Edit tour

Windows Analysis Report
https://elat.login.em2.oraclecloud.com/

Overview

General Information

Sample URL:	https://elat.login.em2.oraclecloud.com/
Analysis ID:	612093
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

Found iframes

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 244 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://elat.login.em2.oraclecloud.com/ MD5: C139654B5C1438A95B321BB01AD63EF6)

chrome.exe (PID: 4528 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,4189028840944135452,11641106626661894823,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1904 /prefetch:8 MD5: C139654B5C1438A95B321BB01AD63EF6)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 20 Apr 2022 13:07:04 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 196Connection: closeReferrer-Policy: same-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains

Source: manifest.json0.1.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://accounts.google.com
Source: craw_window.js.1.dr	String found in binary or memory: https://accounts.google.com/MergeSession
Source: manifest.json0.1.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://apis.google.com
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://clients2.google.com
Source: manifest.json0.1.dr, manifest.json.1.dr	String found in binary or memory: https://clients2.google.com/service/update2/crx
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://clients2.googleusercontent.com
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr	String found in binary or memory: https://content-autofill.googleapis.com
Source: manifest.json0.1.dr	String found in binary or memory: https://content.googleapis.com
Source: 43013056-4f43-4af5-9f3a-aeb22d50a6a2.tmp.2.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr, a0170a41-83ef-4e17-8b2c-417280d237d3.tmp.2.dr	String found in binary or memory: https://dns.google
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.fa.em2.oraclecloud.com/fscmUI/adfAuthentication?level=FORM&success_url=%2FfscmUI%2Fface
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.fa.em2.oraclecloud.com/fscmUI/faces/AtkHomePageWelcome2
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.fa.em2.oraclecloud.com/fscmUI/faces/AtkHomePageWelcome?_afrLoop=8019665397123558&_afrWi
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.fa.em2.oraclecloud.com/hcmCore/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.o
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.ora
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.fa.em2.oraclecloud.com/homePage/faces/AtkHomePageWelcome2
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.fa.em2.oraclecloud.com/obrar.cgi?encreply=gI/jvlgNsGnALkfFF06VNepo/JilFZuskf1eg
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.login.em2.oraclecloud.com/2
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DE2QgCGG7vB7rys%2B2y05ELHml6
Source: History Provider Cache.1.dr	String found in binary or memory: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowr
Source: manifest.json0.1.dr	String found in binary or memory: https://feedback.googleusercontent.com
Source: f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: manifest.json0.1.dr	String found in binary or memory: https://fonts.googleapis.com;
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: manifest.json0.1.dr	String found in binary or memory: https://fonts.gstatic.com;
Source: craw_background.js.1.dr, craw_window.js.1.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: manifest.json0.1.dr	String found in binary or memory: https://hangouts.google.com/
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://ogs.google.com
Source: manifest.json.1.dr, craw_window.js.1.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://play.google.com
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr	String found in binary or memory: https://r5---sn-4g5edn6r.gvt1.com
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr	String found in binary or memory: https://redirector.gvt1.com
Source: manifest.json.1.dr, craw_window.js.1.dr	String found in binary or memory: https://sandbox.google.com/payments/v4/js/integrator.js
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: craw_background.js.1.dr, craw_window.js.1.dr	String found in binary or memory: https://www-googleapis-staging.sandbox.google.com
Source: manifest.json0.1.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://www.google.com
Source: manifest.json.1.dr	String found in binary or memory: https://www.google.com/
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/accounts/OAuthLogin?issueuberauth=1
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/dot2.gif
Source: craw_window.js.1.dr	String found in binary or memory: https://www.google.com/images/x2.gif
Source: craw_background.js.1.dr	String found in binary or memory: https://www.google.com/intl/en-US/chrome/blank.html
Source: manifest.json0.1.dr	String found in binary or memory: https://www.google.com;
Source: craw_background.js.1.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, craw_window.js.1.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://www.googleapis.com
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/calendar.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/cast-edu-messaging
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/chromewebstore.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/clouddevices
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/hangouts.readonly
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/meetings
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.peopleapi.readwrite
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierra
Source: manifest.json.1.dr	String found in binary or memory: https://www.googleapis.com/auth/sierrasandbox
Source: manifest.json0.1.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	String found in binary or memory: https://www.gstatic.com
Source: manifest.json0.1.dr	String found in binary or memory: https://www.gstatic.com;

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	HTTP Parser: Number of links: 0
Source: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	HTTP Parser: Number of links: 0
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: Number of links: 0
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: Number of links: 0

Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: Iframe src: /hcmUI/afr/blank.html
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: Iframe src: /hcmUI/afr/blank.html

Source: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	HTTP Parser: HTML title missing
Source: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	HTTP Parser: HTML title missing
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: HTML title missing
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: HTML title missing

Source: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	HTTP Parser: No <meta name="author".. found
Source: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	HTTP Parser: No <meta name="author".. found
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: No <meta name="author".. found
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: No <meta name="author".. found

Source: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	HTTP Parser: No <meta name="copyright".. found
Source: https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	HTTP Parser: No <meta name="copyright".. found
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: No <meta name="copyright".. found
Source: https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic			Jump to behavior

Source: unknown	HTTPS traffic detected: 20.40.129.122:443 -> 192.168.2.3:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.129.122:443 -> 192.168.2.3:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 138.1.2.10:443 -> 192.168.2.3:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 138.1.2.10:443 -> 192.168.2.3:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.72:443 -> 192.168.2.3:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.31.72:443 -> 192.168.2.3:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.209.183:443 -> 192.168.2.3:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.82.209.183:443 -> 192.168.2.3:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.213.168.66:443 -> 192.168.2.3:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.16:443 -> 192.168.2.3:49861 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.160.12:443 -> 192.168.2.3:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.3:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.3:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.3:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.40.136.238:443 -> 192.168.2.3:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.182:443 -> 192.168.2.3:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.199.120.85:443 -> 192.168.2.3:49874 version: TLS 1.2

Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.143
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 20.40.129.122
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.108.210
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.220.29

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --enable-automation "https://elat.login.em2.oraclecloud.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,4189028840944135452,11641106626661894823,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1904 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1564,4189028840944135452,11641106626661894823,131072 --lang=en-US --service-sandbox-type=network --enable-audio-service-sandbox --mojo-platform-channel-handle=1904 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	3 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Source	Detection	Scanner	Label	Link
https://elat.login.em2.oraclecloud.com/	0%	Virustotal		Browse
https://elat.login.em2.oraclecloud.com/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://dns.google	0%	URL Reputation	safe
https://www.google.com;	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
accounts.google.com	142.250.185.205	true	false	high
clients.l.google.com	142.250.185.78	true	false	high
fa-750A37A5DC58452ABD03D0897D27C591.fa-origin.ocs.oraclecloud.com	138.1.2.10	true	false	high
googlehosted.l.googleusercontent.com	142.250.185.65	true	false	high
clients2.googleusercontent.com	unknown	unknown	false	high
elat.login.em2.oraclecloud.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
elat.fa.em2.oraclecloud.com	unknown	unknown	false	high

Name	Malicious	Reputation
https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	false	high
https://elat.login.em2.oraclecloud.com/fusion_apps/global/ver16/loginJS.js	false	high
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx	false	high
https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue&_afrLoop=8019671113968701&_afrWindowMode=0&_afrWindowId=null&_adf.ctrl-state=xveydwhpv_1&_afrFS=16&_afrMT=screen&_afrMFW=1280&_afrMFH=869&_afrMFDW=1280&_afrMFDH=1024&_afrMFC=8&_afrMFCI=0&_afrMFM=0&_afrMFR=96&_afrMFG=0&_afrMFS=0&_afrMFO=0	false	high
https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowrRZ0cq4epnal5nzYAZpRBIPF0w4dSZYgHnOhlCWfhBXvFqb11OxeWj7cndXfhtfAozb5xMjZvCGD3D3YZkWrnXVonm0cPM7n6PXQNNjbKJFJz7dJzBOCxntgkL6gHqI2Uu65Jp6mqHKrU8ROkwdlrTovDnVxZsbV4cZeejO9Zt5HqoIoIxC%2BhqogTp1XI164b7NYMLWtCSGGIAmALJJuibHhhMl8SxUwVGQ%2FsgpK6et%2Bvk%2F3m6Ne1dCYiaiaL5NRKM%2BIjjETr25w%2B0eNw4eG%2FpfxMKMPSw76ODImcJiKyrDx0DMwndSFt8toZoziqJdf6z1p%2BYuKTKDXg3kwvnJS5HDHsUvFGIJhV%2FcGzFeQhvoee11typqnccHKi6LOZQD7SeDImZMBIU5ZIIazEGy%2F%2FTEo1iNoKL5MpD%2FYG7lLB0%2F3v2%2FYzdv1%2Bm08KYg3IV1EsofYiMtcxTWmMeOhtb9T2jvjTtx5VQrGYUkSbUoMK5hDA%2B8eCcyvkq0nKK%2FBMIGexEjuTqZBP4HEY%2B8Lh2Bo9a1cgVvLOVFjI5vVx%2FGMgfUZhowQnU%2BLe%2FZgutAFtHCtazOSE1jPWoiTrwuarLRf1eIOXoxRJad9W2HPfhyBjGgcmF6mklI%2FXyTHfD8%2BKoyZHIbHVJ9O1%2BgMQP8VjsA6vl1yU5j5UYZQY3Y2ohHnm4mg5S3PQunH1povzqqmS6V2CvBOzD9fqS%2BscGkk6x%2BncGuphJIFH%2FzEFdItMzxEWdFCXVvYzPJSPWRUF5%2B2gwfKU8SWd9OjX8tMzdIwB0bxJDaQCV6jaClFZMwSL7YfDcLMW56d4VXfLviJUFusp5Bh1BpeMhEi2WCdjrY4PwPSrOpo2BSZcqoGbkmPXQVrEc9UERZDkiD6ifFvWwsx3NhK2I2joX2Pkod09h5T4C%2FpvJtY5FxRcZ0GUtQHAJIVhBPD%2FKByCWEzClBGAdVNlPYUQFtkjlZRsZwX2zX58zBHkCnB%2BEMQxvmp2pTBFCtXuOq5lYWCbyFKd3rryejMiHeXKlwGPn4RMn7jM3onUvanhRGMct1xl5sy%2BptJia0XrHmLIFaOYxiLz1AJXyWYWl8q%2FwFOrFUbtyZTCyTUceI%2FavrVcsXvOJ37GBRClqf0ZWLMviMKHD8QfRzW7dtDz9gI6mL3953lDOOYcKA4oC28y1cG0GcQbJCL2mT0LqkpWM3FwmUVJlM4FprzNC8m9BeDtUt73QoW2FHQr%2BtLwJPBLpuHr%2BAO5UZSxsSFkKfBrnXfQ8tRrR%2BJX6ohJONyFWlLBgBw3BfHIEVJXYNfGVQyA8vdp%2ByGCHO%2FPDPeRnAI9o1PuAgRHeDbpc60nkGtEPg74kv7%2FkuvAZPURfexRHhaGlS0UXt1T3oro%2B7MfY42%2BPYIwl0n1FMarCDeRZeqa6SiQb4bKoMIO2CJZ2hKpe4ri3nhA7Dm1IL%2F37k54E9zu2p25NzTGrKXIWhJ%2Fmq%2Fa8SMnQry7Tx65TMmI1IXtmVR7nPnNJ4hK%2F%2BaFPkQ9bPtypX2ubANR3XHCQoRbdPfQPbjhUcU%2FjSafmCFj3ELl5wVv4pdVxkmyjWDrsHgC5jNQlTfQjsQHCKz%2BzMbg7Mw1BRlriMvcr8lNak3I1TqmTm04JP40q4XDOaGKTyYAC%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3Df45de834eca559d2e8ce3e4c5cbfb73b984d7842&ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg%3BkXjE	false	high
https://elat.login.em2.oraclecloud.com/	false	high
https://elat.login.em2.oraclecloud.com/fusion_apps/global/images/Oracle_rgb_black.svg	false	high
https://elat.login.em2.oraclecloud.com/fusion_apps/global/ver16/loginTemplate.css	false	high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1	false	high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false	high
https://elat.login.em2.oraclecloud.com/fusion_apps/global/ver16/messages.js	false	high
https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DE2QgCGG7vB7rys%2B2y05ELHml6HXOEUIn%2BrxRA7BFYK6uFiMuDj72U2bptdogIJmCBEYsyzEM95jsE7dtfNmLb5r5dExfHOjJW0gxvqHdpsURfEUheICfDHYAxVRRLlRXTOjGCdsPSBJK7ba9wh1MGjkfvQYfzg7O2yY1RyAKDk2zLHz2B7x6pLJClJpDscMF%2Bd42kQToOrjzalJryGdVFzjPeaeSZ2FpOAy9El%2FKUvfC3YenGAuOstSJU4WK%2F%2FP9Z17Z1towoCQ9nmxng8QxCkjwTP1F7yUTeGhhgqUW66L944Bvn130BU1XOZGwic5tfjnKfU444Z5v5IhG0fDoNpHIs6jEIhYqoijaoQIRBnw%3D%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3D796be3e7391421379c0c20eeda30b158dc1de0b8&ECID-Context=1.005rHMfNFqJ7U8F_v1g8yX0001EQ0005Vg%3BkXjE	false	high
https://elat.login.em2.oraclecloud.com/fusion_apps/global/images/colorstrip_redwood_desktop.png	false	high
https://elat.login.em2.oraclecloud.com/fusion_apps/global/ver16/loginTemplate_rtl.css	false	high
https://elat.login.em2.oraclecloud.com/fusion_apps/global/ver16/config.js	false	high
https://elat.login.em2.oraclecloud.com/favicon.ico	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://elat.fa.em2.oraclecloud.com/homePage/faces/AtkHomePageWelcome2	History Provider Cache.1.dr	false		high
https://www.google.com/images/cleardot.gif	craw_window.js.1.dr	false		high
https://elat.fa.em2.oraclecloud.com/fscmUI/adfAuthentication?level=FORM&success_url=%2FfscmUI%2Fface	History Provider Cache.1.dr	false		high
https://play.google.com	8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	false		high
https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DE2QgCGG7vB7rys%2B2y05ELHml6	History Provider Cache.1.dr	false		high
https://sandbox.google.com/payments/v4/js/integrator.js	manifest.json.1.dr, craw_window.js.1.dr	false		high
https://elat.fa.em2.oraclecloud.com/obrar.cgi?encreply=gI/jvlgNsGnALkfFF06VNepo/JilFZuskf1eg	History Provider Cache.1.dr	false		high
https://accounts.google.com/MergeSession	craw_window.js.1.dr	false		high
https://elat.fa.em2.oraclecloud.com/hcmCore/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.o	History Provider Cache.1.dr	false		high
https://www.google.com	manifest.json0.1.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	false		high
https://accounts.google.com	manifest.json0.1.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	false		high
https://apis.google.com	manifest.json0.1.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	false		high
https://www.google.com/accounts/OAuthLogin?issueuberauth=1	craw_window.js.1.dr	false		high
https://www-googleapis-staging.sandbox.google.com	craw_background.js.1.dr, craw_window.js.1.dr	false		high
https://clients2.google.com	8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	false		high
https://dns.google	43013056-4f43-4af5-9f3a-aeb22d50a6a2.tmp.2.dr, 8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr, a0170a41-83ef-4e17-8b2c-417280d237d3.tmp.2.dr	false	URL Reputation: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	craw_background.js.1.dr, craw_window.js.1.dr	false		high
https://www.google.com/intl/en-US/chrome/blank.html	craw_background.js.1.dr	false		high
https://elat.fa.em2.oraclecloud.com/fscmUI/faces/AtkHomePageWelcome2	History Provider Cache.1.dr	false		high
https://ogs.google.com	8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	false		high
https://payments.google.com/payments/v4/js/integrator.js	manifest.json.1.dr, craw_window.js.1.dr	false		high
https://www.google.com;	manifest.json0.1.dr	false	Avira URL Cloud: safe	low
https://hangouts.google.com/	manifest.json0.1.dr	false		high
https://www.google.com/images/x2.gif	craw_window.js.1.dr	false		high
https://elat.login.em2.oraclecloud.com/2	History Provider Cache.1.dr	false		high
https://www.google.com/images/dot2.gif	craw_window.js.1.dr	false		high
https://elat.fa.em2.oraclecloud.com/hcmUI/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.ora	History Provider Cache.1.dr	false		high
https://elat.fa.em2.oraclecloud.com/fscmUI/faces/AtkHomePageWelcome?_afrLoop=8019665397123558&_afrWi	History Provider Cache.1.dr	false		high
https://clients2.googleusercontent.com	8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp.2.dr, f506034a-90a4-453a-98f5-1ed74b6e50b2.tmp.2.dr	false		high
https://www.google.com/	manifest.json.1.dr	false		high
https://feedback.googleusercontent.com	manifest.json0.1.dr	false		high
https://elat.login.em2.oraclecloud.com/oam/server/obrareq.cgi?encquery%3DcVaa3zhXR6lV8dc30FNvTXQwowr	History Provider Cache.1.dr	false		high
https://clients2.google.com/service/update2/crx	manifest.json0.1.dr, manifest.json.1.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	clients.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.205	accounts.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
138.1.2.10	fa-750A37A5DC58452ABD03D0897D27C591.fa-origin.ocs.oraclecloud.com	United States	31898	ORACLE-BMC-31898US	false
142.250.185.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Joe Sandbox Version:	34.0.0 Boulder Opal
Analysis ID:	612093
Start date and time: 20/04/202215:05:38	2022-04-20 15:05:38 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 24s
Hypervisor based Inspection enabled:	false
Report type:	light
Cookbook file name:	browseurl.jbs
Sample URL:	https://elat.login.em2.oraclecloud.com/
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@28/146@7/9
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Adjust boot time Enable AMSI Browse: https://elat.fa.em2.oraclecloud.com/hcmCore/faces/ForgotPassword?backUrl=https%3A%2F%2Felat.fa.em2.oraclecloud.com%2FfscmUI%2FadfAuthentication%3Flevel%3DFORM%26success_url%3D%252FfscmUI%252Ffaces%252FAtkHomePageWelcome%253F_afrLoop%253D8019665397123558%2526_afrWindowMode%253D0%2526_afrWindowId%253Dnull%2526_adf.ctrl-state%253D17ya1k2qr4_1%2526_afrFS%253D16%2526_afrMT%253Dscreen%2526_afrMFW%253D1280%2526_afrMFH%253D869%2526_afrMFDW%253D1280%2526_afrMFDH%253D1024%2526_afrMFC%253D8%2526_afrMFCI%253D0%2526_afrMFM%253D0%2526_afrMFR%253D96%2526_afrMFG%253D0%2526_afrMFS%253D0%2526_afrMFO%253D0%2526_adf.no-new-window-redirect%253Dtrue

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	451603
Entropy (8bit):	5.009711072558331
Encrypted:	false
SSDEEP:	12288:ZHfRTyGZ6lup8Cfrvq4JBPKh+FBlESBw4p6:NfOCzvRKhGvwJ
MD5:	A78AD14E77147E7DE3647E61964C0335
SHA1:	CECC3DD41F4CEA0192B24300C71E1911BD4FCE45
SHA-256:	0D6803758FF8F87081FAFD62E90F0950DFB2DD7991E9607FE76A8F92D0E893FA
SHA-512:	DDE24D5AD50D68FC91E9E325D31E66EF8F624B6BB3A07D14FFED1104D3AB5F4EF1D7969A5CDE0DFBB19CB31C506F7DE97AF67C2F244F7E7E8E10648EA8321101
Malicious:	false
Reputation:	low
Preview:	BDic.... ....6...."..Z..4g....6.2...{/...3...5....AF 1363.AF nm.AF pt.AF n1.AF p.AF tc.AF SM.AF M.AF S.AF MS.AF MNR.AF GDS.AF MNT.AF MH.AF MR.AF SZMR.AF MJ.AF MT.AF MY.AF MRZ.AF MN.AF MG.AF RM.AF N.AF MV.AF XM.AF DSM.AF SD.AF G.AF R.AF MNX.AF MRS.AF MD.AF MNRB.AF B.AF ZSMR.AF PM.AF SMNGJ.AF SMN.AF ZMR.AF SMGB.AF MZR.AF GM.AF SMR.AF SMDG.AF RMZ.AF ZM.AF MDG.AF MDT.AF SMNXT.AF SDY.AF LSDG.AF LGDS.AF GLDS.AF UY.AF U.AF DSGNX.AF GNDSX.AF DSG.AF Y.AF GS.AF IEMS.AF YP.AF ZGDRS.AF XGNVDS.AF UT.AF GNDS.AF GVDS.AF MYPS.AF XGNDS.AF TPRY.AF MDSG.AF ZGSDR.AF DYSG.AF PMYTNS.AF AGDS.AF DRZGS.AF PY.AF GSPMDY.AF EGVDS.AF SL.AF GNXDS.AF DSBG.AF IM.AF I.AF MDGS.AF SMY.AF DSGN.AF DSLG.AF GMDS.AF MDSBG.AF SGD.AF IY.AF P.AF DSMG.AF BLZGDRS.AF TR.AF AGSD.AF ZGBDRSL.AF PTRY.AF ASDGV.AF ASM.AF ICANGSD.AF ICAM.AF IKY.AF AMS.AF PMYTRS.AF BZGVDRS.AF SDRBZG.AF GVMDS.AF PSM.AF DGLS.AF GNVXDS.AF AGDSL.AF DGS.AF XDSGNV.AF BZGDRS.AF AM.AF AS.AF A.AF LDSG.AF AGVDS.AF SDG.AF LDSMG.AF EDSMG.AF EY.AF DRSMZG.AF PRYT.AF LZ

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 20, 2022 15:06:46.532391071 CEST	49693	443	192.168.2.3	40.126.31.143
Apr 20, 2022 15:06:46.610029936 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.610085964 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.610202074 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.610646963 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.610678911 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.610755920 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.613554955 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.613578081 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.613687038 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.613718987 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.732239962 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.732470989 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.732709885 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.732822895 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.765829086 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.765886068 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.766438007 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.766554117 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.767676115 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.768296957 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.768326044 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.768526077 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.768551111 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.768712044 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.768810987 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.810231924 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.881043911 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.881140947 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.881194115 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.881220102 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.882752895 CEST	49702	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.882777929 CEST	443	49702	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.934648991 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.934698105 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.934724092 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.934854031 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.934887886 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.934900999 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.934963942 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.964010000 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.964062929 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.964149952 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.964246988 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.964279890 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.964299917 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.964402914 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.964409113 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.992934942 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.993020058 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:46.993139029 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:46.993189096 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:47.092731953 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:47.092761040 CEST	443	49703	20.40.129.122	192.168.2.3
Apr 20, 2022 15:06:47.092814922 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:47.092833042 CEST	49703	443	192.168.2.3	20.40.129.122
Apr 20, 2022 15:06:48.118107080 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118247986 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118278980 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118304968 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118331909 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118405104 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118422031 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118426085 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118446112 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118464947 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.118499041 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.134031057 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134073019 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134098053 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134120941 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134145975 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134201050 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134224892 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134284019 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134505987 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134629011 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134653091 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134675980 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134697914 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134773970 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134850979 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134875059 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.134927034 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135019064 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135044098 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135082960 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135104895 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135174990 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135175943 CEST	49697	443	192.168.2.3	204.79.197.200
Apr 20, 2022 15:06:48.135199070 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135277033 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135302067 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135324001 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135361910 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135457039 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135482073 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135538101 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135615110 CEST	443	49697	204.79.197.200	192.168.2.3
Apr 20, 2022 15:06:48.135694027 CEST	443	49697	204.79.197.200	192.168.2.3

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 20, 2022 15:06:46.530932903 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:06:47.281307936 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:00.171320915 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:00.213479996 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:00.235730886 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:00.925503969 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:00.963515997 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:00.987514019 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:01.129193068 CEST	53802	53	192.168.2.3	8.8.8.8
Apr 20, 2022 15:07:01.135863066 CEST	65266	53	192.168.2.3	8.8.8.8
Apr 20, 2022 15:07:01.147214890 CEST	53	53802	8.8.8.8	192.168.2.3
Apr 20, 2022 15:07:01.162352085 CEST	53	65266	8.8.8.8	192.168.2.3
Apr 20, 2022 15:07:01.295231104 CEST	63332	53	192.168.2.3	8.8.8.8
Apr 20, 2022 15:07:01.317408085 CEST	53	63332	8.8.8.8	192.168.2.3
Apr 20, 2022 15:07:01.676958084 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:01.713947058 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:01.744929075 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:02.254851103 CEST	63548	53	192.168.2.3	8.8.8.8
Apr 20, 2022 15:07:05.695513964 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.704879045 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:05.706537008 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:05.707998991 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:05.720747948 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.721179962 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.745826960 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.745857954 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.745873928 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.745891094 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.807384014 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.807445049 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.807466984 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.807488918 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.825016022 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.826200962 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.826261044 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.826369047 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.912281990 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.912705898 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.945065975 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.955415964 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.957453966 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.957515001 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:05.996112108 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.996509075 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:05.999320030 CEST	443	58983	142.250.185.78	192.168.2.3
Apr 20, 2022 15:07:06.454415083 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:06.457454920 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:06.460410118 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:06.498089075 CEST	58983	443	192.168.2.3	142.250.185.78
Apr 20, 2022 15:07:07.050039053 CEST	52985	53	192.168.2.3	8.8.8.8
Apr 20, 2022 15:07:07.071973085 CEST	53	52985	8.8.8.8	192.168.2.3
Apr 20, 2022 15:07:07.208729982 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:07.209458113 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:07.224378109 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:08.417705059 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:08.714565992 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:08.718854904 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:09.168884039 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:09.464878082 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:09.470886946 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:09.919933081 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:10.218005896 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:10.221950054 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:07:14.795346975 CEST	55151	53	192.168.2.3	8.8.8.8
Apr 20, 2022 15:07:15.893039942 CEST	59795	53	192.168.2.3	8.8.8.8
Apr 20, 2022 15:07:15.920142889 CEST	53	59795	8.8.8.8	192.168.2.3
Apr 20, 2022 15:07:59.448012114 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:08:00.197423935 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:08:00.963087082 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:08:20.062535048 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:08:20.821409941 CEST	137	137	192.168.2.3	192.168.2.255
Apr 20, 2022 15:08:21.572649002 CEST	137	137	192.168.2.3	192.168.2.255

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:06:46 UTC	0	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=314559&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220308T163202Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=bf876cad5c3e4e57902b0df5142ccc4e&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1418352&metered=false&nettype=ethernet&npid=sc-314559&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1418352&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32319&sc=6 Cache-Control: no-cache MS-CV: WH6WAQb2JEKZuwxU.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-04-20 13:06:46 UTC	3	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=838 Content-Length: 53754 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"2,P425106554-T700342084-C128000000001392709+B+P80+S1,P425106558-T700342085-C128000000001392729+B+P80+S2"},{"BATCH_REDIRECT_STORE":"1,BB_9NXQXXLFST89_9WZDNCRFHVFW_9WZDNCRFJ3P2_9NCBCSZSJRSB_9NMPJ99VJBWV_9NBLGGH5FV99_9WZDNCRDFNG7+P0+S0"},{"BATCH_REDIRECT_STORE":"1,BB_9NBLGGGZM6WM_9WZDNCRFHWD2_9NH2GPH4JZS4_9NBLGGH6J6VK_9P6RC76MSMMJ_9WZDNCRFJ27N_9N0866FS04W8_9WZDNCRFJ10M_9WZDNCRFJ140_9NC2FBTHCJV8_9NBLGGH1CQ7L+P0+S0"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: MAVCXpvEVMBKltCIHQVXrpnAW7On/rh17yOAZ2yJ6mhv7cP113105tOtAi8R+eTzEB3n18v2B1LjvfXZSpl0Mn7A/KMRG4ZrqIi9Z5FAtSPLf7cNHwe2UtfEvoVQ3Cxq22+Q8BljlglTUtG298Sv/mmv/ZCkHvBxH1gJtsHUEUOLNk3+hp6LyxyH8PheI7Lyxd9S4Mh3geFWQKeW9nrrGBAlj1KeaI94aKdH2SMmbPe2Ola3BWgakXw6dI/JKooHJvC/M9ZoaWcOFGB0Yjtgm09gpb8tKpdDFTu+gCE77yuTvV8OMNS4UmbCiBmbN81N3mbYJdsBXAEiGLMXKttF4w== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Apr 2022 13:06:46 GMT Connection: close
2022-04-20 13:06:46 UTC	4	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 73 74 6f 72 65 43 61 6d 70 61 69 67 6e 49 64 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 69 73 4f 70 74 69 6f 6e 61 6c 5c 22 3a 74 72 75 65 7d 2c 5c 22 69 6e 73 74 61 6c 6c 41 70 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 62 6f 6f 6c 65 61 6e 5c Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"u\":\"SubscribedContent\",\"c\":\"CDM\"}],\"ad\":{\"itemPropertyManifest\":{\"storeCampaignId\":{\"type\":\"text\",\"isOptional\":true},\"installApp\":{\"type\":\"boolean\
2022-04-20 13:06:46 UTC	19	IN	Data Raw: 22 3a 5c 22 63 6c 69 63 6b 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 5c 22 75 72 69 5c 22 3a 5c 22 6d 73 2d 77 69 6e 64 6f 77 73 2d 73 74 6f 72 65 3a 5c 2f 5c 2f 70 64 70 5c 2f 3f 70 72 6f 64 75 63 74 69 64 3d 39 6e 62 6c 67 67 68 35 66 76 39 39 26 6f 63 69 64 3d 65 6d 73 2e 64 63 6f 2e 73 74 61 72 74 70 72 6f 67 72 61 6d 6d 61 62 6c 65 26 63 63 69 64 3d 32 33 37 36 30 63 63 38 66 63 64 39 34 63 39 63 39 66 39 64 34 33 63 64 31 32 33 38 32 66 61 30 26 63 69 64 3d 6d 73 66 74 5f 31 5c 22 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6c 61 75 6e 63 68 55 72 69 5c 22 7d 2c 5c 22 6f 6e 52 65 6e 64 65 72 5c 22 3a 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 6f 70 70 6f 72 74 75 6e 69 74 79 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 7d 2c Data Ascii: ":\"click\",\"parameters\":{\"uri\":\"ms-windows-store:\/\/pdp\/?productid=9nblggh5fv99&ocid=ems.dco.startprogrammable&ccid=23760cc8fcd94c9c9f9d43cd12382fa0&cid=msft_1\"},\"action\":\"launchUri\"},\"onRender\":{\"event\":\"opportunity\",\"parameters\":{},
2022-04-20 13:06:46 UTC	35	IN	Data Raw: 74 61 72 74 70 72 6f 67 72 61 6d 6d 61 62 6c 65 26 63 63 69 64 3d 37 31 33 37 63 62 37 35 66 36 66 33 34 61 65 66 38 32 37 65 61 66 36 31 61 61 33 38 30 65 36 61 26 63 69 64 3d 6d 73 66 74 5f 31 5c 22 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6c 61 75 6e 63 68 55 72 69 5c 22 7d 2c 5c 22 6f 6e 52 65 6e 64 65 72 5c 22 3a 7b 5c 22 65 76 65 6e 74 5c 22 3a 5c 22 6f 70 70 6f 72 74 75 6e 69 74 79 5c 22 2c 5c 22 70 61 72 61 6d 65 74 65 72 73 5c 22 3a 7b 7d 2c 5c 22 61 63 74 69 6f 6e 5c 22 3a 5c 22 6e 6f 4f 70 5c 22 7d 2c 5c 22 73 68 6f 77 4e 61 6d 65 4f 6e 4d 65 64 69 75 6d 54 69 6c 65 5c 22 3a 7b 5c 22 62 6f 6f 6c 5c 22 3a 74 72 75 65 7d 2c 5c 22 73 68 6f 77 4e 61 6d 65 4f 6e 57 69 64 65 54 69 6c 65 5c 22 3a 7b 5c 22 62 6f 6f 6c 5c 22 3a 74 72 75 65 7d 2c 5c Data Ascii: tartprogrammable&ccid=7137cb75f6f34aef827eaf61aa380e6a&cid=msft_1\"},\"action\":\"launchUri\"},\"onRender\":{\"event\":\"opportunity\",\"parameters\":{},\"action\":\"noOp\"},\"showNameOnMediumTile\":{\"bool\":true},\"showNameOnWideTile\":{\"bool\":true},\
2022-04-20 13:06:46 UTC	51	IN	Data Raw: 31 33 31 39 36 66 35 62 61 66 30 30 3f 66 6f 72 6d 61 74 3d 73 6f 75 72 63 65 5c 22 2c 5c 22 77 69 64 74 68 5c 22 3a 31 34 32 2c 5c 22 68 65 69 67 68 74 5c 22 3a 31 34 32 2c 5c 22 73 68 61 32 35 36 5c 22 3a 5c 22 51 50 5c 2f 4a 45 48 4a 59 57 39 38 6d 36 39 4f 4a 4c 42 42 30 59 48 33 64 78 49 6a 70 75 6d 59 72 74 74 4c 46 38 62 66 5c 2f 33 66 77 3d 5c 22 2c 5c 22 66 69 6c 65 53 69 7a 65 5c 22 3a 31 37 30 31 38 7d 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 5c 22 3a 7b 5c 22 6e 75 6d 62 65 72 5c 22 3a 32 2e 30 7d 2c 5c 22 6d 65 64 69 75 6d 54 69 6c 65 5c 22 3a 7b 5c 22 69 6d 61 67 65 5c 22 3a 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 5c 2f 69 6d 61 67 65 5c 2f 61 70 70 73 2e 33 31 32 Data Ascii: 13196f5baf00?format=source\",\"width\":142,\"height\":142,\"sha256\":\"QP\/JEHJYW98m69OJLBB0YH3dxIjpumYrttLF8bf\/3fw=\",\"fileSize\":17018},\"collection\":{\"number\":2.0},\"mediumTile\":{\"image\":\"https:\/\/store-images.s-microsoft.com\/image\/apps.312

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:04 UTC	109	OUT	GET /fusion_apps/global/ver16/messages.js HTTP/1.1 Host: elat.login.em2.oraclecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAMAuthnHintCookie=0@1650460022; OAM_ID=VERSION_5~i0unjL1yr3V7/Z4Q32ryeQ==~PaX1xfdy4yTKJn8VgaezP9/Ma0A/8OIZWRk7JIt7FRA3LeGhIDZulOeV8ob+PECcPK74TDrnTiL90VaaFXHctBmkSAc2p5CemEXORezmfXzMh2FCOYzMgVWYjIRmSW458h0/hDOjJjqGSVfy87SjKnOqwjOJiaYnOXkcNJ11fGQXlEDfZnsKxkP+NOQP1DMw2X0/msU4VvyHNsy+NvG1p8oqSDbidJGKUn78VUqYPjNmjIjx1hdsAVDfION/OLzZ2m7oI38c8tnp78vXIE/lilmpY2Hyoht1Jr3upSMANbgJt1uw63mKnr44OJftHL2bFg1ia5EUPed91piw86ZFhfKEv8Mwv1WM7df5hfFiWAoRp8W68LfnzuYE8zVBbKpt; ORA_FND_SESSION_ELAT_F=DEFAULT_PILLAR:1p48+CojchaFKaGHu9/0NhgK92U3zP3iFmWeMo1FiamuqWVgIoPRhrXfklP1s0za:1650460023116; OAM_REQ_0=VERSION_4~PwjMhkc44Tt1G2wBlhJIT8LM%2bHWrFn3Y9hbPJo3pnC7urtBqCObS3imJwEYK6%2baMSbrxXJm00eG1FZo93vCl6AHDX8VMa7gmjQ80Cw2DyNIhtmdgH6IBkrOo%2fhBBAm5Xd2%2bZW4e50Z3lPOvbd8fdpxHCotERELaljBqcBZPoTNwF%2f5rL7Fw9ZnXdjjIWRrHv5qW9V2WtZj5iW4rF3SkaeE9VbqRK4KmOykK7bjs1IMtEosF3HqFmv9nkxRYZ6AfpM5IFnrgKqPI6FkQm5XY6FgGjxxwtWaA5L6q0HjQ%2fT993QqDJznFtAEEiHyVxHD1HvRuH58jz0RH4gfNLH0P%2btwkLLmHAc6sXcjUuAH2m4P57lECVUhMpi4eKgWQpXM0hLVy0Aod91Y7Wk1pIbTxd32ldPzfSyxuqskasajhv0JmGw%2fytHjVQAETyccPJHXHx7EfA1DseIDn944hMyiit8Ie%2ftAXTHNGjqiKH0ED2sTzmNhkQ0urOCYFY8NOhhd28oiN3sc9srC61yz%2fAsdutWWEr0sznjU7psxL0s3g7vS0elwh08h3EjqG7h8JqDTsXQW9vbjEl8vx9ClrVdpQ8qsF3xCshPFG%2fdBL21vQcMK%2fwwyX%2f8npFfzfiBuwLEzO6tYR2W0ymHWzuvsx2lGdaR42Nytobu%2bbcVKapf6Qfg3Ts8poTkog7qAbuQccCVGMoh%2fDXK17thMCynIh%2fuN%2fgOiLIn3x5xdzXDbqV1E0jq%2br3w2%2b2lQzQ%2bKpi2xOwAstyohozVtZoS%2blWJmRzmtoHEScQHU1HOv%2bxNl%2fZpItOpo8%2fddMMyW%2fQ5fjQZ4SN9kfdDxL5NKslpEgpwBOQxJMVXDm%2fvMXezx7%2fVuXugzmMrswUMOqXXLla6vMMULe1IB9wIsJLAN5fL8EOoHeeRMFiFDwZORWhPLorZ1%2bxUpfV579Dc%2fd9skHgIxGLABQ6NKDq1rW%2bJJ2QxYJ4oKNLjjTtnySoKsxzIcWg6oeyPtV4iwcO2uYROZFzsuNVumW%2b7p3U7G43PNvHfrMyJSCIT2XlyIs%2bxx9OgwvRsolq%2ft9mAYcgLUmT6SnI4I0Vja4l0gUEcYaqzil1uHuunlILyb9yfqLTGOANZVqd3ytpWR1Z5Ehx5GkYIm3QMiSDDsB83vG0%2bmj7vCouaoGG7l66t%2fiYeDnZc0%2f7Qx1M9ygVTx1dfZO8d8Pqh6YAuj01cm53U19c1BTZnapdyd6Qm6Ys222N3NyQQxunuvDHWMaXfCKNiLg7LSTMNlaDxnKkCYNjTJkyQk2OdjQ5u1bZG1au2ELQhY94y5bYZBXNLRfLR9W0tHhHj%2fIjLQa4kmBeoP2ONqqk6zrf2iAiWIYqx5HU0CGSHBiga1rejTzViIVwScBz0y4YK4PbZZFGWhnZWLkH74JX4pBTBDw0e6YX2Oo5ZVPqjcEn1F9x7WXyBZtaD7oB2AE6NsaQ4Kktzfo8qt4cjXzX779DxNVEfqOpOISb7%2bgCf%2fyOlclFqQPOUFz0PdEBxNlkMcB%2bciE22qHyGwEp1mcI%2biM9g663YqoIcDxpjo8WzL%2baX2eDJ7aNfzu5cy94hl1Zv%2bwc3cQt12doR0TDuUIioA0f1knIpRGiq6t5t6frLBFNys6Zt%2barV9NkYpbKUstMxLaxIDanQCVrb0uhe7EHCXftddeSX4sAUCLtfhhi8j7tPGLBu73ZUfz0DPHrGvZEQGgf6HyhBWKPTeqJusMMYXjkhHwAf85VLdedXCLynqR8HFnTwp404RBRQo%2fOrSK%2bjLXnJVlHVWEq4eM742M%2fROC0AIpwfc7Sr%2b255VJpdNumCiT8hhnvIp5uDUQTG6g%2bxL59M6mpB%2fHiCFJUkN7BWnAOmwKugw%2bkjWeW1PRQvq3FtXwEhShuF4cUI9%2f1pK2dN0810rrbX%2bLJQ%2fMCtZZWZU5pvqC178ASMPmudCQKeE01vSPfdJo%2b3zYmxhUhO3gjcpkTz81nr3Zx9Mch2d2p0qc%2b8XspXesUQipctAx1SQd1xIiFyRwVzuLrQDeD7ZyvrBBIkpcX%2fwpAozoBqCFy69CQI%2f3rkJ7tqrRgfWUDj%2fpfTDcTYGmS2OfLcNthqpaLl6rAfqf2DqBGiYuO8Phxl7OieNgh43ZhGvXtxGMP5tsRVnaTx3gpfe2mMk1pd14O7ERqxf5CO6HTZCqS3RifX%2fmLVkQobKZfmjY331%2bTv%2f%2fkH1%2bKg5UzOkwaDu89pFNhBwbSfc4%2fy84A4YHqfxxfsPvE256nfnwWEO7FUwM2m5UjiZFyX9eU5k0CxPDBj8dDMUNpWA8BprR1bsMcv64vbeCajfmz8QpzEwtvkvlv4ottS22DVg7je2S7%2fQoN3xl1%2fvKeKfXmHqGQIlGW7dOpjFuXpSOeQHxVk5wpuwFR2q%2f3wyeaW%2bps90tOA29XtecQRjxhk2Y5bLUPKn2i9Sv8kem43ulPlzBjDFYQGyUKTck17d%2b72G4NnPPMhA3m3%2fWrkCEn2OzkHsL28rKIKhC%2fyGuW9s%2b7ltRUFzyGv%2fyyFaCTUvQ2i%2fDYSW5lkZwaC0G787grs5qZlZNi1oOdDDtE2mJO%2btpflh0tThfXr26NTCUnYGiM4ARfA7WeIa3oMYcv6t%2fF5KFjdB3xQrmT8ow1Owdc5l67Qsq%2fpSWW%2bRHYJReNAE2iKkpK1ycbm7tQ71TUa5G%2fKnfHPDQIWvSRuCEbHWeyuLW9ZiphDzgLqbyhsDgoVoTPuhxqlJmcI5iM9Mx7dXLB2%2fLZa3vPNxltrK1G2E%2fi%2bxnTO2yMm5YxCihxXVWKFxZRRvpRXCgP%2fTotLFeBh7Zr10yV6wIYkQHow38Gxx9HWHi2LqtzkKBCt4%2bgEMHPXXI80%2b7Sg%2bSA0pBahd3vog0ZQdil0UjiIM0pNJH9WF1OpmMjiz%2bkjGTPzKgIXOSKv23uB1m4j37JKx2AfPH8YH0uwFGY%2bY5FW%2bF6UjxIVzHCiV68Bn4ta3UkHo4MykugnsJiWThAB95UFkt%2f%2f%2ffPLRCGDXCgIq7ZZcP46lNwjQKRp0H7nQ6zKWnKqYfnov5SrayHkL5aBzkud7ehkSRhkJpKRDQBWkXyqIw5RN4INEIkWywfcgZlfZ9Kmasm51IDtMI1jOAajyxylGIu40O%2bK2PBYAN7vJ1oOehffe%2fKPIjCWFz5ZeyNLc0whs3ZNsdwB21aT6YeZNX8RwsmWsFQ9t7OXxE6ncmi3NJRVmUl0%2f7PDJEJy2K3A5nYuhsN7y3GIShmnSlQSAdI3fCAm9sYAiAqRhy9A6Uc0%2f%2f5hZEVohoay6wG4cLyuuQZvcYkk3%2fysR1FhQjIQeis%2bu3B%2fkYcEr4g7ApsD%2fXU8f%2fkwdl4pIuYvr3bCl0aMJvLQo%2bh1%2b1whbbt5E5zkk89dBSAYoKcJno9C9I1MA4H0Y0%2bErMeVBNuU5g6jfEpyr4%2biUUzM3pu8wXdnYg%2bggDZtvhUjPzJYn0A94IeNy9%2fW2Gpik6dhrGqjP8eqTZOWmMKw%2fCoeOHh4gRxcmafZOt%2b3p%2fng5R6k6rd92cabq91Xxh%2fm9xCdBdefbhfD8yIjpcFfNwuzGW5WKkWlLTyqLuO4fvh7%2f5P%2f%2bsvsj4A0JRCEhG98XnFj8Jfzf4m4c34%2b106LtN7tZ8wd8c240%2bDMvzUujGLEK8VsX9mQd4nk2qKMVmpVNe8dJ%2f7vJt%2bsSEsxFrmv0yAIHFeZKuHTJR8bJtN5kEfaYM2qMf9UdcXlbnzkyEja1XMp8C90C8FEN1NGiX%2fXR78R6%2fMpbnJaLgWrwcuvqG4Mql9; OAM_REQ_1=VERSION_4~l%2bL2i500G5lsYIjkGiLMcWR2xXpBnJPapXaku4LPDHuSZBMyI1Ey77fIlFB3hGCp4lSHG2uiuu3JMVnERFhww0IUyhgtSR5XTcG8K0%2beqjHxOSDL6%2blFqj2LXqnLYgLxdSyROoaq372EGASGnpUUrYBOGXYgCQwurRSBhUx1mtt2onl6UNE7qH%2bVEFczn2cFW2gJtVFaNhDZUX4Byijl41BfaMV3ZFBirLS2AewK2f3nBdtHyjUqO8WFILgMm6nUkADV0Psku6XF3eP9dkif47dRqpX9NMFJMpHJjlB1V5OVNZx0VGY%2b0ty%2fgAuxvcGgxR%2fzVcDNjL%2bI2eNFC7gQIyyXzcRox4HBC4i3T%2fzmh0rQabVdzpJZHJPT60Gtoa%2bLxhsTsTfOJRSH3RUha2gGd4GIY2RqVkQAv90b0uvNLksofWy6K%2b3Xq5%2bd5bsxfegl%2bpaW4QR2C4E91193cALMmTiPYqhK0FvbUQfD4rK8Qy71eJH6YWzolMjiqVG9R1GqwuyRnRJ1KoYusKe18dhftnVYWjKRHa8gagZICU%2fxzwYTKQDxvcAgDIC6WzWDmVKnc6sieHmR11yoi283hcHODdVJNX1Zgw5UphH2O3XhRc4mWPKGx26jsMx4CFSNIr3Le8AAd9FrsW7gWs78jrJGX4%2bG%2b2Zm3oX%2fR6%2frHp11VJNaTdEBVJOXKSdxGJhti%2fx2EO%2b1wd0khcarkxBb4gu9TKJ%2fqsYvtXWWkyCBscjK54lBUUTp4z9%2bRye%2buOWzYglB3Qx9xft8i6n6VwSmGqN4SmzjhLaPe13Fg0NufJtDAHXT5dR%2b%2bXoyKpJ3pzCMwXYtsMFzlry%2fHNs8lilrMC3JFG7T7khkqoaWU2K%2f5YpA0guKwfiAsuI9g1n4ULC1ZzXuE%2bvmkNw8HiBRMfIKpC%2bPkUTZ1912AtX%2bVh8EF4BAQXXd2WJYJe65OZp8eYhLsLbVRyGS5RlLNXkImbATWH0tPvqiqrRc7QS9KjQYujbQmYpRYOUXKnK89gD7DGiDUTdVxzDvycx5tNs%2bZNLTj4eiwevrE0E4WJW7kBt3ZoXi6%2bMs95k%2bwmSv6ki82LEeRz6gLyBqvzJm7FQMPkFqofkuxvvz8HkbI1GAWy2RXHXMnAF6dHhbeMNP3EGL1XPtAeomo4tsK3IKDEeolvadCo58xBHdYv0Byv8L52VGtpL0vDrrVCmdbirCOIA9Ya1JCHL6Gxx4Gcw9pY%2fAmtUEVf%2fBv2gvpWl3R6gjTs7T9eRtZbdqpompuOGKedVnUZsBSroyN2dWQ2Ffsbvbo1%2bUOW1VCrMJ2UYdU%2barLdem6nAUgnhQnW1nR87XZYpb25V3cJGOtejBRtcoU0NORTXHIu7%2ba0DAK8TwfTW0LsV5V0lexsnwBEPn00OJJEZkdKGEZuO57oCiAoumMyWv9i665yjW0GW6XfWsWWhXasENTY5nfGNCuEdVj4PRtl67Iipr4jCAip0z%2btymvaq76KJopEyVLNO9yg%2ffyAimSzIwTuUw4W278Ea5cjmJSiQc6x6Ir73SamI%2b8NMNpikGkWpP%2fIEp37MNxrCl6tGpYerROYAPyjIJgnuh613nBSeIyZB1T5PhR%2f6Y0hTcZSP52%2bRacwBxedu5sl19iYl6SdGsdDSVvcpBL%2bWE%2f1YpO3qFKym6MqTWmIyiBOBkEBQNSv%2bmaWbC3SUdoXTp8kQduKw4zvree4PLZSAAmdT%2b%2b4HAmMpbyFQY2z0QcffIPcMqQINLQN%2bYLFRjs9D0Jq2Bjm6Q2Z%2bLcj9wB%2fUNGkKwix%2b%2bgsEWbi%2bYCIFjo1ERneBiNCuuVm8sidPIplM49ZhZAmptZ6hUheLxo0C3EfLL9%2fI9EyeoJ1siXQexLMxmmQCPRcKVS22jebQNh5dxihfOznK0GK8SVT%2bEn6s%2f8Nf3hPrJNOohQqfS6IDE%2fDt7DIDo4Q%2fzijPbB6WOhaL%2bOmLBwUB%2f8UVhPHw27cJRQ5Uzk2vNZl28PuCIb9cyUdAeww8Yka8izDTikk9FUZOWEw4SOd60iCr1pKKlnpbBwA%2f1hlmnr9Nmu%2bereU6DpanJOsnqpyGGhAx6M6VjT1HVIqkOHrftJruLAJ9Ga3HVlqYknNKEV1x4zl7kF8oBiuZNvbsWf7QV8nKUQkJk%2bhYKP41dxwuqj40nIBdXQTVE7OS5%2br5ClU4%2f8DspDpKpSHZT1%2bcxZdXxObDNXjhOU7sNnF%2fe6CL1BjDHbxzNQ0taBzgzUVQM%2fJr0sCGF2fnKkuSgAFtsynMMewCQtsOrOSNNYWjXJAYdZShhfM%2bDhT0J6ROmknZh9ywBRD5QKzDZJLNOi1%2f2W%2bCfvIagEklEo4Tts%2bzqgVE%2bruF82%2fJPVTsB5eMmKIMeO%2bhVrL24%2fWk9SRj3nFkpArgNhGyh%2bkV%2fWyjN8TieSqqTeLoRo%2f4c%2bpSUnl1ghdl1Y77vaZslG0gIYrEtSAW8kVoS3uNGElNhw30yrHbKLnq%2bJG488A%3d%3d; OAM_REQ_COUNT=VERSION_4~2; ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg@kXghlfCW3JOTsLKS^HOT_JLSgKCTmLTP; JSESSIONID=WcpHFVvE4G4pLJcxyEnBuccTXrrozez93c9YLSY35sjKAEtv1tj1!1546432129; ORA_FUSION_PREFS=v1.0~bG9jYWxlPWVuLXVzfmRlZmF1bHRMYW5ndWFnZU1hcmtlcj10cnVlfnByZWZlcnJlZExhbmd1YWdlPWVuLXVz
2022-04-20 13:07:04 UTC	144	IN	HTTP/1.1 200 OK Date: Wed, 20 Apr 2022 13:07:04 GMT Content-Type: application/x-javascript Content-Length: 8790 Connection: close Referrer-Policy: same-origin X-Content-Type-Options: nosniff Accept-Ranges: bytes Last-Modified: Thu, 14 Apr 2022 22:47:46 GMT X-ORACLE-DMS-ECID: 005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg X-ORACLE-DMS-RID: 0:1:4:1:3 Vary: Accept-Encoding,User-Agent X-XSS-Protection: 1; mode=block Content-Language: en Strict-Transport-Security: max-age=31536000; includeSubDomains
2022-04-20 13:07:04 UTC	144	IN	Data Raw: ef bb bf 2f 2f 20 49 4d 50 4f 52 54 41 4e 54 3a 20 49 66 20 61 6e 79 20 63 68 61 6e 67 65 20 69 73 20 6d 61 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 63 68 61 6e 67 65 20 76 61 6c 75 65 20 6f 66 20 43 53 53 5f 4a 53 5f 56 45 52 53 49 4f 4e 20 69 6e 20 0d 0a 2f 2f 20 24 53 52 43 48 4f 4d 45 2f 6e 67 61 6d 2f 73 72 63 2f 63 6f 6d 6d 6f 6e 2f 75 74 69 6c 69 74 69 65 73 2f 73 72 63 2f 6d 61 69 6e 2f 6a 61 76 61 2f 6f 72 61 63 6c 65 2f 73 65 63 75 72 69 74 79 2f 61 6d 2f 63 6f 6d 6d 6f 6e 2f 75 74 69 6c 69 74 69 65 73 2f 63 6f 6e 73 74 61 6e 74 2f 47 65 6e 65 72 69 63 43 6f 6e 73 74 61 6e 74 73 2e 6a 61 76 61 0d 0a 2f 2f 20 54 68 69 73 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 62 75 72 73 74 20 62 72 6f 77 73 65 Data Ascii: // IMPORTANT: If any change is made in this file, make sure to change value of CSS_JS_VERSION in // $SRCHOME/ngam/src/common/utilities/src/main/java/oracle/security/am/common/utilities/constant/GenericConstants.java// This is needed to burst browse
2022-04-20 13:07:04 UTC	148	IN	Data Raw: 73 65 6e 68 61 20 76 c3 a1 6c 69 64 61 20 27 3b 0d 0a 65 6d 70 74 79 50 61 73 73 77 6f 72 64 5b 20 27 70 74 2d 70 74 27 20 5d 20 3d 20 20 27 20 49 6e 74 72 6f 64 75 7a 61 20 75 6d 61 20 73 65 6e 68 61 20 76 c3 a1 6c 69 64 61 20 27 3b 0d 0a 65 6d 70 74 79 50 61 73 73 77 6f 72 64 5b 20 27 72 6f 2d 72 6f 27 20 5d 20 3d 20 20 27 20 49 6e 74 72 6f 64 75 63 65 c5 a3 69 20 70 61 72 6f 6c 61 20 76 61 6c 69 64 c4 83 27 3b 0d 0a 65 6d 70 74 79 50 61 73 73 77 6f 72 64 5b 20 27 72 75 2d 72 75 27 20 5d 20 3d 20 20 27 20 d0 92 d0 b2 d0 b5 d0 b4 d0 b8 d1 82 d0 b5 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 d0 b8 d1 82 d0 b5 d0 bb d1 8c d0 bd d1 8b d0 b9 20 d0 bf d0 b0 d1 80 d0 be d0 bb d1 8c 20 27 3b 0d 0a 65 6d 70 74 79 50 61 73 73 77 6f 72 64 5b 20 27 73 6b 2d 73 6b 27 20 Data Ascii: senha vlida ';emptyPassword[ 'pt-pt' ] = ' Introduza uma senha vlida ';emptyPassword[ 'ro-ro' ] = ' Introducei parola valid';emptyPassword[ 'ru-ru' ] = ' ';emptyPassword[ 'sk-sk'
2022-04-20 13:07:04 UTC	152	IN	Data Raw: 61 72 6b c4 99 20 27 3b 0d 0a 6c 6f 67 6f 75 74 46 61 69 6c 65 64 5b 20 27 70 74 2d 62 72 27 20 5d 20 3d 20 20 27 20 46 61 6c 68 61 20 6e 6f 20 6c 6f 67 2d 6f 75 74 2e 20 46 65 63 68 65 20 73 65 75 20 62 72 6f 77 73 65 72 20 27 3b 0d 0a 6c 6f 67 6f 75 74 46 61 69 6c 65 64 5b 20 27 70 74 2d 70 74 27 20 5d 20 3d 20 20 27 20 46 61 6c 68 61 20 6e 61 20 73 61 c3 ad 64 61 20 64 65 20 73 65 73 73 c3 a3 6f 2e 20 46 65 63 68 65 20 6f 20 6e 61 76 65 67 61 64 6f 72 20 27 3b 0d 0a 6c 6f 67 6f 75 74 46 61 69 6c 65 64 5b 20 27 72 6f 2d 72 6f 27 20 5d 20 3d 20 20 27 20 44 65 63 6f 6e 65 63 74 61 72 65 61 20 61 20 65 c5 9f 75 61 74 2e 20 c3 8e 6e 63 68 69 64 65 c5 a3 69 20 62 72 6f 77 73 65 72 75 6c 27 3b 0d 0a 6c 6f 67 6f 75 74 46 61 69 6c 65 64 5b 20 27 72 75 2d 72 75 Data Ascii: ark ';logoutFailed[ 'pt-br' ] = ' Falha no log-out. Feche seu browser ';logoutFailed[ 'pt-pt' ] = ' Falha na sada de sesso. Feche o navegador ';logoutFailed[ 'ro-ro' ] = ' Deconectarea a euat. nchidei browserul';logoutFailed[ 'ru-ru

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:04 UTC	117	OUT	GET /fusion_apps/global/ver16/loginJS.js HTTP/1.1 Host: elat.login.em2.oraclecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAMAuthnHintCookie=0@1650460022; OAM_ID=VERSION_5~i0unjL1yr3V7/Z4Q32ryeQ==~PaX1xfdy4yTKJn8VgaezP9/Ma0A/8OIZWRk7JIt7FRA3LeGhIDZulOeV8ob+PECcPK74TDrnTiL90VaaFXHctBmkSAc2p5CemEXORezmfXzMh2FCOYzMgVWYjIRmSW458h0/hDOjJjqGSVfy87SjKnOqwjOJiaYnOXkcNJ11fGQXlEDfZnsKxkP+NOQP1DMw2X0/msU4VvyHNsy+NvG1p8oqSDbidJGKUn78VUqYPjNmjIjx1hdsAVDfION/OLzZ2m7oI38c8tnp78vXIE/lilmpY2Hyoht1Jr3upSMANbgJt1uw63mKnr44OJftHL2bFg1ia5EUPed91piw86ZFhfKEv8Mwv1WM7df5hfFiWAoRp8W68LfnzuYE8zVBbKpt; ORA_FND_SESSION_ELAT_F=DEFAULT_PILLAR:1p48+CojchaFKaGHu9/0NhgK92U3zP3iFmWeMo1FiamuqWVgIoPRhrXfklP1s0za:1650460023116; OAM_REQ_0=VERSION_4~PwjMhkc44Tt1G2wBlhJIT8LM%2bHWrFn3Y9hbPJo3pnC7urtBqCObS3imJwEYK6%2baMSbrxXJm00eG1FZo93vCl6AHDX8VMa7gmjQ80Cw2DyNIhtmdgH6IBkrOo%2fhBBAm5Xd2%2bZW4e50Z3lPOvbd8fdpxHCotERELaljBqcBZPoTNwF%2f5rL7Fw9ZnXdjjIWRrHv5qW9V2WtZj5iW4rF3SkaeE9VbqRK4KmOykK7bjs1IMtEosF3HqFmv9nkxRYZ6AfpM5IFnrgKqPI6FkQm5XY6FgGjxxwtWaA5L6q0HjQ%2fT993QqDJznFtAEEiHyVxHD1HvRuH58jz0RH4gfNLH0P%2btwkLLmHAc6sXcjUuAH2m4P57lECVUhMpi4eKgWQpXM0hLVy0Aod91Y7Wk1pIbTxd32ldPzfSyxuqskasajhv0JmGw%2fytHjVQAETyccPJHXHx7EfA1DseIDn944hMyiit8Ie%2ftAXTHNGjqiKH0ED2sTzmNhkQ0urOCYFY8NOhhd28oiN3sc9srC61yz%2fAsdutWWEr0sznjU7psxL0s3g7vS0elwh08h3EjqG7h8JqDTsXQW9vbjEl8vx9ClrVdpQ8qsF3xCshPFG%2fdBL21vQcMK%2fwwyX%2f8npFfzfiBuwLEzO6tYR2W0ymHWzuvsx2lGdaR42Nytobu%2bbcVKapf6Qfg3Ts8poTkog7qAbuQccCVGMoh%2fDXK17thMCynIh%2fuN%2fgOiLIn3x5xdzXDbqV1E0jq%2br3w2%2b2lQzQ%2bKpi2xOwAstyohozVtZoS%2blWJmRzmtoHEScQHU1HOv%2bxNl%2fZpItOpo8%2fddMMyW%2fQ5fjQZ4SN9kfdDxL5NKslpEgpwBOQxJMVXDm%2fvMXezx7%2fVuXugzmMrswUMOqXXLla6vMMULe1IB9wIsJLAN5fL8EOoHeeRMFiFDwZORWhPLorZ1%2bxUpfV579Dc%2fd9skHgIxGLABQ6NKDq1rW%2bJJ2QxYJ4oKNLjjTtnySoKsxzIcWg6oeyPtV4iwcO2uYROZFzsuNVumW%2b7p3U7G43PNvHfrMyJSCIT2XlyIs%2bxx9OgwvRsolq%2ft9mAYcgLUmT6SnI4I0Vja4l0gUEcYaqzil1uHuunlILyb9yfqLTGOANZVqd3ytpWR1Z5Ehx5GkYIm3QMiSDDsB83vG0%2bmj7vCouaoGG7l66t%2fiYeDnZc0%2f7Qx1M9ygVTx1dfZO8d8Pqh6YAuj01cm53U19c1BTZnapdyd6Qm6Ys222N3NyQQxunuvDHWMaXfCKNiLg7LSTMNlaDxnKkCYNjTJkyQk2OdjQ5u1bZG1au2ELQhY94y5bYZBXNLRfLR9W0tHhHj%2fIjLQa4kmBeoP2ONqqk6zrf2iAiWIYqx5HU0CGSHBiga1rejTzViIVwScBz0y4YK4PbZZFGWhnZWLkH74JX4pBTBDw0e6YX2Oo5ZVPqjcEn1F9x7WXyBZtaD7oB2AE6NsaQ4Kktzfo8qt4cjXzX779DxNVEfqOpOISb7%2bgCf%2fyOlclFqQPOUFz0PdEBxNlkMcB%2bciE22qHyGwEp1mcI%2biM9g663YqoIcDxpjo8WzL%2baX2eDJ7aNfzu5cy94hl1Zv%2bwc3cQt12doR0TDuUIioA0f1knIpRGiq6t5t6frLBFNys6Zt%2barV9NkYpbKUstMxLaxIDanQCVrb0uhe7EHCXftddeSX4sAUCLtfhhi8j7tPGLBu73ZUfz0DPHrGvZEQGgf6HyhBWKPTeqJusMMYXjkhHwAf85VLdedXCLynqR8HFnTwp404RBRQo%2fOrSK%2bjLXnJVlHVWEq4eM742M%2fROC0AIpwfc7Sr%2b255VJpdNumCiT8hhnvIp5uDUQTG6g%2bxL59M6mpB%2fHiCFJUkN7BWnAOmwKugw%2bkjWeW1PRQvq3FtXwEhShuF4cUI9%2f1pK2dN0810rrbX%2bLJQ%2fMCtZZWZU5pvqC178ASMPmudCQKeE01vSPfdJo%2b3zYmxhUhO3gjcpkTz81nr3Zx9Mch2d2p0qc%2b8XspXesUQipctAx1SQd1xIiFyRwVzuLrQDeD7ZyvrBBIkpcX%2fwpAozoBqCFy69CQI%2f3rkJ7tqrRgfWUDj%2fpfTDcTYGmS2OfLcNthqpaLl6rAfqf2DqBGiYuO8Phxl7OieNgh43ZhGvXtxGMP5tsRVnaTx3gpfe2mMk1pd14O7ERqxf5CO6HTZCqS3RifX%2fmLVkQobKZfmjY331%2bTv%2f%2fkH1%2bKg5UzOkwaDu89pFNhBwbSfc4%2fy84A4YHqfxxfsPvE256nfnwWEO7FUwM2m5UjiZFyX9eU5k0CxPDBj8dDMUNpWA8BprR1bsMcv64vbeCajfmz8QpzEwtvkvlv4ottS22DVg7je2S7%2fQoN3xl1%2fvKeKfXmHqGQIlGW7dOpjFuXpSOeQHxVk5wpuwFR2q%2f3wyeaW%2bps90tOA29XtecQRjxhk2Y5bLUPKn2i9Sv8kem43ulPlzBjDFYQGyUKTck17d%2b72G4NnPPMhA3m3%2fWrkCEn2OzkHsL28rKIKhC%2fyGuW9s%2b7ltRUFzyGv%2fyyFaCTUvQ2i%2fDYSW5lkZwaC0G787grs5qZlZNi1oOdDDtE2mJO%2btpflh0tThfXr26NTCUnYGiM4ARfA7WeIa3oMYcv6t%2fF5KFjdB3xQrmT8ow1Owdc5l67Qsq%2fpSWW%2bRHYJReNAE2iKkpK1ycbm7tQ71TUa5G%2fKnfHPDQIWvSRuCEbHWeyuLW9ZiphDzgLqbyhsDgoVoTPuhxqlJmcI5iM9Mx7dXLB2%2fLZa3vPNxltrK1G2E%2fi%2bxnTO2yMm5YxCihxXVWKFxZRRvpRXCgP%2fTotLFeBh7Zr10yV6wIYkQHow38Gxx9HWHi2LqtzkKBCt4%2bgEMHPXXI80%2b7Sg%2bSA0pBahd3vog0ZQdil0UjiIM0pNJH9WF1OpmMjiz%2bkjGTPzKgIXOSKv23uB1m4j37JKx2AfPH8YH0uwFGY%2bY5FW%2bF6UjxIVzHCiV68Bn4ta3UkHo4MykugnsJiWThAB95UFkt%2f%2f%2ffPLRCGDXCgIq7ZZcP46lNwjQKRp0H7nQ6zKWnKqYfnov5SrayHkL5aBzkud7ehkSRhkJpKRDQBWkXyqIw5RN4INEIkWywfcgZlfZ9Kmasm51IDtMI1jOAajyxylGIu40O%2bK2PBYAN7vJ1oOehffe%2fKPIjCWFz5ZeyNLc0whs3ZNsdwB21aT6YeZNX8RwsmWsFQ9t7OXxE6ncmi3NJRVmUl0%2f7PDJEJy2K3A5nYuhsN7y3GIShmnSlQSAdI3fCAm9sYAiAqRhy9A6Uc0%2f%2f5hZEVohoay6wG4cLyuuQZvcYkk3%2fysR1FhQjIQeis%2bu3B%2fkYcEr4g7ApsD%2fXU8f%2fkwdl4pIuYvr3bCl0aMJvLQo%2bh1%2b1whbbt5E5zkk89dBSAYoKcJno9C9I1MA4H0Y0%2bErMeVBNuU5g6jfEpyr4%2biUUzM3pu8wXdnYg%2bggDZtvhUjPzJYn0A94IeNy9%2fW2Gpik6dhrGqjP8eqTZOWmMKw%2fCoeOHh4gRxcmafZOt%2b3p%2fng5R6k6rd92cabq91Xxh%2fm9xCdBdefbhfD8yIjpcFfNwuzGW5WKkWlLTyqLuO4fvh7%2f5P%2f%2bsvsj4A0JRCEhG98XnFj8Jfzf4m4c34%2b106LtN7tZ8wd8c240%2bDMvzUujGLEK8VsX9mQd4nk2qKMVmpVNe8dJ%2f7vJt%2bsSEsxFrmv0yAIHFeZKuHTJR8bJtN5kEfaYM2qMf9UdcXlbnzkyEja1XMp8C90C8FEN1NGiX%2fXR78R6%2fMpbnJaLgWrwcuvqG4Mql9; OAM_REQ_1=VERSION_4~l%2bL2i500G5lsYIjkGiLMcWR2xXpBnJPapXaku4LPDHuSZBMyI1Ey77fIlFB3hGCp4lSHG2uiuu3JMVnERFhww0IUyhgtSR5XTcG8K0%2beqjHxOSDL6%2blFqj2LXqnLYgLxdSyROoaq372EGASGnpUUrYBOGXYgCQwurRSBhUx1mtt2onl6UNE7qH%2bVEFczn2cFW2gJtVFaNhDZUX4Byijl41BfaMV3ZFBirLS2AewK2f3nBdtHyjUqO8WFILgMm6nUkADV0Psku6XF3eP9dkif47dRqpX9NMFJMpHJjlB1V5OVNZx0VGY%2b0ty%2fgAuxvcGgxR%2fzVcDNjL%2bI2eNFC7gQIyyXzcRox4HBC4i3T%2fzmh0rQabVdzpJZHJPT60Gtoa%2bLxhsTsTfOJRSH3RUha2gGd4GIY2RqVkQAv90b0uvNLksofWy6K%2b3Xq5%2bd5bsxfegl%2bpaW4QR2C4E91193cALMmTiPYqhK0FvbUQfD4rK8Qy71eJH6YWzolMjiqVG9R1GqwuyRnRJ1KoYusKe18dhftnVYWjKRHa8gagZICU%2fxzwYTKQDxvcAgDIC6WzWDmVKnc6sieHmR11yoi283hcHODdVJNX1Zgw5UphH2O3XhRc4mWPKGx26jsMx4CFSNIr3Le8AAd9FrsW7gWs78jrJGX4%2bG%2b2Zm3oX%2fR6%2frHp11VJNaTdEBVJOXKSdxGJhti%2fx2EO%2b1wd0khcarkxBb4gu9TKJ%2fqsYvtXWWkyCBscjK54lBUUTp4z9%2bRye%2buOWzYglB3Qx9xft8i6n6VwSmGqN4SmzjhLaPe13Fg0NufJtDAHXT5dR%2b%2bXoyKpJ3pzCMwXYtsMFzlry%2fHNs8lilrMC3JFG7T7khkqoaWU2K%2f5YpA0guKwfiAsuI9g1n4ULC1ZzXuE%2bvmkNw8HiBRMfIKpC%2bPkUTZ1912AtX%2bVh8EF4BAQXXd2WJYJe65OZp8eYhLsLbVRyGS5RlLNXkImbATWH0tPvqiqrRc7QS9KjQYujbQmYpRYOUXKnK89gD7DGiDUTdVxzDvycx5tNs%2bZNLTj4eiwevrE0E4WJW7kBt3ZoXi6%2bMs95k%2bwmSv6ki82LEeRz6gLyBqvzJm7FQMPkFqofkuxvvz8HkbI1GAWy2RXHXMnAF6dHhbeMNP3EGL1XPtAeomo4tsK3IKDEeolvadCo58xBHdYv0Byv8L52VGtpL0vDrrVCmdbirCOIA9Ya1JCHL6Gxx4Gcw9pY%2fAmtUEVf%2fBv2gvpWl3R6gjTs7T9eRtZbdqpompuOGKedVnUZsBSroyN2dWQ2Ffsbvbo1%2bUOW1VCrMJ2UYdU%2barLdem6nAUgnhQnW1nR87XZYpb25V3cJGOtejBRtcoU0NORTXHIu7%2ba0DAK8TwfTW0LsV5V0lexsnwBEPn00OJJEZkdKGEZuO57oCiAoumMyWv9i665yjW0GW6XfWsWWhXasENTY5nfGNCuEdVj4PRtl67Iipr4jCAip0z%2btymvaq76KJopEyVLNO9yg%2ffyAimSzIwTuUw4W278Ea5cjmJSiQc6x6Ir73SamI%2b8NMNpikGkWpP%2fIEp37MNxrCl6tGpYerROYAPyjIJgnuh613nBSeIyZB1T5PhR%2f6Y0hTcZSP52%2bRacwBxedu5sl19iYl6SdGsdDSVvcpBL%2bWE%2f1YpO3qFKym6MqTWmIyiBOBkEBQNSv%2bmaWbC3SUdoXTp8kQduKw4zvree4PLZSAAmdT%2b%2b4HAmMpbyFQY2z0QcffIPcMqQINLQN%2bYLFRjs9D0Jq2Bjm6Q2Z%2bLcj9wB%2fUNGkKwix%2b%2bgsEWbi%2bYCIFjo1ERneBiNCuuVm8sidPIplM49ZhZAmptZ6hUheLxo0C3EfLL9%2fI9EyeoJ1siXQexLMxmmQCPRcKVS22jebQNh5dxihfOznK0GK8SVT%2bEn6s%2f8Nf3hPrJNOohQqfS6IDE%2fDt7DIDo4Q%2fzijPbB6WOhaL%2bOmLBwUB%2f8UVhPHw27cJRQ5Uzk2vNZl28PuCIb9cyUdAeww8Yka8izDTikk9FUZOWEw4SOd60iCr1pKKlnpbBwA%2f1hlmnr9Nmu%2bereU6DpanJOsnqpyGGhAx6M6VjT1HVIqkOHrftJruLAJ9Ga3HVlqYknNKEV1x4zl7kF8oBiuZNvbsWf7QV8nKUQkJk%2bhYKP41dxwuqj40nIBdXQTVE7OS5%2br5ClU4%2f8DspDpKpSHZT1%2bcxZdXxObDNXjhOU7sNnF%2fe6CL1BjDHbxzNQ0taBzgzUVQM%2fJr0sCGF2fnKkuSgAFtsynMMewCQtsOrOSNNYWjXJAYdZShhfM%2bDhT0J6ROmknZh9ywBRD5QKzDZJLNOi1%2f2W%2bCfvIagEklEo4Tts%2bzqgVE%2bruF82%2fJPVTsB5eMmKIMeO%2bhVrL24%2fWk9SRj3nFkpArgNhGyh%2bkV%2fWyjN8TieSqqTeLoRo%2f4c%2bpSUnl1ghdl1Y77vaZslG0gIYrEtSAW8kVoS3uNGElNhw30yrHbKLnq%2bJG488A%3d%3d; OAM_REQ_COUNT=VERSION_4~2; ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg@kXghlfCW3JOTsLKS^HOT_JLSgKCTmLTP; JSESSIONID=WcpHFVvE4G4pLJcxyEnBuccTXrrozez93c9YLSY35sjKAEtv1tj1!1546432129; ORA_FUSION_PREFS=v1.0~bG9jYWxlPWVuLXVzfmRlZmF1bHRMYW5ndWFnZU1hcmtlcj10cnVlfnByZWZlcnJlZExhbmd1YWdlPWVuLXVz
2022-04-20 13:07:04 UTC	153	IN	HTTP/1.1 200 OK Date: Wed, 20 Apr 2022 13:07:04 GMT Content-Type: application/x-javascript Content-Length: 17156 Connection: close Referrer-Policy: same-origin X-Content-Type-Options: nosniff Accept-Ranges: bytes Last-Modified: Thu, 14 Apr 2022 22:47:46 GMT X-ORACLE-DMS-ECID: 005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg X-ORACLE-DMS-RID: 0:1:4:1:3 Vary: Accept-Encoding,User-Agent X-XSS-Protection: 1; mode=block Content-Language: en Strict-Transport-Security: max-age=31536000; includeSubDomains
2022-04-20 13:07:04 UTC	153	IN	Data Raw: 2f 2f 20 49 4d 50 4f 52 54 41 4e 54 3a 20 49 66 20 61 6e 79 20 63 68 61 6e 67 65 20 69 73 20 6d 61 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2c 20 6d 61 6b 65 20 73 75 72 65 20 74 6f 20 63 68 61 6e 67 65 20 76 61 6c 75 65 20 6f 66 20 43 53 53 5f 4a 53 5f 56 45 52 53 49 4f 4e 20 69 6e 20 0a 2f 2f 20 24 53 52 43 48 4f 4d 45 2f 6e 67 61 6d 2f 73 72 63 2f 63 6f 6d 6d 6f 6e 2f 75 74 69 6c 69 74 69 65 73 2f 73 72 63 2f 6d 61 69 6e 2f 6a 61 76 61 2f 6f 72 61 63 6c 65 2f 73 65 63 75 72 69 74 79 2f 61 6d 2f 63 6f 6d 6d 6f 6e 2f 75 74 69 6c 69 74 69 65 73 2f 63 6f 6e 73 74 61 6e 74 2f 47 65 6e 65 72 69 63 43 6f 6e 73 74 61 6e 74 73 2e 6a 61 76 61 0a 2f 2f 20 54 68 69 73 20 69 73 20 6e 65 65 64 65 64 20 74 6f 20 62 75 72 73 74 20 62 72 6f 77 73 65 72 20 63 61 63 Data Ascii: // IMPORTANT: If any change is made in this file, make sure to change value of CSS_JS_VERSION in // $SRCHOME/ngam/src/common/utilities/src/main/java/oracle/security/am/common/utilities/constant/GenericConstants.java// This is needed to burst browser cac
2022-04-20 13:07:04 UTC	165	IN	Data Raw: 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 67 69 6e 46 6f 72 6d 2e 4c 61 6e 67 75 61 67 65 73 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 2f 2f 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 61 6e 67 75 61 67 65 73 22 29 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 0a 20 20 2f 2f 64 6f 63 75 6d 65 6e 74 2e 6c 6f 67 69 6e 46 6f 72 6d 2e 4c 61 6e 67 75 61 67 65 73 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 0a 0a 0a 0a 20 20 69 66 20 28 20 68 69 64 65 4c 6f 63 61 6c 65 53 65 6c 65 63 74 20 21 3d 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 69 66 Data Ascii: = null) { document.loginForm.Languages.style.visibility="hidden"; } } //document.getElementById("languages").style.visibility="hidden"; //document.loginForm.Languages.style.visibility="hidden"; if ( hideLocaleSelect != true ) { if
2022-04-20 13:07:04 UTC	173	IN	Data Raw: 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 3b 20 7d 0a 09 09 63 61 74 63 68 28 6f 63 29 20 7b 20 6f 62 6a 48 54 54 50 52 65 71 75 65 73 74 20 3d 20 6e 75 6c 6c 3b 20 7d 0a 09 7d 0a 09 69 66 28 21 6f 62 6a 48 54 54 50 52 65 71 75 65 73 74 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0a 09 09 6f 62 6a 48 54 54 50 52 65 71 75 65 73 74 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0a 09 7d 0a 0a 09 72 65 74 75 72 6e 20 6f 62 6a 48 54 54 50 52 65 71 75 65 73 74 3b 0a 7d 0a 2f 2a 2a 0a 20 2a 20 45 73 74 61 62 6c 69 73 68 65 73 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 74 20 74 68 65 20 73 65 72 76 65 72 20 61 66 74 65 72 20 73 65 74 74 69 6e 67 20 74 Data Ascii: osoft.XMLHTTP"); }catch(oc) { objHTTPRequest = null; }}if(!objHTTPRequest && typeof XMLHttpRequest != "undefined") {objHTTPRequest = new XMLHttpRequest();}return objHTTPRequest;}/** * Establishes connection tot the server after setting t

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://elat.login.em2.oraclecloud.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic

C:\Users\user\AppData\Local\Google\Chrome\User Data\32be4f4b-07f7-405c-9fad-170c933024bd.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\3dc399e9-a984-431e-91bb-0927405f99e8.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\45bf0c52-4e82-42f1-8704-22764bcb5a3c.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\67185b27-6fbb-4033-b199-7aee576e1e60.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\9b3f547e-d57e-4ab6-aab1-bfbfced6172b.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\004e9c41-aebc-4653-8fbf-1a63d87e0e18.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\067ac679-955c-407e-b598-e751538ac496.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1ae533a5-6eb7-4fec-bb41-5eb42ec4e2ee.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8ad0ae65-185a-4a5d-a193-0b175c55b20a.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\95fcf2a0-1ddf-4f9d-8de0-b1f85af598e6.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\a0170a41-83ef-4e17-8b2c-417280d237d3.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\43013056-4f43-4af5-9f3a-aeb22d50a6a2.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State (copy)

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\c3db78ea-88d0-496c-87bc-02d679b72f5a.tmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp

C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT (copy)

Windows Analysis Report
https://elat.login.em2.oraclecloud.com/

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:04 UTC	178	OUT	GET /fusion_apps/global/images/Oracle_rgb_black.svg HTTP/1.1 Host: elat.login.em2.oraclecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAMAuthnHintCookie=0@1650460022; OAM_ID=VERSION_5~i0unjL1yr3V7/Z4Q32ryeQ==~PaX1xfdy4yTKJn8VgaezP9/Ma0A/8OIZWRk7JIt7FRA3LeGhIDZulOeV8ob+PECcPK74TDrnTiL90VaaFXHctBmkSAc2p5CemEXORezmfXzMh2FCOYzMgVWYjIRmSW458h0/hDOjJjqGSVfy87SjKnOqwjOJiaYnOXkcNJ11fGQXlEDfZnsKxkP+NOQP1DMw2X0/msU4VvyHNsy+NvG1p8oqSDbidJGKUn78VUqYPjNmjIjx1hdsAVDfION/OLzZ2m7oI38c8tnp78vXIE/lilmpY2Hyoht1Jr3upSMANbgJt1uw63mKnr44OJftHL2bFg1ia5EUPed91piw86ZFhfKEv8Mwv1WM7df5hfFiWAoRp8W68LfnzuYE8zVBbKpt; ORA_FND_SESSION_ELAT_F=DEFAULT_PILLAR:1p48+CojchaFKaGHu9/0NhgK92U3zP3iFmWeMo1FiamuqWVgIoPRhrXfklP1s0za:1650460023116; OAM_REQ_0=VERSION_4~PwjMhkc44Tt1G2wBlhJIT8LM%2bHWrFn3Y9hbPJo3pnC7urtBqCObS3imJwEYK6%2baMSbrxXJm00eG1FZo93vCl6AHDX8VMa7gmjQ80Cw2DyNIhtmdgH6IBkrOo%2fhBBAm5Xd2%2bZW4e50Z3lPOvbd8fdpxHCotERELaljBqcBZPoTNwF%2f5rL7Fw9ZnXdjjIWRrHv5qW9V2WtZj5iW4rF3SkaeE9VbqRK4KmOykK7bjs1IMtEosF3HqFmv9nkxRYZ6AfpM5IFnrgKqPI6FkQm5XY6FgGjxxwtWaA5L6q0HjQ%2fT993QqDJznFtAEEiHyVxHD1HvRuH58jz0RH4gfNLH0P%2btwkLLmHAc6sXcjUuAH2m4P57lECVUhMpi4eKgWQpXM0hLVy0Aod91Y7Wk1pIbTxd32ldPzfSyxuqskasajhv0JmGw%2fytHjVQAETyccPJHXHx7EfA1DseIDn944hMyiit8Ie%2ftAXTHNGjqiKH0ED2sTzmNhkQ0urOCYFY8NOhhd28oiN3sc9srC61yz%2fAsdutWWEr0sznjU7psxL0s3g7vS0elwh08h3EjqG7h8JqDTsXQW9vbjEl8vx9ClrVdpQ8qsF3xCshPFG%2fdBL21vQcMK%2fwwyX%2f8npFfzfiBuwLEzO6tYR2W0ymHWzuvsx2lGdaR42Nytobu%2bbcVKapf6Qfg3Ts8poTkog7qAbuQccCVGMoh%2fDXK17thMCynIh%2fuN%2fgOiLIn3x5xdzXDbqV1E0jq%2br3w2%2b2lQzQ%2bKpi2xOwAstyohozVtZoS%2blWJmRzmtoHEScQHU1HOv%2bxNl%2fZpItOpo8%2fddMMyW%2fQ5fjQZ4SN9kfdDxL5NKslpEgpwBOQxJMVXDm%2fvMXezx7%2fVuXugzmMrswUMOqXXLla6vMMULe1IB9wIsJLAN5fL8EOoHeeRMFiFDwZORWhPLorZ1%2bxUpfV579Dc%2fd9skHgIxGLABQ6NKDq1rW%2bJJ2QxYJ4oKNLjjTtnySoKsxzIcWg6oeyPtV4iwcO2uYROZFzsuNVumW%2b7p3U7G43PNvHfrMyJSCIT2XlyIs%2bxx9OgwvRsolq%2ft9mAYcgLUmT6SnI4I0Vja4l0gUEcYaqzil1uHuunlILyb9yfqLTGOANZVqd3ytpWR1Z5Ehx5GkYIm3QMiSDDsB83vG0%2bmj7vCouaoGG7l66t%2fiYeDnZc0%2f7Qx1M9ygVTx1dfZO8d8Pqh6YAuj01cm53U19c1BTZnapdyd6Qm6Ys222N3NyQQxunuvDHWMaXfCKNiLg7LSTMNlaDxnKkCYNjTJkyQk2OdjQ5u1bZG1au2ELQhY94y5bYZBXNLRfLR9W0tHhHj%2fIjLQa4kmBeoP2ONqqk6zrf2iAiWIYqx5HU0CGSHBiga1rejTzViIVwScBz0y4YK4PbZZFGWhnZWLkH74JX4pBTBDw0e6YX2Oo5ZVPqjcEn1F9x7WXyBZtaD7oB2AE6NsaQ4Kktzfo8qt4cjXzX779DxNVEfqOpOISb7%2bgCf%2fyOlclFqQPOUFz0PdEBxNlkMcB%2bciE22qHyGwEp1mcI%2biM9g663YqoIcDxpjo8WzL%2baX2eDJ7aNfzu5cy94hl1Zv%2bwc3cQt12doR0TDuUIioA0f1knIpRGiq6t5t6frLBFNys6Zt%2barV9NkYpbKUstMxLaxIDanQCVrb0uhe7EHCXftddeSX4sAUCLtfhhi8j7tPGLBu73ZUfz0DPHrGvZEQGgf6HyhBWKPTeqJusMMYXjkhHwAf85VLdedXCLynqR8HFnTwp404RBRQo%2fOrSK%2bjLXnJVlHVWEq4eM742M%2fROC0AIpwfc7Sr%2b255VJpdNumCiT8hhnvIp5uDUQTG6g%2bxL59M6mpB%2fHiCFJUkN7BWnAOmwKugw%2bkjWeW1PRQvq3FtXwEhShuF4cUI9%2f1pK2dN0810rrbX%2bLJQ%2fMCtZZWZU5pvqC178ASMPmudCQKeE01vSPfdJo%2b3zYmxhUhO3gjcpkTz81nr3Zx9Mch2d2p0qc%2b8XspXesUQipctAx1SQd1xIiFyRwVzuLrQDeD7ZyvrBBIkpcX%2fwpAozoBqCFy69CQI%2f3rkJ7tqrRgfWUDj%2fpfTDcTYGmS2OfLcNthqpaLl6rAfqf2DqBGiYuO8Phxl7OieNgh43ZhGvXtxGMP5tsRVnaTx3gpfe2mMk1pd14O7ERqxf5CO6HTZCqS3RifX%2fmLVkQobKZfmjY331%2bTv%2f%2fkH1%2bKg5UzOkwaDu89pFNhBwbSfc4%2fy84A4YHqfxxfsPvE256nfnwWEO7FUwM2m5UjiZFyX9eU5k0CxPDBj8dDMUNpWA8BprR1bsMcv64vbeCajfmz8QpzEwtvkvlv4ottS22DVg7je2S7%2fQoN3xl1%2fvKeKfXmHqGQIlGW7dOpjFuXpSOeQHxVk5wpuwFR2q%2f3wyeaW%2bps90tOA29XtecQRjxhk2Y5bLUPKn2i9Sv8kem43ulPlzBjDFYQGyUKTck17d%2b72G4NnPPMhA3m3%2fWrkCEn2OzkHsL28rKIKhC%2fyGuW9s%2b7ltRUFzyGv%2fyyFaCTUvQ2i%2fDYSW5lkZwaC0G787grs5qZlZNi1oOdDDtE2mJO%2btpflh0tThfXr26NTCUnYGiM4ARfA7WeIa3oMYcv6t%2fF5KFjdB3xQrmT8ow1Owdc5l67Qsq%2fpSWW%2bRHYJReNAE2iKkpK1ycbm7tQ71TUa5G%2fKnfHPDQIWvSRuCEbHWeyuLW9ZiphDzgLqbyhsDgoVoTPuhxqlJmcI5iM9Mx7dXLB2%2fLZa3vPNxltrK1G2E%2fi%2bxnTO2yMm5YxCihxXVWKFxZRRvpRXCgP%2fTotLFeBh7Zr10yV6wIYkQHow38Gxx9HWHi2LqtzkKBCt4%2bgEMHPXXI80%2b7Sg%2bSA0pBahd3vog0ZQdil0UjiIM0pNJH9WF1OpmMjiz%2bkjGTPzKgIXOSKv23uB1m4j37JKx2AfPH8YH0uwFGY%2bY5FW%2bF6UjxIVzHCiV68Bn4ta3UkHo4MykugnsJiWThAB95UFkt%2f%2f%2ffPLRCGDXCgIq7ZZcP46lNwjQKRp0H7nQ6zKWnKqYfnov5SrayHkL5aBzkud7ehkSRhkJpKRDQBWkXyqIw5RN4INEIkWywfcgZlfZ9Kmasm51IDtMI1jOAajyxylGIu40O%2bK2PBYAN7vJ1oOehffe%2fKPIjCWFz5ZeyNLc0whs3ZNsdwB21aT6YeZNX8RwsmWsFQ9t7OXxE6ncmi3NJRVmUl0%2f7PDJEJy2K3A5nYuhsN7y3GIShmnSlQSAdI3fCAm9sYAiAqRhy9A6Uc0%2f%2f5hZEVohoay6wG4cLyuuQZvcYkk3%2fysR1FhQjIQeis%2bu3B%2fkYcEr4g7ApsD%2fXU8f%2fkwdl4pIuYvr3bCl0aMJvLQo%2bh1%2b1whbbt5E5zkk89dBSAYoKcJno9C9I1MA4H0Y0%2bErMeVBNuU5g6jfEpyr4%2biUUzM3pu8wXdnYg%2bggDZtvhUjPzJYn0A94IeNy9%2fW2Gpik6dhrGqjP8eqTZOWmMKw%2fCoeOHh4gRxcmafZOt%2b3p%2fng5R6k6rd92cabq91Xxh%2fm9xCdBdefbhfD8yIjpcFfNwuzGW5WKkWlLTyqLuO4fvh7%2f5P%2f%2bsvsj4A0JRCEhG98XnFj8Jfzf4m4c34%2b106LtN7tZ8wd8c240%2bDMvzUujGLEK8VsX9mQd4nk2qKMVmpVNe8dJ%2f7vJt%2bsSEsxFrmv0yAIHFeZKuHTJR8bJtN5kEfaYM2qMf9UdcXlbnzkyEja1XMp8C90C8FEN1NGiX%2fXR78R6%2fMpbnJaLgWrwcuvqG4Mql9; OAM_REQ_1=VERSION_4~l%2bL2i500G5lsYIjkGiLMcWR2xXpBnJPapXaku4LPDHuSZBMyI1Ey77fIlFB3hGCp4lSHG2uiuu3JMVnERFhww0IUyhgtSR5XTcG8K0%2beqjHxOSDL6%2blFqj2LXqnLYgLxdSyROoaq372EGASGnpUUrYBOGXYgCQwurRSBhUx1mtt2onl6UNE7qH%2bVEFczn2cFW2gJtVFaNhDZUX4Byijl41BfaMV3ZFBirLS2AewK2f3nBdtHyjUqO8WFILgMm6nUkADV0Psku6XF3eP9dkif47dRqpX9NMFJMpHJjlB1V5OVNZx0VGY%2b0ty%2fgAuxvcGgxR%2fzVcDNjL%2bI2eNFC7gQIyyXzcRox4HBC4i3T%2fzmh0rQabVdzpJZHJPT60Gtoa%2bLxhsTsTfOJRSH3RUha2gGd4GIY2RqVkQAv90b0uvNLksofWy6K%2b3Xq5%2bd5bsxfegl%2bpaW4QR2C4E91193cALMmTiPYqhK0FvbUQfD4rK8Qy71eJH6YWzolMjiqVG9R1GqwuyRnRJ1KoYusKe18dhftnVYWjKRHa8gagZICU%2fxzwYTKQDxvcAgDIC6WzWDmVKnc6sieHmR11yoi283hcHODdVJNX1Zgw5UphH2O3XhRc4mWPKGx26jsMx4CFSNIr3Le8AAd9FrsW7gWs78jrJGX4%2bG%2b2Zm3oX%2fR6%2frHp11VJNaTdEBVJOXKSdxGJhti%2fx2EO%2b1wd0khcarkxBb4gu9TKJ%2fqsYvtXWWkyCBscjK54lBUUTp4z9%2bRye%2buOWzYglB3Qx9xft8i6n6VwSmGqN4SmzjhLaPe13Fg0NufJtDAHXT5dR%2b%2bXoyKpJ3pzCMwXYtsMFzlry%2fHNs8lilrMC3JFG7T7khkqoaWU2K%2f5YpA0guKwfiAsuI9g1n4ULC1ZzXuE%2bvmkNw8HiBRMfIKpC%2bPkUTZ1912AtX%2bVh8EF4BAQXXd2WJYJe65OZp8eYhLsLbVRyGS5RlLNXkImbATWH0tPvqiqrRc7QS9KjQYujbQmYpRYOUXKnK89gD7DGiDUTdVxzDvycx5tNs%2bZNLTj4eiwevrE0E4WJW7kBt3ZoXi6%2bMs95k%2bwmSv6ki82LEeRz6gLyBqvzJm7FQMPkFqofkuxvvz8HkbI1GAWy2RXHXMnAF6dHhbeMNP3EGL1XPtAeomo4tsK3IKDEeolvadCo58xBHdYv0Byv8L52VGtpL0vDrrVCmdbirCOIA9Ya1JCHL6Gxx4Gcw9pY%2fAmtUEVf%2fBv2gvpWl3R6gjTs7T9eRtZbdqpompuOGKedVnUZsBSroyN2dWQ2Ffsbvbo1%2bUOW1VCrMJ2UYdU%2barLdem6nAUgnhQnW1nR87XZYpb25V3cJGOtejBRtcoU0NORTXHIu7%2ba0DAK8TwfTW0LsV5V0lexsnwBEPn00OJJEZkdKGEZuO57oCiAoumMyWv9i665yjW0GW6XfWsWWhXasENTY5nfGNCuEdVj4PRtl67Iipr4jCAip0z%2btymvaq76KJopEyVLNO9yg%2ffyAimSzIwTuUw4W278Ea5cjmJSiQc6x6Ir73SamI%2b8NMNpikGkWpP%2fIEp37MNxrCl6tGpYerROYAPyjIJgnuh613nBSeIyZB1T5PhR%2f6Y0hTcZSP52%2bRacwBxedu5sl19iYl6SdGsdDSVvcpBL%2bWE%2f1YpO3qFKym6MqTWmIyiBOBkEBQNSv%2bmaWbC3SUdoXTp8kQduKw4zvree4PLZSAAmdT%2b%2b4HAmMpbyFQY2z0QcffIPcMqQINLQN%2bYLFRjs9D0Jq2Bjm6Q2Z%2bLcj9wB%2fUNGkKwix%2b%2bgsEWbi%2bYCIFjo1ERneBiNCuuVm8sidPIplM49ZhZAmptZ6hUheLxo0C3EfLL9%2fI9EyeoJ1siXQexLMxmmQCPRcKVS22jebQNh5dxihfOznK0GK8SVT%2bEn6s%2f8Nf3hPrJNOohQqfS6IDE%2fDt7DIDo4Q%2fzijPbB6WOhaL%2bOmLBwUB%2f8UVhPHw27cJRQ5Uzk2vNZl28PuCIb9cyUdAeww8Yka8izDTikk9FUZOWEw4SOd60iCr1pKKlnpbBwA%2f1hlmnr9Nmu%2bereU6DpanJOsnqpyGGhAx6M6VjT1HVIqkOHrftJruLAJ9Ga3HVlqYknNKEV1x4zl7kF8oBiuZNvbsWf7QV8nKUQkJk%2bhYKP41dxwuqj40nIBdXQTVE7OS5%2br5ClU4%2f8DspDpKpSHZT1%2bcxZdXxObDNXjhOU7sNnF%2fe6CL1BjDHbxzNQ0taBzgzUVQM%2fJr0sCGF2fnKkuSgAFtsynMMewCQtsOrOSNNYWjXJAYdZShhfM%2bDhT0J6ROmknZh9ywBRD5QKzDZJLNOi1%2f2W%2bCfvIagEklEo4Tts%2bzqgVE%2bruF82%2fJPVTsB5eMmKIMeO%2bhVrL24%2fWk9SRj3nFkpArgNhGyh%2bkV%2fWyjN8TieSqqTeLoRo%2f4c%2bpSUnl1ghdl1Y77vaZslG0gIYrEtSAW8kVoS3uNGElNhw30yrHbKLnq%2bJG488A%3d%3d; OAM_REQ_COUNT=VERSION_4~2; ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg@kXghlfCW3JOTsLKS^HOT_JLSgKCTmLTP; JSESSIONID=WcpHFVvE4G4pLJcxyEnBuccTXrrozez93c9YLSY35sjKAEtv1tj1!1546432129; ORA_FUSION_PREFS=v1.0~bG9jYWxlPWVuLXVzfmRlZmF1bHRMYW5ndWFnZU1hcmtlcj10cnVlfnByZWZlcnJlZExhbmd1YWdlPWVuLXVz
2022-04-20 13:07:04 UTC	194	IN	HTTP/1.1 200 OK Date: Wed, 20 Apr 2022 13:07:04 GMT Content-Type: image/svg+xml Content-Length: 909 Connection: close Referrer-Policy: same-origin X-Content-Type-Options: nosniff Accept-Ranges: bytes Last-Modified: Tue, 13 Oct 2020 22:18:22 GMT X-ORACLE-DMS-ECID: 005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg X-ORACLE-DMS-RID: 0:1:4:1:3 Vary: Accept-Encoding,User-Agent X-XSS-Protection: 1; mode=block Content-Language: en Strict-Transport-Security: max-age=31536000; includeSubDomains
2022-04-20 13:07:04 UTC	194	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 6c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 30 2e 31 35 20 33 38 2e 33 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 63 6c 73 2d 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 74 69 74 6c 65 3e 4f 72 61 63 6c 65 5f 72 67 62 5f 62 6c 61 63 6b 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 36 32 2e 32 38 2c 32 31 2e 34 34 68 37 2e 39 33 4c 36 36 2c 31 34 2e 36 38 2c 35 38 2e 33 33 2c 32 36 2e 38 39 48 35 34 2e 38 32 6c 39 2e 33 36 2d 31 34 2e 36 35 61 32 2e 32 33 2c 32 2e 32 33 2c 30 2c 30 2c 31 2c 33 2e 36 34 2c 30 6c 39 2e 33 39 2c 31 34 2e 36 38 68 2d 33 2e Data Ascii: <svg id="logo" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 140.15 38.3"><defs><style>.cls-1{fill:none;}</style></defs><title>Oracle_rgb_black</title><path d="M62.28,21.44h7.93L66,14.68,58.33,26.89H54.82l9.36-14.65a2.23,2.23,0,0,1,3.64,0l9.39,14.68h-3.

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:04 UTC	186	OUT	GET /fusion_apps/global/images/colorstrip_redwood_desktop.png HTTP/1.1 Host: elat.login.em2.oraclecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://elat.login.em2.oraclecloud.com/fusion_apps/global/ver16/loginTemplate.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAMAuthnHintCookie=0@1650460022; OAM_ID=VERSION_5~i0unjL1yr3V7/Z4Q32ryeQ==~PaX1xfdy4yTKJn8VgaezP9/Ma0A/8OIZWRk7JIt7FRA3LeGhIDZulOeV8ob+PECcPK74TDrnTiL90VaaFXHctBmkSAc2p5CemEXORezmfXzMh2FCOYzMgVWYjIRmSW458h0/hDOjJjqGSVfy87SjKnOqwjOJiaYnOXkcNJ11fGQXlEDfZnsKxkP+NOQP1DMw2X0/msU4VvyHNsy+NvG1p8oqSDbidJGKUn78VUqYPjNmjIjx1hdsAVDfION/OLzZ2m7oI38c8tnp78vXIE/lilmpY2Hyoht1Jr3upSMANbgJt1uw63mKnr44OJftHL2bFg1ia5EUPed91piw86ZFhfKEv8Mwv1WM7df5hfFiWAoRp8W68LfnzuYE8zVBbKpt; ORA_FND_SESSION_ELAT_F=DEFAULT_PILLAR:1p48+CojchaFKaGHu9/0NhgK92U3zP3iFmWeMo1FiamuqWVgIoPRhrXfklP1s0za:1650460023116; OAM_REQ_0=VERSION_4~PwjMhkc44Tt1G2wBlhJIT8LM%2bHWrFn3Y9hbPJo3pnC7urtBqCObS3imJwEYK6%2baMSbrxXJm00eG1FZo93vCl6AHDX8VMa7gmjQ80Cw2DyNIhtmdgH6IBkrOo%2fhBBAm5Xd2%2bZW4e50Z3lPOvbd8fdpxHCotERELaljBqcBZPoTNwF%2f5rL7Fw9ZnXdjjIWRrHv5qW9V2WtZj5iW4rF3SkaeE9VbqRK4KmOykK7bjs1IMtEosF3HqFmv9nkxRYZ6AfpM5IFnrgKqPI6FkQm5XY6FgGjxxwtWaA5L6q0HjQ%2fT993QqDJznFtAEEiHyVxHD1HvRuH58jz0RH4gfNLH0P%2btwkLLmHAc6sXcjUuAH2m4P57lECVUhMpi4eKgWQpXM0hLVy0Aod91Y7Wk1pIbTxd32ldPzfSyxuqskasajhv0JmGw%2fytHjVQAETyccPJHXHx7EfA1DseIDn944hMyiit8Ie%2ftAXTHNGjqiKH0ED2sTzmNhkQ0urOCYFY8NOhhd28oiN3sc9srC61yz%2fAsdutWWEr0sznjU7psxL0s3g7vS0elwh08h3EjqG7h8JqDTsXQW9vbjEl8vx9ClrVdpQ8qsF3xCshPFG%2fdBL21vQcMK%2fwwyX%2f8npFfzfiBuwLEzO6tYR2W0ymHWzuvsx2lGdaR42Nytobu%2bbcVKapf6Qfg3Ts8poTkog7qAbuQccCVGMoh%2fDXK17thMCynIh%2fuN%2fgOiLIn3x5xdzXDbqV1E0jq%2br3w2%2b2lQzQ%2bKpi2xOwAstyohozVtZoS%2blWJmRzmtoHEScQHU1HOv%2bxNl%2fZpItOpo8%2fddMMyW%2fQ5fjQZ4SN9kfdDxL5NKslpEgpwBOQxJMVXDm%2fvMXezx7%2fVuXugzmMrswUMOqXXLla6vMMULe1IB9wIsJLAN5fL8EOoHeeRMFiFDwZORWhPLorZ1%2bxUpfV579Dc%2fd9skHgIxGLABQ6NKDq1rW%2bJJ2QxYJ4oKNLjjTtnySoKsxzIcWg6oeyPtV4iwcO2uYROZFzsuNVumW%2b7p3U7G43PNvHfrMyJSCIT2XlyIs%2bxx9OgwvRsolq%2ft9mAYcgLUmT6SnI4I0Vja4l0gUEcYaqzil1uHuunlILyb9yfqLTGOANZVqd3ytpWR1Z5Ehx5GkYIm3QMiSDDsB83vG0%2bmj7vCouaoGG7l66t%2fiYeDnZc0%2f7Qx1M9ygVTx1dfZO8d8Pqh6YAuj01cm53U19c1BTZnapdyd6Qm6Ys222N3NyQQxunuvDHWMaXfCKNiLg7LSTMNlaDxnKkCYNjTJkyQk2OdjQ5u1bZG1au2ELQhY94y5bYZBXNLRfLR9W0tHhHj%2fIjLQa4kmBeoP2ONqqk6zrf2iAiWIYqx5HU0CGSHBiga1rejTzViIVwScBz0y4YK4PbZZFGWhnZWLkH74JX4pBTBDw0e6YX2Oo5ZVPqjcEn1F9x7WXyBZtaD7oB2AE6NsaQ4Kktzfo8qt4cjXzX779DxNVEfqOpOISb7%2bgCf%2fyOlclFqQPOUFz0PdEBxNlkMcB%2bciE22qHyGwEp1mcI%2biM9g663YqoIcDxpjo8WzL%2baX2eDJ7aNfzu5cy94hl1Zv%2bwc3cQt12doR0TDuUIioA0f1knIpRGiq6t5t6frLBFNys6Zt%2barV9NkYpbKUstMxLaxIDanQCVrb0uhe7EHCXftddeSX4sAUCLtfhhi8j7tPGLBu73ZUfz0DPHrGvZEQGgf6HyhBWKPTeqJusMMYXjkhHwAf85VLdedXCLynqR8HFnTwp404RBRQo%2fOrSK%2bjLXnJVlHVWEq4eM742M%2fROC0AIpwfc7Sr%2b255VJpdNumCiT8hhnvIp5uDUQTG6g%2bxL59M6mpB%2fHiCFJUkN7BWnAOmwKugw%2bkjWeW1PRQvq3FtXwEhShuF4cUI9%2f1pK2dN0810rrbX%2bLJQ%2fMCtZZWZU5pvqC178ASMPmudCQKeE01vSPfdJo%2b3zYmxhUhO3gjcpkTz81nr3Zx9Mch2d2p0qc%2b8XspXesUQipctAx1SQd1xIiFyRwVzuLrQDeD7ZyvrBBIkpcX%2fwpAozoBqCFy69CQI%2f3rkJ7tqrRgfWUDj%2fpfTDcTYGmS2OfLcNthqpaLl6rAfqf2DqBGiYuO8Phxl7OieNgh43ZhGvXtxGMP5tsRVnaTx3gpfe2mMk1pd14O7ERqxf5CO6HTZCqS3RifX%2fmLVkQobKZfmjY331%2bTv%2f%2fkH1%2bKg5UzOkwaDu89pFNhBwbSfc4%2fy84A4YHqfxxfsPvE256nfnwWEO7FUwM2m5UjiZFyX9eU5k0CxPDBj8dDMUNpWA8BprR1bsMcv64vbeCajfmz8QpzEwtvkvlv4ottS22DVg7je2S7%2fQoN3xl1%2fvKeKfXmHqGQIlGW7dOpjFuXpSOeQHxVk5wpuwFR2q%2f3wyeaW%2bps90tOA29XtecQRjxhk2Y5bLUPKn2i9Sv8kem43ulPlzBjDFYQGyUKTck17d%2b72G4NnPPMhA3m3%2fWrkCEn2OzkHsL28rKIKhC%2fyGuW9s%2b7ltRUFzyGv%2fyyFaCTUvQ2i%2fDYSW5lkZwaC0G787grs5qZlZNi1oOdDDtE2mJO%2btpflh0tThfXr26NTCUnYGiM4ARfA7WeIa3oMYcv6t%2fF5KFjdB3xQrmT8ow1Owdc5l67Qsq%2fpSWW%2bRHYJReNAE2iKkpK1ycbm7tQ71TUa5G%2fKnfHPDQIWvSRuCEbHWeyuLW9ZiphDzgLqbyhsDgoVoTPuhxqlJmcI5iM9Mx7dXLB2%2fLZa3vPNxltrK1G2E%2fi%2bxnTO2yMm5YxCihxXVWKFxZRRvpRXCgP%2fTotLFeBh7Zr10yV6wIYkQHow38Gxx9HWHi2LqtzkKBCt4%2bgEMHPXXI80%2b7Sg%2bSA0pBahd3vog0ZQdil0UjiIM0pNJH9WF1OpmMjiz%2bkjGTPzKgIXOSKv23uB1m4j37JKx2AfPH8YH0uwFGY%2bY5FW%2bF6UjxIVzHCiV68Bn4ta3UkHo4MykugnsJiWThAB95UFkt%2f%2f%2ffPLRCGDXCgIq7ZZcP46lNwjQKRp0H7nQ6zKWnKqYfnov5SrayHkL5aBzkud7ehkSRhkJpKRDQBWkXyqIw5RN4INEIkWywfcgZlfZ9Kmasm51IDtMI1jOAajyxylGIu40O%2bK2PBYAN7vJ1oOehffe%2fKPIjCWFz5ZeyNLc0whs3ZNsdwB21aT6YeZNX8RwsmWsFQ9t7OXxE6ncmi3NJRVmUl0%2f7PDJEJy2K3A5nYuhsN7y3GIShmnSlQSAdI3fCAm9sYAiAqRhy9A6Uc0%2f%2f5hZEVohoay6wG4cLyuuQZvcYkk3%2fysR1FhQjIQeis%2bu3B%2fkYcEr4g7ApsD%2fXU8f%2fkwdl4pIuYvr3bCl0aMJvLQo%2bh1%2b1whbbt5E5zkk89dBSAYoKcJno9C9I1MA4H0Y0%2bErMeVBNuU5g6jfEpyr4%2biUUzM3pu8wXdnYg%2bggDZtvhUjPzJYn0A94IeNy9%2fW2Gpik6dhrGqjP8eqTZOWmMKw%2fCoeOHh4gRxcmafZOt%2b3p%2fng5R6k6rd92cabq91Xxh%2fm9xCdBdefbhfD8yIjpcFfNwuzGW5WKkWlLTyqLuO4fvh7%2f5P%2f%2bsvsj4A0JRCEhG98XnFj8Jfzf4m4c34%2b106LtN7tZ8wd8c240%2bDMvzUujGLEK8VsX9mQd4nk2qKMVmpVNe8dJ%2f7vJt%2bsSEsxFrmv0yAIHFeZKuHTJR8bJtN5kEfaYM2qMf9UdcXlbnzkyEja1XMp8C90C8FEN1NGiX%2fXR78R6%2fMpbnJaLgWrwcuvqG4Mql9; OAM_REQ_1=VERSION_4~l%2bL2i500G5lsYIjkGiLMcWR2xXpBnJPapXaku4LPDHuSZBMyI1Ey77fIlFB3hGCp4lSHG2uiuu3JMVnERFhww0IUyhgtSR5XTcG8K0%2beqjHxOSDL6%2blFqj2LXqnLYgLxdSyROoaq372EGASGnpUUrYBOGXYgCQwurRSBhUx1mtt2onl6UNE7qH%2bVEFczn2cFW2gJtVFaNhDZUX4Byijl41BfaMV3ZFBirLS2AewK2f3nBdtHyjUqO8WFILgMm6nUkADV0Psku6XF3eP9dkif47dRqpX9NMFJMpHJjlB1V5OVNZx0VGY%2b0ty%2fgAuxvcGgxR%2fzVcDNjL%2bI2eNFC7gQIyyXzcRox4HBC4i3T%2fzmh0rQabVdzpJZHJPT60Gtoa%2bLxhsTsTfOJRSH3RUha2gGd4GIY2RqVkQAv90b0uvNLksofWy6K%2b3Xq5%2bd5bsxfegl%2bpaW4QR2C4E91193cALMmTiPYqhK0FvbUQfD4rK8Qy71eJH6YWzolMjiqVG9R1GqwuyRnRJ1KoYusKe18dhftnVYWjKRHa8gagZICU%2fxzwYTKQDxvcAgDIC6WzWDmVKnc6sieHmR11yoi283hcHODdVJNX1Zgw5UphH2O3XhRc4mWPKGx26jsMx4CFSNIr3Le8AAd9FrsW7gWs78jrJGX4%2bG%2b2Zm3oX%2fR6%2frHp11VJNaTdEBVJOXKSdxGJhti%2fx2EO%2b1wd0khcarkxBb4gu9TKJ%2fqsYvtXWWkyCBscjK54lBUUTp4z9%2bRye%2buOWzYglB3Qx9xft8i6n6VwSmGqN4SmzjhLaPe13Fg0NufJtDAHXT5dR%2b%2bXoyKpJ3pzCMwXYtsMFzlry%2fHNs8lilrMC3JFG7T7khkqoaWU2K%2f5YpA0guKwfiAsuI9g1n4ULC1ZzXuE%2bvmkNw8HiBRMfIKpC%2bPkUTZ1912AtX%2bVh8EF4BAQXXd2WJYJe65OZp8eYhLsLbVRyGS5RlLNXkImbATWH0tPvqiqrRc7QS9KjQYujbQmYpRYOUXKnK89gD7DGiDUTdVxzDvycx5tNs%2bZNLTj4eiwevrE0E4WJW7kBt3ZoXi6%2bMs95k%2bwmSv6ki82LEeRz6gLyBqvzJm7FQMPkFqofkuxvvz8HkbI1GAWy2RXHXMnAF6dHhbeMNP3EGL1XPtAeomo4tsK3IKDEeolvadCo58xBHdYv0Byv8L52VGtpL0vDrrVCmdbirCOIA9Ya1JCHL6Gxx4Gcw9pY%2fAmtUEVf%2fBv2gvpWl3R6gjTs7T9eRtZbdqpompuOGKedVnUZsBSroyN2dWQ2Ffsbvbo1%2bUOW1VCrMJ2UYdU%2barLdem6nAUgnhQnW1nR87XZYpb25V3cJGOtejBRtcoU0NORTXHIu7%2ba0DAK8TwfTW0LsV5V0lexsnwBEPn00OJJEZkdKGEZuO57oCiAoumMyWv9i665yjW0GW6XfWsWWhXasENTY5nfGNCuEdVj4PRtl67Iipr4jCAip0z%2btymvaq76KJopEyVLNO9yg%2ffyAimSzIwTuUw4W278Ea5cjmJSiQc6x6Ir73SamI%2b8NMNpikGkWpP%2fIEp37MNxrCl6tGpYerROYAPyjIJgnuh613nBSeIyZB1T5PhR%2f6Y0hTcZSP52%2bRacwBxedu5sl19iYl6SdGsdDSVvcpBL%2bWE%2f1YpO3qFKym6MqTWmIyiBOBkEBQNSv%2bmaWbC3SUdoXTp8kQduKw4zvree4PLZSAAmdT%2b%2b4HAmMpbyFQY2z0QcffIPcMqQINLQN%2bYLFRjs9D0Jq2Bjm6Q2Z%2bLcj9wB%2fUNGkKwix%2b%2bgsEWbi%2bYCIFjo1ERneBiNCuuVm8sidPIplM49ZhZAmptZ6hUheLxo0C3EfLL9%2fI9EyeoJ1siXQexLMxmmQCPRcKVS22jebQNh5dxihfOznK0GK8SVT%2bEn6s%2f8Nf3hPrJNOohQqfS6IDE%2fDt7DIDo4Q%2fzijPbB6WOhaL%2bOmLBwUB%2f8UVhPHw27cJRQ5Uzk2vNZl28PuCIb9cyUdAeww8Yka8izDTikk9FUZOWEw4SOd60iCr1pKKlnpbBwA%2f1hlmnr9Nmu%2bereU6DpanJOsnqpyGGhAx6M6VjT1HVIqkOHrftJruLAJ9Ga3HVlqYknNKEV1x4zl7kF8oBiuZNvbsWf7QV8nKUQkJk%2bhYKP41dxwuqj40nIBdXQTVE7OS5%2br5ClU4%2f8DspDpKpSHZT1%2bcxZdXxObDNXjhOU7sNnF%2fe6CL1BjDHbxzNQ0taBzgzUVQM%2fJr0sCGF2fnKkuSgAFtsynMMewCQtsOrOSNNYWjXJAYdZShhfM%2bDhT0J6ROmknZh9ywBRD5QKzDZJLNOi1%2f2W%2bCfvIagEklEo4Tts%2bzqgVE%2bruF82%2fJPVTsB5eMmKIMeO%2bhVrL24%2fWk9SRj3nFkpArgNhGyh%2bkV%2fWyjN8TieSqqTeLoRo%2f4c%2bpSUnl1ghdl1Y77vaZslG0gIYrEtSAW8kVoS3uNGElNhw30yrHbKLnq%2bJG488A%3d%3d; OAM_REQ_COUNT=VERSION_4~2; ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg@kXghlfCW3JOTsLKS^HOT_JLSgKCTmLTP; JSESSIONID=WcpHFVvE4G4pLJcxyEnBuccTXrrozez93c9YLSY35sjKAEtv1tj1!1546432129; ORA_FUSION_PREFS=v1.0~bG9jYWxlPWVuLXVzfmRlZmF1bHRMYW5ndWFnZU1hcmtlcj10cnVlfnByZWZlcnJlZExhbmd1YWdlPWVuLXVz
2022-04-20 13:07:04 UTC	195	IN	HTTP/1.1 200 OK Date: Wed, 20 Apr 2022 13:07:04 GMT Content-Type: image/png Content-Length: 6812 Connection: close Referrer-Policy: same-origin X-Content-Type-Options: nosniff Accept-Ranges: bytes Last-Modified: Tue, 13 Oct 2020 22:18:22 GMT X-ORACLE-DMS-ECID: 005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg X-ORACLE-DMS-RID: 0:1:4:1:3 X-XSS-Protection: 1; mode=block Content-Language: en Strict-Transport-Security: max-age=31536000; includeSubDomains
2022-04-20 13:07:04 UTC	195	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 00 0c 08 03 00 00 00 7c ea 7a d3 00 00 02 fd 50 4c 54 45 eb df c3 c3 ac 8b 35 48 50 eb de c3 f4 b1 52 d6 51 3f d6 52 3f d6 52 3f c3 ad 8b e5 d8 ba f4 b1 52 9d 86 6f e0 d2 b5 a5 8e 74 4a 72 7b 83 69 4d c3 ad 8b d6 51 3f 94 52 31 7e 64 4a bf aa 88 f4 b2 51 c8 b3 92 b7 a0 7d 4a 71 7a d0 bd 9d 96 7b 55 e6 d8 bc e1 d3 b5 ea de c2 db 60 42 db cc ae ca b7 98 f4 b2 52 a4 5a 32 e9 aa 50 3a 53 5b 37 46 4c d0 c0 a1 3b 56 5e eb dd c1 df a2 4d d6 c6 a7 36 49 50 35 48 4f 48 2f 2f d8 57 40 81 3f 24 b4 9d 80 ea df c3 da 60 42 4a 6e 76 e9 aa 50 c2 ad 8a d4 9a 4b e0 d3 b5 d7 57 41 df cf b2 ba a3 82 e1 77 47 41 5e 66 db cc ae e4 7d 48 78 5f 47 d1 8d 45 ea 8f 4b 6a 50 40 c9 91 49 b0 a0 87 4a 69 71 df 6e 45 43 Data Ascii: PNGIHDR\|zPLTE5HPRQ?R?R?RotJr{iMQ?R1~dJQ}Jqz{U`BRZ2P:S[7FL;V^M6IP5HOH//W@?$`BJnvPKWAwGA^f}Hx_GEKjP@IJiqnEC
2022-04-20 13:07:04 UTC	199	IN	Data Raw: 71 6d 01 13 0b 24 a6 0f 43 e0 a6 18 06 34 04 67 8a 91 52 ae dd 52 bc 65 2b 45 8d 01 32 69 cc 7c bd 8e bb 39 4e b1 71 66 aa e4 b0 24 61 66 b1 48 9e 93 73 25 6d a1 45 4a d0 2a 38 47 cc 1d 39 52 82 d7 0c 82 24 24 64 06 23 9a 19 10 e7 c0 9f 35 48 28 e8 8a 98 d1 ce 48 d0 46 73 0e 97 ac 50 52 2c c4 6d 12 89 e1 e8 71 5e 8d 0d 41 45 13 27 c8 3c b3 35 d2 c2 b8 38 4e 8b 64 62 41 1a d1 e6 5d b7 d1 cb de e0 d8 6f 24 c4 e8 3d 60 19 f4 02 de 02 81 da 3c e5 78 98 cb 97 ae dd f1 d5 b5 38 f9 c0 b8 18 da 47 01 a9 3f 2c 4f ed b1 47 4c ec b1 f7 d9 7b 26 5e d5 41 51 e3 47 42 18 b3 31 c3 a6 a7 53 a7 5e d9 03 06 c9 3a cb a2 66 a0 93 f1 cd 10 ba 15 51 eb 6a 1e 8a 02 c2 f0 51 66 d8 bc 9f e8 03 7d 47 f6 02 7c 12 03 ca dc 20 13 8c 9b d2 c3 43 3c 13 ff 3a 6a 1f 1d a4 8c 11 14 45 36 Data Ascii: qm$C4gRRe+E2i\|9Nqf$afHs%mEJ*8G9R$$d#5H(HFsPR,mq^AE'<58NdbA]o$=`<x8G?,OGL{&^AQGB1S^:fQjQf}G\| C<:jE6

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:04 UTC	202	OUT	GET /favicon.ico HTTP/1.1 Host: elat.login.em2.oraclecloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: OAMAuthnHintCookie=0@1650460022; OAM_ID=VERSION_5~i0unjL1yr3V7/Z4Q32ryeQ==~PaX1xfdy4yTKJn8VgaezP9/Ma0A/8OIZWRk7JIt7FRA3LeGhIDZulOeV8ob+PECcPK74TDrnTiL90VaaFXHctBmkSAc2p5CemEXORezmfXzMh2FCOYzMgVWYjIRmSW458h0/hDOjJjqGSVfy87SjKnOqwjOJiaYnOXkcNJ11fGQXlEDfZnsKxkP+NOQP1DMw2X0/msU4VvyHNsy+NvG1p8oqSDbidJGKUn78VUqYPjNmjIjx1hdsAVDfION/OLzZ2m7oI38c8tnp78vXIE/lilmpY2Hyoht1Jr3upSMANbgJt1uw63mKnr44OJftHL2bFg1ia5EUPed91piw86ZFhfKEv8Mwv1WM7df5hfFiWAoRp8W68LfnzuYE8zVBbKpt; ORA_FND_SESSION_ELAT_F=DEFAULT_PILLAR:1p48+CojchaFKaGHu9/0NhgK92U3zP3iFmWeMo1FiamuqWVgIoPRhrXfklP1s0za:1650460023116; OAM_REQ_0=VERSION_4~PwjMhkc44Tt1G2wBlhJIT8LM%2bHWrFn3Y9hbPJo3pnC7urtBqCObS3imJwEYK6%2baMSbrxXJm00eG1FZo93vCl6AHDX8VMa7gmjQ80Cw2DyNIhtmdgH6IBkrOo%2fhBBAm5Xd2%2bZW4e50Z3lPOvbd8fdpxHCotERELaljBqcBZPoTNwF%2f5rL7Fw9ZnXdjjIWRrHv5qW9V2WtZj5iW4rF3SkaeE9VbqRK4KmOykK7bjs1IMtEosF3HqFmv9nkxRYZ6AfpM5IFnrgKqPI6FkQm5XY6FgGjxxwtWaA5L6q0HjQ%2fT993QqDJznFtAEEiHyVxHD1HvRuH58jz0RH4gfNLH0P%2btwkLLmHAc6sXcjUuAH2m4P57lECVUhMpi4eKgWQpXM0hLVy0Aod91Y7Wk1pIbTxd32ldPzfSyxuqskasajhv0JmGw%2fytHjVQAETyccPJHXHx7EfA1DseIDn944hMyiit8Ie%2ftAXTHNGjqiKH0ED2sTzmNhkQ0urOCYFY8NOhhd28oiN3sc9srC61yz%2fAsdutWWEr0sznjU7psxL0s3g7vS0elwh08h3EjqG7h8JqDTsXQW9vbjEl8vx9ClrVdpQ8qsF3xCshPFG%2fdBL21vQcMK%2fwwyX%2f8npFfzfiBuwLEzO6tYR2W0ymHWzuvsx2lGdaR42Nytobu%2bbcVKapf6Qfg3Ts8poTkog7qAbuQccCVGMoh%2fDXK17thMCynIh%2fuN%2fgOiLIn3x5xdzXDbqV1E0jq%2br3w2%2b2lQzQ%2bKpi2xOwAstyohozVtZoS%2blWJmRzmtoHEScQHU1HOv%2bxNl%2fZpItOpo8%2fddMMyW%2fQ5fjQZ4SN9kfdDxL5NKslpEgpwBOQxJMVXDm%2fvMXezx7%2fVuXugzmMrswUMOqXXLla6vMMULe1IB9wIsJLAN5fL8EOoHeeRMFiFDwZORWhPLorZ1%2bxUpfV579Dc%2fd9skHgIxGLABQ6NKDq1rW%2bJJ2QxYJ4oKNLjjTtnySoKsxzIcWg6oeyPtV4iwcO2uYROZFzsuNVumW%2b7p3U7G43PNvHfrMyJSCIT2XlyIs%2bxx9OgwvRsolq%2ft9mAYcgLUmT6SnI4I0Vja4l0gUEcYaqzil1uHuunlILyb9yfqLTGOANZVqd3ytpWR1Z5Ehx5GkYIm3QMiSDDsB83vG0%2bmj7vCouaoGG7l66t%2fiYeDnZc0%2f7Qx1M9ygVTx1dfZO8d8Pqh6YAuj01cm53U19c1BTZnapdyd6Qm6Ys222N3NyQQxunuvDHWMaXfCKNiLg7LSTMNlaDxnKkCYNjTJkyQk2OdjQ5u1bZG1au2ELQhY94y5bYZBXNLRfLR9W0tHhHj%2fIjLQa4kmBeoP2ONqqk6zrf2iAiWIYqx5HU0CGSHBiga1rejTzViIVwScBz0y4YK4PbZZFGWhnZWLkH74JX4pBTBDw0e6YX2Oo5ZVPqjcEn1F9x7WXyBZtaD7oB2AE6NsaQ4Kktzfo8qt4cjXzX779DxNVEfqOpOISb7%2bgCf%2fyOlclFqQPOUFz0PdEBxNlkMcB%2bciE22qHyGwEp1mcI%2biM9g663YqoIcDxpjo8WzL%2baX2eDJ7aNfzu5cy94hl1Zv%2bwc3cQt12doR0TDuUIioA0f1knIpRGiq6t5t6frLBFNys6Zt%2barV9NkYpbKUstMxLaxIDanQCVrb0uhe7EHCXftddeSX4sAUCLtfhhi8j7tPGLBu73ZUfz0DPHrGvZEQGgf6HyhBWKPTeqJusMMYXjkhHwAf85VLdedXCLynqR8HFnTwp404RBRQo%2fOrSK%2bjLXnJVlHVWEq4eM742M%2fROC0AIpwfc7Sr%2b255VJpdNumCiT8hhnvIp5uDUQTG6g%2bxL59M6mpB%2fHiCFJUkN7BWnAOmwKugw%2bkjWeW1PRQvq3FtXwEhShuF4cUI9%2f1pK2dN0810rrbX%2bLJQ%2fMCtZZWZU5pvqC178ASMPmudCQKeE01vSPfdJo%2b3zYmxhUhO3gjcpkTz81nr3Zx9Mch2d2p0qc%2b8XspXesUQipctAx1SQd1xIiFyRwVzuLrQDeD7ZyvrBBIkpcX%2fwpAozoBqCFy69CQI%2f3rkJ7tqrRgfWUDj%2fpfTDcTYGmS2OfLcNthqpaLl6rAfqf2DqBGiYuO8Phxl7OieNgh43ZhGvXtxGMP5tsRVnaTx3gpfe2mMk1pd14O7ERqxf5CO6HTZCqS3RifX%2fmLVkQobKZfmjY331%2bTv%2f%2fkH1%2bKg5UzOkwaDu89pFNhBwbSfc4%2fy84A4YHqfxxfsPvE256nfnwWEO7FUwM2m5UjiZFyX9eU5k0CxPDBj8dDMUNpWA8BprR1bsMcv64vbeCajfmz8QpzEwtvkvlv4ottS22DVg7je2S7%2fQoN3xl1%2fvKeKfXmHqGQIlGW7dOpjFuXpSOeQHxVk5wpuwFR2q%2f3wyeaW%2bps90tOA29XtecQRjxhk2Y5bLUPKn2i9Sv8kem43ulPlzBjDFYQGyUKTck17d%2b72G4NnPPMhA3m3%2fWrkCEn2OzkHsL28rKIKhC%2fyGuW9s%2b7ltRUFzyGv%2fyyFaCTUvQ2i%2fDYSW5lkZwaC0G787grs5qZlZNi1oOdDDtE2mJO%2btpflh0tThfXr26NTCUnYGiM4ARfA7WeIa3oMYcv6t%2fF5KFjdB3xQrmT8ow1Owdc5l67Qsq%2fpSWW%2bRHYJReNAE2iKkpK1ycbm7tQ71TUa5G%2fKnfHPDQIWvSRuCEbHWeyuLW9ZiphDzgLqbyhsDgoVoTPuhxqlJmcI5iM9Mx7dXLB2%2fLZa3vPNxltrK1G2E%2fi%2bxnTO2yMm5YxCihxXVWKFxZRRvpRXCgP%2fTotLFeBh7Zr10yV6wIYkQHow38Gxx9HWHi2LqtzkKBCt4%2bgEMHPXXI80%2b7Sg%2bSA0pBahd3vog0ZQdil0UjiIM0pNJH9WF1OpmMjiz%2bkjGTPzKgIXOSKv23uB1m4j37JKx2AfPH8YH0uwFGY%2bY5FW%2bF6UjxIVzHCiV68Bn4ta3UkHo4MykugnsJiWThAB95UFkt%2f%2f%2ffPLRCGDXCgIq7ZZcP46lNwjQKRp0H7nQ6zKWnKqYfnov5SrayHkL5aBzkud7ehkSRhkJpKRDQBWkXyqIw5RN4INEIkWywfcgZlfZ9Kmasm51IDtMI1jOAajyxylGIu40O%2bK2PBYAN7vJ1oOehffe%2fKPIjCWFz5ZeyNLc0whs3ZNsdwB21aT6YeZNX8RwsmWsFQ9t7OXxE6ncmi3NJRVmUl0%2f7PDJEJy2K3A5nYuhsN7y3GIShmnSlQSAdI3fCAm9sYAiAqRhy9A6Uc0%2f%2f5hZEVohoay6wG4cLyuuQZvcYkk3%2fysR1FhQjIQeis%2bu3B%2fkYcEr4g7ApsD%2fXU8f%2fkwdl4pIuYvr3bCl0aMJvLQo%2bh1%2b1whbbt5E5zkk89dBSAYoKcJno9C9I1MA4H0Y0%2bErMeVBNuU5g6jfEpyr4%2biUUzM3pu8wXdnYg%2bggDZtvhUjPzJYn0A94IeNy9%2fW2Gpik6dhrGqjP8eqTZOWmMKw%2fCoeOHh4gRxcmafZOt%2b3p%2fng5R6k6rd92cabq91Xxh%2fm9xCdBdefbhfD8yIjpcFfNwuzGW5WKkWlLTyqLuO4fvh7%2f5P%2f%2bsvsj4A0JRCEhG98XnFj8Jfzf4m4c34%2b106LtN7tZ8wd8c240%2bDMvzUujGLEK8VsX9mQd4nk2qKMVmpVNe8dJ%2f7vJt%2bsSEsxFrmv0yAIHFeZKuHTJR8bJtN5kEfaYM2qMf9UdcXlbnzkyEja1XMp8C90C8FEN1NGiX%2fXR78R6%2fMpbnJaLgWrwcuvqG4Mql9; OAM_REQ_1=VERSION_4~l%2bL2i500G5lsYIjkGiLMcWR2xXpBnJPapXaku4LPDHuSZBMyI1Ey77fIlFB3hGCp4lSHG2uiuu3JMVnERFhww0IUyhgtSR5XTcG8K0%2beqjHxOSDL6%2blFqj2LXqnLYgLxdSyROoaq372EGASGnpUUrYBOGXYgCQwurRSBhUx1mtt2onl6UNE7qH%2bVEFczn2cFW2gJtVFaNhDZUX4Byijl41BfaMV3ZFBirLS2AewK2f3nBdtHyjUqO8WFILgMm6nUkADV0Psku6XF3eP9dkif47dRqpX9NMFJMpHJjlB1V5OVNZx0VGY%2b0ty%2fgAuxvcGgxR%2fzVcDNjL%2bI2eNFC7gQIyyXzcRox4HBC4i3T%2fzmh0rQabVdzpJZHJPT60Gtoa%2bLxhsTsTfOJRSH3RUha2gGd4GIY2RqVkQAv90b0uvNLksofWy6K%2b3Xq5%2bd5bsxfegl%2bpaW4QR2C4E91193cALMmTiPYqhK0FvbUQfD4rK8Qy71eJH6YWzolMjiqVG9R1GqwuyRnRJ1KoYusKe18dhftnVYWjKRHa8gagZICU%2fxzwYTKQDxvcAgDIC6WzWDmVKnc6sieHmR11yoi283hcHODdVJNX1Zgw5UphH2O3XhRc4mWPKGx26jsMx4CFSNIr3Le8AAd9FrsW7gWs78jrJGX4%2bG%2b2Zm3oX%2fR6%2frHp11VJNaTdEBVJOXKSdxGJhti%2fx2EO%2b1wd0khcarkxBb4gu9TKJ%2fqsYvtXWWkyCBscjK54lBUUTp4z9%2bRye%2buOWzYglB3Qx9xft8i6n6VwSmGqN4SmzjhLaPe13Fg0NufJtDAHXT5dR%2b%2bXoyKpJ3pzCMwXYtsMFzlry%2fHNs8lilrMC3JFG7T7khkqoaWU2K%2f5YpA0guKwfiAsuI9g1n4ULC1ZzXuE%2bvmkNw8HiBRMfIKpC%2bPkUTZ1912AtX%2bVh8EF4BAQXXd2WJYJe65OZp8eYhLsLbVRyGS5RlLNXkImbATWH0tPvqiqrRc7QS9KjQYujbQmYpRYOUXKnK89gD7DGiDUTdVxzDvycx5tNs%2bZNLTj4eiwevrE0E4WJW7kBt3ZoXi6%2bMs95k%2bwmSv6ki82LEeRz6gLyBqvzJm7FQMPkFqofkuxvvz8HkbI1GAWy2RXHXMnAF6dHhbeMNP3EGL1XPtAeomo4tsK3IKDEeolvadCo58xBHdYv0Byv8L52VGtpL0vDrrVCmdbirCOIA9Ya1JCHL6Gxx4Gcw9pY%2fAmtUEVf%2fBv2gvpWl3R6gjTs7T9eRtZbdqpompuOGKedVnUZsBSroyN2dWQ2Ffsbvbo1%2bUOW1VCrMJ2UYdU%2barLdem6nAUgnhQnW1nR87XZYpb25V3cJGOtejBRtcoU0NORTXHIu7%2ba0DAK8TwfTW0LsV5V0lexsnwBEPn00OJJEZkdKGEZuO57oCiAoumMyWv9i665yjW0GW6XfWsWWhXasENTY5nfGNCuEdVj4PRtl67Iipr4jCAip0z%2btymvaq76KJopEyVLNO9yg%2ffyAimSzIwTuUw4W278Ea5cjmJSiQc6x6Ir73SamI%2b8NMNpikGkWpP%2fIEp37MNxrCl6tGpYerROYAPyjIJgnuh613nBSeIyZB1T5PhR%2f6Y0hTcZSP52%2bRacwBxedu5sl19iYl6SdGsdDSVvcpBL%2bWE%2f1YpO3qFKym6MqTWmIyiBOBkEBQNSv%2bmaWbC3SUdoXTp8kQduKw4zvree4PLZSAAmdT%2b%2b4HAmMpbyFQY2z0QcffIPcMqQINLQN%2bYLFRjs9D0Jq2Bjm6Q2Z%2bLcj9wB%2fUNGkKwix%2b%2bgsEWbi%2bYCIFjo1ERneBiNCuuVm8sidPIplM49ZhZAmptZ6hUheLxo0C3EfLL9%2fI9EyeoJ1siXQexLMxmmQCPRcKVS22jebQNh5dxihfOznK0GK8SVT%2bEn6s%2f8Nf3hPrJNOohQqfS6IDE%2fDt7DIDo4Q%2fzijPbB6WOhaL%2bOmLBwUB%2f8UVhPHw27cJRQ5Uzk2vNZl28PuCIb9cyUdAeww8Yka8izDTikk9FUZOWEw4SOd60iCr1pKKlnpbBwA%2f1hlmnr9Nmu%2bereU6DpanJOsnqpyGGhAx6M6VjT1HVIqkOHrftJruLAJ9Ga3HVlqYknNKEV1x4zl7kF8oBiuZNvbsWf7QV8nKUQkJk%2bhYKP41dxwuqj40nIBdXQTVE7OS5%2br5ClU4%2f8DspDpKpSHZT1%2bcxZdXxObDNXjhOU7sNnF%2fe6CL1BjDHbxzNQ0taBzgzUVQM%2fJr0sCGF2fnKkuSgAFtsynMMewCQtsOrOSNNYWjXJAYdZShhfM%2bDhT0J6ROmknZh9ywBRD5QKzDZJLNOi1%2f2W%2bCfvIagEklEo4Tts%2bzqgVE%2bruF82%2fJPVTsB5eMmKIMeO%2bhVrL24%2fWk9SRj3nFkpArgNhGyh%2bkV%2fWyjN8TieSqqTeLoRo%2f4c%2bpSUnl1ghdl1Y77vaZslG0gIYrEtSAW8kVoS3uNGElNhw30yrHbKLnq%2bJG488A%3d%3d; OAM_REQ_COUNT=VERSION_4~2; ECID-Context=1.005rHMfRAP_7U8F_v1h8iX0003KJ0000Tg@kXghlfCW3JOTsLKS^HOT_JLSgKCTmLTP; JSESSIONID=WcpHFVvE4G4pLJcxyEnBuccTXrrozez93c9YLSY35sjKAEtv1tj1!1546432129; ORA_FUSION_PREFS=v1.0~bG9jYWxlPWVuLXVzfmRlZmF1bHRMYW5ndWFnZU1hcmtlcj10cnVlfnByZWZlcnJlZExhbmd1YWdlPWVuLXVz
2022-04-20 13:07:04 UTC	210	IN	HTTP/1.1 404 Not Found Date: Wed, 20 Apr 2022 13:07:04 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 196 Connection: close Referrer-Policy: same-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains
2022-04-20 13:07:04 UTC	210	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:07 UTC	210	OUT	GET /fusion_apps/global/images/colorstrip_redwood_desktop.png HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: elat.login.em2.oraclecloud.com
2022-04-20 13:07:07 UTC	211	IN	HTTP/1.1 200 OK Date: Wed, 20 Apr 2022 13:07:07 GMT Content-Type: image/png Content-Length: 6812 Connection: close Referrer-Policy: same-origin X-Content-Type-Options: nosniff Accept-Ranges: bytes Last-Modified: Tue, 13 Oct 2020 22:18:22 GMT X-ORACLE-DMS-ECID: 005rHMfdB8o7U8F_v1h8iX0003KJ0000Tl X-ORACLE-DMS-RID: 0:3 X-XSS-Protection: 1; mode=block Content-Language: en Strict-Transport-Security: max-age=31536000; includeSubDomains
2022-04-20 13:07:07 UTC	211	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 00 0c 08 03 00 00 00 7c ea 7a d3 00 00 02 fd 50 4c 54 45 eb df c3 c3 ac 8b 35 48 50 eb de c3 f4 b1 52 d6 51 3f d6 52 3f d6 52 3f c3 ad 8b e5 d8 ba f4 b1 52 9d 86 6f e0 d2 b5 a5 8e 74 4a 72 7b 83 69 4d c3 ad 8b d6 51 3f 94 52 31 7e 64 4a bf aa 88 f4 b2 51 c8 b3 92 b7 a0 7d 4a 71 7a d0 bd 9d 96 7b 55 e6 d8 bc e1 d3 b5 ea de c2 db 60 42 db cc ae ca b7 98 f4 b2 52 a4 5a 32 e9 aa 50 3a 53 5b 37 46 4c d0 c0 a1 3b 56 5e eb dd c1 df a2 4d d6 c6 a7 36 49 50 35 48 4f 48 2f 2f d8 57 40 81 3f 24 b4 9d 80 ea df c3 da 60 42 4a 6e 76 e9 aa 50 c2 ad 8a d4 9a 4b e0 d3 b5 d7 57 41 df cf b2 ba a3 82 e1 77 47 41 5e 66 db cc ae e4 7d 48 78 5f 47 d1 8d 45 ea 8f 4b 6a 50 40 c9 91 49 b0 a0 87 4a 69 71 df 6e 45 43 Data Ascii: PNGIHDR\|zPLTE5HPRQ?R?R?RotJr{iMQ?R1~dJQ}Jqz{U`BRZ2P:S[7FL;V^M6IP5HOH//W@?$`BJnvPKWAwGA^f}Hx_GEKjP@IJiqnEC
2022-04-20 13:07:07 UTC	215	IN	Data Raw: 69 64 c5 14 8c f0 88 13 90 8c ee 2d 41 9e 50 32 9e 95 7b 47 ed 43 23 51 c8 1f 4a 0a 14 e0 bb e6 57 20 4a 1c 2a d3 6b 46 28 4e 90 f8 8c 32 41 42 23 6a ef e8 89 d1 bd 88 12 51 41 d8 27 d6 1c b0 0f 0d f2 eb 6e 4e a7 2b 07 ec f6 e1 bd 67 8a 51 83 11 a3 8f a8 54 ea 65 d7 27 cf 59 bd 5a 95 cc 27 1b e7 3c 4c 57 fc 40 87 1b b7 ab d4 3f f8 6d fa a9 00 a4 6b 63 b8 6a d9 92 39 ab af 48 4b 4e 56 a9 be de be 9f 6c 36 d6 0f b4 33 73 97 be 35 36 96 d9 74 e8 79 6b e4 93 26 c9 1f 27 c2 ad 00 e9 b8 5c 5e 4f db 3c 98 ec 2e 1f 75 90 b5 ea 97 5b 21 0d cd 10 09 5d ca 1c ed 62 f5 be 6d 48 20 22 c4 78 ee 2f ae 0d b1 a1 6e 27 51 89 d9 79 cc 83 59 65 4c f2 25 eb 6c 9c 68 01 c7 cd 78 34 36 eb 11 3c 76 35 ca 99 d8 d7 eb 60 95 39 dd 1f 88 ac d3 f5 55 a1 d6 4b 0b 66 6e 92 99 cb e9 37 Data Ascii: id-AP2{GC#QJW J*kF(N2AB#jQA'nN+gQTe'YZ'<LW@?mkcj9HKNVl63s56tyk&'\^O<.u[!]bmH "x/n'QyYeL%lhx46<v5`9UKfn7

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:15 UTC	219	OUT	GET /oam/server/obrareq.cgi?encquery%3Dv2ZzGENFmicvmXr6IFUPBHlKge09Av%2BbPHNRVNbuImsx10IKJbXLOIgKHPygzudtXW%2BEacDXyqxo5DAjC1QOx7kOaCihFi1%2FxYM5Ut71M67Km3zKFE7uiQ2NxpkyhAMRpbLPoPWpeN3TkSHdWwjNxZ0NSIGvsw6QQAz2MdAx2dY7v7Y4HToZ4E6Vj3U7MebXXc%2Bgofl9nI0U5qu7uK8wJ6kvJ9nRULO%2FEwdxSQh2%2F4tNplrGxt4%2BqO8HVXEiYWqg5tUxcsqizoEYBhKu5C4aGWMkw1krKfBLAp8d2CPUeR00ePsNZ0BH9pMZj9F9LN4mRUPMqCuPp8F1yomy18MmSgKU7x9%2FU5SGqtcaqiBb6bOubmIwxbbM%2F3Ol1KgZt8X%2FrQ5KEMHld0CZFygqzZYOyA%3D%3D%20agentid%3DOraFusionApp_11AG%20ver%3D1%20crmethod%3D2%26cksum%3D44a4ece2387620d6c712c97cc186c19b62ff7344&ECID-Context=1.005rHMg7DeJ7U8F_v1g8yX0001EQ0005WH%3BkXjE HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36 Host: elat.login.em2.oraclecloud.com Connection: Keep-Alive Cookie: OAMAuthnHintCookie=0@1650460035
2022-04-20 13:07:15 UTC	220	IN	HTTP/1.1 302 Moved Temporarily Date: Wed, 20 Apr 2022 13:07:15 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 2433 Connection: close Referrer-Policy: same-origin X-Content-Type-Options: nosniff Pragma: no-cache Location: https://elat.fa.em2.oraclecloud.com/obrar.cgi?encreply=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&cksum=8819334ad19c7625c2018c45ac11a6f4d687bdb1 X-XSS-Protection: 1; mode=block Content-Security-Policy: nosniff Referrer-Policy: no-referrer X-Content-Type-Options: nosniff Set-Cookie: OAM_ID=VERSION_5~hOPXzjcoL4SUW2TftxCQLg==~dFinGmytxDvBepTjBWD2RpzSe5HkQ0uKrVRfBRjZAY66Cpg1bLaANDMzdQt/qu90nG1jeGnrD66wYytZNt3eSejoIRX+TqZW1jV8tRNmw6+9e/q2JLA4Io1xarwaXoB22wBEDsGg/iZmfS8OOK9yyiziAIStHAI42a/q0NrJ28v+wtrpZ1OiJZg4ccEOn59v3C50gLDMNSJPiedo7qUvDOLrefY9EdAObV6B1A0gbw8cQ5q4pF8G+EeqblI9XD/yFPCtoabmtCdMggn0AUGpHEZOxHsehljP7yIhomgAvYY6KXLGAcHdilie1f+lTUwqRucYsuArlt/n0mSqdhE73CM03DklQTOPzXydSbznGR2YuY7kgtGRERsREwoq3yes; path=/; secure; SameSite=None; HttpOnly X-ORACLE-DMS-ECID: 005rHMg7DeJ7U8F_v1g8yX0001EQ0005WH X-ORACLE-DMS-RID: 0:1:4 Vary: Accept-Encoding,User-Agent Content-Language: en Strict-Transport-Security: max-age=31536000; includeSubDomains
2022-04-20 13:07:15 UTC	222	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 3e 0d 0a 3c 70 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 0d 0a 74 65 6d 70 6f 72 61 72 69 6c 79 2e 3c 2f 70 3e 0d 0a 3c 70 3e 49 74 27 73 20 6e 6f 77 20 61 74 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 6c 61 74 2e 66 61 2e 65 6d 32 2e 6f 72 61 63 6c 65 63 6c 6f 75 64 2e 63 6f 6d 2f 6f 62 72 61 72 2e 63 67 69 3f 65 6e 63 72 65 70 6c 79 3d 71 58 52 77 53 51 26 23 34 33 3b 53 37 4d 4d 4c 64 71 70 63 42 44 32 66 31 34 4e 34 6a 2f 53 71 Data Ascii: <html><head><title>302 Moved Temporarily</title></head><body bgcolor="#FFFFFF"><p>This document you requested has moved temporarily.</p><p>It's now at <a href="https://elat.fa.em2.oraclecloud.com/obrar.cgi?encreply=qXRwSQ+S7MMLdqpcBD2f14N4j/Sq
2022-04-20 13:07:15 UTC	224	IN	Data Raw: 4b 26 23 34 33 3b 65 76 4d 6f 6b 5a 76 4a 67 75 56 63 6e 51 45 45 58 54 37 51 6f 43 59 43 4a 4a 51 4e 30 70 6f 64 63 4d 43 35 53 55 53 35 32 74 6b 71 2f 53 30 63 71 6c 4a 54 58 39 4e 44 4a 6c 35 7a 50 61 54 66 61 68 58 30 47 79 4d 49 71 43 37 35 79 75 70 68 46 72 66 6d 36 6f 65 75 4e 41 2f 75 69 34 47 4f 53 79 58 6c 2f 53 43 46 6d 51 63 6c 4a 6e 79 38 46 31 55 37 45 6c 39 74 33 77 75 41 6d 48 35 72 36 49 42 46 4d 47 69 5a 66 73 35 41 57 49 74 51 77 67 5a 4d 74 50 56 62 7a 55 76 62 4a 58 62 63 2f 43 35 42 2f 6a 65 71 38 4a 6b 2f 51 76 61 59 69 52 67 6b 45 72 4f 56 74 67 2f 4d 55 79 59 50 45 67 44 26 23 34 33 3b 26 23 34 33 3b 55 61 58 54 6b 71 46 33 50 36 36 6d 36 76 4e 39 46 31 61 44 48 4b 37 58 47 32 50 4f 47 52 76 51 41 2f 7a 63 57 41 79 57 33 4c 65 66 Data Ascii: K+evMokZvJguVcnQEEXT7QoCYCJJQN0podcMC5SUS52tkq/S0cqlJTX9NDJl5zPaTfahX0GyMIqC75yuphFrfm6oeuNA/ui4GOSyXl/SCFmQclJny8F1U7El9t3wuAmH5r6IBFMGiZfs5AWItQwgZMtPVbzUvbJXbc/C5B/jeq8Jk/QvaYiRgkErOVtg/MUyYPEgD++UaXTkqF3P66m6vN9F1aDHK7XG2POGRvQA/zcWAyW3Lef

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:22 UTC	977	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 18.10.0.17134.0.0; IDCRL-cfg 16.000.29158.8; App svchost.exe, 10.0.17134.1, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4796 Host: login.live.com
2022-04-20 13:07:22 UTC	977	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2022-04-20 13:07:23 UTC	987	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 20 Apr 2022 13:06:23 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: R3_BL2 x-ms-request-id: 311240d1-296c-4d03-be5b-e0009708bac0 PPServer: PPV: 30 H: BL02EPF000066F2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 20 Apr 2022 13:07:22 GMT Connection: close Content-Length: 11093
2022-04-20 13:07:23 UTC	987	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:02 UTC	57	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=85.0.4183.121&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1&x=id%3Dpkedcjkdefgpdelpbcmbmeomcjbeemfm%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda,pkedcjkdefgpdelpbcmbmeomcjbeemfm X-Goog-Update-Updater: chromecrx-85.0.4183.121 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2022-04-20 13:07:02 UTC	59	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-p+z/1gSfdW8fzsxDJ0x6cg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 20 Apr 2022 13:07:02 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 5588 X-Daystart: 22022 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-04-20 13:07:02 UTC	60	IN	Data Raw: 35 31 65 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 35 35 38 38 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 32 32 30 32 32 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 51e<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="5588" elapsed_seconds="22022"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2022-04-20 13:07:02 UTC	60	IN	Data Raw: 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 2e 63 72 78 22 20 66 70 3d 22 31 2e 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 61 70 Data Ascii: mhkkegccagdldgiimedpiccmgmieda.crx" fp="1.81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app><ap
2022-04-20 13:07:02 UTC	61	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:23 UTC	1010	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=338389&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220420T220721Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=f1f6ba0dfe154fcbb383fd9e2bb373dd&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1480607&metered=false&nettype=ethernet&npid=sc-338389&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1480607&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32319&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: dErZBvC6ak+UB2WJ.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-04-20 13:07:23 UTC	1014	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3043 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116219-T700333446-C128000000001627409+B+P10+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: vdHRfKuiZY6YynyK+KUfnxvTE/AIuPUYsgq84kj1C27OMDEZRrVvNPLyT7WOJ3zWA8CYm1L6dI/xDhXaBGeKn1z/KJlCawWxN8YAsrA9/ySy8vnOQt+OUyt40MG3cEiaJO0Ohl8OKdMNzo/aGq6ddOix5A1Tg+5CMtQQZBtYa5umLMLam82ynwPe4aMhBIn3O7L3KEBC1yyjqFZfUaiq5/7AdBOOhAkLOe+5/JARE/wXC3LX3zLKt5gLvJ+P75Unzr/+4luel0Pu2cO/p+PjyLIUlmydfwkMI2juWVRxIg5tngpmKxrx1ApmQrWKtH5yBPNcqyzfy/ZD/E22hsPaaw== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Apr 2022 13:07:23 GMT Connection: close
2022-04-20 13:07:23 UTC	1015	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:23 UTC	1012	OUT	GET /v3/Delivery/Placement?pubid=da63df93-3dbc-42ae-a505-b34988683ac7&pid=280815&adm=2&w=1&h=1&wpx=1&hpx=1&fmt=json&cltp=app&dim=le&rafb=0&nct=1&pm=1&cfmt=text,image,poly&sft=jpeg,png,gif&topt=1&poptin=0&localid=w:472DC600-FEAB-E7F8-720D-1E33F00FD1E7&ctry=US&time=20220420T220722Z&lc=en-US&pl=en-US&idtp=mid&uid=4388269c-b420-4134-ac19-bc7ca8a19ac1&aid=00000000-0000-0000-0000-000000000000&ua=WindowsShellClient%2F9.0.40929.0%20%28Windows%29&asid=5a011c82e9094467a1a21e35c81b8914&ctmode=MultiSession&arch=x64&cdm=1&cdmver=10.0.17134.1&devfam=Windows.Desktop&devform=Unknown&devosver=10.0.17134.1&disphorzres=1280&dispsize=17.1&dispvertres=1024&isu=0&lo=1480607&metered=false&nettype=ethernet&npid=sc-280815&oemName=VMware%2C%20Inc.&oemid=VMware%2C%20Inc.&ossku=Professional&smBiosDm=VMware7%2C1&tl=2&tsu=1480607&waasBldFlt=1&waasCfgExp=1&waasCfgSet=1&waasRetail=1&waasRing= HTTP/1.1 Accept-Encoding: gzip, deflate X-SDK-CACHE: chs=0&imp=0&chf=0&ds=50583&fs=32319&sc=6 X-SDK-HW-TOKEN: t=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&p= Cache-Control: no-cache MS-CV: dErZBvC6ak+UB2WJ.0 User-Agent: WindowsShellClient/9.0.40929.0 (Windows) X-SDK-HWF: tch0,m301,m751,mA01,mT01 Host: arc.msn.com Connection: Keep-Alive
2022-04-20 13:07:23 UTC	1018	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Length: 3041 Content-Type: application/json; charset=utf-8 Expires: Mon, 01 Jan 0001 00:00:00 GMT Server: Microsoft-IIS/10.0 ARC-RSP-DBG: [{"RADIDS":"1,P425116123-T700333390-C128000000001627409+B+P20+S1"},{"OPTOUTSTATE":"256"}] X-ARC-SIG: VIPhb0rva/m8m+Y7+25c3is8cIoCRQWhryjG0NgQ7W+uFSClUImy5//EbrKDQ6+wnEeJvWmLK5+096WCrlMehYNvST2RjY3vUjeWHGfFCkw3TelL68DGoPgzZy4YdV5CphBEUzf0mRox6eFLWto9r5yoK5MKQNHTXegb+nJbwNbrxYJS7+B4uo3vCjDcR20HE8LPXyG22i3k1voqZ87Sz3CL4XvMZpTCUWcDDhMWpNH1CRKXHvlLv+7kAKPQbcLm8/oEgi1MsvmtZtBx+3k60XXxQL0OMHV/nddFiinzyIUG/sPqfHMETjWVw/0ha1TbXFw2xTgU9aW6TvUqyxooIA== Accept-CH: UA, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform, UA-Platform-Version X-AspNet-Version: 4.0.30319 X-Powered-By: ASP.NET Strict-Transport-Security: max-age=31536000; includeSubDomains Date: Wed, 20 Apr 2022 13:07:23 GMT Connection: close
2022-04-20 13:07:23 UTC	1019	IN	Data Raw: 7b 22 62 61 74 63 68 72 73 70 22 3a 7b 22 76 65 72 22 3a 22 31 2e 30 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 69 74 65 6d 22 3a 22 7b 5c 22 66 5c 22 3a 5c 22 72 61 66 5c 22 2c 5c 22 76 5c 22 3a 5c 22 31 2e 30 5c 22 2c 5c 22 72 64 72 5c 22 3a 5b 7b 5c 22 63 5c 22 3a 5c 22 43 44 4d 5c 22 2c 5c 22 75 5c 22 3a 5c 22 53 75 62 73 63 72 69 62 65 64 43 6f 6e 74 65 6e 74 5c 22 7d 5d 2c 5c 22 61 64 5c 22 3a 7b 5c 22 63 6c 61 73 73 5c 22 3a 5c 22 63 6f 6e 74 65 6e 74 5c 22 2c 5c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 5c 22 3a 5b 5d 2c 5c 22 69 74 65 6d 50 72 6f 70 65 72 74 79 4d 61 6e 69 66 65 73 74 5c 22 3a 7b 5c 22 6e 6f 4f 70 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 61 63 74 69 6f 6e 5c 22 7d 7d 2c 5c 22 69 74 65 6d 73 5c 22 3a 5b 7b 5c 22 70 72 6f 70 65 72 74 69 Data Ascii: {"batchrsp":{"ver":"1.0","items":[{"item":"{\"f\":\"raf\",\"v\":\"1.0\",\"rdr\":[{\"c\":\"CDM\",\"u\":\"SubscribedContent\"}],\"ad\":{\"class\":\"content\",\"collections\":[],\"itemPropertyManifest\":{\"noOp\":{\"type\":\"action\"}},\"items\":[{\"properti

Timestamp	kBytes transferred	Direction	Data
2022-04-20 13:07:27 UTC	1022	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2022-04-20 13:07:27 UTC	1022	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Thu, 20 Apr 2017 16:10:39 GMT ETag: "f9c874a7f0b9d21:0" Server: Microsoft-IIS/10.0 Content-Disposition: attachment; filename=config.json X-Powered-By: ASP.NET Cache-Control: public, max-age=100068 Date: Wed, 20 Apr 2022 13:07:27 GMT Connection: close X-CID: 2