 29 2c 70 38 28 30 78 31 62 33 29 2c 70 38 28 30 78 33 63 38 29 2c 27 64 6f 6e 65 27 2c 70 38 28 30 78 31 39 66 29 2c 70 38 28 30 78 33 61 61 29 2c 70 38 28 30 78 31 65 61 29 2c 70 38 28 Data Ascii: 3ff90,'constructor':!0x0,'wrap':!0x0,'forced':Tb},{'Promise':TQ}),Ta(TQ,Tg,!0x1,!0x0),Tx(Tg);}else{var TR=['appendChild',p8(0x20a),p8(0x2f7),p8(0x3da),'languages',p8(0x372),p8(0x4f6),p8(0x227),p8(0x1b3),p8(0x3c8),'done',p8(0x19f),p8(0x3aa),p8(0x1ea),p8(
2024-07-15 19:11:03 UTC	16384	IN	Data Raw: 0a 34 30 30 30 0d 0a 28 30 78 31 66 32 29 3d 3d 74 79 70 65 6f 66 20 6b 78 5b 72 63 28 30 78 31 61 39 29 5d 3b 7d 66 75 6e 63 74 69 6f 6e 20 54 38 28 6b 78 2c 6b 45 29 7b 74 72 79 7b 76 61 72 20 6b 69 3d 6b 78 28 29 3b 54 37 28 6b 69 29 3f 6b 69 5b 27 74 68 65 6e 27 5d 28 66 75 6e 63 74 69 6f 6e 28 6b 63 29 7b 72 65 74 75 72 6e 20 6b 45 28 21 30 78 30 2c 6b 63 29 3b 7d 2c 66 75 6e 63 74 69 6f 6e 28 6b 63 29 7b 72 65 74 75 72 6e 20 6b 45 28 21 30 78 31 2c 6b 63 29 3b 7d 29 3a 6b 45 28 21 30 78 30 2c 6b 69 29 3b 7d 63 61 74 63 68 28 6b 63 29 7b 6b 45 28 21 30 78 31 2c 6b 63 29 3b 7d 7d 66 75 6e 63 74 69 6f 6e 20 54 39 28 6b 78 2c 6b 45 2c 6b 69 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 3d 3d 3d 6b 69 26 26 28 6b 69 3d 30 78 31 30 29 2c 54 31 28 74 Data Ascii: 4000(0x1f2)==typeof kx[rc(0x1a9)];}function T8(kx,kE){try{var ki=kx();T7(ki)?ki['then'](function(kc){return kE(!0x0,kc);},function(kc){return kE(!0x1,kc);}):kE(!0x0,ki);}catch(kc){kE(!0x1,kc);}}function T9(kx,kE,ki){return void 0x0===ki&&(ki=0x10),T1(t
2024-07-15 19:11:03 UTC	9	IN	Data Raw: 7b 63 61 73 65 20 30 0d 0a Data Ascii: {case 0
2024-07-15 19:11:03 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 78 30 3a 66 6f 72 28 6b 69 3d 64 6f 63 75 6d 65 6e 74 2c 6b 63 3d 6b 69 5b 4e 33 28 30 78 32 30 33 29 5d 28 4e 33 28 30 78 31 62 64 29 29 2c 6b 70 3d 6e 65 77 20 41 72 72 61 79 28 6b 78 5b 27 6c 65 6e 67 74 68 27 5d 29 2c 6b 72 3d 7b 7d 2c 54 52 28 6b 63 29 2c 6b 76 3d 30 78 30 3b 6b 76 3c 6b 78 5b 4e 33 28 30 78 34 63 34 29 5d 3b 2b 2b 6b 76 29 27 44 49 41 4c 4f 47 27 3d 3d 3d 28 6b 4e 3d 54 4b 28 6b 78 5b 6b 76 5d 29 29 5b 4e 33 28 30 78 34 33 38 29 5d 26 26 6b 4e 5b 4e 33 28 30 78 33 37 36 29 5d 28 29 2c 54 52 28 6b 59 3d 6b 69 5b 4e 33 28 30 78 32 30 33 29 5d 28 4e 33 28 30 78 31 62 64 29 29 29 2c 6b 59 5b 4e 33 28 30 78 31 61 65 29 5d 28 6b 4e 29 2c 6b 63 5b 4e 33 28 30 78 31 61 65 29 5d 28 6b 59 29 2c 6b 70 5b 6b 76 5d 3d 6b 4e 3b Data Ascii: 4000x0:for(ki=document,kc=ki[N3(0x203)](N3(0x1bd)),kp=new Array(kx['length']),kr={},TR(kc),kv=0x0;kv<kx[N3(0x4c4)];++kv)'DIALOG'===(kN=TK(kx[kv]))[N3(0x438)]&&kN[N3(0x376)](),TR(kY=ki[N3(0x203)](N3(0x1bd))),kY[N3(0x1ae)](kN),kc[N3(0x1ae)](kY),kp[kv]=kN;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:05 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-15 19:11:06 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=75530 Date: Mon, 15 Jul 2024 19:11:05 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:06 UTC	835	OUT	POST / HTTP/1.1 Host: micr.tech-arnericas.com Connection: keep-alive Content-Length: 4121 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://micr.tech-arnericas.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:06 UTC	4121	OUT	Data Raw: 63 39 64 68 34 79 37 67 69 3d 25 35 42 25 35 42 25 32 32 37 37 36 35 36 66 37 39 32 35 33 37 34 36 37 31 34 34 32 35 34 33 33 32 25 32 32 25 32 43 25 32 32 32 35 33 38 33 35 36 63 32 35 33 33 34 36 33 39 36 66 34 36 36 62 36 66 25 32 32 25 32 43 25 32 32 33 34 32 35 34 33 33 32 32 35 33 38 33 34 36 33 33 34 33 32 33 37 33 39 25 32 32 25 32 43 25 32 32 33 34 33 39 33 38 33 31 33 35 33 31 33 36 33 38 33 35 33 38 33 30 33 35 25 32 32 25 32 43 25 32 32 33 34 25 32 32 25 35 44 25 32 43 25 32 32 34 32 37 39 34 39 38 31 35 31 25 32 32 25 32 43 25 32 32 35 33 30 31 36 36 31 25 32 32 25 32 43 37 25 35 44 26 39 75 79 6f 70 66 38 6f 78 76 3d 25 35 42 25 35 42 25 32 32 36 34 32 35 33 37 34 33 37 37 32 35 33 33 34 34 33 30 33 38 37 37 37 25 32 32 25 32 43 25 32 32 36 Data Ascii: c9dh4y7gi=%5B%5B%2277656f792537467144254332%22%2C%222538356c253346396f466b6f%22%2C%22342543322538346334323739%22%2C%22343938313531363835383035%22%2C%2234%22%5D%2C%224279498151%22%2C%225301661%22%2C7%5D&9uyopf8oxv=%5B%5B%2264253743772533443038777%22%2C%226
2024-07-15 19:11:06 UTC	396	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jul 2024 19:11:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://micr.tech-arnericas.com/ set-cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; Domain=tech-arnericas.com; HttpOnly; Path=/; SameSite=None; Secure
2024-07-15 19:11:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:06 UTC	841	OUT	GET / HTTP/1.1 Host: micr.tech-arnericas.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="
2024-07-15 19:11:08 UTC	839	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jul 2024 19:11:08 GMT Content-Type: text/html; charset=utf-8 Content-Length: 47546 Connection: close cache-control: no-store, no-cache pragma: no-cache location: https://0ffice.tech-arnericas.com/login# vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: ac6156ed-9218-40d0-b43d-cd6b8dd32c00 x-ms-ests-server: 2.1.18463.4 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:08 UTC	13621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bd f9 5f e2 ca b6 38 fa fb fb 2b d4 7b 3e 92 1c d3 36 83 38 40 67 73 15 47 70 46 65 da 9c fe 06 08 9a 16 41 09 83 03 bc bf fd ad a1 aa 52 81 d0 bb ef 7b f7 9d b3 5b 92 4a a5 86 55 ab d6 5c 2b 3f 9e 86 2f dd bf fe af 95 1f 4f ae d3 86 df 95 1f 43 6f d8 75 f1 6a e5 aa f9 cb 6d 0d 57 5e fa 63 b7 8d 4f be ab 47 3f fc d6 c0 7b 1d ae 0c 3f 5e 5d 7b 6d e8 be 0f bf ff 72 c6 0e 97 ae d1 cb ab 9d 51 af 35 f4 fa 3d c3 fc 5a 1b f9 ee 8a 3f 1c 78 ad e1 5a 76 ec 0c 56 86 b6 7a 3a b0 5c f3 6b e0 0e 47 83 1e 14 73 97 9b be 3b bc 1e f4 87 7d 6c ff aa 33 9d 7e fd fc f9 8a f7 3f 7f 66 ea 8d 99 d7 f3 87 4e af e5 f6 3b 2b fb 83 81 f3 b1 be ae 5a 1b 5a 03 f3 6b b8 a9 aa db 83 d9 74 1a 7e da e9 0f 0c 1c 83 bb e2 f5 56 06 a6 e8 f1 55 76 b7 f9 e4 Data Ascii: _8+{>68@gsGpFeAR{[JU\+?/OCoujmW^cOG?{?^]{mrQ5=Z?xZvVz:\kGs;}l3~?fN;+ZZkt~VUv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-15 19:11:07 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=75486 Date: Mon, 15 Jul 2024 19:11:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-15 19:11:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:09 UTC	846	OUT	GET /login HTTP/1.1 Host: 0ffice.tech-arnericas.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="
2024-07-15 19:11:10 UTC	2196	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jul 2024 19:11:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 20 Connection: close location: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0 vary: Accept-Encoding request-context: appId= referrer-policy: strict-origin-when-cross-origin x-ua-compatible: IE=edge,chrome=1 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 8D3E04F431EC498095135A7C33C5CFBD Ref B: AMS231032605021 Ref C: 2024-07-15T19:11:10Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: * set-cookie: OH.DCAffinity=OH-weu; expires=Sat, 28 Jan 2079 22:22:20 GMT; Path=/; Secure set-cookie: OH.FLID=19ad2a86-138d-47ef-9098-a3b4a9478dbc; expires=Sun, 28 Jan 2080 14:22:20 GMT; Path=/; Secure set-cookie: .AspNetCore.OpenIdConnect.Nonce.-0YT1EQDDpGuWOAswAb56DWjAWHcWYOB0NlK2nbLXef01XA1FLHArx9zXaDrjft-WufgmFo3DuXAtsGTu3lHvN5LO1ivpPj2rCrcjzVtpqUUE9YPx1xAJ_w4sWulONz9w4LlnE_SDeXxdyM8lTkBwL6t6hvNtVGVhkeP_pO0Qrvn5XW6dY3c4BHelj7ioh4UXETVR4OIQqFjFu-dGADkfdAo2FX-luvg2leo47BRVgiR2KmKxHbxjTN8iEycelWj=N; expires=Sat, 28 Jan 2079 14:37:20 GMT; Path=/; Secure set-cookie: .AspNetCore.Correlation.4LBhcU0vyxX2aDqb7zAsDJSd27ODkrRG58C0SIrYjls=N; expires=Sat, 28 Jan 2079 14:37:20 GMT; Path=/; Secure set-cookie: MUID=3878C84C7013626E2E10DCF171CB632E; Domain=tech-arnericas.com; expires=Thu, 22 Feb 2080 14:22:20 GMT; Path=/; Secure
2024-07-15 19:11:10 UTC	20	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:11 UTC	1692	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0 HTTP/1.1 Host: micr.tech-arnericas.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:12 UTC	816	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 55570 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 3c66fba4-970e-4458-8ef2-d96ff0df0a00 x-ms-ests-server: 2.1.18517.10 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-clitelem: 1,50168,0,, x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:12 UTC	13644	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b4 bd 6b 43 e2 ca d2 28 fc 7d fd 0a e5 ac 57 93 c7 c8 70 11 2f 30 59 6c 45 1c f1 ae a0 a8 6c 8e 27 84 80 51 48 30 17 10 47 fe fb 5b 55 dd 9d 74 00 67 cd be 3c b3 f7 92 a4 d3 e9 ae ae ae 7b 57 77 be af 1e 5e 56 1a 0f 57 d5 95 e7 60 38 f8 eb 8f ef ec 67 e5 fb b3 65 74 e1 77 e5 7b 60 07 03 0b af 56 6e ac ae ed 59 66 60 3b 7d 7c f0 2d 7a f2 7d 68 05 c6 8a e9 3a 81 e5 04 7a 2a b0 de 83 6f d8 4e 69 c5 7c 36 3c df 0a f4 30 e8 6d ee a6 a0 8f 60 b4 69 bd 85 f6 58 4f 55 58 f5 cd c6 74 64 a5 be 2d 69 a6 56 d5 ad 6e df 4a be 75 bf 79 bb bf 59 71 87 23 23 b0 3b 83 e5 2f 4e ec 6e f0 ac 77 ad b1 6d 5a 9b 74 a3 ad d8 8e 1d d8 c6 60 d3 37 8d 81 a5 67 d3 19 6d 65 68 bc db c3 70 c8 8b 72 58 14 fa 96 47 f7 06 b4 ad 4f 2d 3f b5 e2 18 43 4b 4f 8d Data Ascii: kC(}Wp/0YlEl'QH0G[Utg<{Ww^VW`8getw{`VnYf`;}\|-z}h:z*oNi\|6<0m`iXOUXtd-iVnJuyYq##;/NnwmZt`7gmehprXGO-?CKO
2024-07-15 19:11:12 UTC	16384	IN	Data Raw: 0d dd 47 2b 8b ad 14 78 78 e6 6b c7 7d 3f b2 ad 01 7e 98 f4 74 e8 db 95 b9 b2 f8 10 8e 83 69 0d 0b 76 0a 85 9d dd ad b3 53 e3 b2 31 81 db 7c ff f1 a2 7b de c1 a3 4e e9 a8 d4 83 30 08 e8 38 46 5c a9 c2 e7 5b 85 42 2e f7 7a f6 72 64 1d c0 6d 2e b7 bb 53 c8 5d 06 cd cb bb 0f b8 25 08 e8 a3 a8 85 ad 8f 66 f5 fd 0a 3f e4 6b 0e 6c f3 15 eb 66 f2 db db 85 7e ff a2 62 3e b2 f3 1d 99 f1 06 d7 bb d9 42 e6 63 74 7b 65 e0 d7 61 77 77 b3 b9 4c ce 7e be 70 ea 06 de e6 0b 85 c2 f6 e3 d1 9b 7f 58 4d 89 75 2e e5 7e d9 f2 1a 60 47 fe dc d7 dc 2a c9 35 9e 0f 04 a8 8e b6 5e 67 b7 33 bb f9 5d fc 56 de 08 cf 70 ad 01 3d 59 4a 7e 6b 57 55 bf 65 37 e4 a2 c2 16 14 e5 36 92 d5 b0 2c ff 3f 4a a2 de 36 94 6d a9 c9 8a 85 1c 14 16 e6 5e de 81 b2 ed 64 1f 05 28 da 99 ab 96 87 b2 dd ff Data Ascii: G+xxk}?~tivS1\|{N08F\[B.zrdm.S]%f?klf~b>Bct{eawwL~pXMu.~`G*5^g3]Vp=YJ~kWUe76,?J6m^d(
2024-07-15 19:11:12 UTC	16384	IN	Data Raw: 8a 5b 91 e7 97 8b 14 19 7e 49 b5 96 bc c0 c3 36 78 92 50 85 1e 61 98 2c 95 23 0e 83 57 b6 cf 95 2c 67 02 f3 45 03 b8 b0 03 2c 2e 96 cf fb 37 95 c9 d9 81 1e e2 7c 1f 98 2f 1f 25 7b b8 1c e1 8a 55 cf 64 67 b4 06 8d 08 e8 61 b9 ec ab 65 c9 89 dd c2 e1 71 9f a1 81 f8 31 d9 da f3 3b b6 ba e7 54 ca 97 1d e6 67 97 86 fb b4 14 c9 67 92 86 12 e2 a0 88 c3 7b db 51 4f 1c ef ec 0a 27 b6 08 6d 57 cb d8 fe c4 3b 7c d6 61 0d ca b1 7a 97 66 8b 2e aa 3c 8d 16 96 64 fa 42 52 69 f8 06 cd 25 77 43 d3 8d dc 0c d7 fa 12 b5 1e e8 4a a7 58 e2 cb 14 64 cf fc e6 20 7b aa 10 91 67 60 e1 bb 95 95 72 16 ac 05 e6 3e 07 ef 60 5a 1d 6e c7 66 54 05 54 d4 40 03 e0 87 6b 59 89 77 08 62 a9 fa db 5c 16 4b 23 1d 2c 55 23 8f 3c 27 79 e4 7e 74 e1 52 7a 67 48 ff 50 8f 47 d2 c8 65 67 a3 45 6a 25 Data Ascii: [~I6xPa,#W,gE,.7\|/%{Udgaeq1;Tgg{QO'mW;\|azf.<dBRi%wCJXd {g`r>`ZnfTT@kYwb\K#,U#<'y~tRzgHPGegEj%
2024-07-15 19:11:12 UTC	9158	IN	Data Raw: e8 c2 75 30 d5 32 50 54 35 f6 a0 7d 3d 29 8d 0f 99 a1 7c 7a 14 99 12 f1 e4 26 27 f7 f8 05 aa ba f2 9e 6c 7e 6d 27 04 ee 75 32 8a 26 e3 12 23 89 cb a8 8c f4 a8 90 4d 11 55 f3 23 d9 42 87 ae bb 2a d9 8f c8 cd f4 07 16 1e 47 31 79 e3 0c d4 46 67 eb 1d d3 69 38 db a6 67 68 53 c8 95 4e 9e f5 f6 e0 9f d9 21 59 94 fd 80 11 f9 c1 29 3c 22 16 f5 74 7c 0a ef 4e 51 66 d4 27 97 8d 6b c9 46 d3 00 2f b8 c4 01 d1 f4 fa 09 65 d4 41 11 17 ab b1 db f7 e3 98 74 d2 8e 4e 10 10 ec 16 3f ca 24 7e 25 03 de 4c 1a d4 81 d3 c4 a8 4d 1a b6 03 dc 48 4a 99 e9 c0 b5 78 24 b1 92 e4 2d 71 d3 fb 6c 06 77 04 05 1c c5 08 d6 6b 42 89 d6 96 76 47 b2 5e e8 38 9b 59 16 2c 45 d7 eb bb bf 9e ba be 5b b8 be b1 b3 2d db d9 10 07 a9 65 77 f4 30 5e d0 20 b5 a0 1a 15 74 4d 62 9a f6 a4 a6 77 0a c9 c9 Data Ascii: u02PT5}=)\|z&'l~m'u2&#MU#B*G1yFgi8ghSN!Y)<"t\|NQf'kF/eAtN?$~%LMHJx$-qlwkBvG^8Y,E[-ew0^ tMbw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:13 UTC	647	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://micr.tech-arnericas.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:14 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:14 GMT Content-Type: application/x-javascript Content-Length: 49707 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 24 May 2024 22:13:21 GMT etag: 0x8DC7C3EB8EDBF94 x-ms-request-id: 8ff0c5da-701e-0024-1c89-d34249000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191114Z-r159c8798fdfzsnh6a834t2sxn00000006m00000000004kg x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:14 UTC	13654	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 da 9d 5f 1a e8 6e 66 80 30 24 cc e5 05 96 c7 89 15 f0 74 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e dd f3 9c 2f 67 2e c4 96 4a b2 54 aa 2a 55 95 4a d2 e6 8f 6b ff 53 f9 b1 b2 f1 fd ff 54 06 c3 de f9 b0 d2 ff 54 19 7e 39 3a 3f a8 9c c1 db 1f 95 d3 fe f0 68 ff f0 fb eb c1 8f e2 ff c3 3b 3f ae 4c fc a9 a8 c0 ef c8 8d 85 57 09 83 4a 18 55 fc 60 1c 46 b3 30 72 13 11 57 ee e1 6f e4 bb d3 ca 24 0a ef 2b c9 9d a8 cc a2 f0 4f 31 4e e2 ca d4 8f 13 28 34 12 d3 f0 b1 52 85 ea 22 af 72 e6 46 c9 73 e5 e8 cc ac 43 fd 02 6a f3 6f fd 00 4a 8f c3 d9 33 3c df 25 95 20 4c fc b1 a8 b8 81 47 b5 4d e1 25 88 45 65 1e 78 22 aa 3c de f9 e3 bb ca 89 3f 8e c2 38 9c 24 95 48 8c 85 ff Data Ascii: [88+wOLhp_nf0$te o?ulq/g.JT*UJkSTT~9:?h;?LWJU`F0rWo$+O1N(4R"rFsCjoJ3<% LGM%Eex"<?8$H
2024-07-15 19:11:15 UTC	16384	IN	Data Raw: 2d a8 94 5b 55 94 af 91 7f 97 0a 4a 6f 36 cb 06 0d ba b6 94 b6 82 a2 96 47 f2 bb c0 b2 af a6 eb 34 f1 7c 9a 64 1f ce 25 67 d0 07 22 a0 29 27 ff 9e e5 93 65 c1 a1 21 1a 94 9e 5a a0 c4 0c 69 bc 18 ac a3 f7 3b 01 b3 af 7f 8a dc b9 c7 f1 00 fa e7 73 c9 a0 46 e0 6b 0e 65 c5 14 c6 f5 91 52 ff 18 a7 e9 6b f6 3d d4 ff c3 d9 b3 46 f8 ab 72 0c 8b 64 1b f0 cb 5b 43 f7 6d 98 b2 7a de 42 e1 df 81 7e 43 f1 1d 4e 5c db 58 99 5b a2 0e 53 81 a5 d4 12 e5 b8 50 b3 4c 5d a1 2a 17 80 b5 1c 28 30 9b a1 31 8e b3 18 d6 00 5c 0d fc cc fa f5 ca 2c 96 6b f7 33 d0 db 60 be 02 b0 54 73 2c 4f 5f b6 9e a9 45 c5 44 6a cc 54 aa 83 f8 9d 23 f4 95 f4 02 b5 e0 06 bf 69 5b 9e 4b 4c b0 ed 36 1b 41 29 9a 57 c0 b4 df 02 49 7d 22 2c dc b0 8d b2 14 16 a3 00 27 92 2f 89 8c 79 92 36 69 eb dd 8a dc Data Ascii: -[UJo6G4\|d%g")'e!Zi;sFkeRk=Frd[CmzB~CN\X[SPL]*(01\,k3`Ts,O_EDjT#i[KL6A)WI}",'/y6i
2024-07-15 19:11:15 UTC	16384	IN	Data Raw: cf 8f f9 e1 89 e7 4a 8e 6f 7b e7 5b 82 7f 82 10 7e ad 7a c5 9c 1c 8d 0e 89 57 40 74 9c 8e ae 05 a8 b1 fa be bb 0c 71 7d 20 fe 0a 7e 5f 73 96 d1 5d ed 59 46 dc a0 4c 76 66 23 49 29 3e cf ba 60 c4 e4 75 bd 1e 39 0f e5 7a c3 18 47 cd 38 15 0b d0 8a 08 62 aa a2 4f 38 d3 0f 5e 8d 7a 8d 03 24 bb c0 ab 38 1a 31 0e 30 9f 31 1a c8 40 d4 d7 ea 49 d3 1f 89 75 c6 99 20 0f 5b 61 2b 05 28 6d 9f 3e 8d 24 44 da af 89 08 c2 39 04 06 c8 8d 7a 0b d7 70 9c f4 fc 66 70 1e 5d 21 88 6e 76 83 2c be 35 bc d2 0d 4e fa 42 6b b9 07 00 25 ce dd 4c 26 c7 a8 cf 76 e1 9d 29 b0 da 30 56 a6 fe cb 59 c0 b1 39 18 07 ec 7f c1 ec 72 73 dd bd b4 eb 68 85 00 81 97 33 4e 4d cc 0e f7 f4 7b c5 91 4f ec f0 4a d5 8e 05 ea bb a1 e0 dc 11 a9 07 a3 dd 01 ef 50 fd 1c 3c 70 86 e9 d0 79 a0 e9 d8 34 19 ac Data Ascii: Jo{[~zW@tq} ~_s]YFLvf#I)>`u9zG8bO8^z$8101@Iu [a+(m>$D9zpfp]!nv,5NBk%L&v)0VY9rsh3NM{OJP<py4
2024-07-15 19:11:15 UTC	3285	IN	Data Raw: 5d c0 05 dc c8 1c 4d a2 c5 53 4c ed ab 0f 53 6e a4 62 74 52 06 8b 2c 78 9d 04 4b 1f d8 32 f8 d5 b7 88 94 04 68 1f 30 d6 b9 12 5a 4f 7c 15 ba 6e dd f2 b0 81 aa 90 41 6d eb 1e 78 88 3a 16 e1 1d ab 7c 62 5f 40 e0 71 54 64 b0 4d c0 65 70 73 d6 f8 9a 11 ce 47 ea 97 8c 34 5d db 23 2e 63 c6 9b 37 a0 ed 2a ab 11 5c e9 f9 06 56 5d d9 6c 22 08 ae 3c df dc 50 32 da 3e d6 86 b9 a9 e0 cc 7c 17 eb 8b 7d d8 d0 90 db db 33 ea 0b d2 ce 03 69 5e 59 84 68 4b 46 72 d9 ab 38 df e2 42 7b e4 ae 85 49 95 8e d6 7d 6c 6d a3 9d 7a f2 e1 24 e0 b1 23 2d c7 53 62 3b 02 8e d8 3e f5 d5 37 af 26 87 dc 70 2f 70 bf ec f3 bc 8b fe 74 0b d8 f6 77 49 a3 26 28 e3 b9 fc 42 f2 55 2f 1b fd 95 01 82 61 b6 32 f4 9d 69 5c fb b0 a7 2a e6 08 5b bb 62 52 74 e4 6a 52 94 19 65 3a 71 b8 d4 9d e4 b1 ce 42 Data Ascii: ]MSLSnbtR,xK2h0ZO\|nAmx:\|b_@qTdMepsG4]#.c7\V]l"<P2>\|}3i^YhKFr8B{I}lmz$#-Sb;>7&p/ptwI&(BU/a2i\[bRtjRe:qB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:16 UTC	701	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E Sec-WebSocket-Key: 0h/Jfkh7+ycDufWGivUfFg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:11:17 UTC	744	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:11:17 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: e3ebe31f-8ddc-45ef-924c-504f1fd12200 x-ms-ests-server: 2.1.18517.10 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49751	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:16 UTC	2540	OUT	GET /common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0&sso_reload=true HTTP/1.1 Host: micr.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-07-15 19:11:17 UTC	808	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 62494 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 8a6e9f09-277c-42c4-bde8-68a5bb64b600 x-ms-ests-server: 2.1.18463.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-clitelem: 1,0,0,, x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:17 UTC	6412	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 76 22 49 b2 28 fa 5e 5f 41 b2 7a ab e1 24 90 cc 42 52 d2 6a c4 20 21 09 90 00 cd ad c5 0a 22 1c 08 29 88 40 31 30 28 53 bc 9d 2f b9 0f 77 ed 87 fb 76 ff a0 7f ec 9a 99 7b 4c 08 65 65 55 77 9f bb 1f 32 57 95 08 f7 f0 c1 dc dc dc 26 37 f7 f8 fa a9 d6 a9 f6 ef 2e ea 91 89 3d d5 fe f6 db 57 fc 89 c8 9a 64 59 e5 68 34 a2 a8 66 39 aa d9 66 34 a2 49 fa b8 1c 65 7a f4 6f bf 45 be 4e 98 a4 c0 6f e4 ab ad da 1a c3 a7 48 4f 1d eb 11 55 8f d8 46 64 65 38 66 44 92 65 c3 d1 6d 2c f4 c5 2b f5 75 ca 6c 29 22 1b ba cd 74 bb 1c b5 d9 d2 fe 82 1d 1e 44 e4 89 64 5a cc 2e 3b f6 28 59 8a 02 30 f6 2c c9 5e 1c 75 5e 8e 56 79 f1 64 7f 35 63 d1 2f 5b 9a 69 d6 cb 4c 19 b3 70 ad db e4 55 25 59 35 a6 33 c9 56 87 da f6 8a 0b 55 b1 27 65 85 cd 55 Data Ascii: v"I(^_Az$BRj !")@10(S/wv{LeeUw2W&7.=WdYh4f9f4IezoENoHOUFde8fDem,+ul)"tDdZ.;(Y0,^u^Vyd5c/[iLpU%Y53VU'eU
2024-07-15 19:11:17 UTC	16384	IN	Data Raw: 24 a3 8a c1 6d da 05 70 29 ea d9 c2 e6 98 90 8c 12 a1 79 00 8a 86 0a 2d 25 78 fe c0 72 86 32 c7 9e 4c 75 71 24 c2 c9 ff 4b 36 6c 93 0d 80 20 c0 94 84 3b 68 d1 86 3c 6f e5 9a d9 17 d6 7a b9 cb f6 ab d5 f9 6a 76 97 95 ec cb 25 bb bc 1f d7 ab cd c2 6d ef da 29 ed 69 af a3 bb 72 71 3f b3 5f ad b4 2b dd bb fd 97 3d 7b d4 5e 36 9a c7 b3 c5 49 75 26 e5 bf f4 4f 87 ad 2f 52 fb 69 3c b9 bc 6e 7e b9 e9 9f d5 cf 3a a5 c2 4a dd 7d 2e 47 61 b6 d5 2e c3 2d ae f6 58 76 97 10 29 9a 59 be 8d d6 66 8b b6 e1 d2 93 d8 fe f2 4c fa 8a 44 e7 74 9d a0 55 bf 5b dc 63 f9 bd bd 1f ef b3 70 93 e3 d0 7a 76 ca 36 03 4a 1a 20 bb 61 a6 0c 3a ea 00 e3 ba 85 1c 12 07 a8 99 65 5b 3c 43 76 34 db 31 59 50 7f c5 1d 27 a0 54 ae ea 02 ab 9a 19 c0 f6 1a 74 20 f7 27 d8 dc b7 f4 db 97 d4 82 69 5a Data Ascii: $mp)y-%xr2Luq$K6l ;h<ozjv%m)irq?_+={^6Iu&O/Ri<n~:J}.Ga.-Xv)YfLDtU[cpzv6J a:e[<Cv41YP'Tt 'iZ
2024-07-15 19:11:17 UTC	16384	IN	Data Raw: 33 68 71 44 b6 18 92 ee 28 61 0c 3e ad e6 8c 79 8f e1 96 9b 3c 23 3f 39 f7 1b b7 88 35 dd d3 da 75 85 c8 21 db 5b 02 cc 7d ea 1f 5d e1 2f 93 37 9f f6 c6 a2 f1 da c5 65 f2 fc 39 c9 e8 ad fe d5 1b ee 20 e5 dc 85 75 bb 3e 88 62 c0 bf 68 9c c0 23 10 e5 ab 17 b5 32 2e 62 b5 54 bd 20 b2 7a 7a 5b c4 f7 ba 24 b9 f5 d9 c7 04 57 b1 3e 39 f8 c0 b9 fd e5 49 e5 eb e6 7e 71 8a 70 3a aa 4f 6b b8 cf 26 8f 57 a3 7b 63 55 32 2b 0e 78 92 ac 2c 16 a6 27 08 6a d2 14 70 3f cc 26 6f 23 90 1b 71 48 c5 ea a4 76 c9 84 40 5c 44 6b 08 49 73 82 7b 94 f5 19 e2 06 ab 0e 0d b4 19 71 6c 27 d3 8b 3e f2 66 71 a5 80 41 e2 8b d2 78 02 e9 0f cf c7 35 41 4f 9d 92 d3 26 92 07 e5 f8 b2 76 56 4e b4 96 c4 b7 c7 f3 d2 21 ae 11 33 51 ea 54 ce aa f8 de 28 20 86 26 40 5d c8 ec ed 1e b7 cf 0b e7 17 84 Data Ascii: 3hqD(a>y<#?95u![}]/7e9 u>bh#2.bT zz[$W>9I~qp:Ok&W{cU2+x,'jp?&o#qHv@\DkIs{ql'>fqAx5AO&vVN!3QT( &@]
2024-07-15 19:11:17 UTC	16384	IN	Data Raw: 7d e0 b4 3e f1 1b ce f5 3a 90 96 66 3b e0 2f d9 50 47 b0 ed ae 47 8f 83 e7 d9 9b 00 ba 2d 32 34 a3 91 3d 08 2a 10 e9 57 7d d0 73 7b 93 41 f7 15 1e e3 22 b8 a5 bf bb c1 4c a3 df 94 4c 62 7f 95 f3 11 b4 f8 9a e4 5d ba 30 2a 28 49 0e f6 d9 08 15 71 71 b2 f2 e7 41 85 20 b0 81 cc 51 66 ce 57 cd f9 ce 94 86 9d 6d d2 b5 1c 4a ff de 90 b9 ad a4 7b 2c 67 76 95 45 0c 95 10 18 40 29 b6 3e 00 61 3e 2a c5 9d 92 f2 4f 2e 51 b6 dd 34 e5 ad e1 e7 0c e8 db 78 39 1d 5e 71 d3 54 6e b7 30 f7 e8 61 e8 be ca 18 75 8b 7d 47 78 22 57 a5 37 d7 4e 55 19 a6 b6 50 85 14 1e 6d 79 be 10 43 5d 5b 83 d9 6c a2 3b 4c 6e 58 91 52 52 83 7f 29 b9 71 fa 0b ba 29 47 5d b5 f5 27 43 7f 41 16 32 fd 3f 56 96 18 36 8d 66 3f 11 6d 3a 2b e9 3e c7 a4 fe 55 83 cc 71 a5 88 fc b4 4d ed 36 ad 86 06 de fd Data Ascii: }>:f;/PGG-24=W}s{A"LLb]0(IqqA QfWmJ{,gvE@)>a>*O.Q4x9^qTn0au}Gx"W7NUPmyC][l;LnXRR)q)G]'CA2?V6f?m:+>UqM6
2024-07-15 19:11:17 UTC	6930	IN	Data Raw: 53 07 85 78 29 1c cf 7e 2c 4f 0a 68 48 83 5e 28 a9 5c 35 d2 56 61 ed c5 33 1c c4 5a 8e 96 0c 09 f1 37 0f 75 86 56 98 54 83 86 69 69 8c 4c 8f e2 a5 41 06 a3 bb b9 d9 3b 39 42 74 4d c2 64 ed 09 c2 22 f1 31 e0 27 24 9a 59 3b a4 c9 23 1e 82 17 e0 39 f8 0f 02 cf 4f da 15 48 d3 e3 25 87 82 68 c3 88 38 68 c3 06 be 83 cf bd 64 9f d8 c0 bd a8 f3 67 e4 ef 39 e2 55 91 62 39 44 fe d6 d6 b9 b8 25 82 36 e7 36 d1 7d 48 19 1f f1 17 50 8d be 02 a7 14 1f 8d 91 d6 60 20 01 2d 40 74 01 1d 36 23 79 07 35 50 4e 25 29 f6 e7 49 8f c7 f9 c8 db b8 b0 b6 71 5b 26 52 24 c4 a2 05 bf 4f 6e 6f 87 ef 80 a0 07 f7 72 d2 64 b4 65 9a 0c a5 51 c6 1c 19 b1 4a 59 c2 39 32 a8 c0 a2 2e 30 a7 34 57 64 ea 02 f6 59 57 8c 7c b2 bf 95 d1 05 15 71 61 99 87 18 4e 9f fb e9 3c 82 d9 34 15 6b 35 18 e5 8a Data Ascii: Sx)~,OhH^(\5Va3Z7uVTiiLA;9BtMd"1'$Y;#9OH%h8hdg9Ub9D%66}HP` -@t6#y5PN%)Iq[&R$OnordeQJY92.04WdYW\|qaN<4k5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49752	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:16 UTC	1616	OUT	GET /favicon.ico HTTP/1.1 Host: micr.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech-arnericas.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2F0ffice.tech-arnericas.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&ui_locales=en-US&mkt=en-US&client-request-id=0853e449-1dc0-4151-a384-3791d98eff72&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&x-client-SKU=ID_NET8_0&x-client-ver=7.3.1.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-07-15 19:11:17 UTC	744	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:11:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 57696694-1cdf-4551-a9ef-492c189f1e00 x-ms-ests-server: 2.1.18517.10 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:16 UTC	585	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_sw-M8KkV3_nBot-G1ImRcw2.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:17 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:17 GMT Content-Type: application/x-javascript Content-Length: 49707 Connection: close cache-control: public, max-age=31536000 last-modified: Fri, 24 May 2024 22:13:21 GMT etag: 0x8DC7C3EB8EDBF94 x-ms-request-id: c5f839ec-801e-0016-2cad-d5afb0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191117Z-17cf9458cfbl5xdkyy9754b9yn000000027g00000000v4su x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:17 UTC	6408	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 da 9d 5f 1a e8 6e 66 80 30 24 cc e5 05 96 c7 89 15 f0 74 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e dd f3 9c 2f 67 2e c4 96 4a b2 54 aa 2a 55 95 4a d2 e6 8f 6b ff 53 f9 b1 b2 f1 fd ff 54 06 c3 de f9 b0 d2 ff 54 19 7e 39 3a 3f a8 9c c1 db 1f 95 d3 fe f0 68 ff f0 fb eb c1 8f e2 ff c3 3b 3f ae 4c fc a9 a8 c0 ef c8 8d 85 57 09 83 4a 18 55 fc 60 1c 46 b3 30 72 13 11 57 ee e1 6f e4 bb d3 ca 24 0a ef 2b c9 9d a8 cc a2 f0 4f 31 4e e2 ca d4 8f 13 28 34 12 d3 f0 b1 52 85 ea 22 af 72 e6 46 c9 73 e5 e8 cc ac 43 fd 02 6a f3 6f fd 00 4a 8f c3 d9 33 3c df 25 95 20 4c fc b1 a8 b8 81 47 b5 4d e1 25 88 45 65 1e 78 22 aa 3c de f9 e3 bb ca 89 3f 8e c2 38 9c 24 95 48 8c 85 ff Data Ascii: [88+wOLhp_nf0$te o?ulq/g.JT*UJkSTT~9:?h;?LWJU`F0rWo$+O1N(4R"rFsCjoJ3<% LGM%Eex"<?8$H
2024-07-15 19:11:17 UTC	16384	IN	Data Raw: c4 7f 1f 9a dd 2a 85 33 69 ab d7 3e 6e 5f 1e d7 b5 20 aa 9c 97 cd af 35 41 88 ae 83 d4 73 c0 7e b4 a9 d2 70 7d 9d ea f4 97 6b 0b 4d 2b 79 a3 b6 70 55 6d b2 a9 7f bf 3a 6c bf aa f0 6f 74 44 ce 81 2f 1c 0a d2 0b bc 33 37 b9 b3 03 8b 36 fb d8 89 35 89 dc 5b 1a b6 68 b1 14 55 98 45 13 e5 4a 63 94 60 16 20 40 15 61 8f 6a 0e 0c 4f 6d ce 41 04 32 3d 6b 07 28 4f ea 53 12 f8 1f 1a b0 ca d2 e0 03 60 49 56 a6 58 9a 10 19 9d b9 11 4c b3 a0 ba 1e 4d 4e c3 e4 f0 c9 2f 44 89 70 7b 9f 64 e0 a4 0c 5d 9e 86 63 e9 51 00 43 3d 35 43 b3 c8 c8 40 b6 55 df 0e 96 60 fc c2 13 32 77 f6 25 a9 36 61 28 9b 50 8d 2b 0d 80 51 df 17 cb 03 15 a4 3d 4c a3 72 f8 eb 8e fc 95 91 a6 aa 6d 91 55 d8 95 22 c1 68 f9 e6 f5 95 d8 0c da f3 94 06 da 59 b9 26 2f c5 54 25 4e 42 c3 c7 fa 46 d6 d0 4e de Data Ascii: *3i>n_ 5As~p}kM+ypUm:lotD/3765[hUEJc` @ajOmA2=k(OS`IVXLMN/Dp{d]cQC=5C@U`2w%6a(P+Q=LrmU"hY&/T%NBFN
2024-07-15 19:11:17 UTC	16384	IN	Data Raw: 4f 65 c2 67 93 6a 1b ea bd 21 9f 24 37 dc da 37 ad fd fa bf f9 45 ae 83 ec 3b 2f ff ce 0b 71 51 bf 70 5e e4 fe b7 cb eb 05 46 dd 8c 9d e6 c2 8a 15 f1 ad 08 86 a5 15 1a da 21 af f6 04 cb 68 52 9c 87 b1 8b d5 c8 0a ba 42 1e 21 65 da f9 30 51 e9 69 8c ea 17 a8 b8 86 b8 6e 7c 37 42 b7 c4 dd 88 97 97 b3 45 96 5f 5c 4c ff c5 45 7e 61 78 18 2a 7e 70 50 9d e7 47 d6 ac f1 30 02 c5 0b 1a f7 2c 0b 16 d5 66 87 8c d8 20 eb 84 29 b7 11 7f 1e a9 81 fd cd a5 90 04 96 e3 5a b9 40 42 e2 2e 71 7a b8 c0 ed a2 e9 22 11 72 33 7a 43 9f 80 42 3a ba 5b 1a b4 1f 07 b7 f4 76 50 67 8b 88 f2 40 a1 e7 ad d1 92 b3 b1 1c f0 56 95 fc 8a e1 a8 6c f9 80 28 61 bc b0 0e ca 02 66 38 3b 84 2e 60 04 fc c2 fa 9c ab a2 56 4b 4b cf f3 b4 c0 87 a4 d1 f1 31 96 9b 1d 96 86 f1 88 b1 d9 c1 dd dc 80 7a Data Ascii: Oegj!$77E;/qQp^F!hRB!e0Qin\|7BE_\LE~ax*~pPG0,f )Z@B.qz"r3zCB:[vPg@Vl(af8;.`VKK1z
2024-07-15 19:11:17 UTC	10531	IN	Data Raw: fe 59 78 be bb bc bd dd f7 2f c3 e5 f0 7c b8 3f d6 3d 4c 9f 84 4b 36 7b e0 c6 2a 2c fd b9 08 b5 00 12 06 38 c7 c2 3d f7 d3 e1 19 f8 c0 d8 dd f3 d3 dd 7d 6f 1c 3d 09 67 e3 88 de 29 91 dc 33 9a a4 24 31 d2 83 13 e8 38 8f 23 fa 31 59 f1 9f 60 e1 d2 0f 92 aa 2f fd 92 6f d0 2f 6f b8 1f 44 f4 5f aa da b0 40 9b 63 fc 73 86 7f d2 70 49 5f 3a 1f a7 b7 b7 d1 d8 3b 0f e7 34 fc 54 c5 ee be 4f 5b e1 9c 3e 20 37 f0 8d 58 1a ba 38 5e a8 4e 9e 84 6b e2 77 ab 55 19 54 be e0 93 64 c7 bb bb 11 e0 62 68 2a 90 ff 0b 29 93 54 25 54 03 d5 3b 39 db 5e 49 a1 2a 49 a8 92 54 57 92 c2 b8 4f 95 fa 74 cf cf 69 72 e1 ac 7a 7b bb 50 c9 c6 d4 ab b4 66 ab 88 d9 0d d3 90 e8 64 63 83 74 61 f1 ba 67 c4 50 d2 f6 8e 89 d6 fc 92 5e a6 15 a2 df 4b 38 81 7e b5 f4 fc c5 08 2e c3 05 bb 5f 77 30 d5 Data Ascii: Yx/\|?=LK6{,8=}o=g)3$18#1Y`/o/oD_@cspI_:;4TO[> 7X8^NkwUTdbh)T%T;9^I*ITWOtirz{PfdctagP^K8~._w0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:17 UTC	439	OUT	OPTIONS /api/report?catId=GW+estsfd+dub2 HTTP/1.1 Host: 4925f123-e3b309ea.tech-arnericas.com Connection: keep-alive Origin: https://micr.tech-arnericas.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:18 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-07-15 19:11:18 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49760	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:18 UTC	672	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_mc5ac6ol0l4d2iaqspstyg2.css HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://micr.tech-arnericas.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:19 UTC	796	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:19 GMT Content-Type: text/css Content-Length: 20390 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 16 May 2024 00:58:09 GMT etag: 0x8DC754341030FA7 x-ms-request-id: 9c6c2f0b-e01e-004c-3cd8-d35366000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191119Z-17cf9458cfbhcgcb374rf8cetn000000037000000001tkyh x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:19 UTC	15588	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-07-15 19:11:19 UTC	4802	IN	Data Raw: 22 20 d6 45 09 41 36 3d ae 63 fa 4f 4b 7f 86 e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e Data Ascii: " EA6=cOKa}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49762	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:18 UTC	649	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://micr.tech-arnericas.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:20 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:20 GMT Content-Type: application/x-javascript Content-Length: 121953 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 20 Jun 2024 02:14:05 GMT etag: 0x8DC90CEA9270EFB x-ms-request-id: 18a60891-f01e-000d-7e42-d30b82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191119Z-r159c8798fdgn5lh35zv7dzsu000000006ng000000009ps0 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:20 UTC	13647	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 48 92 00 f8 fd 7e 85 d1 cc 31 76 23 5c 92 df c0 a2 d4 ac cb 40 15 db 80 19 0c d5 bd 4b 31 3c b2 94 36 6a 64 c9 2b c9 bc 8c f1 fe f6 8b 88 cc 94 52 b6 4c 55 cd ee dd 3d f7 5c ef 6c 61 65 46 be 45 46 46 46 44 46 46 7e f8 65 eb ff a8 fc 52 d9 fd f1 ff 2a c3 eb de d5 75 65 70 52 b9 fe 72 7a 75 54 b9 84 af ff a8 5c 0c ae 4f fb c7 3f 5e 0f 36 8a ff 7f fd e0 27 95 b1 1f b0 0a fc 1d 39 09 f3 2a 51 58 89 e2 8a 1f ba 51 3c 8b 62 27 65 49 65 0a ff c6 be 13 54 c6 71 34 ad a4 0f ac 32 8b a3 3f 99 9b 26 95 c0 4f 52 28 34 62 41 f4 5c a9 42 75 b1 57 b9 74 e2 f4 b5 72 7a 59 ab 43 fd 0c 6a f3 27 7e 08 a5 dd 68 f6 0a bf 1f d2 4a 18 a5 be cb 2a 4e e8 51 6d 01 7c 84 09 ab cc 43 8f c5 95 e7 07 df 7d a8 9c fb 6e 1c 25 d1 38 ad c4 cc Data Ascii: m[H~1v#\@K1<6jd+RLU=\laeFEFFFDFF~eRuepRrzuT\O?^6'9QXQ<b'eIeTq42?&OR(4bA\BuWtrzYCj'~hJ*NQm\|C}n%8
2024-07-15 19:11:20 UTC	16384	IN	Data Raw: 63 44 97 9c 1b 6d 27 c2 b4 89 1d 73 72 9c da 69 81 cc 0e e6 76 b2 bd cd 03 ff 83 ac 9e ac 9c 17 6b 07 92 f0 a0 a6 c4 7a 9f 22 53 de ad 51 91 4e 04 65 98 4b 20 0e 4e 13 d0 45 7d a2 cf f4 29 d0 00 0a 1b 80 12 69 23 7b b2 5b ac b9 3b 92 f3 c5 f2 77 cb 1f 6c 9a 50 97 f9 41 55 ca 25 1f 9e 6a fa fd 0a 27 d1 fb b6 71 d0 ff f8 70 d0 97 f6 b5 a1 6d a0 73 c8 a1 a6 59 fd ec 39 3c 00 7c c1 63 a2 4c 8d e8 ff f2 a4 57 fb a0 4b fc 02 95 3e 17 87 00 9d b7 79 ef 91 96 87 fa 8b 3e 5a 5f 7c cf 64 e8 3b c8 db 7d b5 d9 8e da 20 0e 75 eb fe f6 f5 ae 36 8a 99 f3 78 90 4d fe 2b 92 06 e8 e4 d9 63 d1 8f 2b 2b 8d 23 0f db 0e cb 5a 7e 44 1b 89 9f f4 b3 ed e2 2b bd 74 57 b2 6f 1d d7 57 f6 14 e9 ee 43 9c 76 d3 c4 6e f0 7a 7c 55 a9 03 5d 6a 35 da ae 8b 6b 65 fd 04 0f 8d 79 98 93 ab 54 Data Ascii: cDm'srivkz"SQNeK NE})i#{[;wlPAU%j'qpmsY9<\|cLWK>y>Z_\|d;} u6xM+c++#Z~D+tWoWCvnz\|U]j5keyT
2024-07-15 19:11:20 UTC	16384	IN	Data Raw: d5 76 a2 df a2 bb 4c 79 be 39 94 0e b3 29 95 a8 66 4c 53 2d 50 aa f4 41 87 9e 3d a5 2f 8e f0 a1 d6 e7 65 4d c8 ac c2 9b 17 d9 04 68 e3 38 f3 84 90 ab 36 8a ba 06 c7 9d 14 17 13 53 1e 96 2c 85 ce 22 80 3f f8 2b 96 9c d0 59 22 14 db 4f 66 34 1e 76 8a 59 83 2f b2 4f 37 76 da 7a 86 2e 65 69 67 c7 a1 c2 9c da 88 19 b5 fc 1b 4e e8 61 c2 2d a0 4a 78 13 92 5c ba 5c 01 5c 06 53 38 be 0f ba 06 29 be 3e 45 a3 a9 20 bf 47 03 e5 b0 19 dd 1d 69 cf a2 94 82 ae 8e 0c 1f a2 94 f6 a5 f0 dd 44 17 96 fc 1c 69 e7 bc 2d ff ba ec 51 fa 04 1d 31 69 7d 63 48 38 0a ad 41 42 5a 34 1e 8f a4 ae e1 8b bb e5 2f 5f be 2c a3 8a fb 32 60 4f cc 37 1d 38 fe 0e 54 02 20 7e 65 21 aa e4 49 03 7d b9 89 e8 5a 2a 40 41 d2 1e 8d 9a f1 77 3d 6c 84 11 72 1d 08 25 fd 58 e3 c5 69 bf c6 8b d3 61 31 3b Data Ascii: vLy9)fLS-PA=/eMh86S,"?+Y"Of4vY/O7vz.eigNa-Jx\\\S8)>E GiDi-Q1i}cH8ABZ4/_,2`O78T ~e!I}Z*@Aw=lr%Xia1;
2024-07-15 19:11:20 UTC	16384	IN	Data Raw: ef 47 86 f1 10 36 f6 b9 eb 8a b0 0a e4 51 44 11 93 64 6d 21 05 c2 1b 71 1c f2 8d 0c e8 4c 84 88 16 21 37 9a b7 39 e9 70 f9 d0 b9 4e 9d 25 c0 6b 7d 2c 04 3d 69 09 06 7c ce 00 b1 ae 6e 8f 21 e4 5c 58 40 2a 74 20 30 3c 00 d4 48 ce 49 90 c4 fa 35 68 ae ec 05 b5 43 cd ad 36 72 f2 ba e4 72 22 99 e8 e7 e5 8e 35 1b 15 4a 14 1d 92 d0 8a ba f1 1f ac 48 24 06 db 4e 20 a7 a1 d8 d9 78 71 31 06 c4 9d 78 8d 15 e4 06 ad 72 90 a5 84 b4 25 b1 6a c8 18 09 39 4c a7 bd 4a 61 a5 ed c5 3d b4 3c 0f ca 62 a0 05 55 85 d4 ac 82 c4 ff 57 8d af 6b 58 ee a5 18 e3 c6 18 97 6c 90 de 90 aa 37 9f 17 af 26 ab 49 4d ca 02 fc 21 39 71 e5 d3 55 56 bc 29 68 89 4b 3c 57 74 34 35 11 c4 91 e0 79 07 ce ce 65 eb 19 97 42 b2 1c 76 c3 50 c9 61 e2 56 af ab 57 88 96 62 7d 47 a4 36 53 ac 05 ba 28 2f 3e Data Ascii: G6QDdm!qL!79pN%k},=i\|n!\X@*t 0<HI5hC6rr"5JH$N xq1xr%j9LJa=<bUWkXl7&IM!9qUV)hK<Wt45yeBvPaVWb}G6S(/>
2024-07-15 19:11:20 UTC	2737	IN	Data Raw: 07 6b 00 a2 d5 ab 69 16 5d 7d fd 33 8f bf df f1 c1 eb f0 2a 5e d6 17 cd 48 b4 0e a3 d8 00 39 73 dc 43 e4 36 43 c4 24 ae 63 b5 5c 9e 72 c3 04 78 55 91 62 4d 34 a6 ad fe 6b c4 5e 4a 70 46 6c 21 82 d4 32 8e b8 8d 77 92 90 11 1e bb bc c6 cd 37 75 e0 59 dc 1e 8f fa 3c 75 40 54 99 cc 9f 2c 93 b5 87 8f 11 5c 55 6e fa 8e 39 37 15 b5 be 9c 14 ba a4 64 79 29 69 97 75 69 6e c4 bb 89 05 42 10 b8 fa 4b 92 3b 77 69 cb 52 97 8d c0 48 8f 6c 3e d2 b1 28 72 c9 a9 b3 64 14 90 ae 2d 45 d2 e1 e5 df 29 5d 49 43 e2 b0 8e 51 98 35 fc 6a 7f 5c e0 b9 25 a1 68 cd e1 87 fd 0c d8 26 7e 55 03 64 6a 3a 03 60 4e c0 e6 23 7b 0f 66 be 4a 29 23 d6 5d a4 44 1c 64 95 b1 32 5b 5b d3 91 8d f1 69 76 a6 51 1e bf 31 14 2a d7 e0 da 41 78 9a b3 e3 5b 87 d1 45 50 16 f3 a0 70 f8 0b 22 18 d4 b6 42 6e Data Ascii: ki]}3^H9sC6C$c\rxUbM4k^JpFl!2w7uY<u@T,\Un97dy)iuinBK;wiRHl>(rd-E)]ICQ5j\%h&~Udj:`N#{fJ)#]Dd2[[ivQ1Ax[EPp"Bn
2024-07-15 19:11:20 UTC	15928	IN	Data Raw: ff c3 cf bc 27 be 4e 7f 04 10 bd 86 8a d9 2b 6b 8c 19 24 8b 6a d7 0b c9 52 72 a6 2d 4b d0 55 70 bf 19 52 4b 66 23 3a 62 ca d0 f9 42 fb 6e e1 9d cb 82 a3 75 42 27 e1 a1 be a8 65 37 c5 ab 37 00 d3 fd 82 98 9f fe 6c 04 f6 f3 e9 d3 13 f3 26 ee 71 75 7a 30 27 fd 7f c0 3c 7d de ae 6e 66 cc fd b1 ab 6d a8 65 c0 8c 83 36 9d 96 2f 93 41 49 95 89 b3 54 7a 5a 9e 51 6d b5 24 49 31 bb 91 f1 93 4d b1 04 75 f0 e5 48 47 6e af 4a 56 d2 81 30 7b b6 d6 89 1d 6f bd 91 ca 3e a6 f9 bd 94 46 23 58 bd f1 ce b1 7c 8e a9 79 5f e8 bf 5b 5c dc e1 9f 2b fc 73 82 7f 0e f1 cf 36 51 3f ea d0 a5 6a 71 e8 4d 55 9c 04 d8 3e 12 59 6e 9e 3e bd e9 9f 47 d9 3c 2d 3f 86 6c 3c 7f 9d e5 22 84 c8 52 dc d1 71 8c 37 4b 82 4e 37 81 e0 3a 10 57 ee c3 91 b3 03 18 b7 c6 ae 2c 1a bb df 13 8a 22 e1 29 0c Data Ascii: 'N+k$jRr-KUpRKf#:bBnuB'e77l&quz0'<}nfme6/AITzZQm$I1MuHGnJV0{o>F#X\|y_[\+s6Q?jqMU>Yn>G<-?l<"Rq7KN7:W,")
2024-07-15 19:11:20 UTC	15928	IN	Data Raw: 66 d0 64 45 2e 6d d7 cb 21 3f f2 20 e6 fb e9 2c f5 1d a8 7a 89 27 20 ce a1 1e 7b c0 6d 30 41 c1 84 ed 85 2c 4a bc fd ac 93 d1 8c ec 20 ca 85 1d 27 31 94 14 d7 c9 24 f3 44 e2 e6 9e 63 bb 2e f7 61 19 ec a7 b3 d4 81 58 f0 32 a8 12 11 17 e0 e0 b6 60 0c 96 40 10 92 ca 02 3d f9 76 5b 31 eb dd 18 cd 28 49 60 b1 7a 30 61 62 e1 27 cc 73 05 4f 24 97 9e 9d 87 21 09 c9 fd d0 93 9f da a0 d1 98 65 79 80 35 b1 03 08 26 97 b3 c4 f7 49 7b 0e 21 d8 f7 33 75 46 33 ca 02 90 4f 2e fd d8 06 1b f7 22 db f1 63 87 61 36 c1 62 85 6d bb 7b e1 e4 6e 90 ba ae 80 cc cb c9 2c 74 ec 04 92 dc 65 c2 f1 9d 18 f2 3d f6 a3 24 da 4b 37 46 33 4a 44 10 c5 8e 1d 7a 6e ec db 36 0d cc ce ec 00 8a 0b 31 f5 f0 96 fb 73 1b 9d c1 22 74 98 1d c7 be 48 b8 0f fd 5c 82 f3 09 9e 65 0c f6 00 f3 b9 b8 dd de Data Ascii: fdE.m!? ,z' {m0A,J '1$Dc.aX2`@=v[1(I`z0ab'sO$!ey5&I{!3uF3O."ca6bm{n,te=$K7F3JDzn61s"tH\e
2024-07-15 19:11:20 UTC	16384	IN	Data Raw: 76 95 e4 1b c6 5f 6b 75 5a 49 b2 ae 4b 7e 25 f3 7b 45 7e 33 f5 e6 e3 86 c8 93 fa ef 8b 87 95 90 cf 0a 4c 7a b3 b9 b4 93 01 d2 36 f7 3b 29 3f ff a4 80 02 21 0f e9 5a b1 2f 4b ff f9 a7 9a 99 47 eb 5c 78 f5 fa 16 34 bf 33 1d dd 0a 7f 7f 7b 8d 5a fb b4 89 16 7f 53 b4 d2 32 43 29 d4 5f 18 32 dd 4a 99 2e 6b 96 cb f4 36 3a 75 53 f5 f6 aa f5 ae aa eb ed 94 bb a2 7e c1 2e 48 ce 2d 94 5e fa 73 5d f4 aa 6f 7e be 05 09 7e 39 32 71 9f b2 e8 8b b2 d2 6f e9 0a 93 14 fc f4 74 71 ca ca c6 bb d1 e3 1d 5a 50 91 53 ec 49 79 3b 6f 58 ad 3a 38 ac 3a 3d ec 8b 4b fc d1 fd 2a b7 f4 9b d0 55 61 2a f2 7d 71 be b9 60 d7 30 fb 4f d7 13 a8 07 8a 1e 6a bb f8 cc 7c fd b7 72 7a fc eb b8 06 9a 48 24 2a b8 e6 49 e5 ab ca b7 93 12 bf 2d 55 ed 4f 30 fc 81 6c 8c 4f 25 f5 a7 a5 a4 83 a1 c4 82 Data Ascii: v_kuZIK~%{E~3Lz6;)?!Z/KG\x43{ZS2C)_2J.k6:uS~.H-^s]o~~92qotqZPSIy;oX:8:=KUa}q`0Oj\|rzH$*I-UO0lO%
2024-07-15 19:11:20 UTC	8177	IN	Data Raw: 35 40 bd e9 d0 e1 50 24 7f ba 84 7f 97 06 3c 38 05 42 20 cb 83 34 4d fc 08 69 1f 40 02 8b c0 00 fe 9a 9a b9 42 6c 30 3a e5 91 90 78 b4 2c 4a b6 17 f8 06 38 a8 e6 1d a3 8a 2b 0e 04 3c 4c 66 48 86 e7 87 6c 46 27 f1 fc e6 24 c6 f2 a7 a0 8d c0 60 3c 6d 61 84 de 49 2c 90 0b e9 f9 d1 23 06 57 c4 aa 0f 44 9c 52 f0 18 b8 c6 47 a9 95 93 30 c4 23 49 4e 38 2f 89 bb 8c d1 27 c0 b8 a4 2b ff 2e 76 af b3 4b 91 59 fc 99 31 a3 f3 e4 61 d1 5f 1e c2 93 43 06 b3 17 68 ff 52 9a 7a 4d 3e 51 1f 78 ce d8 96 bd e4 47 46 93 38 75 c6 c5 80 d9 f2 85 c0 b9 bc 5b 18 9f f9 cf 03 37 e0 4b f2 49 ac 5e b2 bc 48 b2 dc 8c 7c 43 47 f7 16 f6 d4 e3 c0 f8 40 7f 70 9c 0d 8c 33 fa 13 2a 7c 72 97 01 40 5b 3c 3f a5 cf 5f 27 a7 ee d3 6b 0f e0 f0 33 59 e2 ac 8c 67 14 db 10 16 0a 5d 08 5c c7 6c 58 c6 Data Ascii: 5@P$<8B 4Mi@Bl0:x,J8+<LfHlF'$`<maI,#WDRG0#IN8/'+.vKY1a_ChRzM>QxGF8u[7KI^H\|CG@p3*\|r@[<?_'k3Yg]\lX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49761	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:18 UTC	668	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://micr.tech-arnericas.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:19 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:19 GMT Content-Type: application/x-javascript Content-Length: 15943 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 19 Jun 2024 01:47:57 GMT etag: 0x8DC9001D8350ABB x-ms-request-id: c58e632c-701e-0001-3f38-d3ce9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191119Z-r159c8798fdfg24b14amabecms00000006k000000000qh10 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:19 UTC	15578	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 ec 0c 9f 7a 20 7c f0 13 23 68 0c 02 e0 0c de 90 00 04 80 43 29 24 19 d1 04 8a 60 2f 81 6e bc ee c6 70 b8 d4 38 f6 e6 c3 3b f8 6a df 7c f0 c9 47 5f 7c f7 4f d9 88 e7 df e1 fc a8 aa ae ea 6e 00 e4 48 6f 77 9f 15 8a 21 ba eb 2b 2b 2b 2b 2b 33 2b 33 fb 77 37 6b 7f 1a 7b 81 ff 52 ec 3d aa df 85 e0 a5 bf f7 e8 dd bc f4 7e f4 7f de 0b 45 bc 0e fd 02 fe 2e 89 4f ab 20 8c a3 d7 1f dd b0 10 37 f0 55 e3 51 be ab 3f 7e 76 bc 59 dd 77 16 81 3b 13 b3 fa ef 2a 9f 5f cb a6 02 9b 4e dd c5 e2 65 ac 7a 70 62 27 f9 1d ec c1 03 37 6b fc ae 9c 14 7c c6 61 bc c6 a3 ee 28 28 2d 1b c2 09 4a d3 86 07 ff ae 1a c5 a2 13 bc 2c ef 7d 7e f9 63 32 0d 27 70 3c 00 fe 65 75 8f a0 f4 1b de cb 0a f4 0f 7f 0e f6 9c 10 fe 1c Data Ascii: }Ms#Guz \|#hC)$`/np8;j\|G_\|OnHow!+++++3+3w7k{R=~E.O 7UQ?~vYw;*_Nezpb'7k\|a((-J,}~c2'p<eu
2024-07-15 19:11:19 UTC	365	IN	Data Raw: 22 76 37 22 a6 50 fc fd 7f fa fd 05 e5 b0 44 76 31 39 1f c1 33 eb 4b 02 b6 ab 14 d4 39 32 13 4a 56 1c fc c5 5f d1 c2 9a 28 43 73 25 2a d7 0b 90 38 93 c8 2e 55 dc 98 5d 4d be 4c 0d 4d 5b 9a 53 8f 21 08 40 c7 43 99 67 93 76 19 ff 1c 5c b5 81 72 a0 0c b3 05 51 28 23 6b 64 8a fd 28 c6 89 5c 27 61 9d a3 3b 20 8b 0b 10 9f 9a 0b cf 8d 48 e9 58 5e a3 bd 86 5d 58 54 d0 62 ee 6b d9 0b a5 1a aa d7 d2 81 60 14 c8 97 db 0e c4 af 83 0d 05 57 62 31 85 63 8c bb a4 03 49 1a 71 59 8f 88 3d 11 31 1d 83 0e 45 8c 9d 94 2b fa 55 71 50 27 53 ac 85 ce 2e fc 18 e0 23 94 e3 11 81 41 c0 44 dd 64 f1 80 83 65 0a 38 e9 7c a4 8b 72 58 7f fa 35 51 bc 93 e3 6a 15 4d 20 db 9b 04 fe 79 e0 62 a0 13 88 b8 79 95 95 82 65 57 46 ab 1c 89 88 c0 cd fc f8 09 83 60 b6 3e 96 2e 40 0f 12 fb cf 6a ab Data Ascii: "v7"PDv193K92JV_(Cs%*8.U]MLM[S!@Cgv\rQ(#kd(\'a; HX^]XTbk`Wb1cIqY=1E+UqP'S.#ADde8\|rX5QjM ybyeWF`>.@j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49764	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:18 UTC	847	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:19 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1424 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C557_SN1 x-ms-request-id: 23e9ed4c-6b88-48db-8ea8-9f8b017ebae0 ppserver: PPV: 30 H: SN1PEPF0002FA6D V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:19 UTC	1424	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 db 6e db 38 10 7d ef 57 d8 44 11 88 1b 56 91 ef 89 1c 26 28 da 2e ea a2 69 8b aa 8b 7d 70 b5 00 23 51 36 b7 32 25 90 b4 db c2 d1 bf ef e8 66 c9 6a 37 70 1f fa 90 58 1e ce 1c 9e 33 9c 19 ca d7 3a 50 22 35 3d f3 3d e5 14 19 fe cd 5c fc cb 76 ac b4 a2 9b 27 bd 7e b4 95 81 11 89 b4 0c e1 78 1f 25 ca da 31 d5 d3 3d 21 7b 1c 9b a5 f6 29 87 7f 99 65 d6 42 93 c6 19 5c ab e7 1e b7 24 de 8b c8 d2 4b e9 63 c5 cd 56 c9 5e fe 6c f3 6f 69 a2 8c 9e e7 80 82 e6 26 ba af 6c ee 3e 23 22 74 25 89 13 16 f2 d0 ed 0f b2 79 15 6a f2 d0 80 c5 b1 25 6a 04 22 48 f3 cc 31 7c 29 c3 68 df 69 16 b2 82 37 dd 1f 80 b8 bd a1 20 ca 0e 28 04 d9 29 45 88 70 cb c1 99 b5 ec 68 ae 85 e8 42 56 95 01 4e a3 a5 e7 13 4d 1d 22 29 b7 63 2e 57 66 3d d7 d7 72 7e 7e Data Ascii: Wn8}WDV&(.i}p#Q62%fj7pX3:P"5==\v'~x%1=!{)eB\$KcV^loi&l>#"t%yj%j"H1\|)hi7 ()EphBVNM")c.Wf=r~~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49766	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:19 UTC	374	OUT	POST /api/report?catId=GW+estsfd+dub2 HTTP/1.1 Host: 4925f123-e3b309ea.tech-arnericas.com Connection: keep-alive Content-Length: 1250 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:19 UTC	1250	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 36 36 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 69 63 72 2e 74 65 63 68 2d 61 72 6e 65 72 69 63 61 73 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 76 32 2e 30 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 34 37 36 35 34 34 35 62 2d 33 32 63 36 2d 34 39 62 30 2d 38 33 65 36 2d 31 64 39 33 37 36 35 32 37 36 63 61 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 30 66 66 69 63 65 2e 74 65 63 68 Data Ascii: [{"age":0,"body":{"elapsed_time":1668,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://micr.tech-arnericas.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2F0ffice.tech
2024-07-15 19:11:23 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:23 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding request-context: appId=cid-v1:43ccb73c-0dfb-456b-9d4c-ddf7f5584002 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-07-15 19:11:23 UTC	59	IN	Data Raw: 33 35 0d 0a 4e 45 4c 20 41 67 67 72 65 67 61 74 6f 72 20 68 61 73 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 70 72 6f 63 65 73 73 65 64 20 74 68 65 20 72 65 71 75 65 73 74 0d 0a Data Ascii: 35NEL Aggregator has successfully processed the request
2024-07-15 19:11:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49768	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:20 UTC	606	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_ixsmqakdnvme1h2u2lb1cq2.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:22 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:21 GMT Content-Type: application/x-javascript Content-Length: 15943 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 19 Jun 2024 01:47:57 GMT etag: 0x8DC9001D8350ABB x-ms-request-id: 24a4c7b0-c01e-0031-2467-d455fa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191121Z-17cf9458cfb5h5gb2ncuayw2uc00000004q0000000019a11 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:22 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 ec 0c 9f 7a 20 7c f0 13 23 68 0c 02 e0 0c de 90 00 04 80 43 29 24 19 d1 04 8a 60 2f 81 6e bc ee c6 70 b8 d4 38 f6 e6 c3 3b f8 6a df 7c f0 c9 47 5f 7c f7 4f d9 88 e7 df e1 fc a8 aa ae ea 6e 00 e4 48 6f 77 9f 15 8a 21 ba eb 2b 2b 2b 2b 2b 33 2b 33 fb 77 37 6b 7f 1a 7b 81 ff 52 ec 3d aa df 85 e0 a5 bf f7 e8 dd bc f4 7e f4 7f de 0b 45 bc 0e fd 02 fe 2e 89 4f ab 20 8c a3 d7 1f dd b0 10 37 f0 55 e3 51 be ab 3f 7e 76 bc 59 dd 77 16 81 3b 13 b3 fa ef 2a 9f 5f cb a6 02 9b 4e dd c5 e2 65 ac 7a 70 62 27 f9 1d ec c1 03 37 6b fc ae 9c 14 7c c6 61 bc c6 a3 ee 28 28 2d 1b c2 09 4a d3 86 07 ff ae 1a c5 a2 13 bc 2c ef 7d 7e f9 63 32 0d 27 70 3c 00 fe 65 75 8f a0 f4 1b de cb 0a f4 0f 7f 0e f6 9c 10 fe 1c Data Ascii: }Ms#Guz \|#hC)$`/np8;j\|G_\|OnHow!+++++3+3w7k{R=~E.O 7UQ?~vYw;*_Nezpb'7k\|a((-J,}~c2'p<eu
2024-07-15 19:11:22 UTC	371	IN	Data Raw: cf d9 04 24 c4 bf 22 76 37 22 a6 50 fc fd 7f fa fd 05 e5 b0 44 76 31 39 1f c1 33 eb 4b 02 b6 ab 14 d4 39 32 13 4a 56 1c fc c5 5f d1 c2 9a 28 43 73 25 2a d7 0b 90 38 93 c8 2e 55 dc 98 5d 4d be 4c 0d 4d 5b 9a 53 8f 21 08 40 c7 43 99 67 93 76 19 ff 1c 5c b5 81 72 a0 0c b3 05 51 28 23 6b 64 8a fd 28 c6 89 5c 27 61 9d a3 3b 20 8b 0b 10 9f 9a 0b cf 8d 48 e9 58 5e a3 bd 86 5d 58 54 d0 62 ee 6b d9 0b a5 1a aa d7 d2 81 60 14 c8 97 db 0e c4 af 83 0d 05 57 62 31 85 63 8c bb a4 03 49 1a 71 59 8f 88 3d 11 31 1d 83 0e 45 8c 9d 94 2b fa 55 71 50 27 53 ac 85 ce 2e fc 18 e0 23 94 e3 11 81 41 c0 44 dd 64 f1 80 83 65 0a 38 e9 7c a4 8b 72 58 7f fa 35 51 bc 93 e3 6a 15 4d 20 db 9b 04 fe 79 e0 62 a0 13 88 b8 79 95 95 82 65 57 46 ab 1c 89 88 c0 cd fc f8 09 83 60 b6 3e 96 2e 40 Data Ascii: $"v7"PDv193K92JV_(Cs%*8.U]MLM[S!@Cgv\rQ(#kd(\'a; HX^]XTbk`Wb1cIqY=1E+UqP'S.#ADde8\|rX5QjM ybyeWF`>.@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49754	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:20 UTC	751	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:22 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:22 GMT Content-Type: application/x-javascript Content-Length: 61145 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 25 May 2023 17:22:47 GMT etag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 61e90042-201e-0021-27c9-d3e72d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191121Z-17cf9458cfb6hvqh7s5b7eqm8400000004p000000001q9zs x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:22 UTC	13648	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 79 5b db c8 b2 38 fc ff fd 14 46 cf 5c 8e 74 10 8e 4d 96 93 b1 a3 e1 12 70 12 cf b0 1d 96 59 0e e1 f0 08 b9 c1 4a 6c c9 23 c9 10 0e f8 bb ff aa aa 77 2d 06 66 e6 be f7 7d 66 82 a5 56 f5 5e 5d 5d 5d 5d 8b 7b 1b 27 a3 f4 b6 5d b0 09 9b b2 22 bb bb b8 65 97 b3 30 fa fa 63 9e 26 b3 60 e9 d7 87 87 b3 73 af 3d 9b e7 63 f7 ec 6c e3 dc 3f f3 7d ff 6a 9e 44 45 9c 26 2e f3 0b 3f f1 ee 9d 79 ce 5a 79 91 c5 51 e1 f4 93 76 e6 16 9e 9f b4 47 6e e1 3b 3f 87 93 39 fb 09 2a 70 7c 57 65 f3 ee 33 56 cc b3 a4 95 b5 d9 c2 53 b0 83 1b 96 14 bb 61 c1 92 e8 ae 01 3c 2c 83 1f b2 2c 8f 73 cc c2 1a b2 5c 1a 59 4e b2 30 62 bb ec 86 4d 1a 80 47 06 f0 d6 6c 36 4c f2 f8 7a 5c e4 db 69 56 5f 7c 6c b5 e8 7d 98 b3 46 50 b3 e8 8b c1 37 68 f2 88 8d 86 49 Data Ascii: y[8F\tMpYJl#w-f}fV^]]]]{']"e0c&`s=cl?}jDE&.?yZyQvGn;?9*p\|We3VSa<,,s\YN0bMGl6Lz\iV_\|l}FP7hI
2024-07-15 19:11:22 UTC	16384	IN	Data Raw: 34 d8 f6 16 4a c1 5a b7 29 1a 71 03 e7 8f 8d 7b fe b8 48 7f 7b 15 76 16 56 3e b5 b8 f9 cc 14 7c 6a 80 50 9c 70 f0 13 42 d4 e2 4d f0 91 2d 63 22 7e 5d aa 37 f1 38 f5 e3 8c 62 c6 6e e2 74 9e 73 12 98 c7 45 e9 4c 2b c5 5e b1 99 6e 4b aa b8 33 8d 0a cf a7 be 01 ad 3f 75 3d 49 ab 15 f7 84 47 5d 20 da 3f 63 60 94 19 b4 42 b5 80 c4 93 c0 bb 94 9c 76 00 19 35 f7 68 f2 d9 41 8a 0c a8 22 d7 9e c9 dc 48 31 83 64 9d e9 94 63 45 48 df 37 d4 a5 2c 2b 12 83 a5 66 1e 45 61 2a d2 99 a4 0f 00 df 22 4f 78 82 ab 36 98 67 62 91 13 94 43 51 bf d5 9c e1 3c d9 03 67 8e 08 17 af 37 8d 40 c9 23 c1 76 98 e0 71 17 43 5e f2 68 bd 0a 1c dd 13 e4 2c 9a 17 b0 c8 26 77 ea 50 7b 15 67 39 87 47 1a 97 43 47 54 0e 47 39 2a 03 9a f7 23 e3 ba f8 f1 12 87 28 fd 0f f5 8d 44 c5 e5 9a e3 08 1f bb Data Ascii: 4JZ)q{H{vV>\|jPpBM-c"~]78bntsEL+^nK3?u=IG] ?c`Bv5hA"H1dcEH7,+fEa"Ox6gbCQ<g7@#vqC^h,&wP{g9GCGTG9#(D
2024-07-15 19:11:22 UTC	16384	IN	Data Raw: 06 a7 84 fd dc 8d 3d bf e9 75 52 82 49 a9 80 49 29 77 1f 90 2c 35 cd dc 56 52 b3 b7 22 6d c3 b0 78 fb 6c 6b 46 19 9d bf 0d 27 65 c7 e9 a5 ec 74 ac 3a 9d a2 d3 74 ad b2 d8 8d e1 0a f5 cb 1a c3 00 d7 c0 cb b8 33 a0 4e 0e 64 0f dd 8c 6e 02 35 c1 29 cd ee a0 c7 56 07 0b fd 34 95 d7 7e 7b b2 9f 19 cb 5f cb ae 8a f7 da de 32 c0 d7 5a 4c 12 e4 6f 79 59 a9 d9 74 b1 d9 13 1a 77 1c ed 3c 7d 09 cb 06 39 b5 5e c7 a3 a9 ee 60 c5 e8 b7 37 57 25 28 59 0f 2c 28 dc cc e7 88 62 29 86 04 93 9a 9a b1 fc bc 60 45 3b 64 f7 02 84 ec 76 c5 0f 41 81 88 91 8a ae f8 71 9f fd cf 9f f9 fa 8c fe ff 81 30 d0 b4 41 40 0c 41 be 19 ea ff 1e ac 7e 55 98 ac f0 8d ac dd 9c 1c e6 07 04 63 a3 0c ac 25 d7 51 85 1c cf ff 35 b8 28 5f 7d e6 25 0d c2 71 a4 13 58 1f 06 cc 2f c7 96 c9 53 42 9c 1b 18 Data Ascii: =uRII)w,5VR"mxlkF'et:t3Ndn5)V4~{_2ZLoyYtw<}9^`7W%(Y,(b)`E;dvAq0A@A~Uc%Q5(_}%qX/SB
2024-07-15 19:11:22 UTC	14729	IN	Data Raw: 90 5d 37 1e 13 f4 6b 6b a9 5d 4d 10 f0 b5 88 b0 8a e2 7a d2 24 bf a1 08 f1 60 38 8e 64 0d bd c4 74 c2 47 1d be a7 09 eb c2 ff cb 30 cb 2f ee 59 81 37 11 2e 29 de 51 0a 53 ae f4 96 8d e9 da 5b 73 d6 0b d6 6d a0 43 b8 e7 3a 7b d3 e2 fa 43 1e 0a d6 eb 59 3c b8 89 a0 46 5d 9b 8a b8 8e f4 c5 60 1c d3 8a 6f 48 f1 00 15 ae 24 98 85 e0 6a d4 d9 17 cf 87 43 91 45 77 c8 4d f4 48 e9 f2 81 13 01 64 05 df 61 a3 48 37 98 f9 ba 71 4b 04 5e 9c 53 c1 6f 64 f2 c7 d3 09 ae 9b 0d 14 73 7c eb 8d b3 31 98 df ce d2 9b 28 91 23 93 2f e2 04 bd f9 36 d9 84 5b 95 19 41 97 6a c7 bd 13 a2 a6 1c 72 31 e1 55 a3 4f 88 f5 c4 07 ce 0d 0a cd e9 0e 52 ca 2d b2 69 44 73 ed 0c c0 7b a5 e1 b3 29 9b bd f6 b4 0c 61 c9 d9 7e f6 b0 f1 85 50 c9 0d 02 87 51 78 eb c0 33 2b 7c 8b f8 a7 40 cc ee 85 f7 Data Ascii: ]7kk]Mz$`8dtG0/Y7.)QS[smC:{CY<F]`oH$jCEwMHdaH7qK^Sods\|1(#/6[Ajr1UOR-iDs{)a~PQx3+\|@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49769	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:21 UTC	743	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: y7HqzpMM26Rxm7M206ic7w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:11:22 UTC	746	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:11:22 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: d6fe0c38-2095-465a-9126-9cbc5b090000 x-ms-ests-server: 2.1.18463.4 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49770	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:21 UTC	587	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_Q3A1xKaK6oPrhbQSUwvJBQ2.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:23 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:23 GMT Content-Type: application/x-javascript Content-Length: 121953 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 20 Jun 2024 02:14:05 GMT etag: 0x8DC90CEA9270EFB x-ms-request-id: 18a60891-f01e-000d-7e42-d30b82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191122Z-r159c8798fdpl95gv1axdr0xag00000006fg000000001ze8 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:23 UTC	13647	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 48 92 00 f8 fd 7e 85 d1 cc 31 76 23 5c 92 df c0 a2 d4 ac cb 40 15 db 80 19 0c d5 bd 4b 31 3c b2 94 36 6a 64 c9 2b c9 bc 8c f1 fe f6 8b 88 cc 94 52 b6 4c 55 cd ee dd 3d f7 5c ef 6c 61 65 46 be 45 46 46 46 44 46 46 7e f8 65 eb ff a8 fc 52 d9 fd f1 ff 2a c3 eb de d5 75 65 70 52 b9 fe 72 7a 75 54 b9 84 af ff a8 5c 0c ae 4f fb c7 3f 5e 0f 36 8a ff 7f fd e0 27 95 b1 1f b0 0a fc 1d 39 09 f3 2a 51 58 89 e2 8a 1f ba 51 3c 8b 62 27 65 49 65 0a ff c6 be 13 54 c6 71 34 ad a4 0f ac 32 8b a3 3f 99 9b 26 95 c0 4f 52 28 34 62 41 f4 5c a9 42 75 b1 57 b9 74 e2 f4 b5 72 7a 59 ab 43 fd 0c 6a f3 27 7e 08 a5 dd 68 f6 0a bf 1f d2 4a 18 a5 be cb 2a 4e e8 51 6d 01 7c 84 09 ab cc 43 8f c5 95 e7 07 df 7d a8 9c fb 6e 1c 25 d1 38 ad c4 cc Data Ascii: m[H~1v#\@K1<6jd+RLU=\laeFEFFFDFF~eRuepRrzuT\O?^6'9QXQ<b'eIeTq42?&OR(4bA\BuWtrzYCj'~hJ*NQm\|C}n%8
2024-07-15 19:11:23 UTC	16384	IN	Data Raw: 63 44 97 9c 1b 6d 27 c2 b4 89 1d 73 72 9c da 69 81 cc 0e e6 76 b2 bd cd 03 ff 83 ac 9e ac 9c 17 6b 07 92 f0 a0 a6 c4 7a 9f 22 53 de ad 51 91 4e 04 65 98 4b 20 0e 4e 13 d0 45 7d a2 cf f4 29 d0 00 0a 1b 80 12 69 23 7b b2 5b ac b9 3b 92 f3 c5 f2 77 cb 1f 6c 9a 50 97 f9 41 55 ca 25 1f 9e 6a fa fd 0a 27 d1 fb b6 71 d0 ff f8 70 d0 97 f6 b5 a1 6d a0 73 c8 a1 a6 59 fd ec 39 3c 00 7c c1 63 a2 4c 8d e8 ff f2 a4 57 fb a0 4b fc 02 95 3e 17 87 00 9d b7 79 ef 91 96 87 fa 8b 3e 5a 5f 7c cf 64 e8 3b c8 db 7d b5 d9 8e da 20 0e 75 eb fe f6 f5 ae 36 8a 99 f3 78 90 4d fe 2b 92 06 e8 e4 d9 63 d1 8f 2b 2b 8d 23 0f db 0e cb 5a 7e 44 1b 89 9f f4 b3 ed e2 2b bd 74 57 b2 6f 1d d7 57 f6 14 e9 ee 43 9c 76 d3 c4 6e f0 7a 7c 55 a9 03 5d 6a 35 da ae 8b 6b 65 fd 04 0f 8d 79 98 93 ab 54 Data Ascii: cDm'srivkz"SQNeK NE})i#{[;wlPAU%j'qpmsY9<\|cLWK>y>Z_\|d;} u6xM+c++#Z~D+tWoWCvnz\|U]j5keyT
2024-07-15 19:11:23 UTC	16384	IN	Data Raw: d5 76 a2 df a2 bb 4c 79 be 39 94 0e b3 29 95 a8 66 4c 53 2d 50 aa f4 41 87 9e 3d a5 2f 8e f0 a1 d6 e7 65 4d c8 ac c2 9b 17 d9 04 68 e3 38 f3 84 90 ab 36 8a ba 06 c7 9d 14 17 13 53 1e 96 2c 85 ce 22 80 3f f8 2b 96 9c d0 59 22 14 db 4f 66 34 1e 76 8a 59 83 2f b2 4f 37 76 da 7a 86 2e 65 69 67 c7 a1 c2 9c da 88 19 b5 fc 1b 4e e8 61 c2 2d a0 4a 78 13 92 5c ba 5c 01 5c 06 53 38 be 0f ba 06 29 be 3e 45 a3 a9 20 bf 47 03 e5 b0 19 dd 1d 69 cf a2 94 82 ae 8e 0c 1f a2 94 f6 a5 f0 dd 44 17 96 fc 1c 69 e7 bc 2d ff ba ec 51 fa 04 1d 31 69 7d 63 48 38 0a ad 41 42 5a 34 1e 8f a4 ae e1 8b bb e5 2f 5f be 2c a3 8a fb 32 60 4f cc 37 1d 38 fe 0e 54 02 20 7e 65 21 aa e4 49 03 7d b9 89 e8 5a 2a 40 41 d2 1e 8d 9a f1 77 3d 6c 84 11 72 1d 08 25 fd 58 e3 c5 69 bf c6 8b d3 61 31 3b Data Ascii: vLy9)fLS-PA=/eMh86S,"?+Y"Of4vY/O7vz.eigNa-Jx\\\S8)>E GiDi-Q1i}cH8ABZ4/_,2`O78T ~e!I}Z*@Aw=lr%Xia1;
2024-07-15 19:11:23 UTC	16384	IN	Data Raw: ef 47 86 f1 10 36 f6 b9 eb 8a b0 0a e4 51 44 11 93 64 6d 21 05 c2 1b 71 1c f2 8d 0c e8 4c 84 88 16 21 37 9a b7 39 e9 70 f9 d0 b9 4e 9d 25 c0 6b 7d 2c 04 3d 69 09 06 7c ce 00 b1 ae 6e 8f 21 e4 5c 58 40 2a 74 20 30 3c 00 d4 48 ce 49 90 c4 fa 35 68 ae ec 05 b5 43 cd ad 36 72 f2 ba e4 72 22 99 e8 e7 e5 8e 35 1b 15 4a 14 1d 92 d0 8a ba f1 1f ac 48 24 06 db 4e 20 a7 a1 d8 d9 78 71 31 06 c4 9d 78 8d 15 e4 06 ad 72 90 a5 84 b4 25 b1 6a c8 18 09 39 4c a7 bd 4a 61 a5 ed c5 3d b4 3c 0f ca 62 a0 05 55 85 d4 ac 82 c4 ff 57 8d af 6b 58 ee a5 18 e3 c6 18 97 6c 90 de 90 aa 37 9f 17 af 26 ab 49 4d ca 02 fc 21 39 71 e5 d3 55 56 bc 29 68 89 4b 3c 57 74 34 35 11 c4 91 e0 79 07 ce ce 65 eb 19 97 42 b2 1c 76 c3 50 c9 61 e2 56 af ab 57 88 96 62 7d 47 a4 36 53 ac 05 ba 28 2f 3e Data Ascii: G6QDdm!qL!79pN%k},=i\|n!\X@*t 0<HI5hC6rr"5JH$N xq1xr%j9LJa=<bUWkXl7&IM!9qUV)hK<Wt45yeBvPaVWb}G6S(/>
2024-07-15 19:11:23 UTC	2737	IN	Data Raw: 07 6b 00 a2 d5 ab 69 16 5d 7d fd 33 8f bf df f1 c1 eb f0 2a 5e d6 17 cd 48 b4 0e a3 d8 00 39 73 dc 43 e4 36 43 c4 24 ae 63 b5 5c 9e 72 c3 04 78 55 91 62 4d 34 a6 ad fe 6b c4 5e 4a 70 46 6c 21 82 d4 32 8e b8 8d 77 92 90 11 1e bb bc c6 cd 37 75 e0 59 dc 1e 8f fa 3c 75 40 54 99 cc 9f 2c 93 b5 87 8f 11 5c 55 6e fa 8e 39 37 15 b5 be 9c 14 ba a4 64 79 29 69 97 75 69 6e c4 bb 89 05 42 10 b8 fa 4b 92 3b 77 69 cb 52 97 8d c0 48 8f 6c 3e d2 b1 28 72 c9 a9 b3 64 14 90 ae 2d 45 d2 e1 e5 df 29 5d 49 43 e2 b0 8e 51 98 35 fc 6a 7f 5c e0 b9 25 a1 68 cd e1 87 fd 0c d8 26 7e 55 03 64 6a 3a 03 60 4e c0 e6 23 7b 0f 66 be 4a 29 23 d6 5d a4 44 1c 64 95 b1 32 5b 5b d3 91 8d f1 69 76 a6 51 1e bf 31 14 2a d7 e0 da 41 78 9a b3 e3 5b 87 d1 45 50 16 f3 a0 70 f8 0b 22 18 d4 b6 42 6e Data Ascii: ki]}3^H9sC6C$c\rxUbM4k^JpFl!2w7uY<u@T,\Un97dy)iuinBK;wiRHl>(rd-E)]ICQ5j\%h&~Udj:`N#{fJ)#]Dd2[[ivQ1Ax[EPp"Bn
2024-07-15 19:11:23 UTC	16384	IN	Data Raw: ff c3 cf bc 27 be 4e 7f 04 10 bd 86 8a d9 2b 6b 8c 19 24 8b 6a d7 0b c9 52 72 a6 2d 4b d0 55 70 bf 19 52 4b 66 23 3a 62 ca d0 f9 42 fb 6e e1 9d cb 82 a3 75 42 27 e1 a1 be a8 65 37 c5 ab 37 00 d3 fd 82 98 9f fe 6c 04 f6 f3 e9 d3 13 f3 26 ee 71 75 7a 30 27 fd 7f c0 3c 7d de ae 6e 66 cc fd b1 ab 6d a8 65 c0 8c 83 36 9d 96 2f 93 41 49 95 89 b3 54 7a 5a 9e 51 6d b5 24 49 31 bb 91 f1 93 4d b1 04 75 f0 e5 48 47 6e af 4a 56 d2 81 30 7b b6 d6 89 1d 6f bd 91 ca 3e a6 f9 bd 94 46 23 58 bd f1 ce b1 7c 8e a9 79 5f e8 bf 5b 5c dc e1 9f 2b fc 73 82 7f 0e f1 cf 36 51 3f ea d0 a5 6a 71 e8 4d 55 9c 04 d8 3e 12 59 6e 9e 3e bd e9 9f 47 d9 3c 2d 3f 86 6c 3c 7f 9d e5 22 84 c8 52 dc d1 71 8c 37 4b 82 4e 37 81 e0 3a 10 57 ee c3 91 b3 03 18 b7 c6 ae 2c 1a bb df 13 8a 22 e1 29 0c Data Ascii: 'N+k$jRr-KUpRKf#:bBnuB'e77l&quz0'<}nfme6/AITzZQm$I1MuHGnJV0{o>F#X\|y_[\+s6Q?jqMU>Yn>G<-?l<"Rq7KN7:W,")
2024-07-15 19:11:23 UTC	15472	IN	Data Raw: 00 93 85 f2 07 ad 16 a8 b8 1f 4e 6e 76 e3 d2 c4 91 19 63 21 24 47 18 02 39 12 3b 02 5f 0d 12 1f 4c 29 60 10 5a fb e9 0c da 5e e2 70 98 16 41 ce dc c4 03 09 45 81 0c 69 54 64 61 03 e1 f7 d2 4d 1b 61 21 05 83 6e 2c 40 4b 50 64 61 58 43 75 8e 42 12 ed d2 07 aa ec 85 43 78 4e ea 31 3f 0b f3 28 8a 6c 0a 13 80 c4 80 35 2d bc 1c 5a 58 12 38 9e bf 17 7b d0 ec 76 c2 50 f3 13 29 63 97 87 40 ed 0c a8 90 d8 49 14 90 68 0a b8 9f 79 fb 99 40 37 cd a4 04 62 e7 2c 0a 73 3f 09 22 97 2c 81 c8 01 86 24 e0 46 22 de 8b 10 34 bb b3 9f 27 aa 67 a3 b3 cf 13 d9 b3 de 8d d1 8c 18 cc 4d 28 ac 3e 96 c5 e6 ae 03 5a 06 ea 25 02 76 8d c3 20 25 f7 c3 8e fc 34 74 7d 4f 44 4e 20 a0 fb 7b e0 45 99 0d 2b da 77 3d 70 a7 c4 76 ec bd 68 11 66 f7 3b 65 31 cf c8 72 16 99 b0 33 01 9e 47 4a 79 e0 Data Ascii: Nnvc!$G9;_L)`Z^pAEiTdaMa!n,@KPdaXCuBCxN1?(l5-ZX8{vP)c@Ihy@7b,s?",$F"4'gM(>Z%v %4t}ODN {E+w=pvhf;e1r3GJy
2024-07-15 19:11:23 UTC	16384	IN	Data Raw: 76 95 e4 1b c6 5f 6b 75 5a 49 b2 ae 4b 7e 25 f3 7b 45 7e 33 f5 e6 e3 86 c8 93 fa ef 8b 87 95 90 cf 0a 4c 7a b3 b9 b4 93 01 d2 36 f7 3b 29 3f ff a4 80 02 21 0f e9 5a b1 2f 4b ff f9 a7 9a 99 47 eb 5c 78 f5 fa 16 34 bf 33 1d dd 0a 7f 7f 7b 8d 5a fb b4 89 16 7f 53 b4 d2 32 43 29 d4 5f 18 32 dd 4a 99 2e 6b 96 cb f4 36 3a 75 53 f5 f6 aa f5 ae aa eb ed 94 bb a2 7e c1 2e 48 ce 2d 94 5e fa 73 5d f4 aa 6f 7e be 05 09 7e 39 32 71 9f b2 e8 8b b2 d2 6f e9 0a 93 14 fc f4 74 71 ca ca c6 bb d1 e3 1d 5a 50 91 53 ec 49 79 3b 6f 58 ad 3a 38 ac 3a 3d ec 8b 4b fc d1 fd 2a b7 f4 9b d0 55 61 2a f2 7d 71 be b9 60 d7 30 fb 4f d7 13 a8 07 8a 1e 6a bb f8 cc 7c fd b7 72 7a fc eb b8 06 9a 48 24 2a b8 e6 49 e5 ab ca b7 93 12 bf 2d 55 ed 4f 30 fc 81 6c 8c 4f 25 f5 a7 a5 a4 83 a1 c4 82 Data Ascii: v_kuZIK~%{E~3Lz6;)?!Z/KG\x43{ZS2C)_2J.k6:uS~.H-^s]o~~92qotqZPSIy;oX:8:=KUa}q`0Oj\|rzH$*I-UO0lO%
2024-07-15 19:11:23 UTC	8177	IN	Data Raw: 35 40 bd e9 d0 e1 50 24 7f ba 84 7f 97 06 3c 38 05 42 20 cb 83 34 4d fc 08 69 1f 40 02 8b c0 00 fe 9a 9a b9 42 6c 30 3a e5 91 90 78 b4 2c 4a b6 17 f8 06 38 a8 e6 1d a3 8a 2b 0e 04 3c 4c 66 48 86 e7 87 6c 46 27 f1 fc e6 24 c6 f2 a7 a0 8d c0 60 3c 6d 61 84 de 49 2c 90 0b e9 f9 d1 23 06 57 c4 aa 0f 44 9c 52 f0 18 b8 c6 47 a9 95 93 30 c4 23 49 4e 38 2f 89 bb 8c d1 27 c0 b8 a4 2b ff 2e 76 af b3 4b 91 59 fc 99 31 a3 f3 e4 61 d1 5f 1e c2 93 43 06 b3 17 68 ff 52 9a 7a 4d 3e 51 1f 78 ce d8 96 bd e4 47 46 93 38 75 c6 c5 80 d9 f2 85 c0 b9 bc 5b 18 9f f9 cf 03 37 e0 4b f2 49 ac 5e b2 bc 48 b2 dc 8c 7c 43 47 f7 16 f6 d4 e3 c0 f8 40 7f 70 9c 0d 8c 33 fa 13 2a 7c 72 97 01 40 5b 3c 3f a5 cf 5f 27 a7 ee d3 6b 0f e0 f0 33 59 e2 ac 8c 67 14 db 10 16 0a 5d 08 5c c7 6c 58 c6 Data Ascii: 5@P$<8B 4Mi@Bl0:x,J8+<LfHlF'$`<maI,#WDRG0#IN8/'+.vKY1a_ChRzM>QxGF8u[7KI^H\|CG@p3*\|r@[<?_'k3Yg]\lX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49771	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:23 UTC	569	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:24 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:24 GMT Content-Type: application/x-javascript Content-Length: 61145 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 25 May 2023 17:22:47 GMT etag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 61e90042-201e-0021-27c9-d3e72d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191124Z-17cf9458cfbqq94rukx5myh3bn000000031000000000w1td x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:24 UTC	6408	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 79 5b db c8 b2 38 fc ff fd 14 46 cf 5c 8e 74 10 8e 4d 96 93 b1 a3 e1 12 70 12 cf b0 1d 96 59 0e e1 f0 08 b9 c1 4a 6c c9 23 c9 10 0e f8 bb ff aa aa 77 2d 06 66 e6 be f7 7d 66 82 a5 56 f5 5e 5d 5d 5d 5d 8b 7b 1b 27 a3 f4 b6 5d b0 09 9b b2 22 bb bb b8 65 97 b3 30 fa fa 63 9e 26 b3 60 e9 d7 87 87 b3 73 af 3d 9b e7 63 f7 ec 6c e3 dc 3f f3 7d ff 6a 9e 44 45 9c 26 2e f3 0b 3f f1 ee 9d 79 ce 5a 79 91 c5 51 e1 f4 93 76 e6 16 9e 9f b4 47 6e e1 3b 3f 87 93 39 fb 09 2a 70 7c 57 65 f3 ee 33 56 cc b3 a4 95 b5 d9 c2 53 b0 83 1b 96 14 bb 61 c1 92 e8 ae 01 3c 2c 83 1f b2 2c 8f 73 cc c2 1a b2 5c 1a 59 4e b2 30 62 bb ec 86 4d 1a 80 47 06 f0 d6 6c 36 4c f2 f8 7a 5c e4 db 69 56 5f 7c 6c b5 e8 7d 98 b3 46 50 b3 e8 8b c1 37 68 f2 88 8d 86 49 Data Ascii: y[8F\tMpYJl#w-f}fV^]]]]{']"e0c&`s=cl?}jDE&.?yZyQvGn;?9*p\|We3VSa<,,s\YN0bMGl6Lz\iV_\|l}FP7hI
2024-07-15 19:11:24 UTC	16384	IN	Data Raw: 58 dd f7 a6 ec c7 27 bf ed c2 64 bd 7e 5b 9b 99 be 5a c3 7b 0c 9d b1 ab fd 5e 8f 74 e9 a3 cc 78 74 72 ba b5 3b f8 19 56 da 8f 80 da c1 c6 1b 3e e5 76 72 15 18 69 da c6 9b 6e 09 56 d1 36 cc 74 32 d8 da 3b de 1b 0c 60 75 7d a4 af 90 01 67 be f6 9b 60 6e f6 0e a1 a1 c7 74 70 23 82 aa 13 04 39 e5 d3 cd 89 a9 9e e3 a3 e1 f6 a7 bd c1 ce 70 4b af 37 62 42 2b e9 92 1b 35 16 9c 60 47 4b ab 6d 6b 47 2c 35 e2 46 c5 9b fc 24 08 11 f1 a2 e2 4d 7e 32 1a f0 86 be 96 6b 3e fe 69 08 04 83 58 4f fe 22 3f 9c c0 d9 0c f9 ae 0d 62 35 d5 3b ff 4c 27 f2 e0 25 ed 12 f4 0c 87 68 ae ef 75 2f e5 11 63 61 e2 32 e5 26 2e 5f c4 9d cb 9d b8 4b 39 09 ce 9c a8 e7 f8 4e 8c 7f 6e 7b ce b9 bf 1d dc 3b 57 6f 3b 9d f0 b2 7b b5 ce 5e 5e be ec 7c cf c2 76 c1 a2 f1 7a 98 25 2c 8b a3 30 6f 47 e9 Data Ascii: X'd~[Z{^txtr;V>vrinV6t2;`u}g`ntp#9pK7bB+5`GKmkG,5F$M~2k>iXO"?b5;L'%hu/ca2&._K9Nn{;Wo;{^^\|vz%,0oG
2024-07-15 19:11:24 UTC	16384	IN	Data Raw: c5 05 7e 1d b1 cb 74 8e de 6c f3 de 3d bf 62 ee bd e9 74 7c 7e 27 db 7b c9 5e 2e fc ea ac f6 24 fa f9 5a 85 1a 2f 07 4b ce dc 30 a9 ec f7 ad 77 e6 ec 1d 7f 38 dc 06 f6 86 5c b9 01 91 d1 42 bf de bd 54 e4 c0 a6 71 dd 0c fe c4 af 65 95 c6 17 3e 88 d6 42 1d a2 b1 a8 83 22 04 26 f0 f8 25 a7 98 32 08 c9 af 39 48 e5 4c 0a 00 78 4d 9c 97 c7 bb 20 6d 9b 23 f5 12 75 3a a9 7a 58 a9 91 79 1f 5e cd 50 31 f2 e1 9f 6c 5f 2e 94 06 0d 12 2a ab bd 7b 53 ab d5 52 e5 56 31 19 d1 65 92 76 48 e8 38 be ea 83 78 e6 37 79 ea c2 0f 1f b9 86 bc 02 e0 56 42 0b ff 51 39 28 4d e7 5d 12 ed cd e1 b0 0d cf 53 f8 dd 49 a7 61 9c f4 9c ab b7 9d 4e 78 d9 bd 5a 67 2f 2f 5f 76 be 67 21 ec b9 d1 78 3d cc 60 67 8c 61 73 05 ac 9e 3a 0b a0 5c 67 e7 25 67 ad f5 fa f5 ea e3 9c 7b 80 4c 0c c7 7e be Data Ascii: ~tl=bt\|~'{^.$Z/K0w8\BTqe>B"&%29HLxM m#u:zXy^P1l_.*{SRV1evH8x7yVBQ9(M]SIaNxZg//_vg!x=`gas:\g%g{L~
2024-07-15 19:11:24 UTC	16384	IN	Data Raw: ad 5a e6 3b 1f 4e df 9e ec 3b 9e 34 ac c2 18 96 7f b3 77 04 4f c0 ca 9e d1 df da 16 4b 25 34 e5 6a 2d aa dc 22 30 6d a8 4c d3 9e 42 79 63 f3 1f a5 f6 59 25 97 5d b3 f9 67 9e 30 b8 f2 0f b1 6c 44 8c 1e e0 97 68 d4 53 d0 b0 b4 9c 47 81 f3 21 1e 64 69 9e 8e 8a bd 09 c2 dc 0b 4c 40 8b a3 85 4b c3 c3 a1 c3 10 e6 7e f9 12 35 97 ae 8a d4 37 d2 a1 bf 24 59 79 7c 17 65 70 7d db c1 2a fd 15 64 34 b7 ec 93 2e d0 58 16 2d fa 6a cb b4 62 ed 54 b4 0e 86 42 4b 93 43 a7 35 e2 5c 86 b8 07 94 8c 17 b9 4d 96 01 49 d1 55 11 71 b9 4b ac 13 e7 38 6d 73 09 d9 e5 84 1b 12 24 39 f2 3a 04 cb 5c ed ab f0 b4 71 05 74 b1 02 1c 80 27 a1 da dc ac 96 12 05 f6 88 47 7f ab b5 b3 b5 1b 6d a9 6a d9 3c ae a1 dd f3 05 a9 90 8f d1 0d 36 cd ae 22 f7 08 de 35 20 3e 82 bb d7 04 8b b2 b8 e9 d6 d7 Data Ascii: Z;N;4wOK%4j-"0mLBycY%]g0lDhSG!diL@K~57$Yy\|ep}*d4.X-jbTBKC5\MIUqK8ms$9:\qt'Gmj<6"5 >
2024-07-15 19:11:24 UTC	5585	IN	Data Raw: 9e 8e be 77 ee fc 6d 7d b3 e3 dc b5 f7 ed 3b c8 f2 b6 cf fe fa b3 18 fd e2 f7 ff f1 18 b8 eb 46 eb 81 ff 1a 86 42 15 ee ee be e9 6d 46 b7 b7 cc 0f 31 30 78 14 30 53 8b f8 a3 73 22 31 8f ff 92 af fe e5 1f 8f 6d 6b f0 0a 9f 40 35 fb 7d c4 61 d1 65 12 52 b3 c4 c5 51 08 ac 06 4c df e8 d7 16 fc f3 bc b3 b7 c7 d0 07 6d 83 a2 4d 51 65 14 22 6e 7b 9f e2 2d 40 a3 7e ed f4 fc 12 be 10 c4 21 83 88 a3 eb 9f 48 7a ab 65 3f a9 5f c9 a4 12 e1 e2 62 14 14 20 87 76 60 56 4d 1b 7e 3f ec 42 5f 35 48 62 fd 63 14 5c 43 9b a0 bd 5a 9d 15 11 22 74 b3 58 84 e9 70 42 0a 9f 7e e9 e6 c2 73 74 2e 04 ed 83 82 e4 01 fd 2a 09 67 45 90 92 35 50 fa 6b 00 9f d6 4f bb 6d 91 59 f6 e7 46 31 42 e1 3b d4 a9 b7 42 38 a9 f2 6c 08 33 7e d6 1a 61 78 70 e0 1d 60 78 36 75 09 0a a2 a1 c6 eb f9 d3 f6 Data Ascii: wm};FBmF10x0Ss"1mk@5}aeRQLmMQe"n{-@~!Hze?_b v`VM~?B_5Hbc\CZ"tXpB~st.*gE5PkOmYF1B;B8l3~axp`x6u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49772	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:23 UTC	823	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:24 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:24 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: cf75b199-f01e-002a-6c78-d36bf9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191124Z-r159c8798fddjvpzfngdr2eszn0000000690000000003a4x x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-07-15 19:11:24 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-07-15 19:11:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49773	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:23 UTC	792	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:24 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:24 GMT Content-Type: application/x-javascript Content-Length: 116426 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 20 Jun 2024 02:13:44 GMT etag: 0x8DC90CE9C53BCDF x-ms-request-id: 864629f1-201e-0021-3f78-d3e72d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191124Z-r159c8798fd5n7zwqx4eq556rg00000005q000000000n6d9 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:24 UTC	13647	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d 5b 5b db 48 b6 e8 fb fe 15 b6 a6 c7 2d c5 85 b1 0d 18 22 23 3c 24 21 3d cc 24 81 0d a4 7b 7a 88 87 4f d8 65 ac c4 96 3c ba 70 69 ec fd db cf 5a ab aa a4 92 2c 83 49 f7 3e e7 e1 4c 7f 1d ac 4b a9 ee b5 ee 97 cd 57 d5 ff aa bc aa 6c ac ff 5f e5 fc e2 f0 ec a2 72 f2 be 72 f1 d7 e3 b3 77 95 53 b8 fb b5 f2 e9 e4 e2 f8 ed d1 fa f5 60 a3 f8 ef 62 ec 45 95 91 37 e1 15 f8 bd 76 23 3e ac 04 7e 25 08 2b 9e 3f 08 c2 59 10 ba 31 8f 2a 53 f8 1b 7a ee a4 32 0a 83 69 25 1e f3 ca 2c 0c be f2 41 1c 55 26 5e 14 c3 47 d7 7c 12 dc 55 4c a8 2e 1c 56 4e dd 30 7e a8 1c 9f 5a 0d a8 9f 43 6d de 8d e7 c3 d7 83 60 f6 00 d7 e3 b8 e2 07 b1 37 e0 15 d7 1f 52 6d 13 b8 f1 23 5e 49 fc 21 0f 2b 77 63 6f 30 ae 7c f4 06 61 10 05 a3 b8 12 f2 01 f7 6e a1 91 Data Ascii: }[[H-"#<$!=${zOe<piZ,I>LKWl_rrwS`bE7v#>~%+?Y1*Sz2i%,AU&^G\|UL.VN0~ZCm`7Rm#^I!+wco0\|an
2024-07-15 19:11:25 UTC	16384	IN	Data Raw: b1 1f 4a d3 06 00 d0 31 6c df ed 22 97 a5 e7 f1 ed c9 a7 f3 8b b3 cf 6f 2f 4e ce ec 1b 76 76 f4 b7 a3 b7 17 c7 27 9f ae 8e 7e 3e fa 74 61 df b2 f3 cf 6f de 7e 38 3c 3f 3f fe f4 93 fd f0 92 40 7c 85 44 b3 2a ba eb 6e 87 94 af 42 8d f1 4c 4e b7 4c 88 0c 3c d0 4d 94 4a 90 f3 d1 6f 0d 7a 89 72 9b 44 82 43 f1 00 f5 85 98 f6 35 46 69 9c 8f c6 d9 6b 23 96 2c 93 cf 5e 2e 04 30 66 65 12 ca 04 83 82 c6 a5 11 fe 4b 4d 9a b1 c8 77 cc 58 bb a8 ae 46 8b 12 3a 7b 1d 0a 0a f8 7c 8a 1c c5 1c a2 12 1a f7 13 ca 3b 95 51 39 12 a0 b1 16 5b 46 fa fb 0f 50 55 88 52 5f ca 9d 26 56 87 04 c3 1a ca c1 a8 88 f4 69 2e 8a 9e 28 fb 27 6c 4b 46 0c aa a0 7c de 27 9e 36 46 15 5a 25 e4 03 0e 47 27 34 9e 5d 80 54 ce f3 ff 4b d8 b8 ff 6b 81 62 f2 3b 44 97 53 ae 70 27 cb a2 4c 7c 6f 68 90 ef Data Ascii: J1l"o/Nvv'~>tao~8<??@\|D*nBLNL<MJozrDC5Fik#,^.0feKMwXF:{\|;Q9[FPUR_&Vi.('lKF\|'6FZ%G'4]TKkb;DSp'L\|oh
2024-07-15 19:11:25 UTC	16384	IN	Data Raw: 26 17 e9 b9 c1 66 6c 76 cc d9 f1 19 91 55 0a 6a 24 f1 b5 67 4f d6 d1 13 23 cb 7e 83 a3 24 ff 40 b1 a1 37 3a df 4a 35 a8 27 24 47 18 68 4c bc 6d 33 69 09 b1 a1 6a a1 ef 0e c3 14 05 c5 c2 fe 78 0a 20 7a 17 6c 74 6c b8 30 ee 26 67 c0 25 e7 70 d1 9e 59 26 58 72 ba c7 76 30 69 44 e9 55 e1 90 03 1c d8 ce 1e 09 29 e8 5d d4 83 9b c9 47 52 0e 73 17 c7 48 87 12 61 17 d1 13 5e 04 ca b6 90 e0 9c 6b 38 1b e0 8c 1e 1f 79 4f 8f 8f 6d 9e 8e a1 c3 a5 22 68 f1 97 e0 15 8c 3f b2 66 c7 04 3b 49 ad 84 f8 d1 b9 44 ac e4 84 97 8e 06 bc 99 62 c8 f6 c1 97 75 b0 70 be cc 53 3f 3a 6c 5b e1 c2 9a 11 09 a3 8c 2f 31 19 86 92 81 67 ee 41 bb f3 d9 28 ec 2b 93 9f 41 ec 02 36 6c 6f a3 14 35 95 0f 7b a6 18 35 7e a6 18 35 af 3d 6f 8b f2 45 94 79 f0 cc 53 89 59 9e f1 c8 3c 31 72 5a 39 4a 12 Data Ascii: &flvUj$gO#~$@7:J5'$GhLm3ijx zltl0&g%pY&Xrv0iDU)]GRsHa^k8yOm"h?f;IDbupS?:l[/1gA(+A6lo5{5~5=oEySY<1rZ9J
2024-07-15 19:11:25 UTC	16384	IN	Data Raw: 8b ef 4a f1 f5 de 96 b7 44 5a b0 64 f8 cc b9 bc 2f a2 1f 08 37 38 e8 d0 5e a0 00 b5 32 05 c7 f8 d4 91 d3 b1 36 8f 51 01 7d 6a c9 14 df c8 4b d6 d2 9d ac 0e 7e c9 23 6c ef 4b 05 a4 a0 6b f7 f1 3e 2c 69 65 76 f9 e5 79 20 45 f2 07 db 22 2b ee 3e 9e 99 69 80 42 29 94 c7 00 a7 3c 3a 99 c2 4d 0f 88 38 69 19 a3 85 eb 34 69 7d 17 16 e1 4f 71 74 0b 57 6a d2 52 c0 83 0b 55 dd 01 37 c1 c4 80 d9 55 30 33 9e ae 01 1e 37 62 1b b0 4b a0 b8 6e 98 93 45 79 fc 77 94 4d 48 98 b2 5b fe e2 3a bc 7b b9 00 70 a0 50 52 f7 0a 0d a6 5f 27 05 4c e0 82 1e 73 f1 68 2c a2 0b 97 c8 10 e5 69 75 02 58 86 11 22 0b 84 55 64 71 2d a9 8f 37 05 4c a1 71 09 57 d0 a5 b0 9b 2c ed 35 1c d9 6b 18 e7 28 cf c7 94 0d 23 ee 2f 31 26 6b 03 4c 2a fe 50 64 61 92 43 25 bf 5f 0c 30 a8 20 5a ec a2 6f d6 e3 Data Ascii: JDZd/78^26Q}jK~#lKk>,ievy E"+>iB)<:M8i4i}OqtWjRU7U037bKnEywMH[:{pPR_'Lsh,iuX"Udq-7LqW,5k(#/1&kL*PdaC%_0 Zo
2024-07-15 19:11:25 UTC	2737	IN	Data Raw: d2 d3 a7 ed ee ce 4e 4c ff 56 31 99 2f ea a9 f2 ee e8 43 80 d0 83 6e 87 8e c1 bb e0 ac 1a c5 2e 79 59 f3 85 b8 09 13 4a e4 4e 55 36 47 a8 2d 77 f1 8a b5 f0 9c 1c 95 80 b5 ba a9 82 3a d7 67 1f ed 52 cc 61 11 7f 76 65 95 9a ac 0b cb d4 7f 41 60 6d 17 15 48 02 60 5e 3e 4b 6d 77 5f d1 a3 85 25 8e a1 da 2c d0 9f aa d4 32 54 95 a1 5e 98 7f 3b 7d f3 da 50 a0 60 ac 9e 4d a7 4d b1 f7 e6 b1 9b 61 18 f2 dc 83 53 67 7e 51 e2 d9 f8 a1 70 07 e5 00 f5 6a 27 11 25 e0 42 c6 4d 11 31 88 61 c9 93 2d ac dc f4 65 fc 64 6a 7e b2 b0 2b d3 81 fc 8d 9b b5 04 0b e6 25 50 85 cc 62 b5 8c 32 a1 d0 2a c5 83 82 6a b6 13 7f 6a 13 e0 25 ea fe d1 b3 4c 38 c6 bf f2 8d 94 bb 7d 93 07 d4 f6 36 e5 d4 11 ec 8b 8e 0b 82 70 11 e2 0a d3 f9 42 44 b9 41 2c 5f be 31 ed ba b1 c3 e6 f7 45 fc 03 95 eb Data Ascii: NLV1/Cn.yYJNU6G-w:gRaveA`mH`^>Kmw_%,2T^;}P`MMaSg~Qpj'%BM1a-edj~+%Pb2*jj%L8}6pBDA,_1E
2024-07-15 19:11:25 UTC	16384	IN	Data Raw: 44 3f 6a 3f b4 33 37 71 d1 ba 96 4c 9a ab 80 90 09 20 94 49 6c 45 51 63 9a 1f 45 25 93 ea 16 20 43 75 58 1b 7a 79 c0 2a 3a 33 25 00 a4 8f a0 a2 48 34 13 4a d7 4d 06 58 68 6c e6 94 4c 00 12 d9 10 3e 0c 82 75 f0 c7 30 33 c2 fc c0 4f d2 69 12 91 82 9a 01 a7 95 b5 80 33 57 0b 3e b4 80 89 75 3c 33 ce 49 34 b4 f6 1e 59 f5 6a 78 8f 3b 9e a2 e7 a0 df 7c 97 6f 12 a3 5b c2 08 f4 db ab da 72 0a 33 82 01 5e d5 2f 3c 30 a5 5b 3a 1a a6 5e d6 02 c6 a0 55 e9 3c 2d 77 5e 1b 1a dc 20 8e 97 15 3a 31 83 d1 88 dd 64 d0 a0 7e 66 3a 3b 46 cc 95 f8 45 f8 e6 c1 7f 27 83 04 c1 12 59 3b 82 90 d0 69 c5 85 2e 4c d9 0f b3 56 b6 00 c4 78 0d 8f d3 6e e0 71 6a ac 01 f0 38 bb 75 1e c7 0a ab 65 c0 e3 bc a8 94 ad e1 21 98 7f a0 f4 4e 3e ea a9 34 fc 4b 00 5d 24 91 ea f5 a3 aa ef 2c 45 c5 45 Data Ascii: D?j?37qL IlEQcE% CuXzy*:3%H4JMXhlL>u03Oi3W>u<3I4Yjx;\|o[r3^/<0[:^U<-w^ :1d~f:;FE'Y;i.LVxnqj8ue!N>4K]$,EE
2024-07-15 19:11:25 UTC	15472	IN	Data Raw: 0b f3 cb 35 ce 8d 56 7a 73 03 09 fb 43 f7 33 8d 95 f2 48 fe 15 83 bd c4 86 95 11 d3 fd 46 c8 eb af c6 66 f5 84 4c 94 0e 31 1f c5 43 81 8d 5b b5 53 66 95 ee 1a d3 20 6c 65 66 46 6c 37 33 93 ed e8 06 1f 3f dd 64 58 2f 0b dc 24 83 c0 08 9c a3 5c 23 7d 44 55 b6 19 a0 b4 e4 8b d1 75 24 f4 3d 2c a5 84 be 74 a4 27 84 be 24 e2 4d 0a 7d d1 35 b2 6f 8e 74 8d 8c 75 34 14 fc 8e 55 5b d9 3b 7e 12 b0 a1 f9 ce 0a 47 70 c6 dd af 03 46 7d 98 22 6a 30 65 8e 2c 14 56 6c 0c bd e8 09 5c d1 07 ae 67 84 c6 47 40 31 b1 3e 9a 1d cd f4 a4 61 6c bf 69 c3 03 6e a3 37 c2 99 f5 cd 51 d2 1c d7 01 12 9c ca 4d f3 6e b1 f0 74 3f 69 8e 1b d0 63 69 8e eb 9b 7e 67 ce cd 71 7d c5 32 8c 89 b7 7d 33 61 2f 16 a9 ad 46 6c c2 6e 38 e6 a2 9c 67 7a a2 62 fb ae e9 1b fa 50 bf 29 4c 90 83 a3 04 30 93 Data Ascii: 5VzsC3HFfL1C[Sf lefFl73?dX/$\#}DUu$=,t'$M}5otu4U[;~GpF}"j0e,Vl\gG@1>alin7QMnt?ici~gq}2}3a/Fln8gzbP)L0
2024-07-15 19:11:25 UTC	16384	IN	Data Raw: f8 d7 84 7f b9 67 bf 96 98 f4 da c1 5f 3a e9 f2 5b e7 6e d8 f8 bb 3e 54 ae fd 5d 5f fa 8b 21 56 7e e9 93 f3 77 cd de f7 7f 69 8d 78 67 ea c7 fe a6 b5 c2 4f fd 5d e8 e5 40 7a 33 55 65 ce e3 2a 89 4d dc a2 85 da db 3e c9 48 5a 3a e6 e2 e2 9b 3c 2e 7d 67 87 23 af 8f 5c 4a 3a 18 00 df fa 52 30 ee 9b 1e 17 40 50 10 c2 59 86 df ce 0c fd 76 66 49 bf 1d bb 33 db c8 8c b7 2e c5 3f 14 ea c1 d5 81 e7 ab 1c 60 14 60 f4 6e 4b 0e c5 7b 7c 28 3d 6f 3a 47 51 a3 b3 9a 32 2b f2 7f 96 e3 c2 fe ac 48 19 2b 8a 94 b1 92 b0 01 db 62 4d 80 99 2f da 77 b6 3f c7 11 6d b0 20 f4 4e 36 fc 78 52 c2 b7 99 01 db e6 9d af 1f 48 37 8b ba 14 7a 36 64 ec 9f 03 99 99 00 57 ad 27 05 72 83 e4 18 29 8b 44 f6 10 29 ab 44 24 31 6d 8d 91 95 41 6a 2c 03 08 d3 63 6c c9 10 f6 42 47 f7 d2 41 2b 20 73 Data Ascii: g_:[n>T]_!V~wixgO]@z3Ue*M>HZ:<.}g#\J:R0@PYvfI3.?``nK{\|(=o:GQ2+H+bM/w?m N6xRH7z6dW'r)D)D$1mAj,clBGA+ s
2024-07-15 19:11:25 UTC	2650	IN	Data Raw: 53 71 f0 d5 24 8a d6 98 a0 80 50 61 2f d6 76 98 e8 f5 0c 07 35 88 4f 8c f1 e4 64 30 0c 10 1e 6a 17 95 c8 29 aa 26 0b a4 75 05 ae 30 7c 7b 94 f8 02 22 23 d6 5e dc bc 17 f5 d6 86 5c 71 ce 04 19 85 a6 06 5a cd 59 ed 00 9f 60 5f c2 78 ea 36 64 d9 3b 98 cf ce d2 6c b3 c0 9e 7c 59 9b b2 68 6d f9 05 ed a9 03 f1 cb da a2 62 35 76 c6 a0 6b 27 3c b1 2c 27 34 e8 b7 8a c3 2e 5c c6 af 23 7e ab bb 70 98 37 b1 50 0d ce de 69 82 f6 f1 e4 6b 41 b6 1c 16 fa 81 6f 84 31 8d 1e a0 bc 6f 61 87 86 6d 0c 3a 0e a4 34 38 63 d6 a8 e3 84 c2 ed 05 e6 87 c6 a4 02 8f 47 f6 3c f9 d2 76 0c 4d de 8b 07 59 f1 58 df 98 66 f7 28 9a 4a fc 6f ac 6f 4a 69 91 8f 1e 84 4b 89 40 a7 6f 96 d3 16 90 31 2e 27 06 be 55 2b a7 c1 41 f9 71 52 4e 9c 40 62 5e 4e 9c 41 62 5a 4e 9c fa 40 70 97 d2 e6 3e 10 d8 Data Ascii: Sq$Pa/v5Od0j)&u0\|{"#^\qZY`_x6d;l\|Yhmb5vk'<,'4.\#~p7PikAo1oam:48cG<vMYXf(JooJiK@o1.'U+AqRN@b^NAbZN@p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49774	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:25 UTC	581	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:26 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:26 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: cf75b199-f01e-002a-6c78-d36bf9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191126Z-r159c8798fdpl95gv1axdr0xag000000069000000000sgub x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-07-15 19:11:26 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-07-15 19:11:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49775	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:25 UTC	829	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0 Sec-WebSocket-Key: mNxLLY1ZXj9QGibzJTlCCQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:11:26 UTC	746	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:11:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 380c79f3-7844-46cc-98eb-625eff1ab300 x-ms-ests-server: 2.1.18463.4 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49779	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:27 UTC	610	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_6c7dc46bb93924417b57.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:29 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:28 GMT Content-Type: application/x-javascript Content-Length: 116426 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 20 Jun 2024 02:13:44 GMT etag: 0x8DC90CE9C53BCDF x-ms-request-id: a7581503-301e-0078-1e61-d41711000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191128Z-17cf9458cfbvrvz71gkd3fesfw000000032g00000001kncv x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:29 UTC	6407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec 7d 5b 5b db 48 b6 e8 fb fe 15 b6 a6 c7 2d c5 85 b1 0d 18 22 23 3c 24 21 3d cc 24 81 0d a4 7b 7a 88 87 4f d8 65 ac c4 96 3c ba 70 69 ec fd db cf 5a ab aa a4 92 2c 83 49 f7 3e e7 e1 4c 7f 1d ac 4b a9 ee b5 ee 97 cd 57 d5 ff aa bc aa 6c ac ff 5f e5 fc e2 f0 ec a2 72 f2 be 72 f1 d7 e3 b3 77 95 53 b8 fb b5 f2 e9 e4 e2 f8 ed d1 fa f5 60 a3 f8 ef 62 ec 45 95 91 37 e1 15 f8 bd 76 23 3e ac 04 7e 25 08 2b 9e 3f 08 c2 59 10 ba 31 8f 2a 53 f8 1b 7a ee a4 32 0a 83 69 25 1e f3 ca 2c 0c be f2 41 1c 55 26 5e 14 c3 47 d7 7c 12 dc 55 4c a8 2e 1c 56 4e dd 30 7e a8 1c 9f 5a 0d a8 9f 43 6d de 8d e7 c3 d7 83 60 f6 00 d7 e3 b8 e2 07 b1 37 e0 15 d7 1f 52 6d 13 b8 f1 23 5e 49 fc 21 0f 2b 77 63 6f 30 ae 7c f4 06 61 10 05 a3 b8 12 f2 01 f7 6e a1 91 Data Ascii: }[[H-"#<$!=${zOe<piZ,I>LKWl_rrwS`bE7v#>~%+?Y1*Sz2i%,AU&^G\|UL.VN0~ZCm`7Rm#^I!+wco0\|an
2024-07-15 19:11:29 UTC	16384	IN	Data Raw: 35 9a b1 72 16 33 f2 ad 66 bf 22 de 67 0f 7a 9f 64 e7 ec bc fd 0c f2 81 51 cf fc 19 68 0a d8 82 ce 3f 19 6c 47 27 8e d9 df cd bf 32 e3 5a cc ab 25 ef 1e 62 20 3e 46 d4 bd ec c9 07 12 e2 a8 27 13 79 07 4c ab 29 63 05 a4 34 14 43 4b 02 dc 1c c2 4d d1 ae fe bc 20 8d 70 a9 5a ca fe 27 cb 9b 2c d9 71 bc 42 ec 9e 31 f4 11 f0 b2 12 bd 01 56 db 44 ec b9 b9 07 50 28 ae 9b 61 cf 90 8e 1e 40 25 1a c0 b8 d2 c6 31 50 c8 86 73 5f 47 75 2e cd 7c 1d 15 b9 c1 a5 db 07 10 33 03 e8 32 ad d5 a6 da b1 bb 03 92 0a 00 4b 7e a7 88 b9 5d e1 4e 56 06 b1 3f eb b8 a1 71 0b 47 f8 72 d0 37 f9 ab a8 1e 36 b2 69 66 c2 29 19 7d e3 70 a3 45 7a f5 65 21 1f 18 57 42 c4 40 b4 10 88 aa 27 a2 ea 40 af 3a ec dd a0 84 d9 d7 db 20 f9 82 2e 49 6b c2 29 ed fe dc 03 02 06 f8 78 ae fb ef 2a 89 a5 66 Data Ascii: 5r3f"gzdQh?lG'2Z%b >F'yL)c4CKM pZ',qB1VDP(a@%1Ps_Gu.\|32K~]NV?qGr76if)}pEze!WB@'@: .Ik)x*f
2024-07-15 19:11:29 UTC	16384	IN	Data Raw: 11 6f 2c 16 eb 19 c8 a0 a8 07 63 6c ab 11 90 24 76 af 25 d1 e5 9e 94 c4 12 96 14 e8 72 57 a2 4b 1c 25 a2 cb 3d b4 5e 18 2a 49 2a a1 4b a4 3a 08 5d ee ee 09 74 b9 b7 d3 92 82 d8 d7 24 88 4d 48 aa 30 9d f2 a1 e7 c6 1c 30 5f 22 8e 63 f6 e8 1e 1e cd 44 22 48 c0 80 49 e3 9d 17 cd 50 6d 01 d8 2f 69 bc 97 a3 02 34 98 34 3e 42 11 f7 86 bf 1d bb be cf 27 80 14 93 86 8c ce fc cd 69 02 38 7d 5c 74 c7 79 c1 0f 94 a0 2c 47 70 8b 70 0d a7 e1 6d 31 8a de c4 bc 42 9d be 3c 29 57 30 a1 5d 39 b9 78 cd 38 26 cc 04 c8 fb 94 ee c2 7a 44 b6 1e 8a 9d e5 8a c1 43 99 88 8b 7d cd bd 80 01 07 51 2c 87 03 20 2e a6 08 d8 08 0f 07 c1 a4 6e 6c 6e 1a 75 bf 31 86 22 80 b4 00 a2 dd 01 38 be ce 53 00 4b f9 a0 d1 60 49 8c 60 24 6c 37 0f 4d ca 4f 3b cc 4a b2 2c ee e4 d5 65 bd fe 2d a7 c3 74 Data Ascii: o,cl$v%rWK%=^IK:]t$MH00_"cD"HIPm/i44>B'i8}\ty,Gppm1B<)W0]9x8&zDC}Q, .nlnu1"8SK`I`$l7MO;J,e-t
2024-07-15 19:11:29 UTC	16384	IN	Data Raw: df d2 12 0e 2f 4d ea ad 0e 35 da 4b 22 2a e6 0b 4b f3 c4 3d 27 26 c4 db a1 18 4d 94 24 da 7c a7 85 9d 3c 32 34 54 c8 ac 59 24 83 26 26 2d c5 4b be 72 18 b2 9e 81 39 e1 6a 46 f1 90 a3 69 5a b8 88 b3 9a f6 74 ea f4 cc 02 c4 77 4b 48 25 1b 0a 58 eb 7f 06 08 90 8c 7f 26 08 ce ab f4 d7 d3 27 93 07 6c ca e4 c9 74 e5 39 68 90 a0 bb e0 97 00 69 d0 57 d9 f5 26 84 22 7b f3 2f 42 28 0a a2 a7 21 14 d5 54 d2 d3 ae 1c 01 e4 68 be 16 b2 24 22 e9 33 94 5f 65 ae d6 ab 5f 77 aa 48 ce 3c 7b a6 1c fb 37 a4 2b 40 2d be 15 74 53 3d c6 3d 59 e5 36 fa 82 93 c5 bb d4 4e 23 56 b9 0d 0f df c0 85 72 64 c6 85 5f 7f f0 03 e3 de 23 a3 19 83 4e ab c1 36 36 6d fc d4 07 02 97 e2 37 9a 34 59 5a 5b 9c e4 65 6d e1 ee 75 b4 59 57 a2 c8 35 b2 df 82 0b 89 d3 67 14 b8 9d d3 e9 69 33 e8 a0 ad 97 Data Ascii: /M5K"*K='&M$\|<24TY$&&-Kr9jFiZtwKH%X&'lt9hiW&"{/B(!Th$"3_e_wH<{7+@-tS==Y6N#Vrd_#N66m74YZ[emuYW5gi3
2024-07-15 19:11:29 UTC	9977	IN	Data Raw: 04 93 62 dc 51 39 55 34 9c 98 2c 69 87 9f bc 02 39 fe 35 0a e7 80 00 27 b4 88 0d 0b 22 cb 4f ef 79 0b b8 93 d5 aa 98 f4 44 e8 6d 9b 27 29 3b a3 60 9c f7 67 c2 33 34 ae a5 13 db 70 c2 4e a5 15 47 ed 91 8b 18 f0 84 82 12 ad 96 4d f5 e6 b2 2d b6 b1 f4 78 ab e9 a6 1a c3 11 bf ad 86 a4 56 2f a5 31 e5 2e 8f c1 e8 44 55 c5 24 9c 52 79 9b 65 76 69 75 5e dc 47 45 4d f8 fe 12 00 42 c6 b0 35 4d c2 6c 0b b5 86 80 a7 3f 45 40 d0 06 5b 5f 5b a8 1d f9 7a 8b fb 42 ea fb 42 64 a8 97 28 b1 2f 62 b3 a6 bc bf e5 a3 61 8a 63 b7 d6 0c 28 a2 9d aa 2e 13 7f 25 e3 b7 66 cc 7c 02 08 1b 1d b1 01 af 01 c9 8a 0a c0 b1 2f b1 f4 5d 15 9f 8c fe 7c 9f 4c 5c 63 51 52 0d 9d c6 da 30 3a 95 e5 75 ea c3 70 bc cc 7b e0 52 ea 65 e4 81 21 12 c1 b5 0c e2 2d b9 00 9a ba 2f c0 eb ad 11 86 0d 28 0d Data Ascii: bQ9U4,i95'"OyDm');`g34pNGM-xV/1.DU$Ryeviu^GEMB5Ml?E@[_[zBBd(/bac(.%f\|/]\|L\cQR0:up{Re!-/(
2024-07-15 19:11:29 UTC	15928	IN	Data Raw: 44 3f 6a 3f b4 33 37 71 d1 ba 96 4c 9a ab 80 90 09 20 94 49 6c 45 51 63 9a 1f 45 25 93 ea 16 20 43 75 58 1b 7a 79 c0 2a 3a 33 25 00 a4 8f a0 a2 48 34 13 4a d7 4d 06 58 68 6c e6 94 4c 00 12 d9 10 3e 0c 82 75 f0 c7 30 33 c2 fc c0 4f d2 69 12 91 82 9a 01 a7 95 b5 80 33 57 0b 3e b4 80 89 75 3c 33 ce 49 34 b4 f6 1e 59 f5 6a 78 8f 3b 9e a2 e7 a0 df 7c 97 6f 12 a3 5b c2 08 f4 db ab da 72 0a 33 82 01 5e d5 2f 3c 30 a5 5b 3a 1a a6 5e d6 02 c6 a0 55 e9 3c 2d 77 5e 1b 1a dc 20 8e 97 15 3a 31 83 d1 88 dd 64 d0 a0 7e 66 3a 3b 46 cc 95 f8 45 f8 e6 c1 7f 27 83 04 c1 12 59 3b 82 90 d0 69 c5 85 2e 4c d9 0f b3 56 b6 00 c4 78 0d 8f d3 6e e0 71 6a ac 01 f0 38 bb 75 1e c7 0a ab 65 c0 e3 bc a8 94 ad e1 21 98 7f a0 f4 4e 3e ea a9 34 fc 4b 00 5d 24 91 ea f5 a3 aa ef 2c 45 c5 45 Data Ascii: D?j?37qL IlEQcE% CuXzy*:3%H4JMXhlL>u03Oi3W>u<3I4Yjx;\|o[r3^/<0[:^U<-w^ :1d~f:;FE'Y;i.LVxnqj8ue!N>4K]$,EE
2024-07-15 19:11:29 UTC	456	IN	Data Raw: 0c 76 91 b3 e5 64 30 7d bb d1 99 22 9b d6 c5 9c c9 fb 1f 88 8b 02 e0 1c 44 ab 5b 60 d6 92 e0 8c c5 44 50 70 34 a1 b6 2f 93 a4 19 75 d5 a2 1c 77 e4 ee ee 2c 97 2b ef cd 88 a3 2d b3 42 c9 38 2a ad 31 4b 16 30 03 d4 51 6a 48 e3 53 41 d7 19 9c de da e3 8f ec bd da 33 39 77 68 b9 58 6a 3a f1 ed f3 3b 93 4f c7 63 bb 02 7b ca 33 de 37 39 f7 b7 8d b6 56 90 ac 35 74 21 e0 b8 5e d8 44 d0 2c 5b 7c 96 d1 2d 74 2d 88 03 44 c0 f5 d4 e8 eb a9 6b f8 9e c6 e0 3f 9c 55 bc c9 02 2e 4b 97 b8 30 89 bf e1 b5 66 b8 0d 61 d9 00 80 59 a3 b3 1e 74 16 c6 16 85 a2 bb 18 40 27 95 bb 6d d0 18 d1 77 13 6b ba 09 49 0e d5 69 7e 26 a9 93 e2 ef 25 c6 a5 14 81 ac a6 02 29 21 90 16 52 cf 62 e6 a4 08 40 5e ee 84 18 97 4d 1a fc ce 8a de 40 b8 c5 1a 8a c1 a4 44 da de 40 a5 17 a2 84 8a 66 89 ad Data Ascii: vd0}"D[`DPp4/uw,+-B8*1K0QjHSA39whXj:;Oc{379V5t!^D,[\|-t-Dk?U.K0faYt@'mwkIi~&%)!Rb@^M@D@f
2024-07-15 19:11:29 UTC	16384	IN	Data Raw: 0b f3 cb 35 ce 8d 56 7a 73 03 09 fb 43 f7 33 8d 95 f2 48 fe 15 83 bd c4 86 95 11 d3 fd 46 c8 eb af c6 66 f5 84 4c 94 0e 31 1f c5 43 81 8d 5b b5 53 66 95 ee 1a d3 20 6c 65 66 46 6c 37 33 93 ed e8 06 1f 3f dd 64 58 2f 0b dc 24 83 c0 08 9c a3 5c 23 7d 44 55 b6 19 a0 b4 e4 8b d1 75 24 f4 3d 2c a5 84 be 74 a4 27 84 be 24 e2 4d 0a 7d d1 35 b2 6f 8e 74 8d 8c 75 34 14 fc 8e 55 5b d9 3b 7e 12 b0 a1 f9 ce 0a 47 70 c6 dd af 03 46 7d 98 22 6a 30 65 8e 2c 14 56 6c 0c bd e8 09 5c d1 07 ae 67 84 c6 47 40 31 b1 3e 9a 1d cd f4 a4 61 6c bf 69 c3 03 6e a3 37 c2 99 f5 cd 51 d2 1c d7 01 12 9c ca 4d f3 6e b1 f0 74 3f 69 8e 1b d0 63 69 8e eb 9b 7e 67 ce cd 71 7d c5 32 8c 89 b7 7d 33 61 2f 16 a9 ad 46 6c c2 6e 38 e6 a2 9c 67 7a a2 62 fb ae e9 1b fa 50 bf 29 4c 90 83 a3 04 30 93 Data Ascii: 5VzsC3HFfL1C[Sf lefFl73?dX/$\#}DUu$=,t'$M}5otu4U[;~GpF}"j0e,Vl\gG@1>alin7QMnt?ici~gq}2}3a/Fln8gzbP)L0
2024-07-15 19:11:29 UTC	16384	IN	Data Raw: 08 c3 d9 40 fe 8d 9f c5 8d 94 48 40 09 a2 81 12 81 88 4d 86 c3 77 9c cb 8d 95 23 74 6a 62 96 71 72 7e ee 9b 4e 62 36 d1 98 f2 91 d9 84 83 37 8b 37 47 96 9c 68 80 d3 b1 35 91 af 00 6b 1e c3 c1 14 83 04 f3 29 6d 96 59 a9 b9 bf 64 30 be 7d 64 c9 85 11 ef d0 bc c3 cc 8a ef 4f 3e 9e ff 76 76 7d 72 79 79 f2 e7 f5 cb 4f af 5f 9f 5d 5e ff 76 7e f6 fb 15 fa be 65 7f 79 ac 7c 89 67 09 29 a3 17 30 5e 68 15 0d bf 53 a2 ef a0 e1 70 25 fe 62 6b 8e 76 ee 69 80 ee 2b 22 0f 8c aa b3 3e 5e 2d 47 e9 15 31 87 5a c2 d6 48 88 43 a4 d1 07 e5 5d 14 f0 85 36 b1 3e ae 22 19 8a 3a 79 fb d8 55 b4 11 03 5d fb dd f7 dc e1 0e af ad 71 a3 a5 56 ef c8 01 38 24 48 cb f7 ba a6 df e9 01 10 a2 84 16 a8 82 f5 cc 21 13 68 a1 1e 25 a5 90 36 e8 75 f2 e6 df 04 45 90 78 69 45 0e 28 37 16 ee a2 59 Data Ascii: @H@Mw#tjbqr~Nb677Gh5k)mYd0}dO>vv}ryyO_]^v~ey\|g)0^hSp%bkvi+">^-G1ZHC]6>":yU]qV8$H!h%6uExiE(7Y
2024-07-15 19:11:29 UTC	1738	IN	Data Raw: 56 3e e1 22 71 2f 2a 7b 18 88 3a 9d 25 0e ff 21 63 97 5c 35 c2 0b 74 7a 65 93 42 f2 b0 4f e2 a8 e2 ee 7a b4 89 a0 dc 75 20 0b b4 89 20 d3 4f 15 82 f7 00 60 24 8b e1 38 b4 14 4a 93 61 4d 77 1c cf 3e 2c 2d fb 61 69 d9 0f ab 97 fd 70 65 d9 d7 8f fb 15 8b da de 39 d4 a4 54 ea 7f da 68 b8 ef 0c 4d e7 9f f0 74 f8 5e e9 e8 09 b9 2a ca 7b bc 9f 5c 25 86 f1 7e 76 95 b0 c5 fb e0 4a 99 b5 f7 79 79 9f 77 92 ff 4a db 97 3f 44 9b 6c 55 ff 59 2a a2 f7 ee 34 71 88 7e bb 89 c3 6f 30 6e a0 be 54 d8 37 c8 de 14 cc 1c 28 f3 ef b7 74 28 8e 74 f9 a7 d6 dd 9f 5a 77 45 ad bb b2 61 d0 1f 60 fa 92 fd 27 cc 14 fe 34 ac f9 2f 32 ac e9 6c ed ec b1 65 0d 39 e6 98 49 97 1b 53 69 4f 33 5f 63 2c b3 d6 0c f8 c1 26 b2 c0 b8 66 45 93 18 e1 01 c1 b7 f6 5a db ad ad 8e 74 cb 4b 9e 13 32 96 1a Data Ascii: V>"q/{:%!c\5tzeBOzu O`$8JaMw>,-aipe9ThMt^{\%~vJyywJ?DlUY*4q~o0nT7(t(tZwEa`'4/2le9ISiO3_c,&fEZtK2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49778	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:27 UTC	794	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:28 UTC	805	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:28 GMT Content-Type: application/x-javascript Content-Length: 5543 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 20 Jun 2024 02:13:44 GMT etag: 0x8DC90CE9C8E6126 x-ms-request-id: 3af0a7bb-d01e-0047-1773-d3a80d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191128Z-r159c8798fdrttkl0e8kwv16kg00000006k000000000q0gc x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:28 UTC	5543	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5b 7d 77 9b 46 d6 ff 7f 3f 05 62 f7 28 b0 19 63 bb 69 9a 2e 2e f5 71 f4 92 a8 b5 63 af 25 b7 9b 4d 72 74 90 18 49 c4 08 28 83 6c ab 96 be fb f3 bb 33 20 90 84 64 a7 cf e6 24 c1 cc dc b9 73 e7 ce 7d bf f8 f0 9f b5 bf 69 ff d4 0e 9e ff 47 eb f6 ce ae 7b da 65 5b eb bd ef 5c 37 b5 2b bc 7d d4 3e 5c f6 3a 8d d6 f3 f1 d0 a6 f4 af 37 f1 85 36 f2 03 ae e1 39 70 05 f7 b4 28 d4 a2 44 f3 c3 61 94 c4 51 e2 a6 5c 68 53 fc 9f f8 6e a0 8d 92 68 aa a5 13 ae c5 49 f4 95 0f 53 a1 05 be 48 b1 68 c0 83 e8 5e 33 80 2e f1 b4 2b 37 49 e7 5a e7 ca b4 80 9f 03 9b 3f f6 43 ac 1e 46 f1 1c 3f 4f 52 2d 8c 52 7f c8 35 37 f4 24 b6 00 2f a1 e0 da 2c f4 78 a2 dd 4f fc e1 44 bb f0 87 49 24 a2 51 aa 25 7c c8 fd 3b 6c 22 66 18 5f df 82 69 6e c2 35 c1 53 6d Data Ascii: [}wF?b(ci..qc%MrtI(l3 d$s}iG{e[\7+}>\:769p(DaQ\hSnhISHh^3.+7IZ?CF?OR-R57$/,xODI$Q%\|;l"f_in5Sm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49776	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:27 UTC	836	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:28 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:28 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: 4b4908bb-701e-0045-1f6a-d5b185000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191127Z-17cf9458cfbwshb80qqwa0653800000002c0000000026ghp x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-07-15 19:11:28 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-07-15 19:11:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49777	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:27 UTC	842	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:28 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:28 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 804bf067-801e-006d-3288-d300a2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191128Z-r159c8798fdfg24b14amabecms00000006mg00000000kyb2 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-07-15 19:11:28 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-07-15 19:11:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49780	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:29 UTC	836	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:30 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: bcfc4d16-701e-000b-647c-d34f82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191130Z-r159c8798fdfg24b14amabecms00000006rg00000000at03 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:30 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-07-15 19:11:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49781	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:29 UTC	837	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:30 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:30 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: af501a0d-a01e-0037-69a2-d66645000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191130Z-r159c8798fdf975dgqrnqky7xn00000000u0000000006kms x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:30 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-07-15 19:11:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49782	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:29 UTC	860	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:30 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1423 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C524_BL2 x-ms-request-id: a0d6a1d2-2114-4e68-94a8-abea0e8d9b0c ppserver: PPV: 30 H: BL02EPF0001D831 V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:30 UTC	1423	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 db 6e db 38 10 7d ef 57 d8 44 11 88 1b 56 91 9c 8b 1d 39 4c 50 b4 5d d4 45 d3 16 55 17 fb e0 6a 01 9a a2 6d 6e 65 4a 20 69 b7 85 a3 7f df d1 cd 96 d5 6e e0 3e f4 21 b1 3c 9c 39 3c 67 38 33 94 6f 0c d7 32 b3 3d fb 3d 13 14 59 f1 cd 9e fd cb 36 ac b2 a2 db 27 bd fe 7c ad b8 95 a9 72 2c 11 78 3b 4f b5 b3 61 ba 67 7a 52 f5 04 b6 53 13 51 01 ff 72 c7 2e a5 21 7b 67 70 ad 9f 7b c2 51 78 2b e7 8e 99 aa 08 6b 61 d7 5a f5 8a 67 57 7c cb 52 6d cd b8 00 94 b4 30 d1 6d 6d 0b b6 39 91 71 a0 48 92 b2 58 c4 41 df cf c7 75 a8 2d 42 39 4b 12 47 36 08 44 92 fd b3 c0 f0 a5 0a a3 7d 6f bf 90 97 bc e9 76 07 24 dc 15 05 51 2e a7 10 e4 66 14 21 22 1c 0f e7 ce b4 a3 b9 11 62 4a 59 75 06 04 9d 4f c3 88 18 ea 11 45 85 9b 08 b5 b0 cb b1 b9 51 e3 Data Ascii: Wn8}WDV9LP]EUjmneJ in>!<9<g83o2==Y6'\|r,x;OagzRSQr.!{gp{Qx+kaZgW\|Rm0mm9qHXAu-B9KG6D}ov$Q.f!"bJYuOEQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49783	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:30 UTC	594	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:31 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:31 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: 4b4908bb-701e-0045-1f6a-d5b185000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191131Z-17cf9458cfbl5xdkyy9754b9yn000000023000000001r43y x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-07-15 19:11:31 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-07-15 19:11:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49784	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:30 UTC	612	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_758d4d3367a37038a3b2.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:31 UTC	811	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:31 GMT Content-Type: application/x-javascript Content-Length: 5543 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 20 Jun 2024 02:13:44 GMT etag: 0x8DC90CE9C8E6126 x-ms-request-id: a6704e0e-c01e-0039-6a23-d6384a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191131Z-17cf9458cfb7mr7nvuaes05xkg00000000pg00000002d099 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:31 UTC	5543	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5b 7d 77 9b 46 d6 ff 7f 3f 05 62 f7 28 b0 19 63 bb 69 9a 2e 2e f5 71 f4 92 a8 b5 63 af 25 b7 9b 4d 72 74 90 18 49 c4 08 28 83 6c ab 96 be fb f3 bb 33 20 90 84 64 a7 cf e6 24 c1 cc dc b9 73 e7 ce 7d bf f8 f0 9f b5 bf 69 ff d4 0e 9e ff 47 eb f6 ce ae 7b da 65 5b eb bd ef 5c 37 b5 2b bc 7d d4 3e 5c f6 3a 8d d6 f3 f1 d0 a6 f4 af 37 f1 85 36 f2 03 ae e1 39 70 05 f7 b4 28 d4 a2 44 f3 c3 61 94 c4 51 e2 a6 5c 68 53 fc 9f f8 6e a0 8d 92 68 aa a5 13 ae c5 49 f4 95 0f 53 a1 05 be 48 b1 68 c0 83 e8 5e 33 80 2e f1 b4 2b 37 49 e7 5a e7 ca b4 80 9f 03 9b 3f f6 43 ac 1e 46 f1 1c 3f 4f 52 2d 8c 52 7f c8 35 37 f4 24 b6 00 2f a1 e0 da 2c f4 78 a2 dd 4f fc e1 44 bb f0 87 49 24 a2 51 aa 25 7c c8 fd 3b 6c 22 66 18 5f df 82 69 6e c2 35 c1 53 6d Data Ascii: [}wF?b(ci..qc%MrtI(l3 d$s}iG{e[\7+}>\:769p(DaQ\hSnhISHh^3.+7IZ?CF?OR-R57$/,xODI$Q%\|;l"f_in5Sm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49785	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:30 UTC	600	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:31 UTC	755	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:31 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 9f2cc0d3-f01e-0019-1a65-d426af000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191131Z-r159c8798fdpc7z6ydyv3u8uv000000004y0000000002n98 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes
2024-07-15 19:11:31 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-07-15 19:11:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49786	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:31 UTC	594	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:32 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: d8308557-001e-0011-3f94-d32e5d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191132Z-r159c8798fdgx8xp6eszyv0tyc00000006f000000000rhy1 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:32 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-07-15 19:11:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49787	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:31 UTC	595	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:32 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:32 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: c91d887f-d01e-0070-6690-d30d1e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191132Z-r159c8798fdt9bgxtbzkr3wxeg000000037000000000amar x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:32 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-07-15 19:11:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49788	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:32 UTC	837	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:33 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:33 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: 6fbf2f3d-f01e-0032-456a-d3c321000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191132Z-r159c8798fdrw58k5fbzgrsnmw00000006k0000000001rw2 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:33 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-07-15 19:11:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49789	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:32 UTC	798	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:33 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:33 GMT Content-Type: application/x-javascript Content-Length: 35204 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 20 Jun 2024 02:13:45 GMT etag: 0x8DC90CE9CFCD37E x-ms-request-id: 87f24205-401e-001a-7a78-d35ba9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191132Z-r159c8798fd7tccq995ekkpvkg00000006n0000000009zvf x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:33 UTC	13648	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-07-15 19:11:33 UTC	16384	IN	Data Raw: 20 1e d7 73 2f 8b 8a 65 06 68 50 67 9c 31 38 bb 80 d6 9b 07 c5 21 50 ff a0 68 34 bc 6c f0 9e b0 d8 1a 67 e9 0c 7b 3b 49 47 51 bd f0 fc ed 5f cf 9a 9b fd 60 f3 f3 c5 77 db f1 56 11 e5 45 3d f3 8e f2 ad c5 32 9f c2 af 7d f5 ab f6 e7 5a a3 5e 6b d6 1a c5 56 91 72 53 f5 56 cf 83 04 19 77 27 41 1e d5 3d 6f 2b 4f e2 30 aa 6f b6 3d 8f b0 61 1c a2 ad 24 9a 4f 8a 29 21 92 9f 45 5b a1 ea ff b8 00 0c 2e 06 d1 59 71 71 a0 47 f1 80 48 a5 83 a6 1f 0f 4c bd f4 30 3e 48 a1 2e 0c 37 18 38 d5 53 cf 07 52 75 76 81 64 c1 c6 46 da 68 1f c6 1b 1b 7a 48 e3 8b 2f ed 07 33 aa 48 21 97 36 5a 7e da e8 78 9e 97 34 06 06 48 20 f8 67 d0 3e 88 12 98 6e ec 0a 89 87 85 96 67 c1 85 85 3e 1b ec ec 80 d5 bc b1 11 1c 0e 76 76 3b dd 8e f7 a5 02 ee 75 5a 7d 44 a7 85 e8 d4 c3 12 ce 8d 96 e7 3d Data Ascii: s/ehPg18!Ph4lg{;IGQ_`wVE=2}Z^kVrSVw'A=o+O0o=a$O)!E[.YqqGHL0>H.78SRuvdFhzH/3H!6Z~x4H g>ng>vv;uZ}D=
2024-07-15 19:11:33 UTC	5172	IN	Data Raw: b6 36 05 56 6a 51 7b dc e7 dc 7c a5 7e 65 97 72 76 be d2 54 a5 72 be 26 78 a5 a3 eb 5f c1 70 b8 c0 9e 5f c6 63 78 06 83 e0 d1 34 ca 4d ed c9 6c 30 fb 5f d4 93 d1 6d 2d 5e ca 15 14 14 3b 26 b5 28 3a 8e 59 bd e3 5e fb 9d 7c de 55 13 5d ee c2 48 01 48 17 17 eb 9c 34 cf d5 d8 44 74 22 2d bb 98 09 4c bf ab f7 7c e4 90 87 11 b8 e4 da 3c 3c 73 a6 a1 4a 7c 0b 2a df 09 ba c8 d7 b7 ce a5 a6 bf aa a1 b8 06 09 f6 a6 87 5d a1 da 84 61 d6 7b 28 c0 f9 fd a1 50 af 41 af f4 f0 17 3c ad 06 f3 b4 1a 6d 1c 05 00 1f d5 f1 df e7 72 f3 c2 4c 2d 39 78 a3 08 25 09 0a 87 16 d6 f3 e6 f6 ca d1 ce 73 db 6b d4 74 7f 6d a2 15 69 ab 6b 3e e5 01 4e b9 de b6 0a 4f 50 15 8b ba c9 01 40 f3 52 6e 03 df 85 d5 21 28 e7 ca dc 74 9e cc 41 6e 56 f0 b4 30 52 20 9e 37 34 1d 85 84 b5 fb dc 0c 3a be Data Ascii: 6VjQ{\|~ervTr&x_p_cx4Ml0_m-^;&(:Y^\|U]HH4Dt"-L\|<<sJ\|*]a{(PA<mrL-9x%sktmik>NOP@Rn!(tAnV0R 74:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49791	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:32 UTC	892	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084 Sec-WebSocket-Key: 5065r+pFgYKfesvHYOLICg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:11:33 UTC	747	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:11:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: cda6aa4b-4dd0-4fa7-9977-c3695bbe1000 x-ms-ests-server: 2.1.18517.10 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49792	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:33 UTC	691	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 20b67e16-e3b309ea.tech-arnericas.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time Origin: https://micr.tech-arnericas.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:35 UTC	623	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:35 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, 3600 access-control-allow-credentials: true access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody access-control-max-age: 3600 access-control-allow-origin: https://micr.tech-arnericas.com
2024-07-15 19:11:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49793	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:33 UTC	595	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:34 UTC	800	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:49 GMT etag: 0x8DB5C3F49ED96E0 x-ms-request-id: 5a111a12-201e-0064-5bf4-d40bb4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191134Z-r159c8798fdt9bgxtbzkr3wxeg000000038g000000006u37 x-fd-int-roxy-purgeid: 0 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:34 UTC	628	IN	Data Raw: 32 36 64 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b Data Ascii: 26d}UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;
2024-07-15 19:11:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49795	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:34 UTC	616	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_92013fd9f2f609d397ae.js HTTP/1.1 Host: 0a0de824-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:35 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:35 GMT Content-Type: application/x-javascript Content-Length: 35204 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 20 Jun 2024 02:13:45 GMT etag: 0x8DC90CE9CFCD37E x-ms-request-id: 87f24205-401e-001a-7a78-d35ba9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20240715T191135Z-r159c8798fdpw266xgkvtw7rdn000000056g00000000bxkn x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-07-15 19:11:35 UTC	6408	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-07-15 19:11:35 UTC	16384	IN	Data Raw: 43 03 30 ce 45 64 92 bf 4b e3 92 ee 94 5c 3a 90 5d 2a 63 c8 49 8d 58 72 62 f2 ef 65 72 22 2f 5e 96 c9 89 23 b8 c4 97 76 f4 aa a1 9d e7 ef 22 62 12 a9 73 29 22 26 31 fd 77 61 34 e1 42 b8 14 46 13 a6 ff 5e 99 0f 64 c1 cb ca 7c 50 d9 ca 7c d0 68 cb 50 ba 12 92 1c 5b 85 66 84 83 7c 2d dd 01 c4 45 89 03 09 08 e2 46 4f 74 09 86 2f 0e e9 55 d9 a6 96 66 c3 91 99 a5 21 95 11 90 21 43 74 84 dc 2e 1d 23 bc 16 e9 40 e5 9b cb 7f 2d 05 d0 7e 3a ae 92 58 93 70 87 5a 58 00 c2 91 75 24 11 2e 49 a0 ee 40 dd 06 dc 6d 96 a9 e8 b0 56 d4 d5 80 b1 92 07 7d 72 46 88 18 2d b2 60 5e 8b 74 44 94 b3 84 6b aa f2 b6 85 91 82 68 21 ce 2a 20 42 92 85 86 68 4c 16 26 a4 4c 97 31 c6 43 9f 8c 07 04 15 da c6 0e 78 3c 45 10 eb 6a b4 f4 93 63 09 e1 a6 b5 26 a1 7a d2 b1 97 41 30 52 e9 dc 00 8c Data Ascii: C0EdK\:]cIXrber"/^#v"bs)"&1wa4BF^d\|P\|hP[f\|-EFOt/Uf!!Ct.#@-~:XpZXu$.I@mV}rF-`^tDkh! BhL&L1Cx<Ejc&zA0R
2024-07-15 19:11:35 UTC	12412	IN	Data Raw: 6d 7b 3b 28 6f 7e 0d 67 71 08 f2 95 1b 05 df f8 0e b1 b4 3b 89 b8 a3 a7 ec 2a eb 92 f6 be 95 57 91 f9 a6 4f 99 60 b6 cd 83 31 ed 42 d6 04 1b 7b 07 e3 8a 09 36 2e 99 60 9e ba 8b 62 b2 cb 1e 71 11 d5 34 16 8b 6f 8c 51 4d 4b bb fc c6 f4 a2 38 05 b0 d7 17 55 d6 0f 71 5d f5 d0 98 5a 78 aa 51 1b a9 14 fa 0b cf 37 30 e5 e9 0e d1 25 0e dc fd 25 19 70 bd a3 d6 7e db da 79 ce 90 8c e9 98 a3 e9 c8 df 3f 1b ad f8 fe 19 be ba 0e f3 38 d6 fe 28 f7 95 e7 5c 99 8e fa 80 6e 3d c1 37 d0 dc fd 70 fc 88 01 a9 17 d8 18 17 58 f0 f5 05 96 78 5f 73 d2 2e 3c 7a 1e c4 5d 61 c1 d7 56 d8 bc 5c 69 b3 45 7b bb 5c 4d 55 f4 aa ab 29 f1 be ea d2 5a 94 b4 f8 a9 5d 5c 7f 28 b2 53 78 bc f4 e2 a2 25 b5 fc c6 25 45 9b 81 f2 6f 28 23 f3 db d6 4d 48 42 d8 ae 1b d0 10 c3 ca ba 09 1f 77 5d 84 96 Data Ascii: m{;(o~gq;*WO`1B{6.`bq4oQMK8Uq]ZxQ70%%p~y?8(\n=7pXx_s.<z]aV\iE{\MU)Z]\(Sx%%Eo(#MHBw]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49796	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:35 UTC	1121	OUT	POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 20b67e16-e3b309ea.tech-arnericas.com Connection: keep-alive Content-Length: 1710 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" upload-time: 1721070692116 sec-ch-ua-mobile: ?0 client-version: 1DS-Web-JS-3.2.6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 time-delta-to-apply-millis: use-collector-delta content-type: application/x-json-stream cache-control: no-cache, no-store apikey: b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951 Client-Id: NO_AUTH sec-ch-ua-platform: "Windows" Accept: / Origin: https://micr.tech-arnericas.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E
2024-07-15 19:11:35 UTC	1710	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 31 35 54 31 39 3a 31 31 3a 33 30 2e 30 38 30 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 62 30 63 32 35 32 38 30 38 65 36 31 34 65 39 34 39 30 38 36 65 30 31 39 61 65 31 63 62 33 30 30 22 2c 22 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 76 65 72 22 3a 22 32 2e 31 2e 31 38 34 36 33 2e 34 22 2c 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 73 65 73 49 64 22 3a 22 66 6a 72 74 57 6f 43 6c 33 52 65 43 63 44 2b 51 31 50 53 41 76 4a 22 Data Ascii: {"name":"IDUX_ESTSClientTelemetryEvent_WebWatson","time":"2024-07-15T19:11:30.080Z","ver":"4.0","iKey":"o:b0c252808e614e949086e019ae1cb300","ext":{"app":{"ver":"2.1.18463.4","name":"IDUX_ESTSClientTelemetryEvent_WebWatson","sesId":"fjrtWoCl3ReCcD+Q1PSAvJ"
2024-07-15 19:11:37 UTC	879	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding p3p: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" time-delta-millis: 4525 access-control-allow-headers: P3P,Set-Cookie,time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: https://micr.tech-arnericas.com access-control-expose-headers: time-delta-millis set-cookie: MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; Domain=tech-arnericas.com; expires=Sun, 28 Jan 2080 14:23:12 GMT; Path=/; Secure set-cookie: MS0=57a39f4df8894fa59e252686a1d96c95; Domain=tech-arnericas.com; expires=Sat, 28 Jan 2079 14:53:12 GMT; Path=/; Secure
2024-07-15 19:11:37 UTC	159	IN	Data Raw: 39 39 0d 0a 7b 22 61 63 63 22 3a 31 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 35 34 36 33 35 61 34 63 35 38 39 38 34 33 39 35 61 31 38 35 31 38 63 37 30 36 37 35 37 63 34 30 26 48 41 53 48 3d 35 34 36 33 26 4c 56 3d 32 30 32 34 30 37 26 56 3d 34 26 4c 55 3d 31 37 32 31 30 37 30 36 39 36 36 34 31 22 2c 22 6d 63 31 22 3a 22 35 34 36 33 35 61 34 63 35 38 39 38 34 33 39 35 61 31 38 35 31 38 63 37 30 36 37 35 37 63 34 30 22 7d 7d 0d 0a Data Ascii: 99{"acc":1,"webResult":{"msfpc":"GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641","mc1":"54635a4c58984395a18518c706757c40"}}
2024-07-15 19:11:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49797	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:37 UTC	712	OUT	GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 20b67e16-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:39 UTC	267	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Mon, 15 Jul 2024 19:11:38 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close allow: OPTIONS,POST access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:39 UTC	78	IN	Data Raw: 34 38 0d 0a 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d 0d 0a Data Ascii: 48{"Message":"The requested resource does not support http method 'GET'."}
2024-07-15 19:11:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49798	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:40 UTC	1102	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641 Sec-WebSocket-Key: dF3lFOQBX1zrjEoePTJ6PA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:11:41 UTC	743	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:11:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 9388f06d-9149-4c21-8b6e-5913cdef2a00 x-ms-ests-server: 2.1.18463.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	59916	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:44 UTC	2022	OUT	GET /oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&scope=openid+profile+https%3a%2f%2f0ffice.tech-arnericas.com%2fv2%2fOfficeHome.All&redirect_uri=https%3a%2f%2f0ffice.tech-arnericas.com%2flandingv2&response_type=code+id_token&state=nbHbKe0jqvpcsakZZoege4mEOHus22PApE_0Bje33OD4HDuXbcPxpZbXwmOCx6_YWDo25JkhTZd0tx_0WQiI8l2-PrrT7tTtZMh7e7DeCKa7DDvYXrynOxOVCZI10VtcjOvxqzV2mKX0rWjuFTOZXTf5mQON_qvdxx3oxy8U4iipZyLoH7FXSoj6u7lpYb4FQSOpbVmdlr1bjRxurBdQAN7X0ykCLbjcZ2CP8v-HK4yq5VS-i8EgC6VVxoI_OfSpn-a2Iznjinj9NUywK5dC3g&response_mode=form_post&nonce=638566674701864962.ZmQ2ZjFjYmMtYTM4Yy00MTU5LWFiMjItODdkZTAwZmFjNTEzZjZiNTAyZjktMjA4NS00NWM2LWEyZTItY2MyZTNjOTkzMzJl&x-client-SKU=ID_NET8_0&x-client-Ver=7.3.1.0&uaid=0853e4491dc04151a3843791d98eff72&msproxy=1&issuer=mso&tenant=common&ui_locales=en-US&signup=1&lw=1&fl=easi2&epct=PAQABDgEAAAApTwJmzXqdR4BN2miheQMYdkdLelxKwyI0GTpluNaHY18gRmw2YsMzLWyXLtrovTXJbSMstGAVcUmTa2AqnEpFjRSLRyzuF-2zoeZTqY-VxEz-_2DRO8BA1I1--3Af0PJ6ch8x_oSS3GpQHKzlol00EuJ-SEM1mzsnWpMwBQKl [TRUNCATED] Host: l1ve.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:45 UTC	980	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jul 2024 19:11:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-store, no-cache pragma: no-cache location: https://signup.tech-arnericas.com/signup?sru=https://l1ve.tech-arnericas.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C521_BAY x-ms-request-id: 15df163e-3fef-484b-93b8-aa493bf22fd8 ppserver: PPV: 30 H: PH1PEPF00011DDB V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	59914	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:44 UTC	1320	OUT	POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.6&apikey=b0c252808e614e949086e019ae1cb300-e0c02060-e3b3-4965-bd7c-415e1a7a9fde-6951&upload-time=1721070702302&ext.intweb.msfpc=GUID%3D54635a4c58984395a18518c706757c40%26HASH%3D5463%26LV%3D202407%26V%3D4%26LU%3D1721070696641&time-delta-to-apply-millis=4525&w=0&NoResponseBody=true HTTP/1.1 Host: 20b67e16-e3b309ea.tech-arnericas.com Connection: keep-alive Content-Length: 951 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://micr.tech-arnericas.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://micr.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:44 UTC	951	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 31 35 54 31 39 3a 31 31 3a 34 32 2e 33 30 31 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 62 30 63 32 35 32 38 30 38 65 36 31 34 65 39 34 39 30 38 36 65 30 31 39 61 65 31 63 62 33 30 30 22 2c 22 65 78 74 22 3a 7b 22 61 70 70 22 3a 7b 22 76 65 72 22 3a 22 32 2e 31 2e 31 38 34 36 33 2e 34 22 2c 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 45 53 54 53 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 5f 57 65 62 57 61 74 73 6f 6e 22 2c 22 73 65 73 49 64 22 3a 22 66 6a 72 74 57 6f 43 6c 33 52 65 43 63 44 2b 51 31 50 53 41 76 4a 22 Data Ascii: {"name":"IDUX_ESTSClientTelemetryEvent_WebWatson","time":"2024-07-15T19:11:42.301Z","ver":"4.0","iKey":"o:b0c252808e614e949086e019ae1cb300","ext":{"app":{"ver":"2.1.18463.4","name":"IDUX_ESTSClientTelemetryEvent_WebWatson","sesId":"fjrtWoCl3ReCcD+Q1PSAvJ"
2024-07-15 19:11:45 UTC	400	IN	HTTP/1.1 204 No Content Server: nginx Date: Mon, 15 Jul 2024 19:11:45 GMT Content-Type: text/html; charset=utf-8 Connection: close time-delta-millis: 2565 access-control-allow-headers: time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: https://micr.tech-arnericas.com access-control-expose-headers: time-delta-millis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	59917	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:46 UTC	1369	OUT	GET /signup?sru=https://l1ve.tech-arnericas.com/oauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca HTTP/1.1 Host: signup.tech-arnericas.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:47 UTC	1490	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jul 2024 19:11:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-cache, no-store pragma: no-cache location: https://l1ve.tech-arnericas.com/login.srf?wa=wsignin1.0&rpsnv=155&checkda=1&ct=1721070706&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.tech-arnericas.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.tech-arnericas.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d4765445b-32c6-49b0-83e6-1d93765276ca%2526mkt%253dEN-US%2526opid%253dE99ED959906A30F1%2526opidt%253d1721070704%2526uaid%253d0853e4491dc04151a3843791d98eff72%2526contextid%253dDD0369FD4B0F07C8%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D4765445b-32c6-49b0-83e6-1d93765276ca%26uaid%3D0853e4491dc04151a3843791d98eff72%26suc%3D4765445b-32c6-49b0-83e6-1d93765276ca%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=0853e4491dc04151a3843791d98eff72 p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: SCUXXXX00E9 (2.0.3419.2) x-ms-amserver-tm: 0ms x-ms-request-id: b509d2e6-3217-405f-bba1-febbc18fb59a referrer-policy: strict-origin-when-cross-origin amserver: SCUXXXXIG0000E9 x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: B509D2E63217405FBBA1FEBBC18FB59A Ref B: WAW30EDGE0421 Ref C: 2024-07-15T19:11:46Z access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:47 UTC	924	IN	Data Raw: 33 39 35 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 31 76 65 2e 74 65 63 68 2d 61 72 6e 65 72 69 63 61 73 2e 63 6f 6d 2f 6c 6f 67 69 6e 2e 73 72 66 3f 77 61 3d 77 73 69 67 6e 69 6e 31 2e 30 26 61 6d 70 3b 72 70 73 6e 76 3d 31 35 35 26 61 6d 70 3b 63 68 65 63 6b 64 61 3d 31 26 61 6d 70 3b 63 74 3d 31 37 32 31 30 37 30 37 30 36 26 61 6d 70 3b 72 76 65 72 3d 37 2e 35 2e 32 31 35 36 2e 30 26 61 6d 70 3b 77 70 3d 4d 42 49 5f 53 53 4c 26 61 6d 70 3b 77 72 65 70 6c 79 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 69 67 6e 75 Data Ascii: 395<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://l1ve.tech-arnericas.com/login.srf?wa=wsignin1.0&rpsnv=155&checkda=1&ct=1721070706&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignu
2024-07-15 19:11:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	59915	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:47 UTC	1656	OUT	GET /login.srf?wa=wsignin1.0&rpsnv=155&checkda=1&ct=1721070706&rver=7.5.2156.0&wp=MBI_SSL&wreply=https%3A%2F%2Fsignup.tech-arnericas.com%2Fsignup%3Fsru%3Dhttps%253a%252f%252fl1ve.tech-arnericas.com%252foauth20_authorize.srf%253flc%253d1033%2526client_id%253d4765445b-32c6-49b0-83e6-1d93765276ca%2526mkt%253dEN-US%2526opid%253dE99ED959906A30F1%2526opidt%253d1721070704%2526uaid%253d0853e4491dc04151a3843791d98eff72%2526contextid%253dDD0369FD4B0F07C8%2526opignore%253d1%26mkt%3DEN-US%26uiflavor%3Dweb%26lw%3D1%26fl%3Deasi2%26client_id%3D4765445b-32c6-49b0-83e6-1d93765276ca%26uaid%3D0853e4491dc04151a3843791d98eff72%26suc%3D4765445b-32c6-49b0-83e6-1d93765276ca%26lic%3D1&lc=1033&id=68692&mkt=en-US&uaid=0853e4491dc04151a3843791d98eff72 HTTP/1.1 Host: l1ve.tech-arnericas.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:48 UTC	994	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jul 2024 19:11:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-store, no-cache pragma: no-cache location: https://signup.tech-arnericas.com/signup?sru=https%3a%2f%2fl1ve.tech-arnericas.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca&lic=1 p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C554_BAY x-ms-request-id: 597e4f0b-0e2a-4d8e-a98b-ea9cbcb9c31b ppserver: PPV: 30 H: PH1PEPF00011FC5 V: 0 access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	59918	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:49 UTC	1383	OUT	GET /signup?sru=https%3a%2f%2fl1ve.tech-arnericas.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca&lic=1 HTTP/1.1 Host: signup.tech-arnericas.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:51 UTC	795	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 38255 Connection: close cache-control: no-cache, no-store pragma: no-cache vary: Accept-Encoding p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ua-compatible: IE=edge, chrome=1 x-ms-amserver: eusXXXX010P (2.0.3419.2) x-ms-amserver-tm: 140ms x-ms-request-id: bf0ad8c9-c6ec-4175-8d73-e228ad577933 referrer-policy: strict-origin-when-cross-origin amserver: eusXXXXgn00010P x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: BF0AD8C9C6EC41758D73E228AD577933 Ref B: WAW01EDGE0812 Ref C: 2024-07-15T19:11:49Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:51 UTC	13665	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc 7d 7b 73 db 46 b2 ef ff 5b 75 be 03 a2 3a 95 6b 57 28 85 04 f8 b4 57 9b 22 a9 a7 45 4a 8c 28 db b1 73 53 a7 86 e4 88 1c 11 c4 28 03 80 0e b5 f1 77 bf 3d 00 49 fc 06 80 de b2 b9 f7 dc 73 37 96 34 0f 74 f7 cc f4 74 f7 f4 e3 bf fe f1 5f ff f8 e7 0f 7b 67 ed 8b 4f bd 7d 6b 12 cc dc 7f fd 97 fe 93 fe c9 72 99 37 de dd e2 de 96 f5 d7 cc 7d 93 fc 36 12 6a 77 cb 0d d4 16 f5 b5 ac 7f 4e 38 1b 45 3f d1 cf fe 50 89 eb c0 0a 16 d7 7c 77 2b e0 7f 05 3f 5f b1 39 8b ff ba 65 79 d2 1b d2 df 1b c3 0f d5 e3 c5 cf 1f 67 b3 62 f9 a7 0b db bf f8 dc fa b2 77 31 7b 57 69 5d 77 3a 83 c9 4f d5 62 b5 7f 18 54 0e af 2e e8 83 cb 99 2d 6b 24 87 e1 8c 7b c1 0e 1b 8d f6 e7 f4 43 47 f8 01 f7 b8 7a b5 e5 4a 36 da 2a 58 97 a1 37 0c 84 f4 ac 57 5c b7 bf b6 Data Ascii: }{sF[u:kW(W"EJ(sS(w=Is74tt_{gO}kr7}6jwN8E?P\|w+?_9eygbw1{Wi]w:ObT.-k${CGzJ6*X7W\
2024-07-15 19:11:51 UTC	16384	IN	Data Raw: 68 f5 3d 94 4a dc 98 50 18 35 50 0f e9 03 b4 cb 8c 25 2a d6 80 ad 1c cf 48 82 33 27 28 62 12 91 63 da 60 a9 1d 54 b4 b1 c8 27 b3 fa d7 fc 26 dd 03 4b ed c5 39 1c 9a 7f 1a 25 7c a2 5e 86 54 1e 08 93 50 86 e1 ab c3 87 43 9e 66 0c 35 a3 19 71 ac 35 f0 49 a8 23 e6 a4 ae 67 f8 0a 56 2a 1d 09 63 74 05 04 87 8e b6 12 a4 cf 07 14 0d 62 43 12 81 8d 33 a8 5f 8c b0 03 f1 3c 63 09 6b 46 25 a7 2e 9d 70 66 91 fa 96 da 8d d4 ab 84 fa 81 36 db 18 cd 98 2d b4 4b b4 35 78 2f b1 2c 84 81 44 00 cf 1c ed c0 c5 d4 0d 7d 93 f8 35 c3 e0 aa b3 da b9 06 81 aa 75 38 08 ba fc bc 4a 53 08 df f9 43 99 61 30 60 fa d4 6f 2e 41 0a f8 aa 03 c2 57 8f 8d 52 f4 ab a2 34 d1 23 f9 49 cd cc e1 45 a3 5d cd 8c d1 95 3a 26 d4 d3 95 a7 8c d6 2a 9a 45 49 3e 1b a7 db e1 7d ac a7 4b 78 49 8b 5b ef d5 Data Ascii: h=JP5P%H3'(bc`T'&K9%\|^TPCf5q5I#gVctbC3_<ckF%.pf6-K5x/,D}5u8JSCa0`o.AWR4#IE]:&*EI>}KxI[
2024-07-15 19:11:51 UTC	8206	IN	Data Raw: 04 e9 7b d9 41 e5 82 a6 b9 04 10 5e 3c 6b 1b f5 c3 74 0b a5 d1 e5 0c 55 d8 c0 a2 29 2a 4a e8 86 20 63 fb f2 12 96 b3 19 3a 1e 3f ca 8b 6f 60 b1 b0 92 2e 1f c4 c2 8b 96 17 c7 24 85 75 3e c3 3a 3b 4c dc 2b d0 b9 2b e2 21 91 73 05 a6 fd 8a 92 e8 b0 7e 32 ab 6a e4 74 98 01 e6 cb d6 d4 15 e8 f1 55 18 b8 69 84 2c df ab 01 2a 5e d6 06 19 be 2d 73 14 40 1d 40 ce ab 34 58 92 48 ca 36 7d 60 62 73 88 06 3c a5 7d d0 8f cc f4 82 65 1d 54 16 8a 0b a8 0f 98 aa 1f 21 13 b5 ff 11 15 fd 01 8b ba b0 88 96 89 83 3e 20 2c 23 1f e5 e7 23 47 f8 1b 43 58 23 22 14 99 96 60 ce fa 1c 56 46 f6 8d 6b f0 8d 6b e6 7b 60 75 f1 e9 1a 96 72 e8 88 1d 85 df bf 1e c3 f2 2d ea db 35 18 24 3c 2c 97 17 02 79 7a 1d 46 2e 7a 73 00 14 e6 80 bc 90 f5 4a f0 ad 07 a0 e9 01 3d c2 2c e4 65 40 0c 70 20 Data Ascii: {A^<ktU)J c:?o`.$u>:;L++!s~2jtUi,^-s@@4XH6}`bs<}eT!> ,##GCX#"`VFkk{`ur-5$<,yzF.zsJ=,e@p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	59919	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:50 UTC	1102	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641 Sec-WebSocket-Key: ebpwTjqCMaR1FxzGlqijmQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:11:51 UTC	746	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:11:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 93085862-e4da-4c47-9f92-17ecd3e52600 x-ms-ests-server: 2.1.18463.4 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	59920	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:51 UTC	639	OUT	GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1 Host: 58c68845-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.tech-arnericas.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:54 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:54 GMT Content-Type: application/x-javascript Content-Length: 220503 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1073296 cache-control: public, max-age=31536000 etag: 0x8DC9AED944B2442 last-modified: Tue, 02 Jul 2024 23:20:36 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 61981e96-701e-0084-1d27-cda17b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-07-15 19:11:54 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 77 d3 48 d6 28 fc fd fd 15 89 0f 2b 23 4d 2a c6 4e b8 ca a8 7d 20 90 86 69 20 34 81 a6 e9 4c 4e 96 62 97 6d 81 2d 19 49 4e 08 89 ff fb d9 97 ba ca 72 a0 67 9e 79 9e 39 ef 1a d6 22 2e 95 4a 75 d9 b5 ab 6a ef 5d fb 72 fb af 9b 1b 07 79 b1 31 4d 07 32 2b e5 46 9a 8d f2 62 96 54 69 9e 6d cc a7 32 81 ac 52 c2 ff 74 9c 2d e6 3b a3 e4 ac 48 07 a7 32 6b 7f 2a db 2f 5f ec 3f 7b 7d f4 ac 5d 7d ad 36 fe 7a fb ff db 1c 2d b2 01 7e 17 84 57 e7 49 b1 21 45 25 32 51 88 5c a4 f1 d5 c3 fb bb 9d 7b 91 29 41 ef c2 ab d6 02 ab af a0 ca aa d5 c3 6f 8a 38 0b 1e ee 3d b8 13 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 b5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 75 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d Data Ascii: kwH(+#MN} i 4LNbm-INrgy9".Juj]ry1M2+FbTim2Rt-;H2k/_?{}]}6z-~WI!E%2Q\{)Ao8=<Lp?*zw9e\{C9JM9-u2cY="=
2024-07-15 19:11:54 UTC	16384	IN	Data Raw: 46 7d 6f fc 11 f4 99 2c 75 03 73 17 7f 08 e8 02 c3 3e 24 1b 1e b5 13 99 35 f5 86 5f be a1 97 6f 6a 2f f7 f9 e5 3e bd dc d7 2f 3f 57 86 91 7d 02 2c cb a9 f7 68 a1 79 a0 36 47 b7 7b fa 7a d5 c7 32 38 90 81 2f 41 a0 77 84 b3 42 4a 38 42 d1 c6 5d 47 96 0e 9c 77 af d1 d3 e7 54 2f 1e f1 16 43 a3 3b 77 97 84 ac 56 7e 1b d8 7b cc 03 0e 9e 8e 54 a9 33 bf e1 15 e4 d3 dc 62 60 75 2b cb 43 67 72 16 09 32 4d d0 15 88 07 40 60 16 de d0 48 c5 b1 36 34 dc 09 91 70 b5 33 71 80 33 81 fe bc 9c 09 38 c0 09 70 f2 f6 39 6f 9f f2 1c 70 fb d0 ae 90 4a 46 82 f8 93 d7 c3 a0 88 3f 61 ef c2 ef 77 8e 05 3b 1d 5b 81 71 c9 03 a4 f6 27 b2 44 b3 9f f4 c2 a7 b4 dc b4 9d 95 7d b3 b5 f5 c9 22 1d dd cf a2 46 8d f8 66 e9 a6 e7 36 f9 1b 90 50 7c d3 80 16 7f fc fb 11 98 cc c4 bd 17 13 bf ba 39 Data Ascii: F}o,us>$5_oj/>/?W},hy6G{z28/AwBJ8B]GwT/C;wV~{T3b`u+Cgr2M@`H64p3q38p9opJF?aw;[q'D}"Ff6P\|9
2024-07-15 19:11:54 UTC	16384	IN	Data Raw: 83 5b 29 64 38 c5 a2 94 d3 82 b2 1f 09 29 2c 25 21 e5 fe 3a 4d ea b7 17 05 42 52 5a 35 57 98 6e ef 9a 6d cc c9 e1 f4 e3 b8 a7 98 e5 1e c5 0c b7 72 33 d5 13 60 b0 61 5c 74 9a a9 7a 74 4d a1 a3 87 e6 45 51 7f 0c a3 56 02 a7 1a 2b 7b bb 6f f6 7a 5b ed 97 f1 26 bc ff a4 3d 4e 75 88 e1 1d 9a f7 34 5c 79 dc a1 dc ca cb 14 a9 fb 1f b4 66 e4 72 d8 b9 a6 dc ea 0d fe db b5 a7 7c 7a e6 a4 3e 8d 5c fe a5 c3 50 90 6c c3 26 e4 19 95 8a aa e0 7a 8a d7 f1 09 48 a1 94 8f d6 cd c1 61 d5 bd f4 91 1c 17 0b 93 d3 9a c6 28 07 14 96 5b 25 90 46 ca c7 fe 54 26 3e a2 c0 a2 45 41 8b f8 9c 52 85 ca 3b b0 71 d3 2a 9b 93 99 af 24 1f a1 e9 36 c7 c3 ca 5c 49 41 6f 96 9d f7 28 2d 37 f4 f7 e2 c3 eb 57 71 ef 01 bf f3 f0 c1 3f bf 95 57 3d c1 9c fe 59 79 9e 92 d3 63 90 da 1e 90 b0 cd 3e 7c Data Ascii: [)d8),%!:MBRZ5Wnmr3`a\tztMEQV+{oz[&=Nu4\yfr\|z>\Pl&zHa([%FT&>EAR;q*$6\IAo(-7Wq?W=Yyc>\|
2024-07-15 19:11:54 UTC	16384	IN	Data Raw: 85 cc 98 6d c6 83 ea bf 2f d0 f8 33 25 e2 61 75 91 a4 4a 23 03 01 ec 5b d4 b0 51 b3 ee 34 63 1a c0 01 ea 68 37 92 3e af fc e2 4d 00 a7 de e3 36 f6 6b 4f d3 e3 c5 27 4e ac ea 1b 83 eb 54 26 4b bb a9 4b 6e 62 f7 f8 f2 6c 8e 7c 79 76 2e c3 a3 5a c8 d0 ed c0 6f ae 82 f9 b9 b3 57 c9 55 b9 68 6e 31 0e bb a1 3d 9a d7 eb 36 47 bd 88 0d ec 17 de a7 b3 c5 b4 23 26 c4 7d 4b b6 72 07 db 0d 91 e6 95 13 94 2f b9 a9 af 21 f3 1b b3 46 2b 5d 17 59 40 a6 b9 db 1b ff c8 ae 12 a2 7d 65 78 ff 2b 5e 23 5b 61 88 06 ca 3d db 66 18 5e 5b 9e e6 56 c8 c7 ff 22 23 0c 85 82 6e 5a 33 96 c2 cf fe fe be 19 8c 76 68 b3 ef b4 2c a9 e8 20 e7 ab e9 04 d6 75 f7 54 75 99 6a c5 ea 05 75 7f b9 f4 b7 2b 3d 6c 3e aa 18 5f f4 68 5f bb 0c d2 0c 11 5d a3 37 6e a2 97 1a 84 6e 4b 76 c6 82 87 db 49 7d Data Ascii: m/3%auJ#[Q4ch7>M6kO'NT&KKnbl\|yv.ZoWUhn1=6G#&}Kr/!F+]Y@}ex+^#[a=f^[V"#nZ3vh, uTuju+=l>_h_]7nnKvI}
2024-07-15 19:11:54 UTC	16384	IN	Data Raw: f2 8f d0 78 fd f3 7f 2e 60 bc 80 83 a0 a0 77 26 12 14 bc 09 fe 3e b5 b6 52 fb a8 55 29 a5 e5 05 b5 fd ff 59 6a 84 76 59 f7 58 87 4c 4c 70 96 b0 d7 99 b2 5d 0e 2a 90 9c e8 2b 91 9c e8 29 24 27 e2 ad c3 b1 32 8e 63 14 cc d3 db fe db 7f f4 b6 73 37 25 2d 97 e2 a2 cf 39 32 ff 70 75 4d fa aa ee 44 9c 3f b9 ff 51 d8 fc 63 15 36 c3 e0 5f 5c 63 33 d4 c7 fd 29 95 4d 3f f8 37 d6 d9 14 83 2b 2b 6d 8a 8c 3f 42 6b 73 18 18 f1 4c 82 7f 51 bd cd 61 30 87 20 26 6e 64 50 45 37 89 6f 86 69 5b 3d b9 d5 88 86 e0 1a 92 32 ca 74 da 5c 83 84 e6 1a 1e 3f a0 75 80 48 c2 00 b2 33 96 06 5e 5c 9f a4 01 f9 37 60 13 f1 76 70 79 89 ae a9 c6 e2 f5 9d ff 80 a6 ec 3c f1 52 24 be 09 7a 93 ab 1f 29 14 87 36 77 30 50 97 00 01 f2 69 e4 8f d3 eb 18 50 56 4f 20 08 ca 6d 24 60 d2 ea 82 5f ee f3 Data Ascii: x.`w&>RU)YjvYXLLp]*+)$'2cs7%-92puMD?Qc6_\c3)M?7++m?BksLQa0 &ndPE7oi[=2t\?uH3^\7`vpy<R$z)6w0PiPVO m$`_
2024-07-15 19:11:54 UTC	16384	IN	Data Raw: ec 49 12 56 e7 8f 0a 00 dc 00 4a 47 dc 8a ad fa 5d 67 e6 3d 79 e2 97 ed 73 0a 27 ff 88 6e d9 1e 05 45 0b 00 62 17 fd 12 4d 0b e6 67 1f 97 56 c5 f8 9f 0e 06 d0 96 3c fa 18 0b 2e 1c af ef 5f 94 81 2f 79 8a 0d 62 6c 78 db 43 c2 39 b6 c3 10 c3 8a a0 93 bc dc 6a 81 3d 06 96 22 bf e6 8c 8d c6 81 93 cf b4 60 31 8a ad 46 a5 2a e9 98 5d 19 ff dd 87 84 ff 6e 8c ff 3d 98 d6 e1 68 6a 16 ea 95 a5 57 bd 68 a9 ba d2 ae 14 aa ad 4e a5 02 7f 0b cf f6 0e 0d 33 f4 bb 8f 84 0e bc e8 fb 5d 0e dd 03 3b 00 7e 0d 28 34 ae 6d ac 49 f5 7d 58 6f df 2f 0f de 85 f6 01 20 eb 01 40 a0 64 4e 55 72 98 cc 31 f4 d7 8c 55 51 ae bb ef 7b 36 39 4e 86 e3 2d 67 4f 46 d7 d7 31 01 75 fd 1e 51 fc 98 da a1 53 7b 11 d8 ad 6c b0 63 88 73 c8 96 44 36 fd 23 67 a9 76 6c 62 11 39 09 64 4e 8c 9d 75 7d 6d Data Ascii: IVJG]g=ys'nEbMgV<._/yblxC9j="`1F*]n=hjWhN3];~(4mI}Xo/ @dNUr1UQ{69N-gOF1uQS{lcsD6#gvlb9dNu}m
2024-07-15 19:11:54 UTC	1784	IN	Data Raw: f1 7f e9 a8 4c a1 cb cf d2 54 ee 97 54 f1 52 ca a8 34 b3 87 be 9d 5b 31 eb 61 4b 75 ee 3d 08 1c 3d 21 70 44 90 7d ab 77 df d6 42 c2 a5 7b c7 c2 a5 75 b7 c2 65 e2 c2 ab 7a 8a 7f 94 80 64 65 e6 b0 2a 13 92 4c 89 6c 26 99 d7 b0 03 b9 95 3d 91 ab 6c 3b 6a 9c a8 30 45 d4 21 ad 76 9e 8d 7b 9e 8c 16 4e 4f 19 9a e8 2e c6 e5 51 37 2a 15 75 cc 15 d9 be 9e ec 98 7e a8 6b 95 1b ab 56 d2 64 21 7c d8 64 61 7a 3b ca 9e 70 a1 fd 38 b9 e3 fd 18 de 93 b2 67 72 0f b4 77 c0 68 af 40 fa dc 20 6c 92 dd 12 f1 6a ea eb 57 f9 9c 17 0d c0 6c 6e 0a e4 96 1c cb a9 f8 13 c8 7a c5 75 45 88 4f a1 a8 ce da 3e 36 2b f4 86 63 11 6d 0f 06 60 04 01 0c ea 1f 70 4b 3c 35 f6 45 ba 91 c0 bf e0 e5 6f 88 4f 37 8b c7 d7 81 cd 32 1d a6 dc 7f 30 27 5d f2 7b 5c 84 4f 2c 63 54 cc 34 e3 4e 40 98 ca 65 Data Ascii: LTTR4[1aKu==!pD}wB{uezdeLl&=l;j0E!v{NO.Q7u~kVd!\|daz;p8grwh@ ljWlnzuEO>6+cm`pK<5EoO720']{\O,cT4N@e
2024-07-15 19:11:54 UTC	16384	IN	Data Raw: 43 56 b9 c2 51 15 06 55 2e 5e c1 ed 85 28 ca 2d ec a9 1f 42 90 9f 9d e2 ce b0 d4 b9 9a 31 59 5a dd c3 d8 32 1c 3e c6 b1 59 50 44 7e a8 ef 83 c4 14 df ba 31 49 54 75 e0 c2 ce a3 bc 06 d9 0c e8 f7 ef 9d ab 8c 0c 24 73 a7 b5 46 75 21 01 a8 55 69 d5 4b 1a 59 0c 04 ea bc 41 10 13 fd 03 43 61 8c 72 6e 73 e2 95 7f aa c5 1b 47 5e ab b6 56 e6 b5 4b 6c 9e be d1 5a 6e a3 ed 95 66 8b cb 83 ce 77 b4 9b 37 58 1d 94 fd d2 50 5a 9e 0b 25 8e 60 ea 00 24 b4 62 98 a5 e2 5e 73 7b a3 ad 5b b4 54 d6 62 cb 24 06 70 37 70 98 c5 9b c1 52 e2 88 6e 6e 3c cd 53 fe b0 fd cb e6 59 91 5e 3b a7 1e 07 b0 61 32 0b a5 27 9c f9 33 0b 4f 18 1a e2 47 9e da 47 7a 78 8c da a1 0e 23 7a e8 0e 44 59 88 cc 2a 30 f6 10 f5 43 2f f9 95 10 a9 f6 78 ec a4 ab 74 3c 0b 73 e0 da df 36 7d 77 3a 96 33 31 d1 Data Ascii: CVQU.^(-B1YZ2>YPD~1ITu$sFu!UiKYACarnsG^VKlZnfw7XPZ%`$b^s{[Tb$p7pRnn<SY^;a2'3OGGzx#zDY*0C/xt<s6}w:31
2024-07-15 19:11:54 UTC	15472	IN	Data Raw: ca 4b bc 68 a0 22 2b da b6 83 17 2f 1c a8 93 47 83 69 bc a8 36 16 03 0c f7 12 bc 5a 6e 35 9a 2b 2f aa c1 77 df 35 6c a7 e3 fa 53 3c bd 60 dd d6 5b 6b c1 85 11 b6 3e e3 ef e3 63 75 e0 d6 ed ed c1 d2 52 e5 bb fa b6 1d be 40 15 20 65 dc f6 44 9a db 79 11 32 be 0e 3f 7f 4f 80 b6 a0 9e 66 a4 e2 08 60 14 3e 85 16 be d9 77 5d 36 5c 9a df 50 87 7b 0e 69 f6 d4 90 e5 06 dc a1 09 d2 e5 a4 8f 11 09 93 7c b9 75 dc ae f6 ec e6 c3 6c 56 3c fd 30 5a 83 93 af c5 5d bf 36 b9 6f d7 f2 19 d3 d5 4f 45 c5 1a b5 09 dd 92 f3 ef 77 35 24 14 1a 91 6b 5e 63 ba 66 23 6a 45 0c a2 dc 16 2f d8 56 46 4e b3 5c ab 9e 66 35 29 f8 c0 d3 dc a6 e0 09 16 0a 54 77 de 42 29 f1 ab 89 c4 ef ce f9 42 77 af ee 90 ba 19 09 f7 f0 c9 5d ca e9 c3 2a c0 d5 c1 3b 03 08 f1 60 ea b2 ed 19 b1 3e 64 fb 18 0b Data Ascii: Kh"+/Gi6Zn5+/w5lS<`[k>cuR@ eDy2?Of`>w]6\P{i\|ulV<0Z]6oOEw5$k^cf#jE/VFN\f5)TwB)Bw]*;`>d
2024-07-15 19:11:54 UTC	16384	IN	Data Raw: 58 8c ee a4 56 c1 61 be f3 bb 15 1a 08 d8 a4 bc cf 7e a5 1b 78 77 21 50 f9 a0 93 68 91 fd b0 6e 2f c6 f8 c3 41 02 05 a0 09 af 0b d5 d0 8e 19 e2 98 0a 03 6d c5 25 fe f0 7f 5c e2 5f 91 4b fc f4 bf 87 4b fc f4 9f c1 25 7e fa a7 70 89 3f 9a 8d a3 25 d7 e5 84 ea 42 f7 ee 20 82 8d 5e 7a 30 e5 37 ba 77 a3 11 5d 67 d7 65 28 30 2f d0 29 b9 89 dd 24 fd 2f 6e f2 a4 5a 41 a5 6f 27 8a 99 c3 46 4a 49 f0 7b 3f 9a 60 b5 fa 65 6e 6a 62 6c 10 7c e8 99 74 6f bc 36 d9 4a fc 50 c6 f0 f5 dc 11 32 7c 5d f8 69 20 83 98 b2 ad 60 17 6f d7 0e c5 9b f0 9a de 47 5f ec c0 8d 40 15 c3 11 30 89 26 ae 36 63 4b 12 24 1f 82 ae 8f 97 c6 80 97 9c af 8a cf e9 da 69 85 de a3 7a 7b cc 8d ed a0 06 b3 fd a5 c8 50 50 5d b7 e1 d3 04 da 47 55 35 f0 af 45 1d 8b c6 cd 7e 95 e2 45 d9 2f fa 22 0a 45 35 Data Ascii: XVa~xw!Phn/Am%\_KK%~p?%B ^z07w]ge(0/)$/nZAo'FJI{?`enjbl\|to6JP2\|]i `oG_@0&6cK$iz{PP]GU5E~E/"E5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	59922	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:53 UTC	1102	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641 Sec-WebSocket-Key: PD1Z52DaoafnWIKMGgBu8g== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:11:54 UTC	746	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:11:54 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 9c229785-5183-43dd-a199-d50c412eb000 x-ms-ests-server: 2.1.18463.4 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	59924	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:55 UTC	697	OUT	GET /shared/5/js/signup-fabric_en_Fk5AlRTVRCLaHOTGGXfz-A2.js HTTP/1.1 Host: 58c68845-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:57 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:57 GMT Content-Type: application/x-javascript Content-Length: 220503 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 1073300 cache-control: public, max-age=31536000 etag: 0x8DC9AED944B2442 last-modified: Tue, 02 Jul 2024 23:20:36 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 61981e96-701e-0084-1d27-cda17b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-07-15 19:11:57 UTC	13688	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 77 d3 48 d6 28 fc fd fd 15 89 0f 2b 23 4d 2a c6 4e b8 ca a8 7d 20 90 86 69 20 34 81 a6 e9 4c 4e 96 62 97 6d 81 2d 19 49 4e 08 89 ff fb d9 97 ba ca 72 a0 67 9e 79 9e 39 ef 1a d6 22 2e 95 4a 75 d9 b5 ab 6a ef 5d fb 72 fb af 9b 1b 07 79 b1 31 4d 07 32 2b e5 46 9a 8d f2 62 96 54 69 9e 6d cc a7 32 81 ac 52 c2 ff 74 9c 2d e6 3b a3 e4 ac 48 07 a7 32 6b 7f 2a db 2f 5f ec 3f 7b 7d f4 ac 5d 7d ad 36 fe 7a fb ff db 1c 2d b2 01 7e 17 84 57 e7 49 b1 21 45 25 32 51 88 5c a4 f1 d5 c3 fb bb 9d 7b 91 29 41 ef c2 ab d6 02 ab af a0 ca aa d5 c3 6f 8a 38 0b 1e ee 3d b8 13 8a 3c be 1a 4c d2 e9 70 3f cf 2a f9 b5 7a 77 39 97 65 b4 d9 11 03 fb 5c 7b a4 d7 43 39 4a 16 d3 ea 4d 91 cf f9 39 2d e7 d3 e4 f2 75 32 a3 e2 63 59 3d ad 95 a0 ac 22 3d Data Ascii: kwH(+#MN} i 4LNbm-INrgy9".Juj]ry1M2+FbTim2Rt-;H2k/_?{}]}6z-~WI!E%2Q\{)Ao8=<Lp?*zw9e\{C9JM9-u2cY="=
2024-07-15 19:11:58 UTC	16384	IN	Data Raw: 46 7d 6f fc 11 f4 99 2c 75 03 73 17 7f 08 e8 02 c3 3e 24 1b 1e b5 13 99 35 f5 86 5f be a1 97 6f 6a 2f f7 f9 e5 3e bd dc d7 2f 3f 57 86 91 7d 02 2c cb a9 f7 68 a1 79 a0 36 47 b7 7b fa 7a d5 c7 32 38 90 81 2f 41 a0 77 84 b3 42 4a 38 42 d1 c6 5d 47 96 0e 9c 77 af d1 d3 e7 54 2f 1e f1 16 43 a3 3b 77 97 84 ac 56 7e 1b d8 7b cc 03 0e 9e 8e 54 a9 33 bf e1 15 e4 d3 dc 62 60 75 2b cb 43 67 72 16 09 32 4d d0 15 88 07 40 60 16 de d0 48 c5 b1 36 34 dc 09 91 70 b5 33 71 80 33 81 fe bc 9c 09 38 c0 09 70 f2 f6 39 6f 9f f2 1c 70 fb d0 ae 90 4a 46 82 f8 93 d7 c3 a0 88 3f 61 ef c2 ef 77 8e 05 3b 1d 5b 81 71 c9 03 a4 f6 27 b2 44 b3 9f f4 c2 a7 b4 dc b4 9d 95 7d b3 b5 f5 c9 22 1d dd cf a2 46 8d f8 66 e9 a6 e7 36 f9 1b 90 50 7c d3 80 16 7f fc fb 11 98 cc c4 bd 17 13 bf ba 39 Data Ascii: F}o,us>$5_oj/>/?W},hy6G{z28/AwBJ8B]GwT/C;wV~{T3b`u+Cgr2M@`H64p3q38p9opJF?aw;[q'D}"Ff6P\|9
2024-07-15 19:11:58 UTC	16384	IN	Data Raw: 83 5b 29 64 38 c5 a2 94 d3 82 b2 1f 09 29 2c 25 21 e5 fe 3a 4d ea b7 17 05 42 52 5a 35 57 98 6e ef 9a 6d cc c9 e1 f4 e3 b8 a7 98 e5 1e c5 0c b7 72 33 d5 13 60 b0 61 5c 74 9a a9 7a 74 4d a1 a3 87 e6 45 51 7f 0c a3 56 02 a7 1a 2b 7b bb 6f f6 7a 5b ed 97 f1 26 bc ff a4 3d 4e 75 88 e1 1d 9a f7 34 5c 79 dc a1 dc ca cb 14 a9 fb 1f b4 66 e4 72 d8 b9 a6 dc ea 0d fe db b5 a7 7c 7a e6 a4 3e 8d 5c fe a5 c3 50 90 6c c3 26 e4 19 95 8a aa e0 7a 8a d7 f1 09 48 a1 94 8f d6 cd c1 61 d5 bd f4 91 1c 17 0b 93 d3 9a c6 28 07 14 96 5b 25 90 46 ca c7 fe 54 26 3e a2 c0 a2 45 41 8b f8 9c 52 85 ca 3b b0 71 d3 2a 9b 93 99 af 24 1f a1 e9 36 c7 c3 ca 5c 49 41 6f 96 9d f7 28 2d 37 f4 f7 e2 c3 eb 57 71 ef 01 bf f3 f0 c1 3f bf 95 57 3d c1 9c fe 59 79 9e 92 d3 63 90 da 1e 90 b0 cd 3e 7c Data Ascii: [)d8),%!:MBRZ5Wnmr3`a\tztMEQV+{oz[&=Nu4\yfr\|z>\Pl&zHa([%FT&>EAR;q*$6\IAo(-7Wq?W=Yyc>\|
2024-07-15 19:11:58 UTC	16384	IN	Data Raw: 85 cc 98 6d c6 83 ea bf 2f d0 f8 33 25 e2 61 75 91 a4 4a 23 03 01 ec 5b d4 b0 51 b3 ee 34 63 1a c0 01 ea 68 37 92 3e af fc e2 4d 00 a7 de e3 36 f6 6b 4f d3 e3 c5 27 4e ac ea 1b 83 eb 54 26 4b bb a9 4b 6e 62 f7 f8 f2 6c 8e 7c 79 76 2e c3 a3 5a c8 d0 ed c0 6f ae 82 f9 b9 b3 57 c9 55 b9 68 6e 31 0e bb a1 3d 9a d7 eb 36 47 bd 88 0d ec 17 de a7 b3 c5 b4 23 26 c4 7d 4b b6 72 07 db 0d 91 e6 95 13 94 2f b9 a9 af 21 f3 1b b3 46 2b 5d 17 59 40 a6 b9 db 1b ff c8 ae 12 a2 7d 65 78 ff 2b 5e 23 5b 61 88 06 ca 3d db 66 18 5e 5b 9e e6 56 c8 c7 ff 22 23 0c 85 82 6e 5a 33 96 c2 cf fe fe be 19 8c 76 68 b3 ef b4 2c a9 e8 20 e7 ab e9 04 d6 75 f7 54 75 99 6a c5 ea 05 75 7f b9 f4 b7 2b 3d 6c 3e aa 18 5f f4 68 5f bb 0c d2 0c 11 5d a3 37 6e a2 97 1a 84 6e 4b 76 c6 82 87 db 49 7d Data Ascii: m/3%auJ#[Q4ch7>M6kO'NT&KKnbl\|yv.ZoWUhn1=6G#&}Kr/!F+]Y@}ex+^#[a=f^[V"#nZ3vh, uTuju+=l>_h_]7nnKvI}
2024-07-15 19:11:58 UTC	16384	IN	Data Raw: f2 8f d0 78 fd f3 7f 2e 60 bc 80 83 a0 a0 77 26 12 14 bc 09 fe 3e b5 b6 52 fb a8 55 29 a5 e5 05 b5 fd ff 59 6a 84 76 59 f7 58 87 4c 4c 70 96 b0 d7 99 b2 5d 0e 2a 90 9c e8 2b 91 9c e8 29 24 27 e2 ad c3 b1 32 8e 63 14 cc d3 db fe db 7f f4 b6 73 37 25 2d 97 e2 a2 cf 39 32 ff 70 75 4d fa aa ee 44 9c 3f b9 ff 51 d8 fc 63 15 36 c3 e0 5f 5c 63 33 d4 c7 fd 29 95 4d 3f f8 37 d6 d9 14 83 2b 2b 6d 8a 8c 3f 42 6b 73 18 18 f1 4c 82 7f 51 bd cd 61 30 87 20 26 6e 64 50 45 37 89 6f 86 69 5b 3d b9 d5 88 86 e0 1a 92 32 ca 74 da 5c 83 84 e6 1a 1e 3f a0 75 80 48 c2 00 b2 33 96 06 5e 5c 9f a4 01 f9 37 60 13 f1 76 70 79 89 ae a9 c6 e2 f5 9d ff 80 a6 ec 3c f1 52 24 be 09 7a 93 ab 1f 29 14 87 36 77 30 50 97 00 01 f2 69 e4 8f d3 eb 18 50 56 4f 20 08 ca 6d 24 60 d2 ea 82 5f ee f3 Data Ascii: x.`w&>RU)YjvYXLLp]*+)$'2cs7%-92puMD?Qc6_\c3)M?7++m?BksLQa0 &ndPE7oi[=2t\?uH3^\7`vpy<R$z)6w0PiPVO m$`_
2024-07-15 19:11:58 UTC	16384	IN	Data Raw: ec 49 12 56 e7 8f 0a 00 dc 00 4a 47 dc 8a ad fa 5d 67 e6 3d 79 e2 97 ed 73 0a 27 ff 88 6e d9 1e 05 45 0b 00 62 17 fd 12 4d 0b e6 67 1f 97 56 c5 f8 9f 0e 06 d0 96 3c fa 18 0b 2e 1c af ef 5f 94 81 2f 79 8a 0d 62 6c 78 db 43 c2 39 b6 c3 10 c3 8a a0 93 bc dc 6a 81 3d 06 96 22 bf e6 8c 8d c6 81 93 cf b4 60 31 8a ad 46 a5 2a e9 98 5d 19 ff dd 87 84 ff 6e 8c ff 3d 98 d6 e1 68 6a 16 ea 95 a5 57 bd 68 a9 ba d2 ae 14 aa ad 4e a5 02 7f 0b cf f6 0e 0d 33 f4 bb 8f 84 0e bc e8 fb 5d 0e dd 03 3b 00 7e 0d 28 34 ae 6d ac 49 f5 7d 58 6f df 2f 0f de 85 f6 01 20 eb 01 40 a0 64 4e 55 72 98 cc 31 f4 d7 8c 55 51 ae bb ef 7b 36 39 4e 86 e3 2d 67 4f 46 d7 d7 31 01 75 fd 1e 51 fc 98 da a1 53 7b 11 d8 ad 6c b0 63 88 73 c8 96 44 36 fd 23 67 a9 76 6c 62 11 39 09 64 4e 8c 9d 75 7d 6d Data Ascii: IVJG]g=ys'nEbMgV<._/yblxC9j="`1F*]n=hjWhN3];~(4mI}Xo/ @dNUr1UQ{69N-gOF1uQS{lcsD6#gvlb9dNu}m
2024-07-15 19:11:58 UTC	1784	IN	Data Raw: f1 7f e9 a8 4c a1 cb cf d2 54 ee 97 54 f1 52 ca a8 34 b3 87 be 9d 5b 31 eb 61 4b 75 ee 3d 08 1c 3d 21 70 44 90 7d ab 77 df d6 42 c2 a5 7b c7 c2 a5 75 b7 c2 65 e2 c2 ab 7a 8a 7f 94 80 64 65 e6 b0 2a 13 92 4c 89 6c 26 99 d7 b0 03 b9 95 3d 91 ab 6c 3b 6a 9c a8 30 45 d4 21 ad 76 9e 8d 7b 9e 8c 16 4e 4f 19 9a e8 2e c6 e5 51 37 2a 15 75 cc 15 d9 be 9e ec 98 7e a8 6b 95 1b ab 56 d2 64 21 7c d8 64 61 7a 3b ca 9e 70 a1 fd 38 b9 e3 fd 18 de 93 b2 67 72 0f b4 77 c0 68 af 40 fa dc 20 6c 92 dd 12 f1 6a ea eb 57 f9 9c 17 0d c0 6c 6e 0a e4 96 1c cb a9 f8 13 c8 7a c5 75 45 88 4f a1 a8 ce da 3e 36 2b f4 86 63 11 6d 0f 06 60 04 01 0c ea 1f 70 4b 3c 35 f6 45 ba 91 c0 bf e0 e5 6f 88 4f 37 8b c7 d7 81 cd 32 1d a6 dc 7f 30 27 5d f2 7b 5c 84 4f 2c 63 54 cc 34 e3 4e 40 98 ca 65 Data Ascii: LTTR4[1aKu==!pD}wB{uezdeLl&=l;j0E!v{NO.Q7u~kVd!\|daz;p8grwh@ ljWlnzuEO>6+cm`pK<5EoO720']{\O,cT4N@e
2024-07-15 19:11:58 UTC	16384	IN	Data Raw: 43 56 b9 c2 51 15 06 55 2e 5e c1 ed 85 28 ca 2d ec a9 1f 42 90 9f 9d e2 ce b0 d4 b9 9a 31 59 5a dd c3 d8 32 1c 3e c6 b1 59 50 44 7e a8 ef 83 c4 14 df ba 31 49 54 75 e0 c2 ce a3 bc 06 d9 0c e8 f7 ef 9d ab 8c 0c 24 73 a7 b5 46 75 21 01 a8 55 69 d5 4b 1a 59 0c 04 ea bc 41 10 13 fd 03 43 61 8c 72 6e 73 e2 95 7f aa c5 1b 47 5e ab b6 56 e6 b5 4b 6c 9e be d1 5a 6e a3 ed 95 66 8b cb 83 ce 77 b4 9b 37 58 1d 94 fd d2 50 5a 9e 0b 25 8e 60 ea 00 24 b4 62 98 a5 e2 5e 73 7b a3 ad 5b b4 54 d6 62 cb 24 06 70 37 70 98 c5 9b c1 52 e2 88 6e 6e 3c cd 53 fe b0 fd cb e6 59 91 5e 3b a7 1e 07 b0 61 32 0b a5 27 9c f9 33 0b 4f 18 1a e2 47 9e da 47 7a 78 8c da a1 0e 23 7a e8 0e 44 59 88 cc 2a 30 f6 10 f5 43 2f f9 95 10 a9 f6 78 ec a4 ab 74 3c 0b 73 e0 da df 36 7d 77 3a 96 33 31 d1 Data Ascii: CVQU.^(-B1YZ2>YPD~1ITu$sFu!UiKYACarnsG^VKlZnfw7XPZ%`$b^s{[Tb$p7pRnn<SY^;a2'3OGGzx#zDY*0C/xt<s6}w:31
2024-07-15 19:11:58 UTC	16384	IN	Data Raw: ca 4b bc 68 a0 22 2b da b6 83 17 2f 1c a8 93 47 83 69 bc a8 36 16 03 0c f7 12 bc 5a 6e 35 9a 2b 2f aa c1 77 df 35 6c a7 e3 fa 53 3c bd 60 dd d6 5b 6b c1 85 11 b6 3e e3 ef e3 63 75 e0 d6 ed ed c1 d2 52 e5 bb fa b6 1d be 40 15 20 65 dc f6 44 9a db 79 11 32 be 0e 3f 7f 4f 80 b6 a0 9e 66 a4 e2 08 60 14 3e 85 16 be d9 77 5d 36 5c 9a df 50 87 7b 0e 69 f6 d4 90 e5 06 dc a1 09 d2 e5 a4 8f 11 09 93 7c b9 75 dc ae f6 ec e6 c3 6c 56 3c fd 30 5a 83 93 af c5 5d bf 36 b9 6f d7 f2 19 d3 d5 4f 45 c5 1a b5 09 dd 92 f3 ef 77 35 24 14 1a 91 6b 5e 63 ba 66 23 6a 45 0c a2 dc 16 2f d8 56 46 4e b3 5c ab 9e 66 35 29 f8 c0 d3 dc a6 e0 09 16 0a 54 77 de 42 29 f1 ab 89 c4 ef ce f9 42 77 af ee 90 ba 19 09 f7 f0 c9 5d ca e9 c3 2a c0 d5 c1 3b 03 08 f1 60 ea b2 ed 19 b1 3e 64 fb 18 0b Data Ascii: Kh"+/Gi6Zn5+/w5lS<`[k>cuR@ eDy2?Of`>w]6\P{i\|ulV<0Z]6oOEw5$k^cf#jE/VFN\f5)TwB)Bw]*;`>d
2024-07-15 19:11:58 UTC	16384	IN	Data Raw: 7e 4f 72 ba 7b 2e 98 01 06 14 9d ff 5a 29 3b a9 72 59 c4 dc af 3d bf ee e9 e9 86 43 3e 26 b7 35 42 10 c7 1f cf ac 04 c2 5c ad 8b 4a 20 30 ec a9 4f 7a 7d 13 b9 c8 b9 b1 db 22 05 be 58 51 f1 8e c7 f4 da f1 fd 0f 3e 1a 19 04 e9 25 70 a7 fb a1 37 39 b8 d4 de e5 7e 8a 81 8b 9a b7 d8 d7 70 44 6b 7c 2f 6f 9f 04 3e 69 87 33 1e cc 97 24 7f fd f2 f2 a2 45 8e 49 60 12 39 07 aa 5b fa 1e fc 59 af 7b bd c1 43 bf ee 85 be de ff ba d7 4c b4 ea 75 6f 64 59 ac d0 a9 8f 78 ff 5a 18 70 fc af bd 80 35 df ba 6e d3 5b d7 6f 7f fc a7 7a eb 2a 5e ba fe f3 c9 0f 4f be 97 ef 5c b7 2b ef 5c f1 ad 40 f7 97 17 0c 06 73 98 2e e6 79 b3 21 8c c9 b3 54 e4 f9 6e 9d 87 aa 95 0d 50 18 ab ad 79 9e 8a b6 10 47 7f 7c 5c a5 f0 ee 93 0f 6b 34 68 aa c1 8b e5 a8 e5 bb 30 c0 99 b0 9f c6 cf 1b ba 51 Data Ascii: ~Or{.Z);rY=C>&5B\J 0Oz}"XQ>%p79~pDk\|/o>i3$EI`9[Y{CLuodYxZp5n[oz*^O\+\@s.y!TnPyG\|\k4h0Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	59925	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:55 UTC	645	OUT	GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1 Host: 58c68845-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.tech-arnericas.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:11:56 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:56 GMT Content-Type: application/x-javascript Content-Length: 32839 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 8989515 cache-control: public, max-age=31536000 etag: 0x8DC5057934D08E4 last-modified: Sat, 30 Mar 2024 01:20:24 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d459fa0-901e-00e2-6d28-851955000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-07-15 19:11:56 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 33 b1 a3 78 25 84 4c c8 0d 26 90 cb 0c c3 66 09 bb 0d 1a 8c e4 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a4 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 bf f9 c9 83 fb a7 bd df 36 ef 47 93 de 69 f7 81 dc 3c 8d b6 c6 a7 27 32 e9 fc 9b 77 de ec 6e ef bc 3b d8 e9 14 5f 8b d6 af f7 fe 2f 6f 8e 56 8a 2c 1e 15 de c0 cf e5 74 d2 b9 96 a7 b3 68 74 b1 7d 3e 4f 2e 4e 2e f3 78 2c 93 22 2e 6e 4e f2 38 9f 53 3a 0a 7f aa d6 62 71 74 1c 74 66 f3 fc dc 3f 3a da 7c d0 3b 16 b7 f7 7b 0f 1f 3d ec 4f e6 c9 08 43 f0 13 21 45 11 dc 16 9d cc 97 81 Data Ascii: kWH?\|[g[$3x%L&fH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G6Gi<'2wn;_/oV,tht}>O.N.x,".nN8S:bqttf?:\|;{=OC!E
2024-07-15 19:11:57 UTC	16384	IN	Data Raw: 1d c4 a1 77 a9 45 5b cf cd fd 6e 83 6e c5 a5 70 43 ad f5 e7 95 c8 6b cd ad b8 35 68 1a 89 08 ec 67 72 12 7f a5 97 cb 44 f3 ab 65 b9 1d cb d3 9c 2d e7 be d3 5d 55 63 49 1b cf 1b 75 e9 5f 53 5d 53 38 2c 1f fb 9b 9b ae 26 33 37 eb 1a 47 5e 16 8d 0e d4 37 b0 d0 8d 23 ed 02 f1 3d 9c 03 d2 42 2f 05 f8 6e 5b 53 16 5b a1 67 c4 8c 75 78 87 0c 8a 4e 34 fa 32 8f 73 be 23 1a 04 21 5c 37 a4 c1 e7 a3 f5 7a f1 4a ce 93 ee 70 25 8f 64 0b f7 9b 9b 46 e7 b8 0e cf 14 fa 66 a6 50 a4 f6 3d 18 a9 54 8a 2a 29 fe 8e 93 a6 6f 94 2a cd ac f0 53 d1 13 0f c0 3d b1 75 67 8b 68 3a df 16 5f 2e 99 96 42 04 d1 32 e9 eb 78 3a 6d 9d ca 16 c7 b2 84 8e 72 1e 2c f9 7c ce fd 0c b1 d8 68 7b 93 da 26 96 ee e9 ae 7d 5b d7 69 41 46 c2 dd db dd 3b 1a ee b8 f1 f4 a7 56 bd d3 30 a7 45 e8 1b 58 38 77 Data Ascii: wE[nnpCk5hgrDe-]UcIu_S]S8,&37G^7#=B/n[S[guxN42s#!\7zJp%dFfP=T)oS=ugh:_.B2x:mr,\|h{&}[iAF;V0EX8w
2024-07-15 19:11:57 UTC	2766	IN	Data Raw: e8 db d3 15 1d c7 72 9b f4 1a dd d8 b2 28 fc 45 3d c1 00 60 ed c9 3f e1 31 db be ba 2e 4c 8b 68 fc 6c 25 97 57 29 f9 3e 06 77 35 64 54 aa 18 b5 0e 0b 7a 2b 51 67 73 07 8b 71 74 79 03 24 e0 42 27 c4 68 a1 69 72 87 c6 5a b3 aa 3b 23 48 6b 7b 4e c0 56 49 62 e5 e1 82 a3 eb 18 a8 94 83 be 7b 30 a9 b1 3a 48 a6 c5 89 62 34 e8 8a 9f c9 cf e0 19 93 06 bd 38 03 34 fc e5 2b 42 c7 6a 2f 3e 08 ef d8 74 dc 9f ad c0 c6 d1 dd 5d 08 70 2f 63 5d 12 d5 51 7b 4a 01 34 5b 87 5d 02 38 be 74 72 3b f9 78 d4 07 23 b5 94 55 56 c5 5f 68 83 0c 67 9b 0a e9 5e 49 9c 31 41 72 f5 d6 9f 57 a9 3b f2 d9 2a ef 7e e8 bf de 84 f8 1f 98 37 c6 17 fe f1 e9 44 6d 24 5e c8 42 91 b6 44 21 04 3a 53 5d 15 b7 a9 33 5d 09 62 3c 6a b8 13 87 1c 92 3a 99 a7 4f 70 2a d8 b6 7f 1b df 55 c4 4c 3f 91 68 4b 87 Data Ascii: r(E=`?1.Lhl%W)>w5dTz+Qgsqty$B'hirZ;#Hk{NVIb{0:Hb484+Bj/>t]p/c]Q{J4[]8tr;x#UV_hg^I1ArW;~7Dm$^BD!:S]3]b<j:OpUL?hK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	59927	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:55 UTC	941	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: 58c68845-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:56 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:56 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 9819535 cache-control: public, max-age=31536000 etag: 0x8DB77257FFE6B4E last-modified: Tue, 27 Jun 2023 15:45:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1270f0ec-501e-00fe-349b-7d5d6e000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-07-15 19:11:56 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-07-15 19:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	59928	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:55 UTC	928	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: 58c68845-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:56 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:56 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 9819068 cache-control: public, max-age=31536000 etag: 0x8DB77257C91B168 last-modified: Tue, 27 Jun 2023 15:45:09 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: afa40441-501e-0046-279d-7d733b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-07-15 19:11:56 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-07-15 19:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	59926	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:55 UTC	1823	OUT	POST /API/EvaluateExperimentAssignments HTTP/1.1 Host: signup.tech-arnericas.com Connection: keep-alive Content-Length: 190 correlationId: 0853e4491dc04151a3843791d98eff72 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 0853e4491dc04151a3843791d98eff72 canary: oaoNqQifhLyaEi0huk0y8JhGqcZf4OH6h/cgppTxFr/1dQCxgSPxyyoh1X33om5FGVKa2UqnMzsXZmru2PdTETloJw5oh0yVAIIyOd+fivnMflLzaNdIx+APTeL/4nw1M7TKh5/iwlu1oQN/Myr/tV1/jZ8rM1A94WiNyZh4xIbHqRuckIsQTQL46huy8Lcmxy3X3fa7GNk5tHbeyUpJrV9zeszZBoUaO8WJ8zg5bziLLudvH9WBawfx241BkQSA:2:3c Content-type: application/json; charset=utf-8 hpgid: 200225 Accept: application/json hpgact: 0 sec-ch-ua-platform: "Windows" Origin: https://signup.tech-arnericas.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://signup.tech-arnericas.com/signup?sru=https%3a%2f%2fl1ve.tech-arnericas.com%2foauth20_authorize.srf%3flc%3d1033%26client_id%3d4765445b-32c6-49b0-83e6-1d93765276ca%26mkt%3dEN-US%26opid%3dE99ED959906A30F1%26opidt%3d1721070704%26uaid%3d0853e4491dc04151a3843791d98eff72%26contextid%3dDD0369FD4B0F07C8%26opignore%3d1&mkt=EN-US&uiflavor=web&lw=1&fl=easi2&client_id=4765445b-32c6-49b0-83e6-1d93765276ca&uaid=0853e4491dc04151a3843791d98eff72&suc=4765445b-32c6-49b0-83e6-1d93765276ca&lic=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:55 UTC	190	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 45 78 70 65 72 69 6d 65 6e 74 73 22 3a 5b 7b 22 70 61 72 61 6c 6c 61 78 22 3a 22 65 6e 61 62 6c 65 70 6c 61 69 6e 74 65 78 74 66 6f 72 73 69 67 6e 75 70 65 78 70 65 72 69 6d 65 6e 74 22 2c 22 63 6f 6e 74 72 6f 6c 22 3a 22 65 6e 61 62 6c 65 70 6c 61 69 6e 74 65 78 74 66 6f 72 73 69 67 6e 75 70 65 78 70 65 72 69 6d 65 6e 74 5f 63 6f 6e 74 72 6f 6c 22 2c 22 74 72 65 61 74 6d 65 6e 74 73 22 3a 5b 22 65 6e 61 62 6c 65 70 6c 61 69 6e 74 65 78 74 66 6f 72 73 69 67 6e 75 70 65 78 70 65 72 69 6d 65 6e 74 5f 74 72 65 61 74 6d 65 6e 74 22 5d 7d 5d 7d Data Ascii: {"clientExperiments":[{"parallax":"enableplaintextforsignupexperiment","control":"enableplaintextforsignupexperiment_control","treatments":["enableplaintextforsignupexperiment_treatment"]}]}
2024-07-15 19:11:56 UTC	746	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:56 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-cache, no-store pragma: no-cache p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: EUSXXXX000L (2.0.3419.2) x-ms-amserver-tm: 15ms x-ms-request-id: 751d712a-a55e-4712-ae5e-00b2b6c480bc referrer-policy: strict-origin-when-cross-origin amserver: EUSXXXXGN00000L x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 751D712AA55E4712AE5E00B2B6C480BC Ref B: WAW01EDGE0806 Ref C: 2024-07-15T19:11:56Z access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:56 UTC	628	IN	Data Raw: 32 36 64 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 7a 30 45 2b 42 44 38 34 48 4f 78 6d 78 31 74 59 48 50 46 30 77 2b 6e 42 6d 57 4e 69 49 76 6f 52 34 6b 64 64 64 57 4a 41 59 63 53 31 35 6a 66 77 70 44 6b 4d 31 65 71 30 42 33 54 72 4f 4e 31 5a 34 54 58 58 44 51 37 4d 37 4a 61 73 6a 48 7a 56 6e 53 56 51 61 67 73 50 70 68 52 45 2b 32 47 30 49 46 48 74 75 43 49 59 51 37 55 44 6e 73 2b 35 5c 2f 44 66 70 4b 6a 72 2b 6f 67 61 4b 62 7a 47 4c 6a 30 5c 2f 2b 36 54 6f 73 4f 53 77 6d 43 6b 4c 48 77 30 33 4f 30 54 42 58 32 6f 50 4d 2b 76 36 4e 30 6f 47 64 46 41 66 50 5a 48 34 4c 76 33 4f 44 39 65 55 74 51 63 76 54 4c 56 52 59 72 41 52 6c 74 76 51 50 5c 2f 63 43 48 4d 73 65 49 72 59 58 4c 35 55 6b 4c 72 6e 62 4e 31 35 69 63 46 74 65 65 62 43 5a 6a 4c 66 6e 43 72 Data Ascii: 26d{"apiCanary":"z0E+BD84HOxmx1tYHPF0w+nBmWNiIvoR4kdddWJAYcS15jfwpDkM1eq0B3TrON1Z4TXXDQ7M7JasjHzVnSVQagsPphRE+2G0IFHtuCIYQ7UDns+5\/DfpKjr+ogaKbzGLj0\/+6TosOSwmCkLHw03O0TBX2oPM+v6N0oGdFAfPZH4Lv3OD9eUtQcvTLVRYrARltvQP\/cCHMseIrYXL5UkLrnbN15icFteebCZjLfnCr
2024-07-15 19:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	59930	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:56 UTC	1091	OUT	GET /?session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU HTTP/1.1 Host: 7f5d37dd-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:57 UTC	217	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:57 GMT Content-Type: text/html Content-Length: 10164 Connection: close vary: Accept-Encoding access-control-allow-origin: * content-encoding: gzip
2024-07-15 19:11:57 UTC	10164	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 7c 79 73 23 c7 95 e7 ff 1b b1 df 01 5d 11 c3 06 1a 05 74 15 6e b0 58 cd e0 d9 64 37 2f 13 60 1f 62 d3 8c 02 90 05 54 b3 50 85 ae 03 24 ba 49 87 b4 3e c6 5a 1f 13 8e b5 bd de 1d 4f ac 15 3b f6 cc ee 8e 6d 59 63 cf 58 6b 79 3f 83 fc 15 64 a9 7b 3c a3 08 ef 47 d8 df cb 3a 50 38 d8 92 67 47 b6 88 aa 3c 5e be 7c f7 7b 99 a5 a5 1b eb fb 6b cd c7 07 1b a9 9e d7 37 ef fc fb 7f b7 44 bf a9 8b be 69 b9 aa d0 f3 bc c1 e2 ed db e7 e7 e7 f9 f3 62 de 76 ba b7 e5 7a bd 7e fb 82 c6 08 7c 30 d3 3a f8 4d e1 9f 25 cf f0 4c 76 67 e9 76 f0 1b 36 ba 6d c7 18 78 77 86 9a 93 32 ed b6 66 36 35 a7 cb 3c f5 26 41 76 01 ba aa 97 3b c5 6a a7 93 63 c5 56 51 aa 33 2d ef b1 76 2f a7 39 16 73 8c b6 e6 e6 db 76 ff f6 4d d1 9b 9a 26 cb 65 99 95 0a ed d7 4e Data Ascii: \|ys#]tnXd7/`bTP$I>ZO;mYcXky?d{<G:P8gG<^\|{k7Dibvz~\|0:M%Lvgv6mxw2f65<&Av;jcVQ3-v/9svM&eN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	59931	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:56 UTC	999	OUT	GET /index.html HTTP/1.1 Host: f82580a6-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:57 UTC	719	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:57 GMT Content-Type: text/html Content-Length: 703 Connection: close last-modified: Thu, 06 Jun 2024 12:39:48 GMT etag: "5dc258f6742f6d22a4cd80f50926ed70" x-guploader-uploadid: ACJd0NrICmJWk3WtZVuNcfXYUifbt9Q8pgJzWcYXBfPNM_XScGsmKuEvvT-yIzj-wpnweIikzUI x-goog-generation: 1717677588065406 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1233 x-goog-hash: crc32c=5beoRw== x-amz-checksum-crc32c: 5beoRw== x-goog-storage-class: STANDARD accept-ranges: bytes vary: Accept-Encoding cache-control: max-age=0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:57 UTC	703	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 54 5b 6f 9b 30 14 7e ef af 60 3c 14 dc 38 d0 2c ea 65 49 9c 3e b4 9d b6 87 2d d1 da 4e 9b a2 76 32 f6 09 b8 03 1b 19 e7 b6 24 ff 7d 26 40 92 6a 0f 43 02 73 ec 8f ef 9c ef 5c 18 bc bb 1b dd 3e fe 1c df 3b 89 c9 d2 e1 c9 a0 5c 9c 94 ca 98 78 20 bd 72 03 28 1f 9e 38 f6 1a 64 60 a8 c3 12 aa 0b 30 c4 7b 7a fc d8 be f6 8e 8f 24 cd 80 78 73 01 8b 5c 69 e3 39 4c 49 03 d2 42 17 82 9b 84 70 98 0b 06 ed 9d 81 1d 21 85 11 34 6d 17 8c a6 40 3a c1 79 43 65 84 49 61 f8 69 96 51 e9 3c 80 2c 94 76 1e 98 16 b9 71 3e 4f b5 f5 30 08 2b c4 c9 20 ac 62 1b 44 8a af ec 52 ec 50 15 cb 9c 6a 87 92 89 fb 2b 5f ce 05 77 71 f9 d2 ad 16 0e ee 73 7f 3a 93 cc 08 25 9d c8 a7 68 5d a2 23 22 61 e1 7c 83 f8 7e 99 fb ae ff b2 71 90 db a2 2d 97 f8 93 97 fe 73 Data Ascii: T[o0~`<8,eI>-Nv2$}&@jCs\>;\x r(8d`0{z$xs\i9LIBp!4m@:yCeIaiQ<,vq>O0+ bDRPj+_wqs:%h]#"a\|~q-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	59932	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:57 UTC	664	OUT	GET /API/EvaluateExperimentAssignments HTTP/1.1 Host: signup.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:58 UTC	780	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jul 2024 19:11:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close cache-control: no-cache, no-store pragma: no-cache location: https://signup.tech-arnericas.com/error.aspx?e=404 p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ms-amserver: wusXXXX01IJ (2.0.3419.2) x-ms-amserver-tm: 0ms x-ms-request-id: 53b208c4-402c-4d08-a3c9-821aaf266995 referrer-policy: strict-origin-when-cross-origin amserver: wusXXXXig0001IJ x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 670A4CA6A75544AB92F8FFD81108E36A Ref B: WAW01EDGE0815 Ref C: 2024-07-15T19:11:58Z access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:11:58 UTC	173	IN	Data Raw: 61 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 75 70 2e 74 65 63 68 2d 61 72 6e 65 72 69 63 61 73 2e 63 6f 6d 2f 65 72 72 6f 72 2e 61 73 70 78 3f 65 3d 34 30 34 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a7<html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://signup.tech-arnericas.com/error.aspx?e=404">here</a>.</h2></body></html>
2024-07-15 19:11:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	59933	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:57 UTC	697	OUT	GET /shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg HTTP/1.1 Host: 58c68845-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:58 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 9819537 cache-control: public, max-age=31536000 etag: 0x8DB77257FFE6B4E last-modified: Tue, 27 Jun 2023 15:45:14 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1270f0ec-501e-00fe-349b-7d5d6e000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-07-15 19:11:58 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-07-15 19:11:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	59934	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:57 UTC	684	OUT	GET /shared/5/images/2_bc3d32a696895f78c19d.svg HTTP/1.1 Host: 58c68845-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:58 UTC	739	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:58 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 9819070 cache-control: public, max-age=31536000 etag: 0x8DB77257C91B168 last-modified: Tue, 27 Jun 2023 15:45:09 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: afa40441-501e-0046-279d-7d733b000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-07-15 19:11:58 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-07-15 19:11:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	59935	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:57 UTC	703	OUT	GET /shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js HTTP/1.1 Host: 58c68845-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:11:59 UTC	745	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:11:58 GMT Content-Type: application/x-javascript Content-Length: 32839 Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 8989517 cache-control: public, max-age=31536000 etag: 0x8DC5057934D08E4 last-modified: Sat, 30 Mar 2024 01:20:24 GMT vary: Accept-Encoding x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d459fa0-901e-00e2-6d28-851955000000 x-ms-version: 2009-09-19 content-encoding: gzip
2024-07-15 19:11:59 UTC	13689	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dc bd 6b 57 db 48 b3 3f fa fe 7c 0a 5b 67 0e 5b 1a 1a c7 86 24 33 b1 a3 78 25 84 4c c8 0d 26 90 cb 0c c3 66 09 bb 0d 1a 8c e4 48 32 84 60 7f f7 53 bf ea 8b 5a b2 48 f2 ac ff 3e e7 c5 9e 35 c1 ea 8b 5a dd d5 d5 d5 55 d5 55 d5 f7 7e 6d b7 5e a4 59 6b 1a 8f 64 92 cb 56 9c 4c d2 ec 32 2a e2 34 69 cd a6 32 a2 ac 5c ca 56 9a c8 71 be 11 25 d1 f4 a6 88 47 f9 c6 bf f9 c9 83 fb a7 bd df 36 ef 47 93 de 69 f7 81 dc 3c 8d b6 c6 a7 27 32 e9 fc 9b 77 de ec 6e ef bc 3b d8 e9 14 5f 8b d6 af f7 fe 2f 6f 8e 56 8a 2c 1e 15 de c0 cf e5 74 d2 b9 96 a7 b3 68 74 b1 7d 3e 4f 2e 4e 2e f3 78 2c 93 22 2e 6e 4e f2 38 9f 53 3a 0a 7f aa d6 62 71 74 1c 74 66 f3 fc dc 3f 3a da 7c d0 3b 16 b7 f7 7b 0f 1f 3d ec 4f e6 c9 08 43 f0 13 21 45 11 dc 16 9d cc 97 81 Data Ascii: kWH?\|[g[$3x%L&fH2`SZH>5ZUU~m^YkdVL2*4i2\Vq%G6Gi<'2wn;_/oV,tht}>O.N.x,".nN8S:bqttf?:\|;{=OC!E
2024-07-15 19:11:59 UTC	16384	IN	Data Raw: 1d c4 a1 77 a9 45 5b cf cd fd 6e 83 6e c5 a5 70 43 ad f5 e7 95 c8 6b cd ad b8 35 68 1a 89 08 ec 67 72 12 7f a5 97 cb 44 f3 ab 65 b9 1d cb d3 9c 2d e7 be d3 5d 55 63 49 1b cf 1b 75 e9 5f 53 5d 53 38 2c 1f fb 9b 9b ae 26 33 37 eb 1a 47 5e 16 8d 0e d4 37 b0 d0 8d 23 ed 02 f1 3d 9c 03 d2 42 2f 05 f8 6e 5b 53 16 5b a1 67 c4 8c 75 78 87 0c 8a 4e 34 fa 32 8f 73 be 23 1a 04 21 5c 37 a4 c1 e7 a3 f5 7a f1 4a ce 93 ee 70 25 8f 64 0b f7 9b 9b 46 e7 b8 0e cf 14 fa 66 a6 50 a4 f6 3d 18 a9 54 8a 2a 29 fe 8e 93 a6 6f 94 2a cd ac f0 53 d1 13 0f c0 3d b1 75 67 8b 68 3a df 16 5f 2e 99 96 42 04 d1 32 e9 eb 78 3a 6d 9d ca 16 c7 b2 84 8e 72 1e 2c f9 7c ce fd 0c b1 d8 68 7b 93 da 26 96 ee e9 ae 7d 5b d7 69 41 46 c2 dd db dd 3b 1a ee b8 f1 f4 a7 56 bd d3 30 a7 45 e8 1b 58 38 77 Data Ascii: wE[nnpCk5hgrDe-]UcIu_S]S8,&37G^7#=B/n[S[guxN42s#!\7zJp%dFfP=T)oS=ugh:_.B2x:mr,\|h{&}[iAF;V0EX8w
2024-07-15 19:11:59 UTC	2766	IN	Data Raw: e8 db d3 15 1d c7 72 9b f4 1a dd d8 b2 28 fc 45 3d c1 00 60 ed c9 3f e1 31 db be ba 2e 4c 8b 68 fc 6c 25 97 57 29 f9 3e 06 77 35 64 54 aa 18 b5 0e 0b 7a 2b 51 67 73 07 8b 71 74 79 03 24 e0 42 27 c4 68 a1 69 72 87 c6 5a b3 aa 3b 23 48 6b 7b 4e c0 56 49 62 e5 e1 82 a3 eb 18 a8 94 83 be 7b 30 a9 b1 3a 48 a6 c5 89 62 34 e8 8a 9f c9 cf e0 19 93 06 bd 38 03 34 fc e5 2b 42 c7 6a 2f 3e 08 ef d8 74 dc 9f ad c0 c6 d1 dd 5d 08 70 2f 63 5d 12 d5 51 7b 4a 01 34 5b 87 5d 02 38 be 74 72 3b f9 78 d4 07 23 b5 94 55 56 c5 5f 68 83 0c 67 9b 0a e9 5e 49 9c 31 41 72 f5 d6 9f 57 a9 3b f2 d9 2a ef 7e e8 bf de 84 f8 1f 98 37 c6 17 fe f1 e9 44 6d 24 5e c8 42 91 b6 44 21 04 3a 53 5d 15 b7 a9 33 5d 09 62 3c 6a b8 13 87 1c 92 3a 99 a7 4f 70 2a d8 b6 7f 1b df 55 c4 4c 3f 91 68 4b 87 Data Ascii: r(E=`?1.Lhl%W)>w5dTz+Qgsqty$B'hirZ;#Hk{NVIb{0:Hb484+Bj/>t]p/c]Q{J4[]8tr;x#UV_hg^I1ArW;~7Dm$^BD!:S]3]b<j:OpUL?hK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	59936	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:59 UTC	2998	OUT	GET /Images/Clear.PNG?ctx=jscb1.0&session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=YnVhPU1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiZvcz1XaW4zMiZscHJvYz00Jm9sPXRydWUmcnR0PTEzMDAmY2hybT10cnVlJnByb3N1Yj0yMDAzMDEwNyZldmFsPTMzJmFwcHY9NS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiZscz10cnVlJmRtPTgmbXRwPTAmbmM9NzQmcHI9MSZzcj0xMjgweDEwMjQmc2NkPTI0JmFzcj0xMjgweDk4NCZ0ej0tMzAwJmRzdD02MCZ0em89LTI0MCZibD1lbi1VUyZtdGg9MjdmNTFkMzE0OWU2YmYyMDliNjZiZDM4N2IwYWYzYzQmbXRuPTImcG49NSZwaD1mM2FjMjJhYzU5YzZkY2I4NzQxMDlkMDkzYzUyNTVlOCZwPXBsdWdpbl9mbGFzaCUzRGZhbHNlJTI2cGx1Z2luX3dpbmRvd3NfbWVkaWFfcGxheWVyJTNEZmFsc2UlMjZwbHVnaW5fYWRvYmVfYWNyb2JhdCUzRGZhbHNlJTI2cGx1Z2luX3NpbHZlcmxpZ2h0JTNEZmFsc2UlMjZwbHVnaW5fcXVpY2t0aW1lJTNEZmFsc2UlMjZwbHVnaW5fc2hvY2t3YXZlJTNEZmFsc2UlMjZwbHVnaW5fcmVhbHBsYXllciUzRG [TRUNCATED] Host: 7f5d37dd-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://7f5d37dd-e3b309ea.tech-arnericas.com/?session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:12:00 UTC	214	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:00 GMT Content-Type: text/html Content-Length: 20 Connection: close vary: Accept-Encoding access-control-allow-origin: * content-encoding: gzip
2024-07-15 19:12:00 UTC	20	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	59937	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:59 UTC	1560	OUT	GET /Clear.HTML?ctx=Ls1.0&wl=False&session_id=0853e4491dc04151a3843791d98eff72&id=595a8389-e130-a6a8-44bd-8e76b38d7343&w=8DCA501FF0DD31D&tkt=taBcrIH61PuCVH7eNCyH0FC0izOzUpX5wN2Z%252b5egc%252f5vTMJsXnEHP%252froqFKakebbmG0WLaq7OFGfIOOSz7l88QUN3tl1sQcPBDXEiyUiLg3zSvbtLFtlY32NW%252fH86ePXnIbWg4rcqnIgiULp0U1bMDBbWnpwJx78bMOeKUIz2wE1A6YcPP1JkcCMh9EdJVs41m0Mkl18%252fqsAfSZwLmJ7%252bA8d4nkiyhElYUo9fnol89V%252f7sNYssdqa1G6DmWu0UReXw%252bVXQ7%252fwJAT1aGhDHZSgeMU4ZDar3i%252f9Rqky18bNwdBEMPjs0%252fCT%252bZ%252f%252b8sLAYvu&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d HTTP/1.1 Host: 1151e42c-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://7f5d37dd-e3b309ea.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	59938	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:59 UTC	859	OUT	GET /PXzC5j78di/main.min.js HTTP/1.1 Host: 7bd8dcb6-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://f82580a6-e3b309ea.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:12:00 UTC	476	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:00 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 62260 Connection: close last-modified: Mon, 15 Jul 2024 19:06:20 GMT etag: "609f4daf595d6a802fee06ec0cf9d516" accept-ranges: bytes cache-control: max-age=600 vary: Accept-Encoding access-control-allow-origin: * access-control-expose-headers: active-cdn,x-served-by,Akamai-Request-BC active-cdn: Akamai content-encoding: gzip
2024-07-15 19:12:00 UTC	13962	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd e9 76 db 38 b3 28 fa ff 3e 85 c3 93 56 93 11 2c 93 d4 60 0d 61 bc 1d c7 43 9c d8 8e 67 59 8a 3a 8b a2 28 8b 36 45 2a 14 25 0f 91 f6 b3 df 2a 0c 24 28 31 e9 ef 9c 7d ee ba bd 3a 32 88 b1 00 14 0a 85 42 55 61 6b 6b e3 bf 7c cf 71 83 a9 bb b1 17 4e 5e 22 ef 7e 14 6f a8 7b da 86 a9 1b 95 4d 53 37 2b 1b df dc c8 1b bb b1 1b b5 c9 c6 e7 c0 d9 50 9f 9e 9e 4a 13 11 f9 5c 72 c2 b1 56 da 80 e2 41 ec 06 f1 46 38 dc 88 47 de 74 63 e8 f9 ee 86 63 07 1b 41 18 6f f4 21 18 4e 3c 77 b0 61 07 83 ad 30 da 18 78 d3 38 f2 fa b3 d8 1d 94 fe 9f 38 7a f9 f5 e4 05 83 f0 a9 f4 63 f2 bc 3b 99 7c 1e 58 ca b7 f6 eb 5e f5 61 bb 3e f0 14 32 9c 05 4e ec 85 81 aa fd 52 66 00 2a 96 75 62 a5 25 e2 37 5c 48 89 dc 78 16 05 1b bc 22 00 70 18 46 63 3b 70 dc Data Ascii: v8(>V,`aCgY:(6E%$(1}:2BUakk\|qN^"~o{MS7+PJ\rVAF8GtccAo!N<wa0x88zc;\|X^a>2NRf*ub%7\Hx"pFc;p
2024-07-15 19:12:00 UTC	16384	IN	Data Raw: 12 26 9e 82 17 1c 84 ec 50 54 28 bc 89 52 99 0c ea 17 51 26 28 d6 98 26 eb ef 8a a9 0a b2 7d c8 4d a8 d2 75 91 24 b2 72 49 55 67 ea 48 83 55 ca 41 f1 82 5e 05 31 75 55 85 c8 f8 90 22 91 b5 8a 5f d8 16 1b d5 f5 6d 58 cb db 99 d9 a2 c8 8e e4 3c 33 92 f3 55 e0 78 11 96 9f 9b e5 cc b9 c6 5e 6b 9e a3 e3 67 c3 a2 57 d9 38 2c 97 7f c4 6d bc 95 a2 d6 ef d5 59 a7 7d fc f9 66 df 38 61 2a d1 f6 6d e7 e5 ee d6 f0 d9 d7 60 7c 30 1d dc 5e 73 25 6b 67 7c f3 70 07 e7 e2 3b 73 34 e2 b9 0f 0f 66 9d c3 67 ff 3c ab aa bd ae a6 1d 43 d9 57 e7 b0 31 63 66 7d ab b5 7d 6d 5f cc 6d f3 66 c6 52 be 9a c7 63 67 7c 10 77 ae ea 98 f7 93 ab 1a ba 24 d6 b8 95 38 34 d4 a5 87 b9 d9 95 34 89 c2 cc 01 e8 3a e1 b6 a6 19 ff 9d 92 f8 54 ce 2e 79 f4 04 06 d6 5d 12 5e 9d a4 71 c4 45 8d 79 16 81 Data Ascii: &PT(RQ&(&}Mu$rIUgHUA^1uU"_mX<3Ux^kgW8,mY}f8a*m`\|0^s%kg\|p;s4fg<CW1cf}}m_mfRcg\|w$844:T.y]^qEy
2024-07-15 19:12:00 UTC	16384	IN	Data Raw: 0a 93 34 2b 8e 81 15 f6 fd b9 74 85 7c a3 5e f4 8f 52 5d 95 49 46 bf 24 24 99 c8 50 d0 cb 01 0f c4 9d 6b b1 4e 49 c4 0d 50 ab c5 f2 6a 14 4f 9f ec 1d b5 36 cf 68 9d 8e 71 c4 95 95 02 14 31 21 a7 8a 6c 14 84 1b 0d 3d f3 91 33 f4 a1 55 d5 3e dc 3c d9 3f da bd ed d0 d3 29 a5 91 0c 20 dc 76 1d 98 ce dc f4 47 b3 a6 32 ba 66 29 9f af f7 a3 f5 47 70 34 79 a5 99 07 43 f5 bc 7d 04 79 2d 10 38 7c 86 f6 93 76 ea 08 c0 98 35 dc 8d 03 b0 b5 d2 bb 1f 69 9a 95 f4 19 c0 0d 15 3c 71 02 4b 2f 50 e9 af 13 46 87 16 de ff 76 06 5e 06 42 ff 4f 2c cf fb 2d cb 0b 20 8f dd d9 32 eb 5b 5e f3 3b e6 01 6b ad bd 7b 42 03 05 43 25 e0 a1 42 43 e0 c8 74 ee 42 db bc 43 1f a3 6e 51 54 8c a9 c3 93 fd db 23 6a e1 f3 cd fd dd 5b 62 34 9d c3 d6 09 3e e5 b4 2f 28 6d 37 4e f9 82 52 6e b5 55 e0 Data Ascii: 4+t\|^R]IF$$PkNIPjO6hq1!l=3U><?) vG2f)Gp4yC}y-8\|v5i<qK/PFv^BO,- 2[^;k{BC%BCtBCnQT#j[b4>/(m7NRnU
2024-07-15 19:12:00 UTC	15530	IN	Data Raw: f6 cd ee d5 2e 8e 70 41 fc 4e e0 62 fb 17 c3 44 7a 50 e1 58 41 20 15 27 63 c9 0c 6f 6e 65 5c 9b 24 74 18 e5 b4 e4 1a 81 d5 c0 1d 22 3b 87 7c ef 44 78 a6 66 87 10 c5 7c 78 1b 39 c0 4b 85 f2 b3 45 38 82 46 ec e1 32 dc 52 2f c9 32 16 87 44 d0 8a bf 70 ac f3 ea 09 6e 3f ec db 5c 69 03 aa 12 c3 95 73 72 6a 7a 74 42 7f e2 2b 3d 3d d4 b2 73 76 28 ae 7f 89 6b 62 76 28 0c 80 19 3c 4e 1f 11 3d e1 80 59 62 a6 81 ff 96 8d 5b e1 26 11 6d ce df 57 5d aa af d5 57 6f 4e fa 2f 0d 37 7b 77 43 bd 2c 08 64 55 38 65 64 03 aa 65 3b a6 1d 97 dd 4d 25 0f 2b a1 0f 45 80 17 87 bd 42 62 16 82 58 c1 50 37 ea 49 dd 54 ce 85 7a 4b 21 2b a2 1b 05 e9 d8 37 2a bb 0d 58 30 f5 47 f7 18 1a d3 e2 c5 09 7f 74 e3 9c e8 88 8d 9c ab 30 d2 a8 d7 58 74 b4 ca 2c e9 d5 45 36 b9 af 41 74 54 83 eb 9e Data Ascii: .pANbDzPXA 'cone\$t";\|Dxf\|x9KE8F2R/2Dpn?\isrjztB+==sv(kbv(<N=Yb[&mW]WoN/7{wC,dU8ede;M%+EBbXP7ITzK!+7*X0Gt0Xt,E6AtT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	59939	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:11:59 UTC	787	OUT	GET /error.aspx?e=404 HTTP/1.1 Host: signup.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MicrosoftApplicationsTelemetryDeviceId=201b582f-659e-4245-a1b9-7b00185c5c02; ai_session=C64Vgh5GZFWAqIjOa7hxc+\|1721070716072\|1721070716072
2024-07-15 19:12:01 UTC	794	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 84080 Connection: close cache-control: no-cache, no-store pragma: no-cache vary: Accept-Encoding p3p: CAO DSP COR ADMa DEV CONo TELo CUR PSA PSD TAI IVDo OUR SAM BUS DEM NAV STA UNI COM INT PHY ONL FIN PRE PUR x-ua-compatible: IE=edge, chrome=1 x-ms-amserver: wusXXXX01IC (2.0.3419.2) x-ms-amserver-tm: 15ms x-ms-request-id: f9310785-02e3-4b5b-be9d-6e9868ffbf2b referrer-policy: strict-origin-when-cross-origin amserver: wusXXXXig0001IC x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: F931078502E34B5BBE9D6E9868FFBF2B Ref B: WAW30EDGE0206 Ref C: 2024-07-15T19:11:59Z content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:12:01 UTC	6426	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 77 db 46 b2 30 fc f9 d5 39 f3 1f 20 8c af 42 8e 40 8a d4 6e d2 90 ae 2c cb 89 32 5e 14 4b 4e 9c 2b 2b 7a 40 b2 29 c2 06 01 06 8b 16 4b fc ef 4f 2d dd 40 37 00 da 72 66 e6 3e af cf b1 08 34 7a ef ea da ba aa fa 6f 4b cf 96 5f bc 3d 3c fb fd e4 c8 9a a4 d3 60 ef 6f 4b cf f0 d7 0a bc f0 ca b5 45 68 5b b7 d3 a0 57 bc 0d 03 2f 49 5c 7b 7a 99 05 d6 78 62 5b 23 3f 76 ed 20 8d 6d 2b 49 ef 02 e1 da 36 54 61 59 cf 26 c2 1b d1 13 3c 07 7e f8 d9 8a 45 e0 da b3 58 0c a3 30 14 c3 d4 b6 26 b1 18 bb f6 24 4d 67 49 6f 6d 6d b8 b9 bb b9 e5 79 9b 2d b1 31 d8 e8 3c 15 5e 3b 15 c3 49 cb 8b 43 11 fb 43 2f 69 0f a3 29 b4 1e 47 49 12 c5 fe 95 1f 62 4f ff 63 15 4f 45 ea 59 58 43 4b fc 99 f9 d7 ae 7d db 1a 85 49 0b 5a 19 8b 14 4a 43 5b 69 1c Data Ascii: iwF09 B@n,2^KN++z@)KO-@7rf>4zoK_=<`oKEh[W/I\{zxb[#?v m+I6TaY&<~EX0&$MgIommy-1<^;ICC/i)GIbOcOEYXCK}IZJC[i
2024-07-15 19:12:01 UTC	16384	IN	Data Raw: 8d ea 35 da c7 ca 01 4b 3f b1 86 dc fe 36 bf 5b d7 50 b1 b4 64 6c b6 3f 91 3d 61 8e 22 72 ff de 04 3a b2 6f 1b af 50 ac 34 0c e3 73 b3 67 66 b7 fc c4 42 c5 9d 72 9a 27 19 dd e8 48 39 03 f2 30 30 75 52 03 fa 2b 30 e7 64 3f a6 4a 1d 29 d5 a8 36 8e 4a f6 a6 33 90 58 00 7d 9b 6c e9 15 0a e4 f1 d9 a0 9d 5b 5f 86 e4 1c ba ea 42 d2 79 78 b1 6a f7 6d da f7 aa 21 54 fa 44 e7 a4 a7 bb 20 4c 0c 2c b0 aa e3 cf 6a 1d 7f 42 1d 6d 7f 44 d5 e8 55 fc 99 57 21 e5 b0 32 e1 94 b6 8b 0a af 97 d3 41 96 8a d0 6c 48 c9 5a 74 d8 9f aa 5d 17 35 a9 da b3 02 87 d4 c9 26 4a e6 f0 d8 6a da c7 f3 ef 5c 54 f1 0b 39 45 42 cc e2 ed 90 95 41 d8 6f f6 b3 7c 6d b2 e6 bc e0 6c 65 da 0c 9e 11 71 eb 16 4e ea cb b0 96 28 5e 2b 52 34 a5 9f 29 aa e0 ee 5c 41 c7 4c cb 77 0f 0f cb 9a be 43 97 5b 81 Data Ascii: 5K?6[Pdl?=a"r:oP4sgfBr'H900uR+0d?J)6J3X}l[_Byxjm!TD L,jBmDUW!2AlHZt]5&Jj\T9EBAo\|mleqN(^+R4)\ALwC[
2024-07-15 19:12:01 UTC	16384	IN	Data Raw: 9c cf 51 1d 8c 12 84 19 99 13 9b a2 00 9c 08 10 20 fd f4 8e 16 c9 a1 1d a5 d8 7a a6 0b 44 09 e3 08 a8 ca 80 ce 50 85 e2 c9 72 19 7b 01 97 2a 58 84 d1 50 87 01 a6 b9 ba 95 6f d6 2b 49 ec 68 f9 71 83 2a b5 01 9a 0e 41 45 57 5e e8 7f 91 64 37 2c 1f ee 17 42 ef 2c 8b 67 51 22 be c1 3d 69 36 47 55 4e 4d 18 9a 3a 63 48 35 aa 54 63 48 4f 73 23 8d 8a 69 06 13 bf 32 46 d8 56 a7 c0 6a ce 71 5d e4 dc 32 75 61 73 10 52 c2 18 05 35 f5 c3 50 49 e2 c5 91 38 6a 78 3c 6b ea df 62 45 24 10 b1 ea 15 a5 25 ab 56 36 5a 20 1a ad 93 1a ac 10 85 80 dd fd ac 7a 76 13 15 16 5f 5a 89 dd 5c f2 21 a8 24 a0 f4 c3 11 de 5c 2d 92 fc f0 aa 60 8e a0 ff e8 c2 a2 56 2c 16 da 79 41 5e 83 d1 80 a2 ee d4 19 84 58 26 44 ac 80 cd e1 47 dc ce 10 cb 30 27 09 99 a6 c8 81 4a 86 9b 4e ce 08 72 fc 94 Data Ascii: Q zDPr{XPo+IhqAEW^d7,B,gQ"=i6GUNM:cH5TcHOs#i2FVjq]2uasR5PI8jx<kbE$%V6Z zv_Z\!$\-`V,yA^X&DG0'JNr
2024-07-15 19:12:01 UTC	16384	IN	Data Raw: 17 ef 4c e0 ae 19 69 af e4 cb 28 49 b8 2c 2f b9 16 e1 3a 21 5e 6b 23 a3 51 d1 d1 c7 bf a6 b8 a0 39 8a 73 8c 4b 99 cc c4 c7 07 78 8c 05 76 a5 86 8b cf 6f 37 52 46 a9 ce 36 4e 64 c3 7a d6 4d d6 81 f3 b8 e2 3c 86 14 47 11 fa 5a e3 6a ca c6 1b 3c a6 44 5d 04 9f c8 f0 41 29 1d af 87 b2 6a ba 3a 8f a6 cd f3 f0 d7 28 cc ea ad ee c0 f7 5a 43 f8 ff 10 fe ef 0d 1a 44 cc 46 c9 05 ae f8 a1 5b da ee 4c b2 ed a0 68 c9 91 fb a0 7a af d4 d6 ad 0f 2f 3f fe 12 9e ff 35 2a 5a 1f df 74 3b 0e ae dc 7e bc 3a 0e fd c4 14 10 6a 9d 6f 70 5e 11 b8 bc 28 93 a5 05 de 92 69 76 da b3 f0 b2 21 97 d7 75 6f 50 86 db 1b 12 dc f5 7e 57 ce d2 ce 7a bf 57 86 bf 3f d0 69 b3 09 be 2d 72 55 93 ba 37 ed be 2a 2a da a5 95 b6 1b d8 2f ad 83 68 e0 be d6 c0 83 df a1 81 bd 9b f6 a1 2e 1a 77 68 e0 c6 Data Ascii: Li(I,/:!^k#Q9sKxvo7RF6NdzM<GZj<D]A)j:(ZCDF[Lhz/?5Zt;~:jop^(iv!uoP~WzW?i-rU7*/h.wh
2024-07-15 19:12:01 UTC	9958	IN	Data Raw: 38 3b 7b 77 b0 dc f6 e0 a6 f7 2b 74 7f 07 8a 37 f0 95 38 be 96 fc a7 57 02 e7 19 93 89 e2 66 1c ff 02 85 dc 7c 0b d2 5c 61 8b 7f e6 1f 44 8f 48 3c 13 fe 07 4f a0 22 a3 a2 1c 13 18 6b 11 c9 73 41 d2 d0 5e 42 c7 da 7f 89 88 89 29 d0 a0 22 c8 66 ab ac ec e6 54 b4 54 b6 55 75 a5 d6 88 f5 52 30 4e 21 fc 83 c8 79 d9 60 14 ea 10 85 4f 59 59 b1 8b 30 b6 49 9d 28 5f 27 57 ee 67 1d 9c 58 6f 2f 82 68 3e 3e fa d5 82 6e b5 96 7a 71 c7 7a 88 8f 49 fa 19 d8 06 5b b9 01 a1 2d a5 97 35 b7 11 11 7a 6b a1 d1 d2 fb dc d4 1a a3 cd f9 e0 f8 ae 1d 26 d6 24 44 00 2c cd ba 04 0e c5 57 93 28 7e 1f 04 24 af 98 1b fa 80 1c 7a f9 5a 46 0c ec 9e 0b 1a 6d f6 cd b1 39 30 87 e6 8d 3a 85 9b 16 98 bd 9b 9a 79 69 25 fe 4b 16 30 30 b7 0e 43 8e e7 56 86 27 76 c4 de 22 3e f0 ae c4 79 72 78 71 Data Ascii: 8;{w+t78Wf\|\aDH<O"ksA^B)"fTTUuR0N!y`OYY0I(_'WgXo/h>>nzqzI[-5zk&$D,W(~$zZFm90:yi%K00CV'v">yrxq
2024-07-15 19:12:01 UTC	16384	IN	Data Raw: 02 3c dc a2 6d 4c b0 4a 02 27 57 aa 1a 09 b0 9c d4 cc 85 92 ce 23 7f 0b 6c 07 ed 31 0d cf 65 f1 ea c2 e1 1b 12 b8 b8 cb 11 4c 4d fc 7c ab c0 75 a2 1e f1 12 57 35 b3 83 f3 5a b3 27 b8 9c 67 24 bf 62 06 70 88 a9 8f 7e d7 8d 85 52 f6 dd 94 f9 b8 b7 56 83 d5 77 f4 9a 46 3c c0 40 fd f8 5d 9d 01 fa 42 93 95 4e 6c 49 ae e0 d9 bc f5 00 6f cf 5c 57 0f ac 61 86 b5 47 0c 95 9e 3a e3 75 25 5a cd af 46 c9 d3 e2 82 74 dd 5f 5a 10 b4 4a 1d 89 dc 74 51 dc 92 45 69 9a 85 96 f3 8b 92 6f 09 6b a4 81 f5 41 3e bb d6 42 b3 0d 9f 1b 57 d0 1f 99 df 0e 36 5e b5 96 6b b9 59 63 a8 f4 dc 20 69 ef 04 b8 f6 1b f2 b7 5e c8 28 12 f2 bb 5d da 59 07 19 02 c3 f4 5d 47 4b e6 82 5f 00 ed 02 6c 16 1b 06 6c 66 90 38 4f 6e 15 f1 7f f3 33 b6 b8 08 18 35 8b 6d cc 69 b8 99 31 ff bf 4a 4c 94 59 22 Data Ascii: <mLJ'W#l1eLM\|uW5Z'g$bp~RVwF<@]BNlIo\WaG:u%ZFt_ZJtQEiokA>BW6^kYc i^(]Y]GK_llf8On35mi1JLY"
2024-07-15 19:12:01 UTC	2160	IN	Data Raw: da c8 4f fc d4 bb 03 e1 6d af 8f 47 5b 69 80 3e 9f 17 79 af 17 d1 59 4c 3a 9d d6 fb 54 1d b0 26 cd 4e 60 3a 52 ef 04 17 45 42 dd c1 41 49 a7 20 b5 15 8b c2 b5 15 c9 9b c2 c8 86 5c 93 3f 9b 24 8c 80 9e a3 d9 00 bb ef c0 9b 2a 2a e5 bf 66 f3 a3 2c 9d 1f c1 82 e2 35 a1 08 2f d7 97 53 4e 87 f4 e5 2b 8c 36 35 5e cd 5e d0 a1 c4 1a f7 f8 a3 71 94 44 20 67 38 5b 09 1e e2 b8 de 96 d3 e3 78 ee 5b 29 27 d4 2f da f0 29 bf 08 b2 7c ee dd 01 06 54 be 90 8b 74 5e ca ba e4 f1 f9 e1 54 39 9f f8 43 4b c3 8d 5c 86 32 c4 77 ae bf 22 2c 52 d5 2b 8e 72 1f 79 77 68 01 bd f2 f0 da 1f fe 67 97 5e 18 d5 fc 1b f2 0a 92 1c d9 c5 86 63 90 56 5c d4 52 40 3a 28 6b c1 67 96 7a 08 af 7d 2c e8 90 07 39 3c 81 0b 48 2e c6 d8 29 88 72 da 48 92 f7 09 ef f8 1a 86 87 c6 30 8c 47 8d 3c d7 f0 1e Data Ascii: OmG[i>yYL:T&N`:REBAI \?$**f,5/SN+65^^qD g8[x[)'/)\|Tt^T9CK\2w",R+rywhg^cV\R@:(kgz},9<H.)rH0G<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	59941	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:00 UTC	695	OUT	OPTIONS /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 0df22540-e3b309ea.tech-arnericas.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: apikey,cache-control,client-id,client-version,content-type,time-delta-to-apply-millis,upload-time Origin: https://signup.tech-arnericas.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:12:01 UTC	625	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: public, 3600 access-control-allow-credentials: true access-control-allow-headers: AuthMsaDeviceTicket,AuthXToken,Content-Encoding,Content-Type,Cache-Control,Client-Id,SDK-Name,sdk-version,apikey,x-apikey,client-version,upload-time,time-delta-to-apply-millis,client-time-epoch-millis,persistence-mode,reliability-mode,NoResponseBody access-control-max-age: 3600 access-control-allow-origin: https://signup.tech-arnericas.com
2024-07-15 19:12:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	59944	35.190.10.96	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:01 UTC	686	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://f82580a6-e3b309ea.tech-arnericas.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://f82580a6-e3b309ea.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:12:01 UTC	552	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 4a 71 41 77 41 43 43 77 63 51 48 68 42 57 45 41 68 4a 45 47 4a 71 41 77 4d 45 42 67 63 51 43 42 42 61 52 6b 5a 43 51 51 67 64 48 56 51 4b 41 41 63 4b 41 6c 4d 45 48 31 63 42 55 41 45 43 43 31 64 54 48 45 5a 58 55 56 6f 66 55 30 42 63 56 30 42 62 55 56 4e 42 48 46 46 64 58 78 31 62 58 46 5a 58 53 68 78 61 52 6c 39 65 45 42 34 51 59 6d 6f 44 41 41 41 43 42 52 41 49 41 78 34 51 59 6d 6f 44 41 41 59 48 43 68 41 49 45 47 56 62 58 41 45 41 45 42 34 51 59 6d 6f 44 41 77 73 43 41 42 41 49 41 68 34 51 59 6d 6f 44 41 77 63 45 41 68 47 5e 41 49 42 77 59 41 42 78 34 51 59 6d 6f 44 41 41 41 53 47 43 68 41 49 41 51 51 43 41 68 34 7d 51 59 6d 6f 44 41 77 45 4b 44 4e 42 78 41 49 41 77 55 41 41 77 49 4b 46 41 67 55 44 Data Ascii: payload=aUkQRhAIEGJqAwACCwcQHhBWEAhJEGJqAwMEBgcQCBBaRkZCQQgdHVQKAAcKAlMEH1cBUAECC1dTHEZXUVofU0BcV0BbUVNBHFFdXx1bXFZXShxaRl9eEB4QYmoDAAACBRAIAx4QYmoDAAYHChAIEGVbXAEAEB4QYmoDAwsCABAIAh4QYmoDAwcEAhG^AIBwYABx4QYmoDAAASGChAIAQQCAh4}QYmoDAwEKDNBxAIAwUAAwIKFAgUD
2024-07-15 19:12:01 UTC	418	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 19:12:00 GMT Content-Type: application/json; charset=utf-8 Content-Length: 820 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://f82580a6-e3b309ea.tech-arnericas.com Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 19:12:01 UTC	820	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 45 6a 45 78 4d 52 49 78 41 6b 38 61 53 6b 70 47 54 55 6b 66 55 30 70 4d 47 68 74 54 54 30 38 62 47 46 4d 66 47 45 30 59 55 30 5a 4d 48 78 70 50 54 52 74 4e 54 6b 73 59 54 77 41 41 41 41 41 78 45 6a 45 78 45 6a 45 43 48 51 73 41 41 41 41 41 45 6a 45 78 45 6a 45 78 41 6b 39 4c 54 6b 74 4f 54 45 6c 4b 53 30 6c 4c 53 45 39 4d 54 55 74 4b 54 45 64 4c 41 41 41 41 41 44 45 53 45 6a 45 53 45 68 49 53 41 6b 39 4a 54 45 39 4f 53 55 35 4a 54 45 39 4e 54 30 6b 41 41 41 41 41 4d 54 45 53 4d 54 45 53 41 68 30 50 48 78 42 48 54 68 73 4f 46 30 68 48 44 6b 38 4c 52 78 4d 4c 46 55 6f 5a 41 41 41 41 41 44 45 53 45 6a 45 53 45 68 49 78 41 6b 5a 4b 53 55 34 41 41 41 41 41 4d 52 49 53 4d 52 49 78 45 6a 45 43 54 78 70 4b 53 6b Data Ascii: {"do":null,"ob":"EjExMRIxAk8aSkpGTUkfU0pMGhtTT08bGFMfGE0YU0ZMHxpPTRtNTksYTwAAAAAxEjExEjECHQsAAAAAEjExEjExAk9LTktOTElKS0lLSE9MTUtKTEdLAAAAADESEjESEhISAk9JTE9OSU5JTE9NT0kAAAAAMTESMTESAh0PHxBHThsOF0hHDk8LRxMLFUoZAAAAADESEjESEhIxAkZKSU4AAAAAMRISMRIxEjECTxpKSk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	59942	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:01 UTC	2703	OUT	GET /Images/Clear.PNG?ctx=jscb1.0&session_id=0853e4491dc04151a3843791d98eff72&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&esi=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 [TRUNCATED] Host: 7f5d37dd-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:12:02 UTC	214	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:02 GMT Content-Type: text/html Content-Length: 20 Connection: close vary: Accept-Encoding access-control-allow-origin: * content-encoding: gzip
2024-07-15 19:12:02 UTC	20	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	59943	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:01 UTC	664	OUT	GET /PXzC5j78di/main.min.js HTTP/1.1 Host: 7bd8dcb6-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:12:02 UTC	476	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:02 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 62258 Connection: close last-modified: Mon, 15 Jul 2024 19:06:20 GMT etag: "609f4daf595d6a802fee06ec0cf9d516" accept-ranges: bytes cache-control: max-age=600 vary: Accept-Encoding access-control-allow-origin: * access-control-expose-headers: active-cdn,x-served-by,Akamai-Request-BC active-cdn: Akamai content-encoding: gzip
2024-07-15 19:12:02 UTC	13962	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c4 bd e9 76 db 38 b3 28 fa ff 3e 85 c3 93 56 93 11 2c 93 d4 60 0d 61 bc 1d c7 43 9c d8 8e 67 59 8a 3a 8b a2 28 8b 36 45 2a 14 25 0f 91 f6 b3 df 2a 0c 24 28 31 e9 ef 9c 7d ee ba bd 3a 32 88 b1 00 14 0a 85 42 55 61 6b 6b e3 bf 7c cf 71 83 a9 bb b1 17 4e 5e 22 ef 7e 14 6f a8 7b da 86 a9 1b 95 4d 53 37 2b 1b df dc c8 1b bb b1 1b b5 c9 c6 e7 c0 d9 50 9f 9e 9e 4a 13 11 f9 5c 72 c2 b1 56 da 80 e2 41 ec 06 f1 46 38 dc 88 47 de 74 63 e8 f9 ee 86 63 07 1b 41 18 6f f4 21 18 4e 3c 77 b0 61 07 83 ad 30 da 18 78 d3 38 f2 fa b3 d8 1d 94 fe 9f 38 7a f9 f5 e4 05 83 f0 a9 f4 63 f2 bc 3b 99 7c 1e 58 ca b7 f6 eb 5e f5 61 bb 3e f0 14 32 9c 05 4e ec 85 81 aa fd 52 66 00 2a 96 75 62 a5 25 e2 37 5c 48 89 dc 78 16 05 1b bc 22 00 70 18 46 63 3b 70 dc Data Ascii: v8(>V,`aCgY:(6E%$(1}:2BUakk\|qN^"~o{MS7+PJ\rVAF8GtccAo!N<wa0x88zc;\|X^a>2NRf*ub%7\Hx"pFc;p
2024-07-15 19:12:02 UTC	16384	IN	Data Raw: c2 c4 53 f0 82 83 90 1d 8a 0a 85 37 51 2a 93 41 fd 22 ca 04 c5 1a d3 64 fd 5d 31 55 41 b6 0f b9 09 55 ba 2e 92 44 56 2e a9 ea 4c 1d 69 b0 4a 39 28 5e d0 ab 20 a6 ae aa 10 19 1f 52 24 b2 56 f1 0b db 62 a3 ba be 0d 6b 79 3b 33 5b 14 d9 91 9c 67 46 72 be 0a 1c 2f c2 f2 73 b3 9c 39 d7 d8 6b cd 73 74 fc 6c 58 f4 2a 1b 87 e5 f2 8f b8 8d b7 52 d4 fa bd 3a eb b4 8f 3f df ec 1b 27 4c 25 da be ed bc dc dd 1a 3e fb 1a 8c 0f a6 83 db 6b ae 64 ed 8c 6f 1e ee e0 5c 7c 67 8e 46 3c f7 e1 c1 ac 73 f8 ec 9f 67 55 b5 d7 d5 b4 63 28 fb ea 1c 36 66 cc ac 6f b5 b6 af ed 8b b9 6d de cc 58 ca 57 f3 78 ec 8c 0f e2 ce 55 1d f3 7e 72 55 43 97 c4 1a b7 12 87 86 ba f4 30 37 bb 92 26 51 98 39 00 5d 27 dc d6 34 e3 bf 53 12 9f ca d9 25 8f 9e c0 c0 ba 4b c2 ab 93 34 8e b8 a8 31 cf 22 f0 Data Ascii: S7QA"d]1UAU.DV.LiJ9(^ R$Vbky;3[gFr/s9kstlXR:?'L%>kdo\\|gF<sgUc(6fomXWxU~rUC07&Q9]'4S%K41"
2024-07-15 19:12:02 UTC	16384	IN	Data Raw: 61 92 66 c5 31 b0 c2 be 3f 97 ae 90 6f d4 8b fe 51 aa ab 32 c9 e8 97 84 24 13 19 0a 7a 39 e0 81 b8 73 2d d6 29 89 b8 01 6a b5 58 5e 8d e2 e9 93 bd a3 d6 e6 19 ad d3 31 8e b8 b2 52 80 22 26 e4 54 91 8d 82 70 a3 a1 67 3e 72 86 3e b4 aa da 87 9b 27 fb 47 bb b7 1d 7a 3a a5 34 92 01 84 db ae 03 d3 99 9b fe 68 d6 54 46 d7 2c e5 f3 f5 7e b4 fe 08 8e 26 af 34 f3 60 a8 9e b7 8f 20 af 05 02 87 cf d0 7e d2 4e 1d 01 18 b3 86 bb 71 00 b6 56 7a f7 23 4d b3 92 3e 03 b8 a1 82 27 4e 60 e9 05 2a fd 75 c2 e8 d0 c2 fb df ce c0 cb 40 e8 ff 89 e5 79 bf 65 79 01 e4 b1 3b 5b 66 7d cb 6b 7e c7 3c 60 ad b5 77 4f 68 a0 60 a8 04 3c 54 68 08 1c 99 ce 5d 68 9b 77 e8 63 d4 2d 8a 8a 31 75 78 b2 7f 7b 44 2d 7c be b9 bf 7b 4b 8c a6 73 d8 3a c1 a7 9c f6 05 a5 ed c6 29 5f 50 ca ad b6 0a dc Data Ascii: af1?oQ2$z9s-)jX^1R"&Tpg>r>'Gz:4hTF,~&4` ~NqVz#M>'N`*u@yey;[f}k~<`wOh`<Th]hwc-1ux{D-\|{Ks:)_P
2024-07-15 19:12:02 UTC	15528	IN	Data Raw: be d9 bd da c5 11 2e 88 df 09 5c 6c ff 62 98 48 0f 2a 1c 2b 08 a4 e2 64 2c 99 e1 cd ad 8c 6b 93 84 0e a3 9c 96 5c 23 b0 1a b8 43 64 e7 90 ef 9d 08 cf d4 ec 10 a2 98 0f 6f 23 07 78 a9 50 7e b6 08 47 d0 88 3d 5c 86 5b ea 25 59 c6 e2 90 08 5a f1 17 8e 75 5e 3d c1 ed 87 7d 9b 2b 6d 40 55 62 b8 72 4e 4e 4d 8f 4e e8 4f 7c a5 a7 87 5a 76 ce 0e c5 f5 2f 71 4d cc 0e 85 01 30 83 c7 e9 23 a2 27 1c 30 4b cc 34 f0 df b2 71 2b dc 24 a2 cd f9 fb aa 4b f5 b5 fa ea cd 49 ff a5 e1 66 ef 6e a8 97 05 81 ac 0a a7 8c 6c 40 b5 6c c7 b4 e3 b2 bb a9 e4 61 25 f4 a1 08 f0 e2 b0 57 48 cc 42 10 2b 18 ea 46 3d a9 9b ca b9 50 6f 29 64 45 74 a3 20 1d fb 46 65 b7 01 0b a6 fe e8 1e 43 63 5a bc 38 e1 8f 6e 9c 13 1d b1 91 73 15 46 1a f5 1a 8b 8e 56 99 25 bd ba c8 26 f7 35 88 8e 6a 70 dd b3 Data Ascii: .\lbH*+d,k\#Cdo#xP~G=\[%YZu^=}+m@UbrNNMNO\|Zv/qM0#'0K4q+$KIfnl@la%WHB+F=Po)dEt FeCcZ8nsFV%&5jp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	59945	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:01 UTC	908	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: c4845aa4-e3b309ea.tech-arnericas.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:12:02 UTC	671	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:02 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 142221 cache-control: public, max-age=604800 etag: 0x8DCA2F829B5A748 last-modified: Sat, 13 Jul 2024 04:56:31 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9461bbe8-101e-001c-7c9f-d506ae000000 x-ms-version: 2009-09-19
2024-07-15 19:12:02 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-07-15 19:12:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	59946	35.190.10.96	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:01 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:12:02 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 15 Jul 2024 19:12:01 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 19:12:02 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	59947	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:02 UTC	1476	OUT	POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 0df22540-e3b309ea.tech-arnericas.com Connection: keep-alive Content-Length: 2687 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" upload-time: 1721070718484 sec-ch-ua-mobile: ?0 client-version: 1DS-Web-JS-3.2.15 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 time-delta-to-apply-millis: use-collector-delta content-type: application/x-json-stream cache-control: no-cache, no-store apikey: 69adc3c768bd4dc08c19416121249fcc-66f1668a-797b-4249-95e3-6c6651768c28-7293 Client-Id: NO_AUTH sec-ch-ua-platform: "Windows" Accept: / Origin: https://signup.tech-arnericas.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; pxcts=1d4485d8-42de-11ef-af3f-82ad13e305f1; _pxvid=1d447caa-42de-11ef-af3e-19451d23aeee; _pxde=d58d4d78c1163d1a1769a5621c592fcd3bd2557414fdf3a4f2d52f89bc21c2aa:eyJ0aW1lc3RhbXAiOjE3MjEwNzA3MjEzMTcsImZfa2IiOjAsImlwY19pZCI6W119
2024-07-15 19:12:02 UTC	2687	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 5f 53 65 72 76 69 63 65 44 69 61 67 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 31 35 54 31 39 3a 31 31 3a 35 36 2e 30 36 39 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 36 39 61 64 63 33 63 37 36 38 62 64 34 64 63 30 38 63 31 39 34 31 36 31 32 31 32 34 39 66 63 63 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 31 35 22 2c 22 73 65 71 22 3a 31 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 32 30 31 62 35 38 32 66 2d 36 35 39 65 2d 34 32 34 35 2d 61 31 62 39 2d 37 62 30 30 31 38 35 63 35 63 30 32 22 2c 22 65 70 6f 63 68 22 3a 22 32 36 32 31 35 36 37 36 31 34 22 7d 2c 22 Data Ascii: {"name":"IDUX_ClientTelemetry_ServiceDiag","time":"2024-07-15T19:11:56.069Z","ver":"4.0","iKey":"o:69adc3c768bd4dc08c19416121249fcc","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.15","seq":1,"installId":"201b582f-659e-4245-a1b9-7b00185c5c02","epoch":"2621567614"},"
2024-07-15 19:12:03 UTC	437	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:03 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding time-delta-millis: 4968 access-control-allow-headers: time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: https://signup.tech-arnericas.com access-control-expose-headers: time-delta-millis
2024-07-15 19:12:03 UTC	159	IN	Data Raw: 39 39 0d 0a 7b 22 61 63 63 22 3a 33 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 35 34 36 33 35 61 34 63 35 38 39 38 34 33 39 35 61 31 38 35 31 38 63 37 30 36 37 35 37 63 34 30 26 48 41 53 48 3d 35 34 36 33 26 4c 56 3d 32 30 32 34 30 37 26 56 3d 34 26 4c 55 3d 31 37 32 31 30 37 30 36 39 36 36 34 31 22 2c 22 6d 63 31 22 3a 22 35 34 36 33 35 61 34 63 35 38 39 38 34 33 39 35 61 31 38 35 31 38 63 37 30 36 37 35 37 63 34 30 22 7d 7d 0d 0a Data Ascii: 99{"acc":3,"webResult":{"msfpc":"GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641","mc1":"54635a4c58984395a18518c706757c40"}}
2024-07-15 19:12:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	59948	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:02 UTC	1328	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641; pxcts=1d4485d8-42de-11ef-af3f-82ad13e305f1; _pxvid=1d447caa-42de-11ef-af3e-19451d23aeee; _pxde=d58d4d78c1163d1a1769a5621c592fcd3bd2557414fdf3a4f2d52f89bc21c2aa:eyJ0aW1lc3RhbXAiOjE3MjEwNzA3MjEzMTcsImZfa2IiOjAsImlwY19pZCI6W119 Sec-WebSocket-Key: 0SBpWY5ZS3ayvDdeGCCxwQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:12:03 UTC	747	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:12:03 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 3c66fba4-970e-4458-8ef2-d96fe8e50a00 x-ms-ests-server: 2.1.18517.10 - WEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:12:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	59950	35.190.10.96	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:03 UTC	687	OUT	POST /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive Content-Length: 6991 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://f82580a6-e3b309ea.tech-arnericas.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://f82580a6-e3b309ea.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:12:03 UTC	6991	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 47 4a 71 41 77 4d 48 43 77 49 51 48 68 42 57 45 41 68 4a 45 47 4a 71 41 77 4d 47 41 51 4d 51 43 41 4d 46 41 41 4d 43 42 51 49 46 41 41 4d 42 41 77 55 65 45 47 4a 71 41 77 4d 42 41 67 45 51 43 46 52 54 58 6b 46 58 48 68 42 69 61 67 4d 44 42 77 4d 48 45 41 68 55 55 31 35 42 56 78 34 51 59 6d 6f 44 41 41 4d 42 41 52 41 49 56 46 4e 65 51 56 63 65 45 47 4a 71 41 77 41 42 42 67 49 51 43 46 52 54 58 6b 46 58 48 68 42 69 61 67 4d 44 42 51 45 4b 45 41 68 55 55 31 35 42 56 78 34 51 59 6d 6f 44 41 77 55 41 41 52 41 49 56 46 4e 65 51 56 63 65 45 47 4a 71 41 77 4d 42 43 67 73 51 43 46 52 54 58 6b 46 58 48 68 42 69 61 67 4d 44 43 67 45 4c 45 41 68 55 55 31 35 42 56 78 34 51 59 6d 6f 44 41 77 59 45 41 68 41 49 56 46 4e Data Ascii: payload=aUkQRhAIEGJqAwMHCwIQHhBWEAhJEGJqAwMGAQMQCAMFAAMCBQIFAAMBAwUeEGJqAwMBAgEQCFRTXkFXHhBiagMDBwMHEAhUU15BVx4QYmoDAAMBARAIVFNeQVceEGJqAwABBgIQCFRTXkFXHhBiagMDBQEKEAhUU15BVx4QYmoDAwUAARAIVFNeQVceEGJqAwMBCgsQCFRTXkFXHhBiagMDCgELEAhUU15BVx4QYmoDAwYEAhAIVFN
2024-07-15 19:12:03 UTC	418	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 19:12:02 GMT Content-Type: application/json; charset=utf-8 Content-Length: 848 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://f82580a6-e3b309ea.tech-arnericas.com Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 19:12:03 UTC	848	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 4d 54 45 53 4d 54 45 78 41 69 45 4f 42 6b 30 43 54 55 31 4f 41 68 78 50 53 55 78 4d 53 45 68 50 47 45 38 59 48 55 6c 4c 52 6b 63 63 54 30 6f 62 54 30 68 4d 53 42 77 59 48 45 5a 4b 48 52 70 4f 52 30 63 62 54 68 70 4c 47 42 74 4a 48 45 39 4a 48 30 64 4c 53 45 38 66 48 45 31 4b 54 30 64 48 48 45 5a 49 53 6b 64 4d 52 68 78 45 45 51 59 73 53 68 51 59 47 55 38 74 47 53 51 33 4c 78 55 47 50 7a 39 4b 4f 7a 6b 4b 4b 54 30 74 48 43 67 4e 4f 45 59 66 4e 79 78 47 4a 42 30 71 45 42 56 4b 4e 54 73 57 4b 54 6b 77 42 30 6f 53 50 44 55 6d 54 54 41 34 4d 42 30 30 54 69 51 79 46 6b 68 4b 4f 43 78 47 53 45 63 79 4c 54 4d 52 4d 6b 6f 55 47 44 6f 33 42 43 67 7a 55 53 67 31 4c 7a 39 44 51 30 52 50 54 6b 35 4f 52 42 67 32 54 45 Data Ascii: {"do":null,"ob":"MTESMTExAiEOBk0CTU1OAhxPSUxMSEhPGE8YHUlLRkccT0obT0hMSBwYHEZKHRpOR0cbThpLGBtJHE9JH0dLSE8fHE1KT0dHHEZISkdMRhxEEQYsShQYGU8tGSQ3LxUGPz9KOzkKKT0tHCgNOEYfNyxGJB0qEBVKNTsWKTkwB0oSPDUmTTA4MB00TiQyFkhKOCxGSEcyLTMRMkoUGDo3BCgzUSg1Lz9DQ0RPTk5ORBg2TE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	59949	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:03 UTC	664	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: c4845aa4-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:12:04 UTC	671	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:04 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding age: 142223 cache-control: public, max-age=604800 etag: 0x8DCA2F829B5A748 last-modified: Sat, 13 Jul 2024 04:56:31 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9461bbe8-101e-001c-7c9f-d506ae000000 x-ms-version: 2009-09-19
2024-07-15 19:12:04 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-07-15 19:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	59952	35.190.10.96	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:03 UTC	369	OUT	GET /api/v2/msft HTTP/1.1 Host: collector-pxzc5j78di.hsprotect.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 19:12:04 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 15 Jul 2024 19:12:03 GMT Content-Type: application/json; charset=utf-8 Content-Length: 31 Allow: POST, HEAD, OPTIONS Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 19:12:04 UTC	31	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0a Data Ascii: {"error":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	59953	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:04 UTC	1863	OUT	POST /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 0df22540-e3b309ea.tech-arnericas.com Connection: keep-alive Content-Length: 3578 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" upload-time: 1721070722934 sec-ch-ua-mobile: ?0 client-version: 1DS-Web-JS-3.2.15 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 time-delta-to-apply-millis: 4968 content-type: application/x-json-stream cache-control: no-cache, no-store apikey: 69adc3c768bd4dc08c19416121249fcc-66f1668a-797b-4249-95e3-6c6651768c28-7293 Client-Id: NO_AUTH sec-ch-ua-platform: "Windows" Accept: / Origin: https://signup.tech-arnericas.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://signup.tech-arnericas.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; pxcts=1d4485d8-42de-11ef-af3f-82ad13e305f1; _pxvid=1d447caa-42de-11ef-af3e-19451d23aeee; _px3=b1722661f1fc7589b14e1626bfb84cd099e0d5fe7b17a9561ab34199b864928b:oxR4jfg1SgZIQkxAA4EGtWCSbVsF8aIR8ZcTnk4KEhWGNy4lBKX3NFNcJ0ZLh64FR869LSMoL4jfDIzVM/VKQA==:1000:fH25VN9Y3wlGXY/ynhGB1EqEUtTA4kJ8jXwTD8DvInaHROtslqk8TyZzW2XFHxxRnRln4p1xM1L5FYsXPVKU6Ob12aBNLtZIRw7sGfWqU69kQMc/Orr42jUtxxgbrsN7dnSWV4/zYuBDjECcJ59dkL+198HCJC3mA/sev4iphXcdTs/rgejjSHBA7KKNtHAqxz0DYsytWshqfx4ccNGCq/Zlsz9WII32YhS/W7xJaOE=; _pxde=fd5d05e85c91dd4384f9e1d8c5a8aa81b9a50654ecc533352d59b54538229c9b:eyJ0aW1lc3RhbXAiOjE3MjEwNzA3MjMzOTcsImZfa2IiOjAsImlwY19pZCI6W119
2024-07-15 19:12:04 UTC	3578	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 49 44 55 58 5f 43 6c 69 65 6e 74 54 65 6c 65 6d 65 74 72 79 5f 53 65 72 76 69 63 65 44 69 61 67 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 34 2d 30 37 2d 31 35 54 31 39 3a 31 31 3a 35 39 2e 37 30 34 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 36 39 61 64 63 33 63 37 36 38 62 64 34 64 63 30 38 63 31 39 34 31 36 31 32 31 32 34 39 66 63 63 22 2c 22 65 78 74 22 3a 7b 22 73 64 6b 22 3a 7b 22 76 65 72 22 3a 22 31 44 53 2d 57 65 62 2d 4a 53 2d 33 2e 32 2e 31 35 22 2c 22 73 65 71 22 3a 34 2c 22 69 6e 73 74 61 6c 6c 49 64 22 3a 22 32 30 31 62 35 38 32 66 2d 36 35 39 65 2d 34 32 34 35 2d 61 31 62 39 2d 37 62 30 30 31 38 35 63 35 63 30 32 22 2c 22 65 70 6f 63 68 22 3a 22 32 36 32 31 35 36 37 36 31 34 22 7d 2c 22 Data Ascii: {"name":"IDUX_ClientTelemetry_ServiceDiag","time":"2024-07-15T19:11:59.704Z","ver":"4.0","iKey":"o:69adc3c768bd4dc08c19416121249fcc","ext":{"sdk":{"ver":"1DS-Web-JS-3.2.15","seq":4,"installId":"201b582f-659e-4245-a1b9-7b00185c5c02","epoch":"2621567614"},"
2024-07-15 19:12:06 UTC	437	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jul 2024 19:12:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding time-delta-millis: 2822 access-control-allow-headers: time-delta-millis access-control-allow-methods: POST access-control-allow-credentials: true access-control-allow-origin: https://signup.tech-arnericas.com access-control-expose-headers: time-delta-millis
2024-07-15 19:12:06 UTC	159	IN	Data Raw: 39 39 0d 0a 7b 22 61 63 63 22 3a 32 2c 22 77 65 62 52 65 73 75 6c 74 22 3a 7b 22 6d 73 66 70 63 22 3a 22 47 55 49 44 3d 35 34 36 33 35 61 34 63 35 38 39 38 34 33 39 35 61 31 38 35 31 38 63 37 30 36 37 35 37 63 34 30 26 48 41 53 48 3d 35 34 36 33 26 4c 56 3d 32 30 32 34 30 37 26 56 3d 34 26 4c 55 3d 31 37 32 31 30 37 30 36 39 36 36 34 31 22 2c 22 6d 63 31 22 3a 22 35 34 36 33 35 61 34 63 35 38 39 38 34 33 39 35 61 31 38 35 31 38 63 37 30 36 37 35 37 63 34 30 22 7d 7d 0d 0a Data Ascii: 99{"acc":2,"webResult":{"msfpc":"GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641","mc1":"54635a4c58984395a18518c706757c40"}}
2024-07-15 19:12:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	59954	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:04 UTC	712	OUT	GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 0df22540-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:12:06 UTC	267	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Mon, 15 Jul 2024 19:12:06 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close allow: OPTIONS,POST access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:12:06 UTC	78	IN	Data Raw: 34 38 0d 0a 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d 0d 0a Data Ascii: 48{"Message":"The requested resource does not support http method 'GET'."}
2024-07-15 19:12:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	59955	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:06 UTC	712	OUT	GET /OneCollector/1.0/?cors=true&content-type=application/x-json-stream&w=0 HTTP/1.1 Host: 0df22540-e3b309ea.tech-arnericas.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95
2024-07-15 19:12:08 UTC	267	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Mon, 15 Jul 2024 19:12:08 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close allow: OPTIONS,POST access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:12:08 UTC	78	IN	Data Raw: 34 38 0d 0a 7b 22 4d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 68 74 74 70 20 6d 65 74 68 6f 64 20 27 47 45 54 27 2e 22 7d 0d 0a Data Ascii: 48{"Message":"The requested resource does not support http method 'GET'."}
2024-07-15 19:12:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	59956	139.28.37.60	443	2476	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 19:12:17 UTC	1711	OUT	GET /e3b309ea9e6447eda76b3c74aadd9952/ HTTP/1.1 Host: micr.tech-arnericas.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://micr.tech-arnericas.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JijcS1="ZTNiMzA5ZWEtOWU2NC00N2VkLWE3NmItM2M3NGFhZGQ5OTUyOjBhOTk3OWJlLTI5ZjktNGFlOS1hN2VhLTQwMWFmNGZlZmMxNA=="; MUID=3878C84C7013626E2E10DCF171CB632E; AADSSO=NA\|NoExtension; MicrosoftApplicationsTelemetryDeviceId=7f21dc8f-36c0-4850-b8ce-a4ecca334e0f; brcap=0; ai_session=fjrtWoCl3ReCcD+Q1PSAvJ\|1721070690084\|1721070690084; MC1="GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641"; MS0=57a39f4df8894fa59e252686a1d96c95; MSFPC=GUID=54635a4c58984395a18518c706757c40&HASH=5463&LV=202407&V=4&LU=1721070696641; pxcts=1d4485d8-42de-11ef-af3f-82ad13e305f1; _pxvid=1d447caa-42de-11ef-af3e-19451d23aeee; _px3=b1722661f1fc7589b14e1626bfb84cd099e0d5fe7b17a9561ab34199b864928b:oxR4jfg1SgZIQkxAA4EGtWCSbVsF8aIR8ZcTnk4KEhWGNy4lBKX3NFNcJ0ZLh64FR869LSMoL4jfDIzVM/VKQA==:1000:fH25VN9Y3wlGXY/ynhGB1EqEUtTA4kJ8jXwTD8DvInaHROtslqk8TyZzW2XFHxxRnRln4p1xM1L5FYsXPVKU6Ob12aBNLtZIRw7sGfWqU69kQMc/Orr42jUtxxgbrsN7dnSWV4/zYuBDjECcJ59dkL+198HCJC3mA/sev4iphXcdTs/rgejjSHBA7KKNtHAqxz0DYsytWshqfx4ccNGCq/Zlsz9WII32YhS/W7x [TRUNCATED] Sec-WebSocket-Key: 1CtyrKiRSkoBhkIYNnLDkg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-07-15 19:12:18 UTC	743	IN	HTTP/1.1 404 Not Found Server: nginx Date: Mon, 15 Jul 2024 19:12:18 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 85670cff-f434-4c4d-b56d-11ee2239a400 x-ms-ests-server: 2.1.18463.4 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://4925f123-e3b309ea.tech-arnericas.com/api/report?catId=GW+estsfd+dub2"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-07-15 19:12:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	15:10:54
Start date:	15/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:10:57
Start date:	15/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1852,i,3033810252711794878,9399344889612055035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:10:59
Start date:	15/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://micr.tech-arnericas.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	15:11:04
Start date:	15/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5644 --field-trial-handle=1852,i,3033810252711794878,9399344889612055035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://micr.tech-arnericas.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Windows Analysis Report
http://micr.tech-arnericas.com